$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json) Hash identifier: YIXmhBfXKzy1hdoovcur6l3fw5XgPy2CUPMe8HLCyCw= Subject key identifier: 5A:E2:82:B6:82:A5:3E:1F:10:46:06:71:E7:EF:25:92:55:11:D0:C4 Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 0E55D53089F50D86C8F32F0C8CE4B3DE84D71F3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:59:51 +0000 Manifest this update: Thu 17 Sep 2026 00:54:51 +0000 Manifest next update: Fri 18 Sep 2026 04:32:51 +0000 Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=) 2: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: bV6X5K1/oTn/v2hz+cGb5b15KAZGoPhyC5mFkY9qt5g=) 3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:55:d5:30:89:f5:0d:86:c8:f3:2f:0c:8c:e4:b3:de:84:d7:1f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: Sep 17 00:54:51 2026 GMT Not After : Sep 18 04:32:51 2026 GMT Subject: CN=5AE282B682A53E1F10460671E7EF25925511D0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:25:f4:7d:91:81:06:31:f5:52:b7:07:f8: 43:03:54:a6:a2:18:d3:f6:57:58:15:1d:e3:d4:d6: 85:2f:ce:be:b1:68:e2:c1:23:bf:39:e7:7c:7c:d1: 5a:d8:1f:8f:39:4f:9d:23:18:10:ed:31:2b:98:d3: 53:37:bf:0e:b2:b7:6c:67:86:8a:0d:fa:7f:56:10: ae:e3:65:17:8f:a9:b4:68:07:82:5b:d1:7e:3a:3a: 6e:0b:ee:5b:96:89:23:37:4b:de:9c:4c:f9:b0:6c: 3c:01:d0:ca:7e:d1:d1:45:64:f4:23:85:36:9d:e4: d5:f5:bd:87:49:eb:78:96:5f:e9:da:4a:64:b2:7f: ab:7c:3c:8d:41:40:3d:4d:ce:95:c9:6c:09:48:84: f0:c7:66:e0:de:9d:06:ca:ea:b9:b4:1a:f2:36:dd: a7:92:74:46:9a:cd:04:80:49:ea:a8:51:0d:10:fd: 9b:59:60:91:09:a6:10:bc:95:2b:a9:69:8f:51:a5: cc:09:d7:86:cb:2e:65:00:10:e5:ea:72:9d:8d:4d: 6b:97:93:4e:7a:3d:d0:d2:45:59:d5:23:b0:1d:23: 07:ea:48:92:b6:be:fb:12:35:50:53:ac:99:f1:7c: f5:e0:ab:67:cc:be:ea:9c:1f:47:44:8c:0e:b7:3b: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:82:B6:82:A5:3E:1F:10:46:06:71:E7:EF:25:92:55:11:D0:C4 X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:5b:83:1e:bf:0c:d3:e4:7b:9a:8c:d3:7a:a7:7f:ef:85:d9: 8f:04:c6:33:56:71:5a:3b:ab:77:8d:25:75:aa:5b:7e:ca:72: 5a:40:16:1d:7d:5d:76:c3:62:56:f0:ab:eb:0a:c8:49:fa:15: 3c:f1:14:b3:e2:6a:dd:48:b1:3e:bd:fd:43:95:64:03:30:44: 88:cf:85:ef:6f:35:5c:19:65:ca:01:30:8c:8c:28:d6:28:40: 2f:70:64:51:6c:c0:02:6c:84:ff:8d:40:ce:8b:bb:37:1d:88: d0:e0:0e:15:14:f2:1c:ad:ce:4a:e8:8d:38:7d:35:f6:2e:dd: 83:fc:68:33:de:b5:a7:e0:d5:f3:48:b3:85:02:6f:5f:2a:52: 88:e3:e5:6c:40:ef:fb:ea:c4:47:af:79:63:c8:fc:c5:91:ec: 20:19:7d:00:68:e6:7f:8a:a9:0a:58:3c:8e:b3:af:75:f2:72: e8:5b:09:10:02:90:b9:dd:b7:13:09:e4:1f:81:2c:54:ec:35: f4:0e:0c:07:fa:2f:53:79:99:7e:aa:a4:ef:6b:aa:47:76:bd: 99:5c:d9:55:00:be:d5:08:70:5b:13:08:8c:92:5d:7a:01:92: d0:16:ae:10:28:4d:1b:a2:c8:4f:e9:10:4e:59:da:3f:2e:c1: cb:0e:1b:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlXVMIn1DYbI8y8MjOSz3oTXHzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA5MTcwMDU0NTFaFw0yNjA5MTgwNDMyNTFaMDMxMTAvBgNV BAMTKDVBRTI4MkI2ODJBNTNFMUYxMDQ2MDY3MUU3RUYyNTkyNTUxMUQwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2SX0fZGBBjH1UrcH+EMDVKai GNP2V1gVHePU1oUvzr6xaOLBI78553x80VrYH485T50jGBDtMSuY01M3vw6yt2xn hooN+n9WEK7jZRePqbRoB4Jb0X46Om4L7luWiSM3S96cTPmwbDwB0Mp+0dFFZPQj hTad5NX1vYdJ63iWX+naSmSyf6t8PI1BQD1NzpXJbAlIhPDHZuDenQbK6rm0GvI2 3aeSdEaazQSASeqoUQ0Q/ZtZYJEJphC8lSupaY9RpcwJ14bLLmUAEOXqcp2NTWuX k056PdDSRVnVI7AdIwfqSJK2vvsSNVBTrJnxfPXgq2fMvuqcH0dEjA63O5EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuKCtoKlPh8QRgZx5+8lklUR0MQwHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZF MkE5NjFGNzIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBbgx6/DNPke5qM03qnf++F2Y8ExjNWcVo7 q3eNJXWqW37KclpAFh19XXbDYlbwq+sKyEn6FTzxFLPiat1IsT69/UOVZAMwRIjP he9vNVwZZcoBMIyMKNYoQC9wZFFswAJshP+NQM6LuzcdiNDgDhUU8hytzkrojTh9 NfYu3YP8aDPetafg1fNIs4UCb18qUojj5WxA7/vqxEeveWPI/MWR7CAZfQBo5n+K qQpYPI6zr3XycuhbCRACkLndtxMJ5B+BLFTsNfQODAf6L1N5mX6qpO9rqkd2vZlc 2VUAvtUIcFsTCIySXXoBktAWrhAoTRuiyE/pEE5Z2j8uwcsOGyM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:42:16 2026 by rpki-client