$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft File: 1AD9403233542883A89282A52F92A9AC66CB9D45.mft (raw, json) Hash identifier: +vcxjZNYFJTIZJR+Ih3mf5uRzzhLIWQj9vCI0Iqgpoc= Subject key identifier: E4:D0:AF:9F:02:1E:F6:A7:4D:78:35:B3:A7:D5:0C:C7:01:F4:0B:4A Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Certificate serial: 0AAE4006ECD46CE717175F04E4BF5C41971EC574 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft Manifest number: C7 Signing time: Tue 29 Sep 2026 00:45:32 +0000 Manifest this update: Tue 29 Sep 2026 00:40:32 +0000 Manifest next update: Wed 30 Sep 2026 03:55:32 +0000 Files and hashes: 1: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8=) 2: 1AD9403233542883A89282A52F92A9AC66CB9D45.crl (hash: Kdti70FhMJ1DtgbuKuT7EamRDfsaTNcG/rbeNwwuSLI=) 3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: mJSGu8A/4Dy8uEYCBOpVGIvPxs11huUPRlbNbg4vJUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ae:40:06:ec:d4:6c:e7:17:17:5f:04:e4:bf:5c:41:97:1e:c5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Validity Not Before: Sep 29 00:40:32 2026 GMT Not After : Sep 30 03:55:32 2026 GMT Subject: CN=E4D0AF9F021EF6A74D7835B3A7D50CC701F40B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:99:f4:32:55:b3:05:a3:d1:5c:38:81:b0: 42:21:2a:2c:dc:a1:33:f0:c0:37:4f:f9:b1:3d:01: 32:49:81:07:72:b4:4c:4d:17:b1:7b:99:b6:1e:85: 9d:11:bb:b9:25:b1:b8:72:48:39:ad:07:eb:93:4a: 5e:e6:8d:70:14:36:5d:6a:0f:bc:1d:d7:9a:98:5f: 9e:ad:aa:eb:90:fa:fa:9b:03:fa:fc:2f:66:d9:31: fd:35:7e:43:77:95:95:af:08:ab:be:3e:0f:87:b2: a9:b8:83:cd:52:9a:7e:55:b0:84:1a:0f:88:fa:a4: 98:07:f2:13:ca:b0:8a:74:c0:c9:f8:cd:06:6f:f5: 2d:83:41:85:54:d9:18:f0:33:7b:3c:ba:7f:68:8f: 44:4b:79:c2:58:36:b7:2f:9a:65:fb:a3:67:42:cb: ba:e2:3a:c2:d0:36:d1:d7:01:2f:a9:3f:a2:9c:b4: 1c:a5:dd:68:84:65:ad:51:71:05:be:df:a0:7c:bb: 24:ef:79:65:8e:76:ea:70:00:7c:4f:a0:c2:ff:b7: 23:45:63:eb:96:d6:00:4c:77:3f:74:ef:26:ee:dd: 49:ee:13:b5:fe:ee:2d:fc:d0:3b:82:48:6c:cb:95: 75:ab:46:ed:d6:2b:f8:3e:6b:bc:a8:17:6f:0f:e2: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D0:AF:9F:02:1E:F6:A7:4D:78:35:B3:A7:D5:0C:C7:01:F4:0B:4A X509v3 Authority Key Identifier: keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:d5:a6:66:39:e0:82:5f:4c:55:f0:bc:b4:c1:f3:61:4e:35: 1a:04:d0:b9:01:b3:eb:6f:a6:8c:a2:87:6f:fa:51:4b:83:59: 6a:bc:1c:ed:de:45:4f:77:75:71:e8:2d:c1:d9:97:3a:b0:de: 1e:87:17:2a:ae:4e:b4:4a:ff:c9:f9:f6:f1:e8:c9:08:8e:66: 73:cc:1d:32:f0:cc:17:04:96:4b:fd:08:d8:24:3b:ce:fb:66: 56:78:14:8e:c6:f2:65:85:e6:b1:2c:af:9e:0a:a6:44:8b:ff: cf:78:4b:e3:7c:ba:13:9e:df:57:74:d5:c6:4a:bd:87:36:a2: e8:6b:5d:ff:61:3c:c9:04:3c:97:b8:f4:27:4a:bf:2e:e7:48: 52:7f:db:f1:df:15:f0:45:74:c1:48:9b:05:77:59:35:44:4f: b9:86:a1:8d:40:17:da:6e:55:fa:fa:9b:5b:b4:09:13:06:ab: 26:ce:26:28:2a:4c:68:37:4b:58:c5:85:4a:82:71:c9:ba:8e: 7a:1c:5a:4e:bf:75:43:61:82:8a:7c:5d:e5:36:5b:bf:b1:21: b9:36:35:af:88:0e:7c:38:f0:1a:32:a6:82:12:94:02:03:65: e9:48:95:87:f3:1e:60:22:cd:d3:ff:4e:2c:72:4d:a4:c1:29: 93:04:12:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq5ABuzUbOcXF18E5L9cQZcexXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2 NkNCOUQ0NTAeFw0yNjA5MjkwMDQwMzJaFw0yNjA5MzAwMzU1MzJaMDMxMTAvBgNV BAMTKEU0RDBBRjlGMDIxRUY2QTc0RDc4MzVCM0E3RDUwQ0M3MDFGNDBCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1qZn0MlWzBaPRXDiBsEIhKizc oTPwwDdP+bE9ATJJgQdytExNF7F7mbYehZ0Ru7klsbhySDmtB+uTSl7mjXAUNl1q D7wd15qYX56tquuQ+vqbA/r8L2bZMf01fkN3lZWvCKu+Pg+Hsqm4g81Smn5VsIQa D4j6pJgH8hPKsIp0wMn4zQZv9S2DQYVU2RjwM3s8un9oj0RLecJYNrcvmmX7o2dC y7riOsLQNtHXAS+pP6KctByl3WiEZa1RcQW+36B8uyTveWWOdupwAHxPoML/tyNF Y+uW1gBMdz907ybu3UnuE7X+7i380DuCSGzLlXWrRu3WK/g+a7yoF28P4jaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5NCvnwIe9qdNeDWzp9UMxwH0C0owHwYDVR0j BBgwFoAUGtlAMjNUKIOokoKlL5KprGbLnUUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MTQ1MDctNzE3NC00ZjFlLTg1NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIz MzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2NkNCOUQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUQ5NDAzMjMzNTQyODgzQTg5MjgyQTUyRjkyQTlBQzY2Q0I5 RDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5 QUM2NkNCOUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/VpmY54IJfTFXwvLTB82FONRoE0LkBs+tv poyih2/6UUuDWWq8HO3eRU93dXHoLcHZlzqw3h6HFyquTrRK/8n59vHoyQiOZnPM HTLwzBcElkv9CNgkO877ZlZ4FI7G8mWF5rEsr54KpkSL/894S+N8uhOe31d01cZK vYc2ouhrXf9hPMkEPJe49CdKvy7nSFJ/2/HfFfBFdMFImwV3WTVET7mGoY1AF9pu Vfr6m1u0CRMGqybOJigqTGg3S1jFhUqCccm6jnocWk6/dUNhgop8XeU2W7+xIbk2 Na+IDnw48BoypoISlAIDZelIlYfzHmAizdP/TixyTaTBKZMEEpU= -----END CERTIFICATE-----Generated at Tue Sep 29 21:27:25 2026 by rpki-client