$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json) Hash identifier: qNyok3NnAHUxeZsoWRwrIoNHtfDgcqrmHgElqZAHO34= Subject key identifier: F2:29:91:04:FB:44:DC:C5:05:F7:0A:B1:C9:90:20:EC:B3:14:FC:A5 Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Certificate serial: 6475C0B8B991940D06E70F554F6583105AE23BA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 00:18:25 +0000 Manifest this update: Thu 03 Sep 2026 00:13:25 +0000 Manifest next update: Fri 04 Sep 2026 01:45:25 +0000 Files and hashes: 1: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: YuCaVh2jbWh6leOOhiRfOefwCJX9prkwT/pH2PABZ0E=) 2: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=) 3: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=) 4: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:75:c0:b8:b9:91:94:0d:06:e7:0f:55:4f:65:83:10:5a:e2:3b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Validity Not Before: Sep 3 00:13:25 2026 GMT Not After : Sep 4 01:45:25 2026 GMT Subject: CN=F2299104FB44DCC505F70AB1C99020ECB314FCA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:26:29:83:db:0b:24:f5:3b:1b:53:12:55: b4:ca:3b:aa:2d:42:77:d8:7b:44:a4:1f:6b:ce:45: d1:7e:c1:e5:8c:93:9a:f8:26:2f:f1:3c:74:d6:46: 06:a1:c3:93:81:b9:2b:d2:56:17:6d:34:31:f7:2d: 56:4a:61:12:5b:59:90:c3:04:4a:a4:18:fe:6a:7c: 4f:68:a2:de:22:76:00:2d:27:21:82:30:a6:c6:fb: 01:9a:4d:cd:a8:3a:a5:f6:3c:f1:df:65:4d:a3:5b: d6:1b:d3:48:fe:fc:a1:8d:b3:eb:60:d2:e0:f9:5f: 6a:ac:3e:da:d5:a1:25:a7:48:a3:c7:c7:89:b3:c2: d8:62:0c:aa:05:a3:c2:8e:e6:65:f1:74:52:90:97: 36:34:6c:38:4a:0c:90:09:92:d6:bd:dd:f6:c7:38: 1e:e5:4b:e2:ec:c5:a9:bb:a2:d9:78:9f:c7:83:97: 98:7c:37:4b:25:9c:30:6e:26:b0:f1:d1:f5:89:d9: aa:87:8c:85:4c:bb:b7:fc:f4:35:02:9a:79:9e:25: 75:70:83:6d:62:62:00:6c:50:0d:27:cf:b5:4a:bc: 79:8f:df:37:c0:33:7b:f3:b5:0c:fb:e7:d1:6d:a5: ce:f6:84:f1:0b:77:9d:89:d0:a5:d2:0e:49:35:5e: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:91:04:FB:44:DC:C5:05:F7:0A:B1:C9:90:20:EC:B3:14:FC:A5 X509v3 Authority Key Identifier: keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:84:44:2b:a6:f6:42:d0:a9:3f:d7:57:bf:da:c8:a3:46:4d: db:20:cb:f8:b7:5f:08:4c:9b:57:1d:77:b9:81:70:f7:f0:39: e5:68:98:70:ae:ca:d3:0e:ec:8c:5c:72:75:e1:b1:fa:5f:0e: 83:22:f6:3f:72:62:8b:45:af:7a:75:db:3c:e6:95:b4:21:9b: 5b:49:1b:90:2f:d3:bd:1c:ca:2e:a8:63:fb:10:17:4f:6f:53: d7:7f:a0:3a:63:52:87:11:aa:6a:c0:be:82:50:07:19:90:22: 66:b1:03:96:b3:a8:b0:da:6a:2f:6a:8f:ef:ee:9c:af:24:b9: d2:60:fa:56:e1:ff:81:ae:35:a2:5a:83:b1:47:40:3e:86:70: a5:34:36:06:05:e7:b7:16:83:c5:d0:38:22:07:0d:0a:2d:09: d1:da:40:14:74:7a:7f:9c:ec:64:54:01:c6:c4:03:01:fb:a3: 4f:1a:4c:e4:87:4e:58:22:63:76:2a:3f:97:4e:0e:69:a3:55: 16:f0:ce:28:1a:02:06:9a:51:57:b4:68:6c:11:fe:c9:3c:27: 6a:2b:4b:ea:b3:b6:49:0f:58:11:76:67:07:bc:7c:6c:ff:41: 58:50:a0:e4:9c:a3:40:2e:2c:3b:52:9b:b2:0d:93:ad:c5:cf: 96:46:9b:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHXAuLmRlA0G5w9VT2WDEFriO6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYz QkQ0QUYxQTAeFw0yNjA5MDMwMDEzMjVaFw0yNjA5MDQwMTQ1MjVaMDMxMTAvBgNV BAMTKEYyMjk5MTA0RkI0NERDQzUwNUY3MEFCMUM5OTAyMEVDQjMxNEZDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkCYpg9sLJPU7G1MSVbTKO6ot QnfYe0SkH2vORdF+weWMk5r4Ji/xPHTWRgahw5OBuSvSVhdtNDH3LVZKYRJbWZDD BEqkGP5qfE9oot4idgAtJyGCMKbG+wGaTc2oOqX2PPHfZU2jW9Yb00j+/KGNs+tg 0uD5X2qsPtrVoSWnSKPHx4mzwthiDKoFo8KO5mXxdFKQlzY0bDhKDJAJkta93fbH OB7lS+Lsxam7otl4n8eDl5h8N0slnDBuJrDx0fWJ2aqHjIVMu7f89DUCmnmeJXVw g21iYgBsUA0nz7VKvHmP3zfAM3vztQz759Ftpc72hPELd52J0KXSDkk1XmHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8imRBPtE3MUF9wqxyZAg7LMU/KUwHwYDVR0j BBgwFoAUHgMB4OoKBtyENeQ7zGl37zvUrxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzMmVlZTEtMTBmNy00NTdkLWE4YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBF QTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYzQkQ0QUYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTAzMDFFMEVBMEEwNkRDODQzNUU0M0JDQzY5NzdFRjNCRDRB RjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3 RUYzQkQ0QUYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGERCum9kLQqT/XV7/ayKNGTdsgy/i3XwhM m1cdd7mBcPfwOeVomHCuytMO7IxccnXhsfpfDoMi9j9yYotFr3p12zzmlbQhm1tJ G5Av070cyi6oY/sQF09vU9d/oDpjUocRqmrAvoJQBxmQImaxA5azqLDaai9qj+/u nK8kudJg+lbh/4GuNaJag7FHQD6GcKU0NgYF57cWg8XQOCIHDQotCdHaQBR0en+c 7GRUAcbEAwH7o08aTOSHTlgiY3YqP5dODmmjVRbwzigaAgaaUVe0aGwR/sk8J2or S+qztkkPWBF2Zwe8fGz/QVhQoOSco0AuLDtSm7INk63Fz5ZGm0I= -----END CERTIFICATE-----Generated at Thu Sep 3 05:13:21 2026 by rpki-client