$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft File: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft (raw, json) Hash identifier: jGHuIqtezZBclvCU8Vc2F0IJ8ZBpnby2x0XHRhpt4A0= Subject key identifier: 38:E5:8F:6C:E8:88:F7:57:D0:63:9B:76:B6:A4:EB:6A:35:1A:6B:DA Authority key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F Certificate issuer: /CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Certificate serial: 615F294305E3B441C12B32FF5DD7D31D87E55004 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 17:02:43 +0000 Manifest this update: Mon 21 Sep 2026 16:57:43 +0000 Manifest next update: Tue 22 Sep 2026 20:52:43 +0000 Files and hashes: 1: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: WmfkE886z9xGlwBdZyGHayr+TJn3pXQ1PU74UP08FBw=) 2: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl (hash: +PFQTeGNux667EyfPVg91a9QEU3/3U+sva4Z68PuZsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5f:29:43:05:e3:b4:41:c1:2b:32:ff:5d:d7:d3:1d:87:e5:50:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Validity Not Before: Sep 21 16:57:43 2026 GMT Not After : Sep 22 20:52:43 2026 GMT Subject: CN=38E58F6CE888F757D0639B76B6A4EB6A351A6BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:70:04:fb:67:cf:cf:8a:4a:b5:be:5f:35: c8:8d:ac:40:72:61:6a:f6:64:56:f3:85:d2:2b:cf: 0e:8d:5d:64:ef:87:0c:a4:c8:b8:e8:3a:17:ba:a3: d2:20:8b:ad:24:2a:8b:3d:ba:f8:e9:fa:f0:35:01: 64:0f:4a:6f:89:20:47:fd:09:dd:9c:30:f5:eb:c2: de:52:f8:3e:5a:7f:99:c8:7c:2f:bd:f3:c8:84:64: bc:50:b3:89:80:83:a8:75:d6:79:88:15:eb:0e:63: 40:aa:b9:c3:ad:44:3a:7b:93:26:36:da:fd:e3:56: ab:5d:94:a1:4b:39:f8:43:da:c5:80:20:99:1f:bd: f0:0e:77:8d:d7:ec:01:af:fd:4a:f2:3d:96:30:55: d4:c0:5e:22:4d:d8:d9:09:dc:d5:14:17:7b:18:2e: 82:0b:6e:1b:63:11:00:dd:4d:8b:92:a2:2b:a4:ed: fe:7b:9e:cc:b6:9c:6d:97:e9:3d:a5:fe:cf:58:f7: 59:2c:05:50:85:d9:ee:3e:b5:f7:23:a4:8c:78:23: ea:3e:da:ae:c9:9e:2e:b7:10:5a:d1:ec:92:5e:b4: ad:c2:7f:c7:4f:97:d2:3f:3f:30:0b:46:e0:60:23: 89:0b:f2:ce:54:68:ef:ee:08:b8:59:78:e3:0d:3d: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:8F:6C:E8:88:F7:57:D0:63:9B:76:B6:A4:EB:6A:35:1A:6B:DA X509v3 Authority Key Identifier: keyid:1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bc:e6:7b:d7:46:a8:9b:4a:e1:3e:e2:e1:95:85:13:32:22: 65:89:6f:ef:8d:bb:a8:6d:b8:3a:e0:f4:97:1d:1d:e3:50:0d: 1e:1b:2a:25:26:61:e9:19:f5:8a:4b:c4:8f:a9:8a:8f:5a:31: 99:c9:72:53:b9:6c:0a:27:dc:ef:02:8f:34:a9:3f:d9:e4:b8: ec:f0:54:40:1a:78:89:80:7f:57:ea:e8:ef:7c:5a:fc:c5:3f: ad:5d:48:03:6d:26:32:69:16:3c:74:e1:b0:5b:95:7c:15:57: 02:15:ea:fd:e6:d3:5d:98:cd:2d:01:08:1b:fb:b0:88:f0:35: 5e:81:d8:a5:8a:91:97:65:ec:dc:fd:97:76:b7:57:b6:95:b2: c4:82:f6:a0:b5:4e:77:73:49:74:87:77:ca:2c:b1:5b:2b:82: 6f:1a:1a:39:7a:87:12:95:d7:58:8c:07:8f:57:4d:3d:ac:36: 9c:b0:3e:0c:5f:53:4f:23:a6:78:e9:00:e6:06:75:7b:fb:fc: 1c:d5:55:07:28:dc:22:a0:08:1b:a4:5b:bc:82:ad:1d:55:eb: 32:cb:82:cd:23:bf:d0:69:2d:a9:cd:cc:27:f2:43:b8:cc:76: 08:d1:8d:dd:c5:aa:bd:99:ac:bc:3d:0e:51:85:b6:93:85:79: c2:f9:1b:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYV8pQwXjtEHBKzL/XdfTHYflUAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZENjA3 MDBBRjYxRjAeFw0yNjA5MjExNjU3NDNaFw0yNjA5MjIyMDUyNDNaMDMxMTAvBgNV BAMTKDM4RTU4RjZDRTg4OEY3NTdEMDYzOUI3NkI2QTRFQjZBMzUxQTZCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtjHAE+2fPz4pKtb5fNciNrEBy YWr2ZFbzhdIrzw6NXWTvhwykyLjoOhe6o9Igi60kKos9uvjp+vA1AWQPSm+JIEf9 Cd2cMPXrwt5S+D5af5nIfC+988iEZLxQs4mAg6h11nmIFesOY0CqucOtRDp7kyY2 2v3jVqtdlKFLOfhD2sWAIJkfvfAOd43X7AGv/UryPZYwVdTAXiJN2NkJ3NUUF3sY LoILbhtjEQDdTYuSoiuk7f57nsy2nG2X6T2l/s9Y91ksBVCF2e4+tfcjpIx4I+o+ 2q7Jni63EFrR7JJetK3Cf8dPl9I/PzALRuBgI4kL8s5UaO/uCLhZeOMNPYhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOWPbOiI91fQY5t2tqTrajUaa9owHwYDVR0j BBgwFoAUGguw3cUKSCJZWucY32RtYHAK9h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjMDljOWUtZmU4YS00OTg5LWI1YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERD NTBBNDgyMjU5NUFFNzE4REY2NDZENjA3MDBBRjYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTBCQjBEREM1MEE0ODIyNTk1QUU3MThERjY0NkQ2MDcwMEFG NjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZE NjA3MDBBRjYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa85nvXRqibSuE+4uGVhRMyImWJb++Nu6ht uDrg9JcdHeNQDR4bKiUmYekZ9YpLxI+pio9aMZnJclO5bAon3O8CjzSpP9nkuOzw VEAaeImAf1fq6O98WvzFP61dSANtJjJpFjx04bBblXwVVwIV6v3m012YzS0BCBv7 sIjwNV6B2KWKkZdl7Nz9l3a3V7aVssSC9qC1TndzSXSHd8ossVsrgm8aGjl6hxKV 11iMB49XTT2sNpywPgxfU08jpnjpAOYGdXv7/BzVVQco3CKgCBukW7yCrR1V6zLL gs0jv9BpLanNzCfyQ7jMdgjRjd3Fqr2ZrLw9DlGFtpOFecL5GyI= -----END CERTIFICATE-----Generated at Tue Sep 22 08:33:44 2026 by rpki-client