$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json) Hash identifier: UXfTVJ3AJs+IA7/iVITH1m0ae1UjXt++OuEuYNO+5Kc= Subject key identifier: 20:EC:C4:41:4A:FA:9C:48:3D:5B:B8:52:AC:36:C9:DE:59:ED:FB:85 Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Certificate serial: 7263CD0392941136AEAE80C05E6AB67D833AEF1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 17:58:45 +0000 Manifest this update: Mon 21 Sep 2026 17:53:45 +0000 Manifest next update: Tue 22 Sep 2026 21:34:45 +0000 Files and hashes: 1: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: CBxFR/cPFI3jioAZpM4VZVWz0OW+dFoP/1tqs8DFunM=) 2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=) 3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=) 4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:63:cd:03:92:94:11:36:ae:ae:80:c0:5e:6a:b6:7d:83:3a:ef:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Validity Not Before: Sep 21 17:53:45 2026 GMT Not After : Sep 22 21:34:45 2026 GMT Subject: CN=20ECC4414AFA9C483D5BB852AC36C9DE59EDFB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:7d:63:3b:fd:f7:54:c9:13:d7:9e:8e:e1: ea:d0:01:f0:8d:5c:75:0a:d3:48:05:b1:bf:92:ce: d0:81:4f:3d:b0:90:9e:e8:96:27:62:73:ab:08:a1: ca:68:f1:c3:b4:f2:34:51:0c:a9:93:75:65:67:dc: 04:a1:60:5e:12:d0:3b:9f:08:c4:7e:c5:06:3d:e4: e1:a8:ca:66:a4:ee:40:8a:d2:25:fb:00:e7:09:dc: a8:36:cf:99:ec:7b:53:2e:23:65:c2:59:16:8d:43: fc:90:99:20:4f:66:ac:fb:53:70:6b:41:49:11:b4: dc:41:28:3b:95:52:60:75:7e:6e:43:a1:c6:da:d8: 6b:ea:ac:ce:5b:d0:be:5b:db:0b:05:7d:15:63:6d: 10:3b:91:85:ff:b8:aa:45:91:b6:99:8d:d9:57:64: f6:54:e4:4f:28:d2:01:70:3f:e0:39:be:7d:68:23: 33:80:01:52:00:7b:c5:f4:a7:b4:ab:7f:1b:7b:57: ac:0c:a6:c8:05:4a:b6:fe:c3:be:4f:9f:13:08:4e: f9:84:61:4b:fc:f0:38:f6:7d:01:59:b3:d1:97:92: dc:40:6e:c4:f8:26:50:74:35:53:8f:44:58:81:7a: 1a:ac:d4:52:0d:85:5c:86:6c:bb:43:96:52:24:ea: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EC:C4:41:4A:FA:9C:48:3D:5B:B8:52:AC:36:C9:DE:59:ED:FB:85 X509v3 Authority Key Identifier: keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4c:98:b7:ba:04:77:a5:44:af:c8:00:80:99:ca:55:54:9d: ec:9b:27:1d:6d:6a:d5:d7:2f:00:5d:14:2c:3d:e5:dc:0d:5f: 6b:ac:a1:4f:ed:4a:00:d9:d8:c2:96:7a:2e:e3:bc:17:c9:cf: c4:e1:96:dc:43:82:f8:d9:45:eb:87:5a:ef:b4:ad:39:9d:e2: 82:05:b3:4c:05:18:22:24:db:09:6a:7b:16:dd:f8:c3:f4:bb: 63:25:83:90:31:a4:a3:cf:03:bd:4f:a3:39:cf:bf:a5:82:c4: 36:33:75:79:69:c9:1e:42:cd:b8:eb:bb:28:a7:b1:e9:95:2b: a8:e2:6c:56:56:c6:3b:6d:2e:5a:4a:6b:4b:91:d3:5f:fd:1a: 86:4e:f4:bf:22:99:e5:9f:14:8d:20:80:16:b9:50:c0:66:28: 69:6c:c7:7e:79:0c:ca:29:76:a4:61:8e:0d:ec:8b:8c:f9:ab: 43:5f:95:80:a2:c4:b7:f7:f6:b5:24:51:eb:3d:f5:d1:3b:c9: 91:cc:be:ff:dd:56:85:29:78:0c:89:0b:dc:c5:bc:8d:4e:aa: 92:c6:e1:c3:56:b0:b3:7b:61:67:75:8d:f8:d1:e8:3a:7e:2d: 96:45:2f:bd:e7:54:4c:ec:4a:f7:c0:36:f6:f9:17:8e:77:f8: 45:12:3f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmPNA5KUETauroDAXmq2fYM67xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYz QkQ0QUYxQTAeFw0yNjA5MjExNzUzNDVaFw0yNjA5MjIyMTM0NDVaMDMxMTAvBgNV BAMTKDIwRUNDNDQxNEFGQTlDNDgzRDVCQjg1MkFDMzZDOURFNTlFREZCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdH1jO/33VMkT156O4erQAfCN XHUK00gFsb+SztCBTz2wkJ7olidic6sIocpo8cO08jRRDKmTdWVn3AShYF4S0Duf CMR+xQY95OGoymak7kCK0iX7AOcJ3Kg2z5nse1MuI2XCWRaNQ/yQmSBPZqz7U3Br QUkRtNxBKDuVUmB1fm5Docba2GvqrM5b0L5b2wsFfRVjbRA7kYX/uKpFkbaZjdlX ZPZU5E8o0gFwP+A5vn1oIzOAAVIAe8X0p7Srfxt7V6wMpsgFSrb+w75PnxMITvmE YUv88Dj2fQFZs9GXktxAbsT4JlB0NVOPRFiBehqs1FINhVyGbLtDllIk6oljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIOzEQUr6nEg9W7hSrDbJ3lnt+4UwHwYDVR0j BBgwFoAUHgMB4OoKBtyENeQ7zGl37zvUrxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzMmVlZTEtMTBmNy00NTdkLWE4YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBF QTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYzQkQ0QUYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTAzMDFFMEVBMEEwNkRDODQzNUU0M0JDQzY5NzdFRjNCRDRB RjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3 RUYzQkQ0QUYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpMmLe6BHelRK/IAICZylVUneybJx1tatXX LwBdFCw95dwNX2usoU/tSgDZ2MKWei7jvBfJz8ThltxDgvjZReuHWu+0rTmd4oIF s0wFGCIk2wlqexbd+MP0u2Mlg5AxpKPPA71PoznPv6WCxDYzdXlpyR5Czbjruyin semVK6jibFZWxjttLlpKa0uR01/9GoZO9L8imeWfFI0ggBa5UMBmKGlsx355DMop dqRhjg3si4z5q0NflYCixLf39rUkUes99dE7yZHMvv/dVoUpeAyJC9zFvI1OqpLG 4cNWsLN7YWd1jfjR6Dp+LZZFL73nVEzsSvfANvb5F453+EUSPyU= -----END CERTIFICATE-----Generated at Tue Sep 22 08:57:24 2026 by rpki-client