$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft File: 1A3FAE72210F536C22392A8609A526D7557AD82C.mft (raw, json) Hash identifier: fqDzpBbLDcctYr0tY94XT7oQ0TYkaLPjZVw1nSAsKSY= Subject key identifier: 46:59:F7:C4:35:F2:97:15:37:34:76:F6:F6:DE:EE:CE:ED:0F:9B:B7 Authority key identifier: 1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C Certificate issuer: /CN=1A3FAE72210F536C22392A8609A526D7557AD82C Certificate serial: 4CA821E25628BFEE945152EB3C482202B9636382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 14:28:16 +0000 Manifest this update: Fri 25 Sep 2026 14:23:16 +0000 Manifest next update: Sat 26 Sep 2026 18:09:16 +0000 Files and hashes: 1: 1A3FAE72210F536C22392A8609A526D7557AD82C.crl (hash: 3SR5V5uejmV3SMpO6lKxd0yV/Qsuc1yOh7kOBmYfDQs=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: QAd6aTZOH1XxHGA7Gr128UzSMTQ9i29lq8bejyTBhso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a8:21:e2:56:28:bf:ee:94:51:52:eb:3c:48:22:02:b9:63:63:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3FAE72210F536C22392A8609A526D7557AD82C Validity Not Before: Sep 25 14:23:16 2026 GMT Not After : Sep 26 18:09:16 2026 GMT Subject: CN=4659F7C435F29715373476F6F6DEEECEED0F9BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:ef:39:e7:61:52:c9:24:50:1e:17:24:36: 11:1b:ca:46:f6:ca:c4:c3:db:98:fd:54:3d:e9:7b: 2b:e8:fe:3f:39:7e:f9:7f:c8:32:95:cc:7f:6d:53: be:16:a2:84:79:87:f4:b3:36:2e:60:fd:73:d7:b6: 98:de:56:4a:d6:a5:6f:c8:9b:e1:4e:f0:5d:22:26: 2d:5c:a6:66:bd:0e:a8:58:09:74:26:78:80:a7:28: 52:96:a7:7e:9f:e0:48:02:1e:85:1e:13:20:ba:36: b8:a3:a4:de:8d:2f:fa:66:b8:86:12:69:09:9f:a1: 9d:1f:45:a2:1d:6b:37:cd:7e:82:91:71:4f:c7:00: 20:2c:ee:90:3f:3f:bc:cb:16:8a:07:3a:14:49:95: 88:22:ad:f4:3d:85:0c:a9:75:60:59:57:b4:f6:80: e0:1c:5f:d4:e4:8d:f8:ac:cd:08:85:98:0c:e9:3c: f3:a1:bd:9d:c0:f7:c8:13:7c:66:6f:8f:08:6f:98: f4:07:25:74:0a:94:f0:4c:5a:b3:f5:81:3d:62:8b: e7:ee:a0:b7:d1:e1:11:4b:77:51:5d:fb:ed:d7:e3: 25:d5:62:41:80:5b:26:30:0d:00:ba:0c:be:6a:49: 07:19:55:fc:c0:ff:eb:dd:37:09:a5:11:dd:a2:65: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:59:F7:C4:35:F2:97:15:37:34:76:F6:F6:DE:EE:CE:ED:0F:9B:B7 X509v3 Authority Key Identifier: keyid:1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:aa:a0:9c:16:05:db:1b:70:82:d2:ba:73:ae:77:4b:a2:48: 02:d9:fb:8f:a5:c5:09:a0:0b:41:8d:a8:1a:4d:c4:bd:57:04: 89:38:2d:ed:2c:b4:04:29:f5:f6:4b:0d:cf:ad:0c:08:ce:e8: 28:c5:25:2f:6c:de:97:2e:b7:1d:8c:a9:07:0b:c7:ef:9a:78: e9:cd:5c:1a:08:08:56:73:ae:69:d1:e7:a7:42:14:12:32:09: 5e:d5:60:f7:e9:32:ac:7d:d7:c0:e4:11:9e:2a:3b:ca:93:54: 48:f0:6a:ad:ee:b1:d8:40:a6:06:97:da:a8:40:60:83:07:7d: 89:58:7d:ef:7c:fa:e3:48:3f:c4:86:2b:7f:ac:1e:58:e9:9e: c2:9f:fe:63:39:63:d0:a4:1f:fe:b9:fe:c9:19:92:03:27:92: 21:ad:50:ae:95:28:9e:ae:7c:fb:a6:6c:34:73:82:af:28:f7: c3:41:4e:2c:a4:ce:b5:95:ee:2a:73:fa:fa:31:5c:53:38:c6: 32:d0:24:ed:08:4a:14:cc:4b:b2:ef:c5:d8:10:ab:48:95:06: 65:7a:2d:6b:11:ff:97:d5:29:7e:f9:e6:68:68:ff:b7:f9:12: 0d:84:fb:79:ee:ab:44:a3:cb:ca:16:16:18:37:0b:2b:15:d4: d9:8e:0f:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKgh4lYov+6UUVLrPEgiArljY4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1 NTdBRDgyQzAeFw0yNjA5MjUxNDIzMTZaFw0yNjA5MjYxODA5MTZaMDMxMTAvBgNV BAMTKDQ2NTlGN0M0MzVGMjk3MTUzNzM0NzZGNkY2REVFRUNFRUQwRjlCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mO8552FSySRQHhckNhEbykb2 ysTD25j9VD3peyvo/j85fvl/yDKVzH9tU74WooR5h/SzNi5g/XPXtpjeVkrWpW/I m+FO8F0iJi1cpma9DqhYCXQmeICnKFKWp36f4EgCHoUeEyC6NrijpN6NL/pmuIYS aQmfoZ0fRaIdazfNfoKRcU/HACAs7pA/P7zLFooHOhRJlYgirfQ9hQypdWBZV7T2 gOAcX9TkjfiszQiFmAzpPPOhvZ3A98gTfGZvjwhvmPQHJXQKlPBMWrP1gT1ii+fu oLfR4RFLd1Fd++3X4yXVYkGAWyYwDQC6DL5qSQcZVfzA/+vdNwmlEd2iZUb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURln3xDXylxU3NHb29t7uzu0Pm7cwHwYDVR0j BBgwFoAUGj+uciEPU2wiOSqGCaUm11V62CwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiMDg4NDUtZGY4Mi00NGMyLTk3NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIy MTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1NTdBRDgyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTNGQUU3MjIxMEY1MzZDMjIzOTJBODYwOUE1MjZENzU1N0FE ODJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2 RDc1NTdBRDgyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSqoJwWBdsbcILSunOud0uiSALZ+4+lxQmg C0GNqBpNxL1XBIk4Le0stAQp9fZLDc+tDAjO6CjFJS9s3pcutx2MqQcLx++aeOnN XBoICFZzrmnR56dCFBIyCV7VYPfpMqx918DkEZ4qO8qTVEjwaq3usdhApgaX2qhA YIMHfYlYfe98+uNIP8SGK3+sHljpnsKf/mM5Y9CkH/65/skZkgMnkiGtUK6VKJ6u fPumbDRzgq8o98NBTiykzrWV7ipz+voxXFM4xjLQJO0IShTMS7LvxdgQq0iVBmV6 LWsR/5fVKX755mho/7f5Eg2E+3nuq0Sjy8oWFhg3CysV1NmOD8k= -----END CERTIFICATE-----Generated at Sat Sep 26 09:22:25 2026 by rpki-client