$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: 2Dy1p9Iv9V4Kbpa8BtV++bkp90EG8cU1jEKB5Bucqi8= Subject key identifier: F1:EA:53:7E:C9:DA:A8:2B:EA:5C:9D:68:73:29:F3:4D:6B:6E:22:71 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 3DB78BD1C697435170C51B0FDA8EB2FB73611FF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 10:35:07 +0000 Manifest this update: Thu 03 Sep 2026 10:30:07 +0000 Manifest next update: Fri 04 Sep 2026 14:21:07 +0000 Files and hashes: 1: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) 2: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 3: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: IWAHLl4g/l/DZDL3PjlzqkbNEgrSdEiBsUmjqWYL9dE=) 4: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b7:8b:d1:c6:97:43:51:70:c5:1b:0f:da:8e:b2:fb:73:61:1f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Sep 3 10:30:07 2026 GMT Not After : Sep 4 14:21:07 2026 GMT Subject: CN=F1EA537EC9DAA82BEA5C9D687329F34D6B6E2271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:5a:62:06:8d:d7:7e:5f:a0:8a:cc:79:77: 52:64:69:6a:a9:d8:a4:76:4a:ca:cf:33:f5:72:78: 98:cc:80:89:f2:98:0f:0b:07:81:49:eb:33:5e:f6: 9b:38:83:c3:84:f1:2e:0e:0f:62:b2:32:b7:5b:18: 22:92:9e:76:41:31:49:07:81:87:b4:31:00:34:6d: ae:82:5d:2a:e5:fa:41:cc:7a:a2:f5:bc:12:3d:25: be:67:2a:f2:da:57:53:65:aa:03:bd:da:83:0a:0d: 03:b7:06:dc:ee:42:ca:85:45:4d:87:57:ee:c2:b5: 6e:ff:bc:1b:16:aa:0e:38:7e:54:ec:83:44:eb:f5: ed:78:61:76:38:3b:c1:c7:5c:af:0a:cf:ea:22:25: 50:0b:86:da:9b:07:de:d1:54:ae:99:54:44:68:31: d0:80:92:78:95:11:cb:ff:b5:3d:7d:08:07:6b:08: 8b:e9:85:f9:00:07:11:93:7a:0f:7f:ac:63:b7:ed: 50:e7:0e:a2:dc:92:02:c6:dd:e6:95:07:84:5d:18: bb:09:de:df:87:b6:51:89:2d:81:97:bf:9f:30:d7: 5b:ac:fe:fd:ba:41:97:c0:ff:36:29:df:de:0a:d5: 06:71:de:6c:46:e3:c9:30:ea:a1:3e:a8:b3:05:9c: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:53:7E:C9:DA:A8:2B:EA:5C:9D:68:73:29:F3:4D:6B:6E:22:71 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c6:71:2b:44:9f:e7:6c:b4:68:54:ef:36:85:97:9c:27:4d: 33:68:28:15:1d:76:56:4b:36:fc:55:77:8a:25:b0:87:9c:62: fe:e0:a1:d0:aa:d5:c9:1e:22:17:63:f4:2b:3c:77:60:9d:47: 62:2b:22:4f:78:a9:cb:ab:8d:13:3c:23:df:88:4d:68:db:c2: 9b:9b:9a:6c:c9:b5:bf:77:0a:a5:10:76:be:70:62:bc:22:fe: 35:2c:34:50:3a:d6:1a:46:6f:bd:4e:a6:a4:ab:79:a3:0c:a9: 2c:32:fc:eb:b1:95:ee:5e:60:1f:2f:d0:b0:58:27:d5:89:d4: 74:9c:f6:82:72:fb:40:a8:d9:51:46:16:05:bc:75:e8:84:7f: ce:07:0b:aa:94:2b:30:e2:bc:b7:b3:f2:22:a3:75:4f:de:54: 3c:87:bc:15:83:1f:e3:18:62:bf:4b:ef:a6:26:a0:54:09:e1: 95:c4:98:1f:4c:dc:a7:70:eb:58:69:d3:9c:b5:c2:e6:ef:e8: b2:2e:13:48:58:6c:7b:9a:49:36:d3:b7:23:2b:31:e5:1b:a9: 83:e0:fa:55:8b:b6:fd:15:2e:7a:e9:6c:7f:0d:cd:fc:c8:99: df:e5:d6:39:ef:1a:55:2e:fa:02:87:60:fc:46:27:c6:be:d3: 5e:6d:08:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbeL0caXQ1FwxRsP2o6y+3NhH/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA5MDMxMDMwMDdaFw0yNjA5MDQxNDIxMDdaMDMxMTAvBgNV BAMTKEYxRUE1MzdFQzlEQUE4MkJFQTVDOUQ2ODczMjlGMzRENkI2RTIyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCVpiBo3Xfl+gisx5d1JkaWqp 2KR2SsrPM/VyeJjMgInymA8LB4FJ6zNe9ps4g8OE8S4OD2KyMrdbGCKSnnZBMUkH gYe0MQA0ba6CXSrl+kHMeqL1vBI9Jb5nKvLaV1NlqgO92oMKDQO3BtzuQsqFRU2H V+7CtW7/vBsWqg44flTsg0Tr9e14YXY4O8HHXK8Kz+oiJVALhtqbB97RVK6ZVERo MdCAkniVEcv/tT19CAdrCIvphfkABxGTeg9/rGO37VDnDqLckgLG3eaVB4RdGLsJ 3t+HtlGJLYGXv58w11us/v26QZfA/zYp394K1QZx3mxG48kw6qE+qLMFnB0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8epTfsnaqCvqXJ1ocynzTWtuInEwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnGcStEn+dstGhU7zaFl5wnTTNoKBUddlZL NvxVd4olsIecYv7godCq1ckeIhdj9Cs8d2CdR2IrIk94qcurjRM8I9+ITWjbwpub mmzJtb93CqUQdr5wYrwi/jUsNFA61hpGb71OpqSreaMMqSwy/Ouxle5eYB8v0LBY J9WJ1HSc9oJy+0Co2VFGFgW8deiEf84HC6qUKzDivLez8iKjdU/eVDyHvBWDH+MY Yr9L76YmoFQJ4ZXEmB9M3Kdw61hp05y1wubv6LIuE0hYbHuaSTbTtyMrMeUbqYPg +lWLtv0VLnrpbH8NzfzImd/l1jnvGlUu+gKHYPxGJ8a+015tCHU= -----END CERTIFICATE-----Generated at Thu Sep 3 17:09:53 2026 by rpki-client