$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: obUmWek36BW8hEC4qc1k/vuS0BSuIYwk8YBHxGuZ02M= Subject key identifier: BB:1E:DF:37:64:FE:C1:87:1C:3B:D0:51:AE:67:1E:81:07:B6:E5:27 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 7C996CCBA0DF34145E9380BB7AA5F03AC28C9AF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: BC Signing time: Sun 20 Sep 2026 09:34:01 +0000 Manifest this update: Sun 20 Sep 2026 09:29:01 +0000 Manifest next update: Mon 21 Sep 2026 09:44:01 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) 2: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: /SxEAtygQteodhIU/6NWo2xFd4HTaTUlbagd8Ty0i/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:99:6c:cb:a0:df:34:14:5e:93:80:bb:7a:a5:f0:3a:c2:8c:9a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Sep 20 09:29:01 2026 GMT Not After : Sep 21 09:44:01 2026 GMT Subject: CN=BB1EDF3764FEC1871C3BD051AE671E8107B6E527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:d9:95:26:a6:b0:bd:12:cb:f6:5e:e5:61: 9a:c3:cb:74:83:6a:83:68:ba:e8:de:bd:ed:a7:64: d5:4f:d0:70:cc:c3:a2:a6:b1:d0:48:4b:60:9b:fa: 45:c6:ca:56:dd:d8:aa:e0:bc:b4:3e:eb:38:c0:74: d1:6a:e6:32:59:9b:33:d3:20:6a:f1:2a:63:69:ad: 39:ec:be:17:9e:10:b5:10:b4:99:ac:df:56:c7:42: d7:d2:86:0b:45:30:c5:f4:af:10:36:26:0e:0f:8f: cd:4a:01:7e:a7:5c:32:66:c7:cc:40:42:1c:13:d8: d8:eb:9d:01:39:49:b9:76:14:29:bb:b6:3c:c4:75: 9d:69:8e:9f:b9:4c:a0:3a:fb:f1:68:2c:a3:03:31: 95:66:23:47:36:72:5a:9b:b7:fa:58:40:14:76:0f: 1a:13:49:88:26:32:a8:62:b9:3e:61:58:f0:60:90: 17:a4:66:f7:a7:d8:97:79:7a:a1:63:e6:13:58:19: 9d:89:b4:d1:58:8f:a6:5e:a5:01:b6:95:59:a1:ff: 58:2b:6d:fc:98:7c:c8:dc:0e:10:16:bf:05:b7:7f: 40:d6:80:36:9a:57:3b:bd:de:65:76:e7:e8:e8:46: 9a:82:b6:d2:89:53:1a:c4:37:1a:73:74:05:3d:09: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:DF:37:64:FE:C1:87:1C:3B:D0:51:AE:67:1E:81:07:B6:E5:27 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2a:ab:69:e2:ad:ae:9f:e3:fc:37:6d:c4:ad:30:07:90:90: b1:d4:0a:c4:9f:5c:91:ba:39:d7:0f:9d:bd:3d:d7:e2:07:d0: 33:9b:0f:e6:78:5a:95:87:ad:bd:bf:b3:1c:82:cc:37:75:a3: bf:0b:97:5c:c8:d3:05:95:09:a3:ca:70:2f:db:53:c4:cc:df: 74:1c:46:1c:3c:8e:dc:7a:93:c6:c1:2f:6d:7f:f6:ad:3a:e1: 8b:d1:1b:81:c3:d1:15:39:92:b2:35:1b:8e:8f:1c:cd:01:2e: c2:ac:ab:07:9e:cc:1b:19:e0:8e:19:6a:48:a5:50:8c:62:8b: 5a:08:ce:96:cb:63:5d:65:3a:44:df:95:69:e7:e3:fb:31:99: b1:f8:d1:36:90:b6:9a:b3:fb:13:3d:9b:49:67:c4:08:bd:c3: b8:71:35:70:2e:81:f7:6d:bd:f7:48:3d:36:04:d5:82:81:c7: 6f:cb:7f:cd:bf:5a:0b:d2:0b:58:82:80:22:11:c4:03:4a:bf: f3:c3:1d:36:eb:4b:b5:57:27:51:f8:fe:8a:a7:e1:63:c2:4e: 22:e5:68:36:67:f2:e4:68:5f:c1:51:7e:6b:76:d7:43:1f:b8: 2e:4e:b4:38:c0:18:fd:10:88:59:e9:e9:de:77:2d:f2:f0:ca: 15:39:71:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJlsy6DfNBRek4C7eqXwOsKMmvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA5MjAwOTI5MDFaFw0yNjA5MjEwOTQ0MDFaMDMxMTAvBgNV BAMTKEJCMUVERjM3NjRGRUMxODcxQzNCRDA1MUFFNjcxRTgxMDdCNkU1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS9mVJqawvRLL9l7lYZrDy3SD aoNouujeve2nZNVP0HDMw6KmsdBIS2Cb+kXGylbd2KrgvLQ+6zjAdNFq5jJZmzPT IGrxKmNprTnsvheeELUQtJms31bHQtfShgtFMMX0rxA2Jg4Pj81KAX6nXDJmx8xA QhwT2NjrnQE5Sbl2FCm7tjzEdZ1pjp+5TKA6+/FoLKMDMZVmI0c2clqbt/pYQBR2 DxoTSYgmMqhiuT5hWPBgkBekZven2Jd5eqFj5hNYGZ2JtNFYj6ZepQG2lVmh/1gr bfyYfMjcDhAWvwW3f0DWgDaaVzu93mV25+joRpqCttKJUxrENxpzdAU9CY/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUux7fN2T+wYccO9BRrmcegQe25ScwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAqq2nira6f4/w3bcStMAeQkLHUCsSfXJG6 OdcPnb091+IH0DObD+Z4WpWHrb2/sxyCzDd1o78Ll1zI0wWVCaPKcC/bU8TM33Qc Rhw8jtx6k8bBL21/9q064YvRG4HD0RU5krI1G46PHM0BLsKsqweezBsZ4I4Zakil UIxii1oIzpbLY11lOkTflWnn4/sxmbH40TaQtpqz+xM9m0lnxAi9w7hxNXAugfdt vfdIPTYE1YKBx2/Lf82/WgvSC1iCgCIRxANKv/PDHTbrS7VXJ1H4/oqn4WPCTiLl aDZn8uRoX8FRfmt210MfuC5OtDjAGP0QiFnp6d53LfLwyhU5ccQ= -----END CERTIFICATE-----Generated at Mon Sep 21 03:02:49 2026 by rpki-client