$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft (raw, json) Hash identifier: TgefGuNk7emoYFbidfAKqSR2UEbqn+gL6/vqdJ+6gUA= Subject key identifier: 4B:BF:5A:83:4D:77:5D:07:8E:8F:1F:A1:A8:48:67:55:B1:A8:26:DE Authority key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 Certificate issuer: /CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Certificate serial: 294AC87EDF48D049D948F2317285D326E9FC5256 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:17:30 +0000 Manifest this update: Thu 17 Sep 2026 07:12:30 +0000 Manifest next update: Fri 18 Sep 2026 10:19:30 +0000 Files and hashes: 1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: fsyTi1wKrYDgpsKCw76juglRx93+2YzZ5l6lzjCtU8E=) 2: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl (hash: QWladbfz7aKEP9E8RtNzNCl7ZTLLd/gi2jVvk4lKhj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4a:c8:7e:df:48:d0:49:d9:48:f2:31:72:85:d3:26:e9:fc:52:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91 Validity Not Before: Sep 17 07:12:30 2026 GMT Not After : Sep 18 10:19:30 2026 GMT Subject: CN=4BBF5A834D775D078E8F1FA1A8486755B1A826DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:3d:de:0e:13:0a:02:b1:1c:e5:a3:64:ac: c0:98:78:9c:29:0f:03:21:ee:03:ae:cf:19:02:1a: d2:f6:1c:c7:0e:f3:7c:83:11:e6:84:a6:5b:95:8d: 34:5c:91:a8:f7:d9:26:13:27:56:67:eb:62:34:be: 3f:fb:54:2a:a4:f0:f0:27:2d:e9:df:b0:fb:03:04: 2a:ed:1b:27:23:8a:bf:4c:08:48:36:71:33:7d:85: d2:08:2f:e1:6d:bd:51:95:ed:d1:10:19:68:c9:c9: dd:b6:ea:92:77:fa:95:92:7f:0a:99:e9:83:1b:0f: ae:9c:8c:2b:da:fe:2d:68:ce:07:84:1f:e3:b2:0d: ff:67:b2:84:28:8b:e7:a5:f6:ac:bc:ac:84:25:db: 0b:af:f6:84:f0:84:e1:b8:4a:aa:cc:51:7d:82:2a: 2e:89:bc:6e:75:d6:a3:be:15:43:4f:c4:02:3f:99: 2d:3f:cc:0b:43:8a:d5:b8:ce:ff:cd:c4:3b:0f:97: 97:85:2f:75:24:c0:9a:80:fa:e3:93:49:f2:40:d4: d1:5f:2f:25:14:7f:84:1e:7e:c8:73:c2:4d:68:67: a7:7a:4a:eb:ec:0d:24:8c:28:7a:99:09:12:49:23: 78:71:f0:61:d3:ce:fe:02:ff:65:42:b5:f7:83:08: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:5A:83:4D:77:5D:07:8E:8F:1F:A1:A8:48:67:55:B1:A8:26:DE X509v3 Authority Key Identifier: keyid:1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:04:98:a5:b2:4d:2b:66:03:01:41:9c:20:4b:08:1b:03:0a: e4:56:28:5c:8b:e9:01:37:9d:59:77:01:9c:7c:e6:20:3a:9c: 9d:09:d5:b1:a8:58:6a:a1:49:af:e2:c7:46:6f:12:9c:59:76: f2:c9:b5:b7:9f:6c:77:5b:84:51:04:a5:09:6c:91:7f:f2:39: 48:fb:6b:2e:7f:90:9d:dc:44:72:47:96:d5:4b:19:27:81:47: 7a:db:32:62:11:60:9f:4e:bc:07:01:fc:bb:fc:fc:72:55:de: 11:b1:85:9f:41:4a:e2:7d:6d:9d:27:54:72:ee:e5:22:32:9f: d0:e2:a6:30:69:66:3e:57:d2:93:61:95:f3:4e:a1:39:58:e5: 42:a1:19:f1:ef:ff:e4:4c:61:8c:cf:b8:2f:a7:09:21:84:9f: c8:0a:18:cc:48:f8:df:67:90:b3:66:20:9a:4d:8a:7a:cd:40: 45:5a:ac:a2:be:80:62:cb:8a:1b:f0:f9:54:be:4a:ee:3b:3d: 77:93:03:cd:9c:23:f5:c9:c3:dc:c1:a7:29:b9:8e:61:05:81: 43:e1:67:53:a0:02:51:37:77:10:3e:be:0b:b3:a0:8c:3e:44: c7:c8:6c:68:a2:f6:3e:0c:1e:9c:96:77:50:0f:ca:5e:73:fe: 9d:cb:69:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUrIft9I0EnZSPIxcoXTJun8UlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEz NTQ3Q0I5MTAeFw0yNjA5MTcwNzEyMzBaFw0yNjA5MTgxMDE5MzBaMDMxMTAvBgNV BAMTKDRCQkY1QTgzNEQ3NzVEMDc4RThGMUZBMUE4NDg2NzU1QjFBODI2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0T3eDhMKArEc5aNkrMCYeJwp DwMh7gOuzxkCGtL2HMcO83yDEeaEpluVjTRckaj32SYTJ1Zn62I0vj/7VCqk8PAn LenfsPsDBCrtGycjir9MCEg2cTN9hdIIL+FtvVGV7dEQGWjJyd226pJ3+pWSfwqZ 6YMbD66cjCva/i1ozgeEH+OyDf9nsoQoi+el9qy8rIQl2wuv9oTwhOG4SqrMUX2C Ki6JvG511qO+FUNPxAI/mS0/zAtDitW4zv/NxDsPl5eFL3UkwJqA+uOTSfJA1NFf LyUUf4Qefshzwk1oZ6d6SuvsDSSMKHqZCRJJI3hx8GHTzv4C/2VCtfeDCGixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS79ag013XQeOjx+hqEhnVbGoJt4wHwYDVR0j BBgwFoAUHdDekBmPnRoo5FfuV4jn0TVHy5EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAx OThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEzNTQ3Q0I5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREQwREU5MDE5OEY5RDFBMjhFNDU3RUU1Nzg4RTdEMTM1NDdD QjkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3 RDEzNTQ3Q0I5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgEmKWyTStmAwFBnCBLCBsDCuRWKFyL6QE3 nVl3AZx85iA6nJ0J1bGoWGqhSa/ix0ZvEpxZdvLJtbefbHdbhFEEpQlskX/yOUj7 ay5/kJ3cRHJHltVLGSeBR3rbMmIRYJ9OvAcB/Lv8/HJV3hGxhZ9BSuJ9bZ0nVHLu 5SIyn9DipjBpZj5X0pNhlfNOoTlY5UKhGfHv/+RMYYzPuC+nCSGEn8gKGMxI+N9n kLNmIJpNinrNQEVarKK+gGLLihvw+VS+Su47PXeTA82cI/XJw9zBpym5jmEFgUPh Z1OgAlE3dxA+vguzoIw+RMfIbGii9j4MHpyWd1APyl5z/p3LaYQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:49:10 2026 by rpki-client