$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json) Hash identifier: k5RpuCN5oYAQlK8EZkq1HzrOiCFfzKewIzi8avmm598= Subject key identifier: BD:47:29:26:E4:FA:F2:99:DB:02:21:23:69:B4:1A:9D:14:98:D2:B3 Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Certificate serial: 6085B827A37E696FD059E191CA9CE41FF15B7D98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:12:54 +0000 Manifest this update: Mon 21 Sep 2026 21:07:54 +0000 Manifest next update: Wed 23 Sep 2026 00:00:54 +0000 Files and hashes: 1: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: lT+2kGnna3TfxFFn96rNZLoQb1GgYNxd/pPXT4IZhvw=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:85:b8:27:a3:7e:69:6f:d0:59:e1:91:ca:9c:e4:1f:f1:5b:7d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8 Validity Not Before: Sep 21 21:07:54 2026 GMT Not After : Sep 23 00:00:54 2026 GMT Subject: CN=BD472926E4FAF299DB02212369B41A9D1498D2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:55:f9:37:d7:ad:1c:72:86:18:8c:5e:ea: 65:c7:e4:d7:f5:7a:c4:12:5b:7a:0f:2f:f3:8b:a2: ba:93:da:98:17:3c:c1:f7:eb:b6:b1:ea:c6:35:bb: 94:f0:3a:2a:34:8d:7c:94:a3:c0:93:b9:c0:a8:29: 66:ec:db:3f:25:e1:2c:33:1e:f2:4b:94:7a:3a:f5: bc:9e:de:a0:17:cf:a8:ab:e7:ae:31:76:42:45:64: 18:c1:30:31:be:c5:e6:d9:e4:c3:6e:6a:78:ec:39: cf:83:2b:fb:1b:af:93:d6:79:23:55:b9:54:d0:a0: db:02:85:e7:43:3c:07:46:92:56:45:75:b3:2b:ed: 61:d5:56:b9:54:f8:5d:de:d6:19:b9:52:ee:a3:19: d4:29:c8:2c:44:cc:27:a5:ea:1d:7f:c4:f8:0a:66: d6:44:c8:6b:e9:67:fa:e6:55:af:33:d5:a4:da:2b: 89:54:f4:31:87:2e:4a:e0:cd:39:00:3d:dd:0c:32: ca:17:06:0d:63:c4:b3:ed:40:79:1b:fa:b3:b3:ad: 70:d5:24:4e:9e:9d:ec:34:91:18:85:5d:54:07:77: 7a:84:16:3e:e4:16:32:f7:df:b4:84:90:79:e2:64: 9b:6a:0d:02:68:50:48:60:68:6d:e3:67:9f:20:8c: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:29:26:E4:FA:F2:99:DB:02:21:23:69:B4:1A:9D:14:98:D2:B3 X509v3 Authority Key Identifier: keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c8:bc:87:e6:0d:35:3c:84:b0:2f:34:c3:38:b9:4f:4f:86: 7e:56:ea:8c:9b:31:e3:3b:63:0c:b5:e2:08:c1:89:be:06:54: 41:22:fe:aa:e1:73:3d:7e:20:03:1f:03:bb:44:af:7f:e6:55: b2:31:23:2c:c4:b7:f7:a5:ce:94:18:dc:0f:48:e1:3d:9e:11: 70:8c:16:98:b3:f4:d4:a5:11:32:63:88:35:fa:84:f4:1a:db: cf:90:10:0b:ce:98:ed:4b:68:d5:fb:96:43:e3:2f:70:d4:ee: 6b:48:bb:f9:66:3a:53:a3:b3:3c:6c:bb:89:14:dd:b7:98:c9: a1:00:e6:34:b8:04:eb:ac:c6:af:b8:e3:f6:09:7b:c9:a9:63: cb:61:e8:c6:23:8b:17:46:67:01:e8:7a:47:a3:5c:ad:bb:93: 54:2a:14:bb:df:4a:4e:2d:e3:0a:1e:e2:35:e9:be:bd:6c:e9: bd:5d:ac:fd:5c:90:4f:eb:7b:be:0d:56:4c:a2:f9:7b:e7:6b: 5a:b6:f4:0a:23:2c:92:aa:08:a2:8b:73:a9:02:26:c6:8c:b0: 68:3e:a1:1a:fa:46:21:40:79:1d:16:66:f2:54:dd:84:33:65: 82:79:48:e7:10:46:48:3f:03:62:fb:a7:55:e4:5d:58:f9:9f: d4:26:92:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIW4J6N+aW/QWeGRypzkH/FbfZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1 M0MyNDRGODAeFw0yNjA5MjEyMTA3NTRaFw0yNjA5MjMwMDAwNTRaMDMxMTAvBgNV BAMTKEJENDcyOTI2RTRGQUYyOTlEQjAyMjEyMzY5QjQxQTlEMTQ5OEQyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WlX5N9etHHKGGIxe6mXH5Nf1 esQSW3oPL/OLorqT2pgXPMH367ax6sY1u5TwOio0jXyUo8CTucCoKWbs2z8l4Swz HvJLlHo69bye3qAXz6ir564xdkJFZBjBMDG+xebZ5MNuanjsOc+DK/sbr5PWeSNV uVTQoNsChedDPAdGklZFdbMr7WHVVrlU+F3e1hm5Uu6jGdQpyCxEzCel6h1/xPgK ZtZEyGvpZ/rmVa8z1aTaK4lU9DGHLkrgzTkAPd0MMsoXBg1jxLPtQHkb+rOzrXDV JE6enew0kRiFXVQHd3qEFj7kFjL337SEkHniZJtqDQJoUEhgaG3jZ58gjEdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvUcpJuT68pnbAiEjabQanRSY0rMwHwYDVR0j BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0 NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3 OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbIvIfmDTU8hLAvNMM4uU9Phn5W6oybMeM7 Ywy14gjBib4GVEEi/qrhcz1+IAMfA7tEr3/mVbIxIyzEt/elzpQY3A9I4T2eEXCM Fpiz9NSlETJjiDX6hPQa28+QEAvOmO1LaNX7lkPjL3DU7mtIu/lmOlOjszxsu4kU 3beYyaEA5jS4BOusxq+44/YJe8mpY8th6MYjixdGZwHoekejXK27k1QqFLvfSk4t 4woe4jXpvr1s6b1drP1ckE/re74NVkyi+Xvna1q29AojLJKqCKKLc6kCJsaMsGg+ oRr6RiFAeR0WZvJU3YQzZYJ5SOcQRkg/A2L7p1XkXVj5n9Qmksk= -----END CERTIFICATE-----Generated at Tue Sep 22 05:59:28 2026 by rpki-client