$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json) Hash identifier: RP111aTWfEQ5hcwa9WurpfcWYxG9kFjjMp/bc8omBAk= Subject key identifier: 0F:49:B2:D7:4C:01:19:9D:28:84:D6:A8:14:BE:AF:F1:BA:22:F0:C5 Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 4E0FB76BB2A25CFCF8AC082EF3D39790AE5431C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft Manifest number: DC Signing time: Mon 12 Oct 2026 23:41:19 +0000 Manifest this update: Mon 12 Oct 2026 23:36:19 +0000 Manifest next update: Wed 14 Oct 2026 02:44:19 +0000 Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: 3i0dj00dK4BlJXqwAlsY5ipmhu5n8uwNVvMC88YvzyM=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0f:b7:6b:b2:a2:5c:fc:f8:ac:08:2e:f3:d3:97:90:ae:54:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: Oct 12 23:36:19 2026 GMT Not After : Oct 14 02:44:19 2026 GMT Subject: CN=0F49B2D74C01199D2884D6A814BEAFF1BA22F0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:43:84:d9:dd:2a:31:e9:fb:87:c6:8d:05: 97:86:b2:10:b7:0e:f4:de:db:1a:42:d6:a7:f1:d9: b2:c6:46:8c:53:7f:37:0d:d8:03:c9:ee:04:ff:60: 3b:f3:2c:53:67:24:82:c2:2e:c0:dc:fa:0f:83:3a: a7:c8:99:e9:bd:8e:8c:04:25:ae:17:11:41:d3:29: 8c:61:33:90:4d:1b:df:c0:6b:53:8d:5c:b6:42:dc: 11:ff:87:9c:13:35:c3:04:42:5f:8d:7f:67:75:df: a6:e7:c9:a5:5e:71:e6:bc:e4:26:a4:57:f2:d8:c9: 6f:07:15:8d:79:0b:27:ac:98:31:27:a6:80:94:15: 8c:7f:bd:c9:da:45:e8:77:c2:bd:44:b9:be:d9:d2: 12:5f:ff:f9:4e:5a:80:c9:ef:c3:63:73:1c:6d:a6: 0d:e3:96:80:a6:97:2e:94:96:eb:4b:af:f7:c2:8a: 1a:5b:56:5e:1f:15:8b:f2:67:3a:6d:64:42:33:ff: 3a:50:71:aa:2e:ce:19:f1:89:4b:36:bd:93:0e:c7: ad:60:2a:f8:41:b1:b7:17:7b:96:15:f4:ff:ec:90: e7:ff:7e:9d:e3:3f:7d:b1:70:11:16:46:a0:4e:01: 22:02:c0:83:75:7b:31:b5:28:40:68:ac:cb:d5:77: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:B2:D7:4C:01:19:9D:28:84:D6:A8:14:BE:AF:F1:BA:22:F0:C5 X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:51:60:76:17:90:89:b0:59:4c:26:c8:b6:48:6d:54:8e:f5: 0d:36:34:60:d9:98:80:e6:c3:f7:74:b2:7b:71:d2:85:63:fd: 54:23:f9:68:73:4f:11:83:b3:43:f8:79:0e:b1:29:ab:c3:25: 53:52:01:c3:1f:bf:bc:2d:23:0d:d2:db:55:a7:aa:53:43:15: 05:5b:b4:02:b2:9f:db:c9:d4:5a:88:78:95:31:c3:61:b2:a6: e1:46:43:86:de:a2:01:eb:1c:0b:ba:fd:7b:1b:a3:dc:fd:3d: ad:f8:da:44:99:62:1c:35:45:b7:97:e8:fc:86:a4:1b:16:55: 5f:ac:ae:fa:e3:5f:4a:8d:6b:63:dd:0d:7b:2d:60:0a:b3:6d: 14:56:bc:3d:55:e1:2a:1f:2f:73:66:22:12:e3:47:56:dc:bf: b5:d2:df:4d:6d:76:85:ea:89:a7:27:5b:84:2d:0d:94:7a:17: aa:b8:a8:f5:ea:87:c4:ae:b3:ee:b5:00:40:0c:b9:d6:2f:f6: 5b:eb:82:78:be:64:c2:2b:9a:34:45:95:21:86:ca:be:e8:a6: e4:2e:2f:de:1c:c2:08:94:d2:46:33:f5:46:97:d5:e9:e8:fb: da:20:6e:01:99:20:f4:94:d5:cb:c2:2a:95:43:fb:fc:e8:3e: 04:65:17:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTg+3a7KiXPz4rAgu89OXkK5UMcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjEwMTIyMzM2MTlaFw0yNjEwMTQwMjQ0MTlaMDMxMTAvBgNV BAMTKDBGNDlCMkQ3NEMwMTE5OUQyODg0RDZBODE0QkVBRkYxQkEyMkYwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugkOE2d0qMen7h8aNBZeGshC3 DvTe2xpC1qfx2bLGRoxTfzcN2APJ7gT/YDvzLFNnJILCLsDc+g+DOqfImem9jowE Ja4XEUHTKYxhM5BNG9/Aa1ONXLZC3BH/h5wTNcMEQl+Nf2d136bnyaVecea85Cak V/LYyW8HFY15CyesmDEnpoCUFYx/vcnaReh3wr1Eub7Z0hJf//lOWoDJ78Njcxxt pg3jloCmly6UlutLr/fCihpbVl4fFYvyZzptZEIz/zpQcaouzhnxiUs2vZMOx61g KvhBsbcXe5YV9P/skOf/fp3jP32xcBEWRqBOASICwIN1ezG1KEBorMvVd8PtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD0my10wBGZ0ohNaoFL6v8boi8MUwHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2 QjlERDA5RDM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVRYHYXkImwWUwmyLZIbVSO9Q02NGDZmIDm w/d0sntx0oVj/VQj+WhzTxGDs0P4eQ6xKavDJVNSAcMfv7wtIw3S21WnqlNDFQVb tAKyn9vJ1FqIeJUxw2GypuFGQ4beogHrHAu6/Xsbo9z9Pa342kSZYhw1RbeX6PyG pBsWVV+srvrjX0qNa2PdDXstYAqzbRRWvD1V4SofL3NmIhLjR1bcv7XS301tdoXq iacnW4QtDZR6F6q4qPXqh8Sus+61AEAMudYv9lvrgni+ZMIrmjRFlSGGyr7opuQu L94cwgiU0kYz9UaX1eno+9ogbgGZIPSU1cvCKpVD+/zoPgRlFzI= -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:56 2026 by rpki-client