$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json) Hash identifier: Jy0H+9Q1VuisWV4MJo3E3kfKshSX1DoA8Q42OClLbaY= Subject key identifier: 10:DB:71:D4:5B:85:BB:65:37:D0:16:B1:15:62:2F:0C:E5:23:C1:2D Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Certificate serial: 332117B488DD73E8BAF748B435A81CCABAE1C2C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 12:26:12 +0000 Manifest this update: Thu 24 Sep 2026 12:21:12 +0000 Manifest next update: Fri 25 Sep 2026 13:14:12 +0000 Files and hashes: 1: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: 78HGxalfo4S/bNgaMLnC7Fgt9SqgqxbSq+5+/XdJiJE=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:21:17:b4:88:dd:73:e8:ba:f7:48:b4:35:a8:1c:ca:ba:e1:c2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Validity Not Before: Sep 24 12:21:12 2026 GMT Not After : Sep 25 13:14:12 2026 GMT Subject: CN=10DB71D45B85BB6537D016B115622F0CE523C12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:48:37:8a:03:f5:db:97:e5:4f:c6:87:61: 13:d7:23:9c:eb:ae:4e:86:2d:16:19:12:67:6a:2f: 30:8e:c2:52:69:28:65:9a:16:e0:e9:0a:81:4b:44: e7:a9:c0:71:1d:90:82:3c:ae:61:c9:d2:03:3b:00: 61:6f:6d:8f:53:3d:ee:76:56:b8:2d:2d:37:3e:b1: 20:45:d2:9a:7c:a6:9d:b1:71:a6:bf:b9:f6:dc:d0: d3:1b:c6:6e:54:bf:a0:81:b6:48:1d:eb:8d:8f:93: 97:71:da:c1:d5:03:26:88:b6:e2:78:36:a1:88:b7: 49:8e:b9:fd:0d:e9:d6:8f:5c:71:51:74:55:02:95: ad:84:63:36:f3:46:3e:00:ca:69:08:50:00:39:fc: 62:58:ca:1f:12:ac:03:06:6a:2c:80:b0:b0:21:25: 0d:7d:c9:8f:c1:c5:2a:37:a4:42:a7:f3:1d:8b:9e: 4a:6d:5a:e1:76:32:54:54:75:5f:76:69:5f:00:b5: cc:c2:82:3d:a3:01:01:4a:d3:06:e1:a7:ba:05:d2: 27:62:7f:6c:38:c5:d1:20:4e:d2:34:7f:4f:23:c0: 25:72:35:ca:e1:d9:c9:b2:7a:71:fb:a4:81:3b:46: 5a:71:29:db:5a:65:99:56:ff:05:59:bc:62:7b:ed: 61:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:71:D4:5B:85:BB:65:37:D0:16:B1:15:62:2F:0C:E5:23:C1:2D X509v3 Authority Key Identifier: keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:d4:7f:47:62:9a:45:5d:40:6f:39:4a:9f:5f:9e:4e:47: f2:2e:f7:ab:32:fb:a6:63:9b:a7:ce:65:e4:8b:e4:9c:f1:77: 4d:db:63:c1:29:6f:11:e3:fd:90:b7:cb:1b:d9:2d:0e:2d:ef: 80:2c:6b:8b:cb:62:53:2e:11:b6:59:e3:2d:3b:ec:78:ab:ff: 92:1a:19:d7:1c:48:ef:44:57:2d:2b:7e:55:21:d6:00:3c:6d: 71:95:65:ea:e8:35:0e:9f:b8:8b:e0:54:5e:f7:96:07:92:bc: 44:62:4c:79:ca:7e:25:34:68:90:d2:a8:13:25:c8:e3:fc:2a: 49:2a:9c:fb:0f:6d:47:97:ff:f7:10:08:e8:16:82:fe:90:55: 10:92:7b:48:ba:53:db:c4:9d:90:5f:54:40:42:1c:1d:f6:79: 4d:40:a1:e8:90:02:8b:4f:b5:8d:93:67:d4:ca:e3:0f:4d:57: fb:8c:14:23:8b:0e:6e:2e:ed:99:ab:39:7c:97:1f:0f:1b:52: f7:0a:f9:5a:0b:50:10:26:76:14:57:d1:67:a6:c4:a3:c1:98: 17:b0:01:89:ad:0f:d6:7c:60:5c:cb:78:25:eb:39:08:de:f4: 59:7f:01:8a:63:32:da:44:ec:34:63:33:ef:a0:f1:3c:0b:8f: d0:e3:5f:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyEXtIjdc+i690i0NagcyrrhwsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNE RTI5MEI4OTAeFw0yNjA5MjQxMjIxMTJaFw0yNjA5MjUxMzE0MTJaMDMxMTAvBgNV BAMTKDEwREI3MUQ0NUI4NUJCNjUzN0QwMTZCMTE1NjIyRjBDRTUyM0MxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/kg3igP125flT8aHYRPXI5zr rk6GLRYZEmdqLzCOwlJpKGWaFuDpCoFLROepwHEdkII8rmHJ0gM7AGFvbY9TPe52 VrgtLTc+sSBF0pp8pp2xcaa/ufbc0NMbxm5Uv6CBtkgd642Pk5dx2sHVAyaItuJ4 NqGIt0mOuf0N6daPXHFRdFUCla2EYzbzRj4AymkIUAA5/GJYyh8SrAMGaiyAsLAh JQ19yY/BxSo3pEKn8x2LnkptWuF2MlRUdV92aV8AtczCgj2jAQFK0wbhp7oF0idi f2w4xdEgTtI0f08jwCVyNcrh2cmyenH7pIE7RlpxKdtaZZlW/wVZvGJ77WHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUENtx1FuFu2U30BaxFWIvDOUjwS0wHwYDVR0j BBgwFoAUHzstEr0pdGO6dxfyV6QPc94pC4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUyY2FjY2YtMzI3ZS00MmJkLTliMzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJC RDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNERTI5MEI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjNCMkQxMkJEMjk3NDYzQkE3NzE3RjI1N0E0MEY3M0RFMjkw Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBG NzNERTI5MEI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO41H9HYppFXUBvOUqfX55OR/Iu96sy+6Zj m6fOZeSL5Jzxd03bY8EpbxHj/ZC3yxvZLQ4t74Asa4vLYlMuEbZZ4y077Hir/5Ia GdccSO9EVy0rflUh1gA8bXGVZeroNQ6fuIvgVF73lgeSvERiTHnKfiU0aJDSqBMl yOP8KkkqnPsPbUeX//cQCOgWgv6QVRCSe0i6U9vEnZBfVEBCHB32eU1AoeiQAotP tY2TZ9TK4w9NV/uMFCOLDm4u7ZmrOXyXHw8bUvcK+VoLUBAmdhRX0WemxKPBmBew AYmtD9Z8YFzLeCXrOQje9Fl/AYpjMtpE7DRjM++g8TwLj9DjX0s= -----END CERTIFICATE-----Generated at Thu Sep 24 15:42:56 2026 by rpki-client