$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: SvfwFIQJCT4WLP1RkX29UXRCVoxLwUeuKNWISf0zcS0= Subject key identifier: 26:F5:2A:BB:6A:55:A0:62:98:4C:7C:EE:A2:06:38:64:62:A7:D7:81 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 25502119EEA8C8A8F7EE0E6F63B1C8B295D4BBF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:41:09 +0000 Manifest this update: Mon 21 Sep 2026 15:36:09 +0000 Manifest next update: Tue 22 Sep 2026 18:34:09 +0000 Files and hashes: 1: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) 2: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: Km4kwxs7fwMURNIbpPAtVX/yv+J5RUdqdsHY9ZTeqPA=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:50:21:19:ee:a8:c8:a8:f7:ee:0e:6f:63:b1:c8:b2:95:d4:bb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Sep 21 15:36:09 2026 GMT Not After : Sep 22 18:34:09 2026 GMT Subject: CN=26F52ABB6A55A062984C7CEEA206386462A7D781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:86:34:28:d3:2c:98:3f:3c:3f:2b:20:32: 3b:c2:e1:b2:34:93:50:91:42:ba:64:fe:93:e9:10: 29:80:6f:5f:0a:ae:a9:48:7a:ca:ed:05:be:01:5d: c8:a4:ce:19:5b:3e:b0:52:7b:a2:3e:39:32:91:c4: ed:ae:fd:e4:48:4c:88:b3:7f:71:cd:db:23:94:ee: 57:72:7f:c6:2c:48:e1:cc:3e:35:00:d2:af:bb:eb: 40:e6:d4:a4:69:c9:51:e8:fa:cc:e6:bf:5f:55:e1: 38:4d:e7:3d:87:c1:58:e3:8b:b9:02:ef:7c:3b:55: 95:4f:82:61:e7:18:66:2d:d9:b7:d3:67:2a:20:f5: 08:56:9d:0f:18:38:3b:6f:f9:f4:d8:2e:5f:2a:7f: 35:14:6a:d4:66:f4:e6:48:25:23:8a:51:fe:5c:13: 45:49:01:5b:3f:ac:e6:85:e2:59:e5:3f:04:50:10: d6:14:74:7b:53:e7:7e:fa:8f:09:f8:46:4b:1e:74: e9:8b:24:d0:83:64:19:ab:05:73:1f:ba:f9:b9:7e: da:57:2f:dd:19:5a:a0:9d:69:ba:1c:13:16:d8:2a: 01:b5:37:b0:b9:d8:eb:aa:18:86:83:89:bb:5e:47: 3f:a8:0d:6f:9b:a6:1e:01:a2:25:49:6c:d6:95:d7: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:2A:BB:6A:55:A0:62:98:4C:7C:EE:A2:06:38:64:62:A7:D7:81 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0d:5f:dd:28:3d:6d:79:0e:a0:f6:3d:63:6d:f0:53:37:df: d4:b3:31:91:f5:92:eb:ad:39:a0:ce:e6:3a:6e:33:09:8b:96: 95:a3:7c:71:fb:ce:e9:57:36:84:86:fe:d2:c5:64:c8:aa:99: f1:15:ff:e2:66:19:94:9d:43:02:a8:e8:6b:38:54:ce:fe:93: 18:1c:45:20:c4:08:dd:c2:b8:3d:62:4b:45:ec:71:43:1f:77: 6d:d5:7d:29:f6:af:03:c2:17:ad:df:5e:c8:97:b2:7b:69:fe: f6:4d:1d:46:07:9d:c1:df:67:e1:5b:3d:80:2e:2d:37:b5:c3: 68:06:25:d0:08:53:d4:6a:f1:6f:58:7c:35:cf:dc:7c:f9:de: bb:b8:b3:b5:69:4b:c4:43:8f:24:a2:94:10:55:8c:b0:07:e6: d8:bf:7d:cf:f4:6c:0b:29:a1:d0:0a:ab:d2:55:d8:40:ff:33: a0:18:9c:36:22:9c:49:35:de:e7:2e:50:a9:c9:d3:c4:41:a8: b0:f9:c8:41:b0:82:ce:c4:55:45:b0:7e:b3:29:84:e8:69:d2: c4:3a:84:8a:39:1d:64:98:8d:ac:f1:36:33:2f:bd:12:f0:e2: c0:bc:43:01:a3:cb:ff:1e:cf:99:df:de:8b:ca:52:68:f8:60: 3c:02:be:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVAhGe6oyKj37g5vY7HIspXUu/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA5MjExNTM2MDlaFw0yNjA5MjIxODM0MDlaMDMxMTAvBgNV BAMTKDI2RjUyQUJCNkE1NUEwNjI5ODRDN0NFRUEyMDYzODY0NjJBN0Q3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVsYY0KNMsmD88PysgMjvC4bI0 k1CRQrpk/pPpECmAb18KrqlIesrtBb4BXcikzhlbPrBSe6I+OTKRxO2u/eRITIiz f3HN2yOU7ldyf8YsSOHMPjUA0q+760Dm1KRpyVHo+szmv19V4ThN5z2HwVjji7kC 73w7VZVPgmHnGGYt2bfTZyog9QhWnQ8YODtv+fTYLl8qfzUUatRm9OZIJSOKUf5c E0VJAVs/rOaF4lnlPwRQENYUdHtT5376jwn4RksedOmLJNCDZBmrBXMfuvm5ftpX L90ZWqCdabocExbYKgG1N7C52OuqGIaDibteRz+oDW+bph4BoiVJbNaV1wvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJvUqu2pVoGKYTHzuogY4ZGKn14EwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGINX90oPW15DqD2PWNt8FM339SzMZH1kuut OaDO5jpuMwmLlpWjfHH7zulXNoSG/tLFZMiqmfEV/+JmGZSdQwKo6Gs4VM7+kxgc RSDECN3CuD1iS0XscUMfd23VfSn2rwPCF63fXsiXsntp/vZNHUYHncHfZ+FbPYAu LTe1w2gGJdAIU9Rq8W9YfDXP3Hz53ru4s7VpS8RDjySilBBVjLAH5ti/fc/0bAsp odAKq9JV2ED/M6AYnDYinEk13ucuUKnJ08RBqLD5yEGwgs7EVUWwfrMphOhp0sQ6 hIo5HWSYjazxNjMvvRLw4sC8QwGjy/8ez5nf3ovKUmj4YDwCvls= -----END CERTIFICATE-----Generated at Tue Sep 22 07:41:20 2026 by rpki-client