$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: c93+Ja6bHthOcDknyeYvJVixOEqg3oIK00drEuJGXs0= Subject key identifier: 40:2B:AC:F6:74:5C:E1:12:86:11:59:A6:03:CF:3A:03:C1:88:69:14 Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 7E87A9C6B335E5F9EA593E7A8C206AF734542E47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: BB Signing time: Thu 17 Sep 2026 22:46:34 +0000 Manifest this update: Thu 17 Sep 2026 22:41:34 +0000 Manifest next update: Fri 18 Sep 2026 23:40:34 +0000 Files and hashes: 1: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) 2: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 3: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: LR4iDPzurxrAonqTJYTUgqVXmd4g/Oh9xJT2yJNh6FE=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 5: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 23:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:87:a9:c6:b3:35:e5:f9:ea:59:3e:7a:8c:20:6a:f7:34:54:2e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Sep 17 22:41:34 2026 GMT Not After : Sep 18 23:40:34 2026 GMT Subject: CN=402BACF6745CE112861159A603CF3A03C1886914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:a8:54:4f:85:44:d0:f8:9d:a9:80:fc:a1: 0c:45:db:ef:1c:ac:76:c3:a3:1f:8f:d9:03:b6:b9: f1:d7:3b:34:4c:11:5b:31:95:50:1e:d4:d7:b9:17: 8b:68:64:82:cb:6f:ae:8c:28:93:7f:5a:d2:0f:3b: ec:37:f4:2b:5d:5f:23:20:b8:33:50:8f:92:cd:2b: 25:bf:ba:e9:02:46:bc:b0:0c:2c:68:ef:d0:dc:b7: db:ee:2c:b4:69:64:ff:7b:86:bb:ce:13:71:5e:3d: 12:71:a2:8a:46:02:85:e4:83:88:70:27:92:98:7a: b3:09:cf:a3:19:32:e9:6b:39:e4:c2:f0:6b:00:db: 18:6a:bc:8a:23:4c:9d:8a:13:22:e8:d9:e9:5a:ca: 5b:10:08:dc:ae:30:b4:96:4e:e7:82:c6:ca:00:08: d5:60:b2:cd:bb:22:97:0e:bc:96:a0:2c:be:dd:cf: e1:a4:89:5b:8a:37:15:fd:64:49:7c:54:d4:16:d2: 5e:a0:43:62:3c:2d:9a:d3:f8:5d:2e:4d:4a:9f:04: cd:ef:65:59:17:86:e2:36:b1:a1:cf:8a:35:9f:4c: dd:51:85:5f:cf:65:08:a4:6b:5c:2a:2e:5e:5f:29: ca:45:ca:83:bc:e9:c9:1a:c7:de:7c:48:35:9f:4c: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:AC:F6:74:5C:E1:12:86:11:59:A6:03:CF:3A:03:C1:88:69:14 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:25:d1:fc:0f:91:eb:07:13:fa:5c:a8:3d:44:02:1d:cb:f3: 19:fd:1c:d3:b1:95:bf:50:bb:f8:62:6b:75:f1:fb:d4:7d:93: 04:8d:28:d3:c0:25:4b:bc:1d:d6:06:a4:9d:ee:d8:89:17:da: 93:62:98:04:7e:29:dd:86:8a:82:24:5e:ea:d0:09:4b:d7:34: 22:c2:5e:4a:f9:b5:59:d8:cc:06:47:d9:7f:0c:58:bb:3a:56: 8a:12:a4:9c:07:42:34:39:d3:04:01:74:14:de:bb:7b:e1:b7: 08:7a:5a:3f:10:4b:6c:f6:0f:53:23:81:91:9d:8b:4d:ea:4e: bf:4a:d0:8d:ee:ac:ee:06:51:a7:2d:ab:06:9d:ba:db:1e:9d: 0f:c5:76:3b:57:7a:cd:5b:54:2b:41:58:3d:0a:fd:9e:73:b6: 1f:8f:d8:ef:17:16:c3:ce:9e:c1:29:cb:c1:86:0c:82:76:b0: 17:cb:a7:7e:f0:4f:8d:47:31:7d:e5:ea:94:14:5d:6f:2d:9f: 96:f4:6f:13:34:81:13:84:20:be:2b:3c:d1:82:65:78:31:61: 0b:ec:0c:b4:79:1f:05:02:99:ba:54:00:77:ea:08:9e:a9:4a: 0f:de:a6:a6:93:83:8a:de:5d:55:15:6a:18:71:de:3f:67:5c: 74:cf:b4:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoepxrM15fnqWT56jCBq9zRULkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA5MTcyMjQxMzRaFw0yNjA5MTgyMzQwMzRaMDMxMTAvBgNV BAMTKDQwMkJBQ0Y2NzQ1Q0UxMTI4NjExNTlBNjAzQ0YzQTAzQzE4ODY5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/g6hUT4VE0PidqYD8oQxF2+8c rHbDox+P2QO2ufHXOzRMEVsxlVAe1Ne5F4toZILLb66MKJN/WtIPO+w39CtdXyMg uDNQj5LNKyW/uukCRrywDCxo79Dct9vuLLRpZP97hrvOE3FePRJxoopGAoXkg4hw J5KYerMJz6MZMulrOeTC8GsA2xhqvIojTJ2KEyLo2elaylsQCNyuMLSWTueCxsoA CNVgss27IpcOvJagLL7dz+GkiVuKNxX9ZEl8VNQW0l6gQ2I8LZrT+F0uTUqfBM3v ZVkXhuI2saHPijWfTN1RhV/PZQika1wqLl5fKcpFyoO86ckax958SDWfTL9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQCus9nRc4RKGEVmmA886A8GIaRQwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEl0fwPkesHE/pcqD1EAh3L8xn9HNOxlb9Q u/hia3Xx+9R9kwSNKNPAJUu8HdYGpJ3u2IkX2pNimAR+Kd2GioIkXurQCUvXNCLC Xkr5tVnYzAZH2X8MWLs6VooSpJwHQjQ50wQBdBTeu3vhtwh6Wj8QS2z2D1MjgZGd i03qTr9K0I3urO4GUactqwadutsenQ/FdjtXes1bVCtBWD0K/Z5zth+P2O8XFsPO nsEpy8GGDIJ2sBfLp37wT41HMX3l6pQUXW8tn5b0bxM0gROEIL4rPNGCZXgxYQvs DLR5HwUCmbpUAHfqCJ6pSg/epqaTg4reXVUVahhx3j9nXHTPtE4= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:51 2026 by rpki-client