$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft File: 1675ADC47F4873145B24769B8134062EEB020A6A.mft (raw, json) Hash identifier: mLwEPEZKBb66H3QxHRqM3YmJ8hfI54RbVOn+wG3+O88= Subject key identifier: 2A:92:4A:11:04:2D:DA:32:0B:29:06:0B:15:D4:75:33:B5:FE:37:DA Authority key identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A Certificate issuer: /CN=1675ADC47F4873145B24769B8134062EEB020A6A Certificate serial: 0C582A9E2A9742F1385D8CB3950C5B067394FE7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 02:34:42 +0000 Manifest this update: Tue 22 Sep 2026 02:29:42 +0000 Manifest next update: Wed 23 Sep 2026 03:01:42 +0000 Files and hashes: 1: 1675ADC47F4873145B24769B8134062EEB020A6A.crl (hash: EHrw4JpCDNZdkNyMC4D87AxxwTjQZJZ5/HtmHzzoowo=) 2: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: /DV6+SaBovRK3v8Zh1bjyOMwbspI86vj5IjrMCFPeu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:58:2a:9e:2a:97:42:f1:38:5d:8c:b3:95:0c:5b:06:73:94:fe:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1675ADC47F4873145B24769B8134062EEB020A6A Validity Not Before: Sep 22 02:29:42 2026 GMT Not After : Sep 23 03:01:42 2026 GMT Subject: CN=2A924A11042DDA320B29060B15D47533B5FE37DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:cc:2f:d0:8c:5c:40:03:09:bb:6b:8f:02: c1:32:8f:52:f6:19:96:18:d5:75:8b:88:84:e4:bf: 0e:1e:66:d5:3d:1e:24:f3:0f:96:90:6d:e5:91:82: b3:d9:3e:31:43:fc:1b:d4:d9:1b:99:d4:9b:a0:d7: eb:27:7a:ad:e4:ce:ca:33:cb:3c:35:ef:41:c3:08: 11:5d:8a:40:da:c2:15:c6:c3:78:07:9f:a8:9a:3e: 0e:5c:0f:c8:8c:7b:d1:ab:83:2e:4b:f5:33:cf:3a: d0:92:58:1a:fb:6d:3b:6d:58:65:d0:a1:b3:52:f0: f2:a1:f2:66:72:c5:31:23:ef:e5:b8:cf:af:6d:6a: 07:e2:6d:23:24:1a:ec:e8:e7:e3:97:fc:f0:7d:ca: 72:e0:8a:56:fd:02:8c:8e:e2:77:8b:ba:79:5d:b6: 30:73:d4:82:27:81:8a:b7:2d:57:d9:56:d7:14:31: 00:fb:68:c7:5f:11:a8:47:2e:29:7e:31:68:d4:17: 18:33:51:ad:f3:86:71:0a:c0:07:df:71:30:87:2c: 36:f0:f8:37:56:4c:88:f8:52:46:8a:5f:9e:92:b6: de:36:ff:76:1e:4a:08:c8:a5:18:2b:e4:c1:f9:af: 05:17:58:11:79:0c:33:25:9e:0f:ff:25:a8:04:04: dd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:4A:11:04:2D:DA:32:0B:29:06:0B:15:D4:75:33:B5:FE:37:DA X509v3 Authority Key Identifier: keyid:16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:43:39:8c:30:61:79:b9:d5:c2:50:45:7f:ea:67:eb:1b:ca: 15:f0:8f:1f:74:ba:76:e9:0a:14:da:3f:f8:fa:09:f5:b2:51: 79:49:fa:cb:1c:0e:39:e1:7c:34:0a:3d:19:cb:0a:72:b1:60: 48:86:3c:90:f9:25:15:84:e4:3d:14:b4:34:be:ae:41:80:40: b3:27:4e:de:dd:90:fa:64:64:0b:bd:22:ae:52:9f:5e:4f:13: fc:b5:78:0d:73:cb:f1:53:55:9e:ff:fe:63:22:81:40:12:39: 58:9d:17:a9:e9:1a:2b:19:f5:36:8b:b5:5e:0e:93:b7:47:8e: 53:66:43:5d:5e:aa:19:01:42:db:71:1e:3f:97:5c:e4:e1:16: 37:0d:98:0f:d5:ee:6f:3d:8a:1f:0c:d4:4e:1c:52:e2:a4:4d: dc:b8:0e:df:e8:55:ca:85:1e:53:1a:01:d4:4c:c9:51:e4:3f: 2d:fe:c3:60:82:79:2c:32:59:a2:95:c0:89:32:62:51:b3:58: b9:6a:21:d4:19:5b:e3:5c:69:ec:ac:5f:82:2d:6b:0a:5b:d9: e7:7b:30:40:39:f8:ba:2c:64:23:aa:39:f5:92:23:a6:d8:b7: a3:8d:ae:47:ef:be:87:c9:ec:05:91:d2:2d:3a:2d:e2:f8:db: 3c:63:e0:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFgqniqXQvE4XYyzlQxbBnOU/n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3NjlCODEzNDA2MkVF QjAyMEE2QTAeFw0yNjA5MjIwMjI5NDJaFw0yNjA5MjMwMzAxNDJaMDMxMTAvBgNV BAMTKDJBOTI0QTExMDQyRERBMzIwQjI5MDYwQjE1RDQ3NTMzQjVGRTM3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAswv0IxcQAMJu2uPAsEyj1L2 GZYY1XWLiITkvw4eZtU9HiTzD5aQbeWRgrPZPjFD/BvU2RuZ1Jug1+sneq3kzsoz yzw170HDCBFdikDawhXGw3gHn6iaPg5cD8iMe9Grgy5L9TPPOtCSWBr7bTttWGXQ obNS8PKh8mZyxTEj7+W4z69tagfibSMkGuzo5+OX/PB9ynLgilb9AoyO4neLunld tjBz1IIngYq3LVfZVtcUMQD7aMdfEahHLil+MWjUFxgzUa3zhnEKwAffcTCHLDbw +DdWTIj4UkaKX56Stt42/3YeSgjIpRgr5MH5rwUXWBF5DDMlng//JagEBN09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKpJKEQQt2jILKQYLFdR1M7X+N9owHwYDVR0j BBgwFoAUFnWtxH9IcxRbJHabgTQGLusCCmowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkYzEzZmYtNWIxMC00NGE2LWI2ZjMtOGYwMzVlNTg5N2Q4LzAvMTY3NUFEQzQ3 RjQ4NzMxNDVCMjQ3NjlCODEzNDA2MkVFQjAyMEE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNjc1QURDNDdGNDg3MzE0NUIyNDc2OUI4MTM0MDYyRUVCMDIw QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3NjlCODEzNDA2 MkVFQjAyMEE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElDOYwwYXm51cJQRX/qZ+sbyhXwjx90unbp ChTaP/j6CfWyUXlJ+sscDjnhfDQKPRnLCnKxYEiGPJD5JRWE5D0UtDS+rkGAQLMn Tt7dkPpkZAu9Iq5Sn15PE/y1eA1zy/FTVZ7//mMigUASOVidF6npGisZ9TaLtV4O k7dHjlNmQ11eqhkBQttxHj+XXOThFjcNmA/V7m89ih8M1E4cUuKkTdy4Dt/oVcqF HlMaAdRMyVHkPy3+w2CCeSwyWaKVwIkyYlGzWLlqIdQZW+NcaeysX4Itawpb2ed7 MEA5+LosZCOqOfWSI6bYt6ONrkfvvofJ7AWR0i06LeL42zxj4P4= -----END CERTIFICATE-----Generated at Tue Sep 22 13:08:15 2026 by rpki-client