$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: V3OyQ5bv+WjR7ej15hgspOJDgO7HBb9TTCuVcT6j/zE= Subject key identifier: 8F:E9:02:8C:EA:AE:D5:63:41:8D:24:32:9F:C2:67:41:2E:E6:17:A9 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 57A6277A129E7106E9449F43748776258768B571 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 15:26:05 +0000 Manifest this update: Sun 20 Sep 2026 15:21:05 +0000 Manifest next update: Mon 21 Sep 2026 16:32:05 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) 2: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) 3: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: RH3tkTfDn1PXhFwAzL8ixSrrOMN+8TyOgC5xF5ZMGuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a6:27:7a:12:9e:71:06:e9:44:9f:43:74:87:76:25:87:68:b5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Sep 20 15:21:05 2026 GMT Not After : Sep 21 16:32:05 2026 GMT Subject: CN=8FE9028CEAAED563418D24329FC267412EE617A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:76:9f:47:c7:68:20:f7:ed:1b:ed:d5:2b: e4:ae:12:5c:46:6b:e8:f8:5d:77:90:0b:bf:c7:f1: 44:64:05:d8:74:73:8d:84:8c:9b:61:6a:0c:c3:74: b7:d1:06:86:de:75:46:e6:c0:b7:e4:8d:aa:59:d7: 4e:3f:af:ba:96:42:30:90:d2:26:71:02:d5:da:a5: 1d:9c:d8:92:72:c3:d7:93:5a:f1:ca:3c:85:c6:2a: 7d:8b:34:9d:95:1f:18:f8:bf:17:6d:42:d3:ea:15: 1e:09:55:eb:42:4a:04:25:47:8e:17:8d:6c:50:b4: d4:2c:98:2c:14:e3:d1:0d:20:33:50:b3:9f:e7:97: a9:a5:42:72:82:2a:3d:55:34:e2:38:13:2b:8e:47: c5:0e:30:fb:df:cb:7c:1e:41:21:51:4e:c8:50:63: f6:1e:8b:23:0b:b4:f5:43:1f:5e:29:ed:6f:ba:ae: 59:9d:14:d5:7e:1e:4f:b6:ea:24:05:b9:0d:aa:88: 85:d5:65:17:a0:14:2e:e0:1b:a7:5c:a9:15:1c:39: 70:33:6f:33:90:4c:f2:05:fb:f9:64:a2:49:07:c6: 1b:22:8b:83:11:fb:6e:0b:61:b6:2f:a8:cc:45:24: ef:03:28:9f:b9:3f:f2:ad:e2:f2:46:67:07:25:27: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E9:02:8C:EA:AE:D5:63:41:8D:24:32:9F:C2:67:41:2E:E6:17:A9 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a4:04:af:5a:fc:be:48:09:d4:1f:8a:98:3d:eb:9b:8a:38: c2:37:04:5a:26:84:a3:e3:1f:18:16:91:c7:85:df:a2:1f:5a: 58:17:06:18:7b:f3:44:da:3f:26:95:ba:37:88:3e:4d:11:59: 9a:18:cf:c5:83:0a:a1:63:ab:f4:86:bb:09:98:7a:85:76:64: 4f:cb:b8:8b:df:b5:6c:cb:db:54:99:5c:e1:d2:32:19:eb:52: bd:36:54:b9:57:12:bc:67:ba:a8:29:b2:3e:7d:68:51:ce:60: 1d:79:44:fe:07:ae:08:85:95:ac:9a:80:d3:8f:6b:a4:a5:1d: 72:fc:96:d2:53:28:28:f6:ac:b5:5d:85:1e:1c:ba:6a:9d:67: a2:03:fa:c9:4e:6b:63:83:23:70:b6:d6:01:7d:78:c5:a2:15: 32:46:db:36:79:36:8c:b6:21:6b:57:4f:53:47:f6:31:6f:9d: c7:ff:7a:e7:17:55:ba:2d:f1:0f:42:ed:11:be:ff:fe:a5:04: 55:c0:61:cd:5c:77:ae:fb:91:ea:d4:61:39:40:05:d8:d9:af: 94:24:f7:02:2b:0d:81:a0:67:9c:02:f1:3c:7f:2c:1c:01:6f: 94:38:89:87:84:03:ee:e1:38:90:3f:15:6c:1f:b7:8b:78:11: b7:7a:c4:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6YnehKecQbpRJ9DdId2JYdotXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjA5MjAxNTIxMDVaFw0yNjA5MjExNjMyMDVaMDMxMTAvBgNV BAMTKDhGRTkwMjhDRUFBRUQ1NjM0MThEMjQzMjlGQzI2NzQxMkVFNjE3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBn3afR8doIPftG+3VK+SuElxG a+j4XXeQC7/H8URkBdh0c42EjJthagzDdLfRBobedUbmwLfkjapZ104/r7qWQjCQ 0iZxAtXapR2c2JJyw9eTWvHKPIXGKn2LNJ2VHxj4vxdtQtPqFR4JVetCSgQlR44X jWxQtNQsmCwU49ENIDNQs5/nl6mlQnKCKj1VNOI4EyuOR8UOMPvfy3weQSFRTshQ Y/YeiyMLtPVDH14p7W+6rlmdFNV+Hk+26iQFuQ2qiIXVZRegFC7gG6dcqRUcOXAz bzOQTPIF+/lkokkHxhsii4MR+24LYbYvqMxFJO8DKJ+5P/Kt4vJGZwclJ5/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+kCjOqu1WNBjSQyn8JnQS7mF6kwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqkBK9a/L5ICdQfipg965uKOMI3BFomhKPj HxgWkceF36IfWlgXBhh780TaPyaVujeIPk0RWZoYz8WDCqFjq/SGuwmYeoV2ZE/L uIvftWzL21SZXOHSMhnrUr02VLlXErxnuqgpsj59aFHOYB15RP4HrgiFlayagNOP a6SlHXL8ltJTKCj2rLVdhR4cumqdZ6ID+slOa2ODI3C21gF9eMWiFTJG2zZ5Noy2 IWtXT1NH9jFvncf/eucXVbot8Q9C7RG+//6lBFXAYc1cd677kerUYTlABdjZr5Qk 9wIrDYGgZ5wC8Tx/LBwBb5Q4iYeEA+7hOJA/FWwft4t4Ebd6xIA= -----END CERTIFICATE-----Generated at Sun Sep 20 20:12:53 2026 by rpki-client