$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft File: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft (raw, json) Hash identifier: Sb/j9W/ntprDyQgM3M77edeZJJFgI4hmvMoEOeeDJKc= Subject key identifier: 1F:D2:45:BC:5E:85:2D:B7:A1:9E:78:A8:5A:12:E2:B1:48:EA:2C:C6 Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 Certificate issuer: /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Certificate serial: 291A12078B8F121E23247BD52BE4377A828881EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:00:33 +0000 Manifest this update: Thu 24 Sep 2026 03:55:33 +0000 Manifest next update: Fri 25 Sep 2026 04:29:33 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs=) 2: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl (hash: eYV7B9NgWg9Ul749oRoF+PKf+pRF2DzEWkE+VK17wpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1a:12:07:8b:8f:12:1e:23:24:7b:d5:2b:e4:37:7a:82:88:81:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Validity Not Before: Sep 24 03:55:33 2026 GMT Not After : Sep 25 04:29:33 2026 GMT Subject: CN=1FD245BC5E852DB7A19E78A85A12E2B148EA2CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:f5:4c:34:62:c4:52:e1:2f:e3:66:08:1f: 9b:4f:e6:5d:82:43:bd:0a:1d:cd:8e:80:1e:fd:2f: 57:e4:b6:54:af:e0:27:da:1d:d4:71:13:04:44:16: 39:78:42:54:e3:72:01:59:a5:0d:f6:7e:e8:22:10: e4:63:50:a0:6f:93:54:8e:31:5b:de:86:24:61:dc: 47:3a:5d:69:2f:ef:cb:fd:6c:36:e9:24:78:5a:6f: 26:be:a7:35:1c:76:76:d2:1a:7b:db:9f:29:5d:30: 61:74:0a:4a:42:62:25:c0:ee:dc:f3:dc:de:22:29: 4b:66:1b:c6:96:35:7f:76:21:89:e2:4c:5b:ae:9a: c8:c5:29:a5:c2:f0:7e:ae:ff:76:d7:bd:87:78:ac: c0:be:9b:48:3f:d9:67:4c:27:3e:9d:50:92:dc:d5: 7c:08:0e:db:83:d6:5d:1c:a1:ef:9a:6e:9b:ee:8f: 5d:7a:bb:09:2d:6b:40:6c:16:3c:ff:f7:49:80:53: f8:8f:4f:f1:23:ce:74:13:ce:43:9e:d3:4c:04:6a: 57:90:80:3d:5f:74:c0:27:5e:ec:5a:6a:31:6b:87: 37:ae:64:12:c7:27:2b:73:6a:da:36:6c:3f:70:7e: 94:e3:53:83:0f:c9:16:94:fe:ab:c7:8a:b9:4e:2e: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:45:BC:5E:85:2D:B7:A1:9E:78:A8:5A:12:E2:B1:48:EA:2C:C6 X509v3 Authority Key Identifier: keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:93:e5:32:b1:36:81:5f:b9:65:9a:76:6e:56:ec:33:f6:3d: 7b:d4:ab:f5:28:93:89:bb:41:0e:52:8f:79:64:aa:94:c6:e4: fd:1e:b7:48:bb:9b:2b:ca:74:c9:b0:04:44:a6:2f:db:37:bc: 5e:79:06:6a:71:8b:00:19:bc:02:c3:f0:d6:63:d6:13:57:31: 88:15:b5:c9:3b:29:b2:26:4b:7b:41:1b:2d:ab:83:44:fb:35: 7f:76:6e:38:be:58:ce:94:ee:fa:8f:86:38:0b:0e:26:ab:8c: 50:e7:38:75:84:b9:72:56:11:7e:03:51:72:d8:d3:89:b1:a7: cb:76:c7:0c:93:84:a8:94:1f:7d:55:0f:bf:2e:fc:bb:a3:9c: 8c:23:81:05:de:e6:55:ee:3a:2f:55:97:41:c0:70:79:c1:a4: 57:16:35:a1:a3:c2:99:0d:71:19:66:a0:7c:4a:04:12:37:fe: 60:e7:fa:f7:5e:14:a4:00:1d:d2:07:fa:c2:81:a8:ff:37:e3: 78:ea:f6:69:03:a3:38:54:0a:f2:72:f8:c9:bc:35:63:4a:ec: 3d:5c:c1:ff:1e:9e:1d:7d:3f:60:b4:6e:ad:b9:76:ee:68:41: 19:32:d7:7b:ee:c7:0f:da:ca:f5:42:1f:b5:23:d6:9a:10:29: 14:8c:23:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRoSB4uPEh4jJHvVK+Q3eoKIgeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUx NjIzQTYxNjAeFw0yNjA5MjQwMzU1MzNaFw0yNjA5MjUwNDI5MzNaMDMxMTAvBgNV BAMTKDFGRDI0NUJDNUU4NTJEQjdBMTlFNzhBODVBMTJFMkIxNDhFQTJDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXP/VMNGLEUuEv42YIH5tP5l2C Q70KHc2OgB79L1fktlSv4CfaHdRxEwREFjl4QlTjcgFZpQ32fugiEORjUKBvk1SO MVvehiRh3Ec6XWkv78v9bDbpJHhabya+pzUcdnbSGnvbnyldMGF0CkpCYiXA7tzz 3N4iKUtmG8aWNX92IYniTFuumsjFKaXC8H6u/3bXvYd4rMC+m0g/2WdMJz6dUJLc 1XwIDtuD1l0coe+abpvuj116uwkta0BsFjz/90mAU/iPT/EjznQTzkOe00wEaleQ gD1fdMAnXuxaajFrhzeuZBLHJytzato2bD9wfpTjU4MPyRaU/qvHirlOLjV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9JFvF6FLbehnnioWhLisUjqLMYwHwYDVR0j BBgwFoAUAfMk71qPasySF01q7tESnhYjphYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3OTQ3YWEtY2U2OS00MDEzLWEyNTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1 QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUxNjIzQTYxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzMjRFRjVBOEY2QUNDOTIxNzRENkFFRUQxMTI5RTE2MjNB NjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEy OUUxNjIzQTYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOT5TKxNoFfuWWadm5W7DP2PXvUq/Uok4m7 QQ5Sj3lkqpTG5P0et0i7myvKdMmwBESmL9s3vF55BmpxiwAZvALD8NZj1hNXMYgV tck7KbImS3tBGy2rg0T7NX92bji+WM6U7vqPhjgLDiarjFDnOHWEuXJWEX4DUXLY 04mxp8t2xwyThKiUH31VD78u/LujnIwjgQXe5lXuOi9Vl0HAcHnBpFcWNaGjwpkN cRlmoHxKBBI3/mDn+vdeFKQAHdIH+sKBqP8343jq9mkDozhUCvJy+Mm8NWNK7D1c wf8enh19P2C0bq25du5oQRky13vuxw/ayvVCH7Uj1poQKRSMI70= -----END CERTIFICATE-----Generated at Thu Sep 24 06:50:08 2026 by rpki-client