$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft File: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft (raw, json) Hash identifier: GJ7cHXf3QGbq/ph6uL5oFaNab2LBeqeUxxcUcN8oLwc= Subject key identifier: 03:D9:C6:8A:6E:A2:1D:18:8B:B2:EB:82:AB:D8:19:0C:1A:B9:80:CC Authority key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A Certificate issuer: /CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Certificate serial: 4C98CBB479A1A26B885266AF5863354CA5495E49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 07:57:22 +0000 Manifest this update: Thu 03 Sep 2026 07:52:22 +0000 Manifest next update: Fri 04 Sep 2026 09:59:22 +0000 Files and hashes: 1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: Acd+CNDLcrmehVnAROgrc31TunZVSjXxsQg7HAi/x2w=) 2: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: 6zf7vx7+kMHdnFJu/oDlY4/HuNaESvsIJtoWRx8KDTI=) 3: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl (hash: 9HalPo7wZu1fy4WW94DSDVuupWWDPkZZdt5GiaAvujs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:98:cb:b4:79:a1:a2:6b:88:52:66:af:58:63:35:4c:a5:49:5e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Validity Not Before: Sep 3 07:52:22 2026 GMT Not After : Sep 4 09:59:22 2026 GMT Subject: CN=03D9C68A6EA21D188BB2EB82ABD8190C1AB980CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:3f:b2:07:4b:01:64:3a:99:3a:bc:1d:6c: 50:ba:9b:f8:f1:4b:43:5e:10:f5:49:18:fa:49:49: ad:29:6d:34:47:11:b4:37:60:06:90:ff:36:c2:9b: 6b:68:32:e4:3e:62:2e:e9:c1:31:c2:ce:12:19:b2: 9f:8f:81:6e:ee:9b:2e:45:2b:24:58:33:9c:fb:79: 1e:30:14:2e:56:53:f6:c2:c7:d4:c4:e6:85:1c:aa: 50:e0:d6:3d:d3:11:5d:df:16:5e:81:af:af:30:86: c4:53:14:22:75:7f:4f:cd:2f:4d:bb:1f:bf:44:23: f1:83:35:84:fb:9d:a4:4f:8e:ab:ed:57:56:71:b2: 3e:80:3d:e7:a8:b7:25:a5:72:6a:61:2c:d0:93:fb: e0:c7:12:54:fc:d1:2d:e0:bb:23:a0:87:fa:a0:91: 5c:cb:cc:21:0f:8b:56:b2:b1:76:70:e4:08:96:7b: 39:b7:0b:f9:9e:7d:6b:00:fa:88:7f:bd:44:58:8b: 4f:e0:93:61:bf:88:31:99:f1:c6:62:4a:24:a8:68: 0e:ed:b2:97:e0:bc:c9:86:f9:18:60:17:44:47:39: 35:9a:5e:6f:61:aa:ee:23:b8:eb:05:d9:4e:91:3a: ca:c6:ae:6f:3c:35:71:7d:b8:6d:1b:98:d9:9a:f7: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:C6:8A:6E:A2:1D:18:8B:B2:EB:82:AB:D8:19:0C:1A:B9:80:CC X509v3 Authority Key Identifier: keyid:1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f6:2c:95:0a:3e:a4:08:cc:4b:21:94:e9:13:f9:0a:a8:05: 91:00:1e:bb:06:02:1f:e5:25:48:72:2c:50:9f:99:58:9c:13: b0:0d:b8:b9:15:e7:b6:c1:b6:f0:f2:a0:c2:3d:34:fa:63:5b: 2e:10:22:d6:71:1c:c7:e6:30:83:45:df:e7:b3:70:58:a6:08: 14:66:67:9b:ce:85:df:7f:1a:1c:20:ce:91:68:85:7a:05:5d: d0:29:d3:1b:5d:0b:e2:8c:f1:23:47:fa:4c:1e:7f:9f:40:01: 1b:0a:fe:fc:70:ad:31:70:43:22:d4:fe:eb:0a:53:f0:df:da: c7:b1:04:37:2b:e6:e8:ef:26:3c:26:18:2f:af:47:49:b1:b6: 74:84:82:b2:4b:de:d6:6f:04:71:5e:da:5f:9d:79:db:6d:81: 8c:e3:9e:95:44:65:4a:92:33:7a:25:96:ee:e5:c5:58:c3:45: 7e:32:41:84:59:e9:35:33:2e:69:b4:e1:71:c2:7b:70:4f:59: 1f:5d:f0:67:e5:1b:0d:e3:89:07:d6:ce:22:93:b8:a2:f4:7d: 53:ea:06:a3:26:14:eb:ec:16:93:3f:42:74:ce:1a:0b:32:8c: b7:9b:9d:fc:19:56:09:d8:b7:c3:a9:03:a6:4c:62:45:c2:c7: 27:43:18:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJjLtHmhomuIUmavWGM1TKVJXkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVERTExODBBRTlDOTkyQjY0ODVDRDY1OUM1RDdFMUJG MjcwQUI3QTAeFw0yNjA5MDMwNzUyMjJaFw0yNjA5MDQwOTU5MjJaMDMxMTAvBgNV BAMTKDAzRDlDNjhBNkVBMjFEMTg4QkIyRUI4MkFCRDgxOTBDMUFCOTgwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxD+yB0sBZDqZOrwdbFC6m/jx S0NeEPVJGPpJSa0pbTRHEbQ3YAaQ/zbCm2toMuQ+Yi7pwTHCzhIZsp+PgW7umy5F KyRYM5z7eR4wFC5WU/bCx9TE5oUcqlDg1j3TEV3fFl6Br68whsRTFCJ1f0/NL027 H79EI/GDNYT7naRPjqvtV1Zxsj6APeeotyWlcmphLNCT++DHElT80S3guyOgh/qg kVzLzCEPi1aysXZw5AiWezm3C/mefWsA+oh/vURYi0/gk2G/iDGZ8cZiSiSoaA7t spfgvMmG+RhgF0RHOTWaXm9hqu4juOsF2U6ROsrGrm88NXF9uG0bmNma92VJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9nGim6iHRiLsuuCq9gZDBq5gMwwHwYDVR0j BBgwFoAUHt4RgK6cmStkhc1lnF1+G/Jwq3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RmMDY4YmQtOGUzYS00Njk1LTg5ZWQtM2IzMjUwZjg3NWM5LzAvMUVERTExODBB RTlDOTkyQjY0ODVDRDY1OUM1RDdFMUJGMjcwQUI3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRURFMTE4MEFFOUM5OTJCNjQ4NUNENjU5QzVEN0UxQkYyNzBB QjdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMUVERTExODBBRTlDOTkyQjY0ODVDRDY1OUM1RDdF MUJGMjcwQUI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL2LJUKPqQIzEshlOkT+QqoBZEAHrsGAh/l JUhyLFCfmVicE7ANuLkV57bBtvDyoMI9NPpjWy4QItZxHMfmMINF3+ezcFimCBRm Z5vOhd9/GhwgzpFohXoFXdAp0xtdC+KM8SNH+kwef59AARsK/vxwrTFwQyLU/usK U/Df2sexBDcr5ujvJjwmGC+vR0mxtnSEgrJL3tZvBHFe2l+dedttgYzjnpVEZUqS M3ollu7lxVjDRX4yQYRZ6TUzLmm04XHCe3BPWR9d8GflGw3jiQfWziKTuKL0fVPq BqMmFOvsFpM/QnTOGgsyjLebnfwZVgnYt8OpA6ZMYkXCxydDGNg= -----END CERTIFICATE-----Generated at Thu Sep 3 12:37:44 2026 by rpki-client