$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: iY84BLahblfysbHjhg8EgIej5b6IJGMxY0Nsvd9nnOc= Subject key identifier: 76:34:A8:61:3D:BE:0A:F6:14:3E:32:3D:CD:86:C2:5E:71:E2:A3:66 Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 502ADF2A265171185CD9FA554BAB226C407F52E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:58:24 +0000 Manifest this update: Thu 17 Sep 2026 03:53:24 +0000 Manifest next update: Fri 18 Sep 2026 06:12:24 +0000 Files and hashes: 1: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: GLzGJ+4MSGBpZQFCfFzPuEXPzpb4mAydNLacSUDiJnc=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2a:df:2a:26:51:71:18:5c:d9:fa:55:4b:ab:22:6c:40:7f:52:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Sep 17 03:53:24 2026 GMT Not After : Sep 18 06:12:24 2026 GMT Subject: CN=7634A8613DBE0AF6143E323DCD86C25E71E2A366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:9f:6a:42:61:48:1b:73:ea:f7:e6:fa:0b: 8e:bb:fb:db:c7:54:bf:8d:21:74:ae:a2:85:0b:22: 47:23:3e:c0:72:1f:b5:57:a8:2e:64:ca:50:7b:d4: 60:e3:3f:30:ea:78:74:6e:62:6e:b3:01:7e:15:aa: e3:e6:24:1e:61:f0:b1:2d:4b:2d:bd:39:91:b7:b7: c3:8d:cf:a1:b9:92:d8:eb:89:42:88:29:25:26:fa: 76:63:7a:b6:fa:3e:fd:fc:f2:3b:0a:6d:47:b0:25: 80:fa:73:e9:f0:ac:4c:c8:8c:b2:f1:d3:ab:05:ed: 66:b9:2f:5c:63:e9:93:46:fa:46:2a:1b:1e:fd:c5: fc:8c:b9:fd:ba:99:88:7f:cc:7c:e7:b0:de:e8:04: 43:6c:38:a8:b9:2b:19:53:85:f9:2e:b9:85:0f:3f: 6c:1f:b9:3d:87:14:c2:30:e2:a7:a2:24:a2:02:48: 9e:3d:95:74:19:9c:e4:9e:7e:60:1c:ac:7a:a0:aa: c9:8a:13:af:95:82:d4:2d:c6:2b:19:48:29:06:16: 41:18:b8:1e:b6:46:68:e6:c3:d6:a0:89:90:4a:88: 4d:ae:34:be:58:32:9b:ec:81:12:1d:fa:46:be:9e: d9:d9:f1:75:8a:b8:22:f6:e9:e8:3d:54:33:4f:6b: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:A8:61:3D:BE:0A:F6:14:3E:32:3D:CD:86:C2:5E:71:E2:A3:66 X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7a:7b:62:78:a3:c3:1f:01:d5:0d:12:71:d0:f5:bc:13:54: 25:36:11:8a:a2:14:dc:77:60:31:40:0f:8f:0b:4a:d3:30:10: 82:c4:a8:94:af:7b:6a:b4:20:fc:d2:4d:61:28:d5:78:b9:78: 48:fe:0d:4f:ba:74:8a:ff:a6:20:b2:d0:2f:eb:45:80:48:f3: 2b:fb:68:77:7f:9a:82:0e:66:8a:db:5f:19:6f:b9:5b:ec:6d: bf:ec:5a:c1:eb:de:31:69:2a:0e:06:63:04:28:cd:5b:29:7e: 36:5c:0e:05:3e:9e:42:92:c9:c9:85:46:5a:ea:6f:f5:f5:1f: 21:ab:2b:59:0a:00:df:5e:5e:b1:c2:8e:c6:cd:71:dd:9b:04: ff:11:87:df:e5:e8:54:7d:44:be:30:f9:ae:22:14:18:29:0c: 83:ad:41:31:79:3e:1d:ee:7d:e7:01:fd:a2:ab:b2:25:37:20: a3:87:2a:b0:f2:0c:ee:b3:73:df:64:3a:4d:d7:28:fb:4c:77: 94:b4:64:de:1b:c3:1d:81:e4:b3:cc:5e:8a:7f:6b:90:8d:38: 44:12:e7:56:9b:68:2f:a7:65:3c:b8:2c:34:98:3f:85:c5:c9: 19:87:de:cb:f0:69:40:fe:52:3b:48:d4:93:a4:0c:07:a9:db: 85:aa:3a:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCrfKiZRcRhc2fpVS6sibEB/UuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjA5MTcwMzUzMjRaFw0yNjA5MTgwNjEyMjRaMDMxMTAvBgNV BAMTKDc2MzRBODYxM0RCRTBBRjYxNDNFMzIzRENEODZDMjVFNzFFMkEzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIZ9qQmFIG3Pq9+b6C467+9vH VL+NIXSuooULIkcjPsByH7VXqC5kylB71GDjPzDqeHRuYm6zAX4VquPmJB5h8LEt Sy29OZG3t8ONz6G5ktjriUKIKSUm+nZjerb6Pv388jsKbUewJYD6c+nwrEzIjLLx 06sF7Wa5L1xj6ZNG+kYqGx79xfyMuf26mYh/zHznsN7oBENsOKi5KxlThfkuuYUP P2wfuT2HFMIw4qeiJKICSJ49lXQZnOSefmAcrHqgqsmKE6+VgtQtxisZSCkGFkEY uB62Rmjmw9agiZBKiE2uNL5YMpvsgRId+ka+ntnZ8XWKuCL26eg9VDNPayd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjSoYT2+CvYUPjI9zYbCXnHio2YwHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK96e2J4o8MfAdUNEnHQ9bwTVCU2EYqiFNx3 YDFAD48LStMwEILEqJSve2q0IPzSTWEo1Xi5eEj+DU+6dIr/piCy0C/rRYBI8yv7 aHd/moIOZorbXxlvuVvsbb/sWsHr3jFpKg4GYwQozVspfjZcDgU+nkKSycmFRlrq b/X1HyGrK1kKAN9eXrHCjsbNcd2bBP8Rh9/l6FR9RL4w+a4iFBgpDIOtQTF5Ph3u fecB/aKrsiU3IKOHKrDyDO6zc99kOk3XKPtMd5S0ZN4bwx2B5LPMXop/a5CNOEQS 51abaC+nZTy4LDSYP4XFyRmH3svwaUD+UjtI1JOkDAep24WqOgQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:15 2026 by rpki-client