$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: J/SP8OwNA/jFE9HmHLWe37Kfszc1E1//Ebh96YCPY4Q= Subject key identifier: AD:2F:1D:13:EE:CF:78:F9:F0:C7:F3:D1:BE:67:BD:F9:42:22:80:58 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 20D2237965BFA6BF59E7F200F05E39BB05D4B10C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:21:36 +0000 Manifest this update: Mon 21 Sep 2026 12:16:36 +0000 Manifest next update: Tue 22 Sep 2026 15:29:36 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 2: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: dZcrdByb8p4J1QPCMki4B5BnBEurnPheLQ7TruLSuKU=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d2:23:79:65:bf:a6:bf:59:e7:f2:00:f0:5e:39:bb:05:d4:b1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Sep 21 12:16:36 2026 GMT Not After : Sep 22 15:29:36 2026 GMT Subject: CN=AD2F1D13EECF78F9F0C7F3D1BE67BDF942228058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:b5:c1:bb:87:b6:ef:eb:50:d4:b4:89:11: fa:81:5b:2e:bb:d6:45:c8:1d:e7:5e:b8:26:f6:de: 6d:85:86:ab:32:e6:0a:c1:c3:9e:0b:b2:b2:fb:e0: 3e:cc:ed:17:bf:7c:e4:e7:22:d3:15:75:cd:71:37: 08:13:63:9f:fd:1a:66:c4:08:66:9c:bc:a2:e9:f4: 37:21:02:26:84:ab:da:39:41:51:03:07:92:fd:3a: 28:40:de:ce:86:fe:b3:23:98:c5:28:31:94:e1:3e: 7d:6b:0b:bb:42:dc:b6:06:a2:5c:7a:08:29:d9:83: aa:41:47:0a:55:d0:db:88:30:e1:29:68:55:bd:6f: 7b:ea:b0:04:0f:60:03:95:db:9e:2b:b5:f8:cd:07: 0b:6d:ae:0b:76:84:a8:a5:65:df:c8:1a:0f:29:97: d4:56:69:8e:4c:04:65:75:91:57:a4:35:c2:b3:cc: 2a:7a:c3:e0:4f:55:73:10:4c:f3:c3:ec:e5:20:9b: 95:08:30:d9:5e:68:1e:17:ef:8f:01:f6:62:13:83: 30:12:d6:c0:45:d6:eb:ba:1b:bc:79:cc:e4:71:f3: 44:4e:cf:58:dc:7b:7b:d2:e9:b9:fe:1a:1c:a2:ca: 7e:33:87:45:67:b3:3a:84:3b:d8:51:44:21:62:78: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2F:1D:13:EE:CF:78:F9:F0:C7:F3:D1:BE:67:BD:F9:42:22:80:58 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2f:2d:d0:b1:a9:01:01:a7:92:5b:96:7c:63:6e:23:b6:7a: e7:79:38:a1:b3:54:34:aa:2d:8d:63:b5:e0:94:18:22:8c:f7: c4:79:38:bf:6f:e4:01:3e:0b:5c:4b:b7:40:10:38:75:a5:6e: 7f:5f:50:cb:05:c0:57:2c:b9:f3:7f:18:30:37:38:98:08:2a: 6c:3c:b8:5b:73:d0:ad:51:04:f0:6c:c7:aa:3a:ff:03:7e:8e: 3c:68:db:76:c3:57:e0:c0:b4:8f:64:d7:fc:cf:d8:36:58:4b: 3f:01:9e:ec:1c:66:e3:4d:58:30:5a:bd:3b:88:85:d6:9c:88: b6:4f:8c:5c:db:05:d3:18:45:62:4f:93:6c:31:b0:21:9f:86: 00:45:ef:95:c0:33:69:6e:99:99:87:68:bc:f8:4d:18:d2:ce: aa:91:e0:d0:6b:7d:be:da:45:9e:6f:2d:be:75:5a:9a:be:4d: 44:69:40:37:3e:a6:31:e4:fe:28:6f:b0:7b:b8:2a:db:67:55: b0:52:0e:8b:f4:13:e7:bd:6d:98:f9:b2:9b:7c:19:d0:2d:b1: d5:f4:d9:64:f5:16:a2:16:6f:27:42:a1:f3:f8:b7:66:e7:ba: 01:41:cd:bb:0f:ae:ff:e8:ec:52:65:dd:9b:7e:62:05:b2:c0: 32:33:5c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINIjeWW/pr9Z5/IA8F45uwXUsQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA5MjExMjE2MzZaFw0yNjA5MjIxNTI5MzZaMDMxMTAvBgNV BAMTKEFEMkYxRDEzRUVDRjc4RjlGMEM3RjNEMUJFNjdCREY5NDIyMjgwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVLXBu4e27+tQ1LSJEfqBWy67 1kXIHedeuCb23m2Fhqsy5grBw54LsrL74D7M7Re/fOTnItMVdc1xNwgTY5/9GmbE CGacvKLp9DchAiaEq9o5QVEDB5L9OihA3s6G/rMjmMUoMZThPn1rC7tC3LYGolx6 CCnZg6pBRwpV0NuIMOEpaFW9b3vqsAQPYAOV254rtfjNBwttrgt2hKilZd/IGg8p l9RWaY5MBGV1kVekNcKzzCp6w+BPVXMQTPPD7OUgm5UIMNleaB4X748B9mITgzAS 1sBF1uu6G7x5zORx80ROz1jce3vS6bn+Ghyiyn4zh0VnszqEO9hRRCFieHIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrS8dE+7PePnwx/PRvme9+UIigFgwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEvLdCxqQEBp5JblnxjbiO2eud5OKGzVDSq LY1jteCUGCKM98R5OL9v5AE+C1xLt0AQOHWlbn9fUMsFwFcsufN/GDA3OJgIKmw8 uFtz0K1RBPBsx6o6/wN+jjxo23bDV+DAtI9k1/zP2DZYSz8BnuwcZuNNWDBavTuI hdaciLZPjFzbBdMYRWJPk2wxsCGfhgBF75XAM2lumZmHaLz4TRjSzqqR4NBrfb7a RZ5vLb51Wpq+TURpQDc+pjHk/ihvsHu4KttnVbBSDov0E+e9bZj5spt8GdAtsdX0 2WT1FqIWbydCofP4t2bnugFBzbsPrv/o7FJl3Zt+YgWywDIzXGI= -----END CERTIFICATE-----Generated at Tue Sep 22 03:12:50 2026 by rpki-client