$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: RLFUEDfgJ+kctnF02/8/bk6Y9HSOJDtdSHIuMNc1dNc= Subject key identifier: 97:62:4A:B2:17:BF:22:F5:D2:DA:DA:8B:AF:13:29:D6:05:D3:89:06 Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 66207DF5AF2E2C8DD8BAA3064EFCF1E96DE64A9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:28:15 +0000 Manifest this update: Mon 21 Sep 2026 09:23:15 +0000 Manifest next update: Tue 22 Sep 2026 12:46:15 +0000 Files and hashes: 1: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) 2: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: MDcTQjyQO6UAQ3TqAOCZgtqbkwtyGwW6Xg+2JTOHamc=) 3: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:20:7d:f5:af:2e:2c:8d:d8:ba:a3:06:4e:fc:f1:e9:6d:e6:4a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Sep 21 09:23:15 2026 GMT Not After : Sep 22 12:46:15 2026 GMT Subject: CN=97624AB217BF22F5D2DADA8BAF1329D605D38906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:63:76:2c:2e:21:80:43:f3:0d:b7:03:3f: 1d:6b:49:5d:bf:07:8d:a8:42:08:fe:3d:4e:32:59: d2:6e:ef:0f:7c:4b:f7:1e:23:e6:11:57:86:f8:0e: 55:37:5c:e3:a3:e9:b0:ba:b6:07:d9:bf:bf:ca:e6: 0f:63:70:3a:40:64:52:78:3b:a0:23:17:5a:16:2d: 3c:13:ec:37:cb:8a:bc:35:93:45:26:2e:de:1f:0b: bd:3d:2b:66:a6:75:aa:04:15:6e:4f:66:02:95:6b: 22:3e:5f:92:43:ea:88:0d:84:64:3e:7c:a0:16:d4: 8f:89:6b:62:94:92:38:c7:60:5d:9d:fa:43:ed:9d: bf:c1:d4:86:22:02:81:dd:b6:60:11:83:33:68:b9: e9:05:9f:67:99:56:f5:ac:72:d4:f8:55:de:3e:48: 92:8f:52:fe:e5:12:26:2c:88:0d:d1:b9:a9:cd:13: 77:12:32:db:30:d1:de:db:45:cb:66:c4:8a:9f:a8: bd:7e:f8:c2:18:36:c2:c1:b4:d7:5a:60:9e:83:2d: be:c0:63:61:96:7b:47:c0:d8:a0:23:74:ad:f8:4d: 2f:a5:75:83:c5:4e:7b:5c:4d:7d:0c:cc:8c:3e:3d: 8e:0c:19:ec:8f:a0:a6:07:4d:bd:f3:0b:4a:a0:b2: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:4A:B2:17:BF:22:F5:D2:DA:DA:8B:AF:13:29:D6:05:D3:89:06 X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b1:d2:ed:4c:ab:a5:b0:04:b0:e4:6a:38:19:7e:5b:7a:78: 8d:76:37:89:c9:cd:4f:53:ee:f9:02:34:4a:7a:7f:93:ff:db: 0f:55:24:42:21:49:88:1e:f2:f5:ba:74:0f:93:19:5d:25:8a: aa:00:74:93:48:21:9d:ab:ae:b9:46:61:41:b9:05:72:ba:e9: 2c:9b:4a:6f:9c:69:0e:83:ca:3d:6b:ce:89:d3:38:32:92:0e: 89:86:56:b3:04:fc:68:b9:7d:3c:8f:1e:1c:c1:20:3e:a8:80: 6d:c9:b3:ef:4c:e5:e5:c1:2a:c1:88:8a:cb:ed:b2:ec:b4:ba: 78:f4:24:4b:ce:f3:91:32:5a:eb:a5:dd:c8:28:17:e6:15:3a: 37:7b:90:13:71:d6:fa:01:a8:b3:f1:81:97:b1:5d:e5:4f:52: 31:80:62:e5:04:f8:ed:15:9d:b9:96:1a:b6:e7:df:4e:88:c5: e1:0b:ac:2e:4d:2c:d6:41:06:bb:0d:45:0f:41:5e:a9:98:80: d2:56:d5:69:e8:5a:4c:7a:e0:99:61:ba:95:84:20:64:a1:d2: 86:61:70:4f:16:05:67:63:41:14:6f:ea:81:4a:30:9b:b3:7f: f8:c8:f5:00:cf:b2:cc:dd:95:6d:40:b4:f4:a4:d4:c7:39:11: df:16:8e:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiB99a8uLI3YuqMGTvzx6W3mSpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA5MjEwOTIzMTVaFw0yNjA5MjIxMjQ2MTVaMDMxMTAvBgNV BAMTKDk3NjI0QUIyMTdCRjIyRjVEMkRBREE4QkFGMTMyOUQ2MDVEMzg5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8WN2LC4hgEPzDbcDPx1rSV2/ B42oQgj+PU4yWdJu7w98S/ceI+YRV4b4DlU3XOOj6bC6tgfZv7/K5g9jcDpAZFJ4 O6AjF1oWLTwT7DfLirw1k0UmLt4fC709K2amdaoEFW5PZgKVayI+X5JD6ogNhGQ+ fKAW1I+Ja2KUkjjHYF2d+kPtnb/B1IYiAoHdtmARgzNouekFn2eZVvWsctT4Vd4+ SJKPUv7lEiYsiA3RuanNE3cSMtsw0d7bRctmxIqfqL1++MIYNsLBtNdaYJ6DLb7A Y2GWe0fA2KAjdK34TS+ldYPFTntcTX0MzIw+PY4MGeyPoKYHTb3zC0qgskSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl2JKshe/IvXS2tqLrxMp1gXTiQYwHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+x0u1Mq6WwBLDkajgZflt6eI12N4nJzU9T 7vkCNEp6f5P/2w9VJEIhSYge8vW6dA+TGV0liqoAdJNIIZ2rrrlGYUG5BXK66Syb Sm+caQ6Dyj1rzonTODKSDomGVrME/Gi5fTyPHhzBID6ogG3Js+9M5eXBKsGIisvt suy0unj0JEvO85EyWuul3cgoF+YVOjd7kBNx1voBqLPxgZexXeVPUjGAYuUE+O0V nbmWGrbn306IxeELrC5NLNZBBrsNRQ9BXqmYgNJW1WnoWkx64JlhupWEIGSh0oZh cE8WBWdjQRRv6oFKMJuzf/jI9QDPsszdlW1AtPSk1Mc5Ed8WjlI= -----END CERTIFICATE-----Generated at Mon Sep 21 14:26:33 2026 by rpki-client