$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: ttzMpK6cq0YShxtJ3pqV3vw4PwEva51OZ3oakvtgtM8= Subject key identifier: C2:01:14:BE:F6:96:58:07:FC:AC:4A:82:BE:0A:8D:32:E1:1A:5A:56 Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 7B4859C19CE7E39DCAB73E589CDB86DB0E8A2CD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: BE Signing time: Tue 22 Sep 2026 00:42:20 +0000 Manifest this update: Tue 22 Sep 2026 00:37:20 +0000 Manifest next update: Wed 23 Sep 2026 01:47:20 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: 9aGKJ0AAhqXGD8ykFpKZsbxaJlBRpmn1UPtaiGveq68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:48:59:c1:9c:e7:e3:9d:ca:b7:3e:58:9c:db:86:db:0e:8a:2c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: Sep 22 00:37:20 2026 GMT Not After : Sep 23 01:47:20 2026 GMT Subject: CN=C20114BEF6965807FCAC4A82BE0A8D32E11A5A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:fc:26:83:16:3c:a9:be:4f:dc:51:33:5a: a0:31:11:79:26:3f:62:df:f3:d4:5e:2b:77:0d:b3: cc:15:b2:13:88:41:fc:65:d6:77:50:be:16:8f:85: 16:b5:65:49:79:e6:c1:70:cf:29:b1:e4:98:6f:6d: 1e:67:0f:ca:2d:d7:79:1a:d3:90:79:4b:df:53:14: df:d8:5d:5f:27:09:cc:1e:62:d9:9f:c3:8a:19:c0: 80:9d:0b:cc:d1:ec:29:89:33:f6:9c:fb:49:d4:86: a3:c8:64:de:d9:8b:99:32:e6:f0:6d:8f:d2:7d:92: 93:17:23:cc:e4:d9:73:2d:ba:bf:50:8f:2c:aa:f0: 10:b7:61:59:fc:54:da:5c:81:58:3e:4f:a2:98:c4: 51:8a:7d:ec:20:03:3b:32:b2:28:12:ab:a8:a5:5e: f1:60:ca:3d:c5:4f:21:03:14:77:3c:b1:a2:27:32: 0c:fd:11:7a:40:d2:fa:61:ac:ff:ca:ca:bd:ee:71: 32:78:14:84:20:fa:73:0e:53:c7:be:e0:cf:cd:1b: a1:31:e7:83:c4:e3:98:fe:63:4e:05:9c:5a:19:da: b9:10:d2:0d:95:79:16:77:57:19:09:a7:80:a8:db: b0:3c:b2:80:f0:01:79:1d:bd:a2:c4:75:99:07:c8: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:01:14:BE:F6:96:58:07:FC:AC:4A:82:BE:0A:8D:32:E1:1A:5A:56 X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5c:5b:bd:c3:2a:f1:84:43:5c:25:e2:89:da:89:5f:99:39: 72:57:74:87:9c:a6:e7:c9:ed:cc:1e:e0:b2:7a:cd:5d:88:1d: 22:59:e8:48:3c:40:b2:d0:08:17:28:34:2f:0a:fd:c7:00:87: ec:98:98:01:28:47:0c:c7:e9:5e:ec:3b:b9:ea:e7:ab:4e:dd: 3c:82:85:ec:b9:a5:87:7a:6c:7d:ae:7b:fc:d5:c5:c9:1a:6f: 08:76:04:e9:31:47:53:cf:3b:66:c8:ba:08:dd:69:7f:9c:26: 6e:3c:16:a6:43:fb:55:f1:e8:c7:1c:41:33:2e:19:58:fe:cb: 54:dd:43:17:46:9a:42:6a:53:84:15:1e:dd:61:ec:34:ff:8d: 73:53:de:3a:e9:c6:33:e0:f3:15:c2:f9:c6:b3:1a:b5:26:14: 59:cd:94:11:00:d1:b2:1e:cb:d5:18:14:5c:bb:20:c1:b6:94: 55:23:82:77:3e:60:77:89:2e:6c:d1:ec:aa:b8:5a:0e:50:02: 94:ca:a8:cc:1d:d5:37:6d:14:f6:85:c8:d1:fe:f1:8a:44:79: c1:dd:8a:33:5e:a4:0f:bc:5e:be:a1:13:80:ec:6e:f9:36:5e: b5:f0:ad:71:00:f0:3a:70:cc:03:b8:1a:b0:5f:6f:83:47:2f: 04:3d:42:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0hZwZzn453Ktz5YnNuG2w6KLNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA5MjIwMDM3MjBaFw0yNjA5MjMwMTQ3MjBaMDMxMTAvBgNV BAMTKEMyMDExNEJFRjY5NjU4MDdGQ0FDNEE4MkJFMEE4RDMyRTExQTVBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKZ/wmgxY8qb5P3FEzWqAxEXkm P2Lf89ReK3cNs8wVshOIQfxl1ndQvhaPhRa1ZUl55sFwzymx5JhvbR5nD8ot13ka 05B5S99TFN/YXV8nCcweYtmfw4oZwICdC8zR7CmJM/ac+0nUhqPIZN7Zi5ky5vBt j9J9kpMXI8zk2XMtur9Qjyyq8BC3YVn8VNpcgVg+T6KYxFGKfewgAzsysigSq6il XvFgyj3FTyEDFHc8saInMgz9EXpA0vphrP/Kyr3ucTJ4FIQg+nMOU8e+4M/NG6Ex 54PE45j+Y04FnFoZ2rkQ0g2VeRZ3VxkJp4Co27A8soDwAXkdvaLEdZkHyF2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgEUvvaWWAf8rEqCvgqNMuEaWlYwHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxcW73DKvGEQ1wl4onaiV+ZOXJXdIecpufJ 7cwe4LJ6zV2IHSJZ6Eg8QLLQCBcoNC8K/ccAh+yYmAEoRwzH6V7sO7nq56tO3TyC hey5pYd6bH2ue/zVxckabwh2BOkxR1PPO2bIugjdaX+cJm48FqZD+1Xx6MccQTMu GVj+y1TdQxdGmkJqU4QVHt1h7DT/jXNT3jrpxjPg8xXC+cazGrUmFFnNlBEA0bIe y9UYFFy7IMG2lFUjgnc+YHeJLmzR7Kq4Wg5QApTKqMwd1TdtFPaFyNH+8YpEecHd ijNepA+8Xr6hE4Dsbvk2XrXwrXEA8DpwzAO4GrBfb4NHLwQ9Qms= -----END CERTIFICATE-----Generated at Tue Sep 22 12:18:08 2026 by rpki-client