$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft File: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft (raw, json) Hash identifier: C9Hu7HKpNaBEJ/oMRoCKPJuXOB/v4qZv5znWr3reBMU= Subject key identifier: BD:F4:4E:8D:7D:8A:69:0C:03:F1:B6:1D:86:5C:54:3B:13:3F:60:07 Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Certificate serial: 337CF636943E2892AD91A822CA4D8652FE40E4D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 14:00:19 +0000 Manifest this update: Fri 18 Sep 2026 13:55:19 +0000 Manifest next update: Sat 19 Sep 2026 16:42:19 +0000 Files and hashes: 1: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=) 2: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl (hash: gqxLkLP9Ttg1YMN3ReerFKP9dndi35P8xS2f4IAlYn8=) 3: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=) 4: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 07:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7c:f6:36:94:3e:28:92:ad:91:a8:22:ca:4d:86:52:fe:40:e4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Validity Not Before: Sep 18 13:55:19 2026 GMT Not After : Sep 19 16:42:19 2026 GMT Subject: CN=BDF44E8D7D8A690C03F1B61D865C543B133F6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:90:c3:56:81:ba:38:d8:7e:31:7c:dd:e8: 73:48:76:5c:66:f1:64:e6:0f:b6:97:44:ce:10:bd: b9:d5:c7:86:39:57:13:84:82:f8:3f:16:4c:07:eb: b1:6a:4c:c9:88:ec:2a:b3:04:6a:90:73:01:d1:f1: 27:5b:9c:a3:11:c9:ac:df:1c:71:f8:a8:e5:93:67: d8:85:6d:8f:9f:f6:ab:d5:5c:36:fb:45:cc:1e:c5: 95:1b:86:69:a7:d3:2d:bb:e2:8b:3f:da:59:57:96: 91:28:d5:33:2e:e2:ce:0c:ed:66:f7:bd:c7:63:f4: 30:f9:4c:a3:09:fb:26:24:34:88:6e:bd:5f:a2:5c: 4c:af:51:85:06:96:39:8a:0e:16:ac:04:89:76:ba: 09:ca:54:e8:53:70:d0:bb:5f:a8:0f:b2:45:39:14: 16:f4:8d:09:89:63:0c:0f:e2:83:8d:fe:f1:bc:8d: 69:f2:e3:75:39:e8:9f:fd:43:2e:7b:b0:2d:95:d5: b6:41:b0:5b:41:9b:ae:55:cb:85:bf:c0:0b:f5:d4: b8:49:f0:1f:ad:47:b9:8c:f8:7f:5a:7f:2c:42:e7: f2:ee:b4:d3:35:97:5b:fc:00:88:82:51:9f:43:2a: 65:89:d7:1f:0f:7a:f9:a5:60:e8:38:05:7c:77:b7: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:4E:8D:7D:8A:69:0C:03:F1:B6:1D:86:5C:54:3B:13:3F:60:07 X509v3 Authority Key Identifier: keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:de:17:fd:63:28:e4:0c:de:09:7a:5f:60:66:d8:6d:10:b1: ef:e6:66:90:33:76:61:0e:4c:78:ac:46:a1:0d:2c:4c:07:92: 4c:6d:d4:a5:31:57:f8:d0:71:f7:5a:dd:46:93:12:2f:d6:a1: 77:9d:e0:20:41:ba:f9:fc:15:da:b0:43:fb:9c:21:aa:01:11: 35:db:c6:8f:f6:4f:65:3d:27:af:30:f5:83:5a:fa:f6:46:d3: 93:1e:e0:c9:b8:4b:bd:d0:75:78:95:a2:9d:a5:3e:5c:20:a5: ca:ce:cc:04:e1:55:7c:be:33:7f:99:b8:34:6b:14:96:24:83: 11:35:52:7c:43:44:85:50:1b:2d:27:59:2e:41:9e:96:fe:8b: 72:ef:f4:c7:7e:4c:63:86:a7:c9:e9:c9:e0:8d:80:c2:92:58: d4:6d:a8:23:96:ae:2e:62:b9:32:c5:9e:a4:92:30:86:6e:f2: 92:af:2a:b7:38:b7:63:4a:c9:ea:e3:3a:af:bf:df:9a:d1:a3: c9:c9:a5:5b:7b:fb:00:26:bc:0d:2c:89:34:eb:87:94:f2:16: ee:26:2a:fc:d5:02:9a:fa:63:cb:01:2d:c6:9e:b4:95:36:54: 7b:06:43:06:c8:04:e5:a9:00:69:ed:ad:77:65:34:98:83:ba: 9a:ae:c9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3z2NpQ+KJKtkagiyk2GUv5A5NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIyMjky NUE5RDNCMzAeFw0yNjA5MTgxMzU1MTlaFw0yNjA5MTkxNjQyMTlaMDMxMTAvBgNV BAMTKEJERjQ0RThEN0Q4QTY5MEMwM0YxQjYxRDg2NUM1NDNCMTMzRjYwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/ZDDVoG6ONh+MXzd6HNIdlxm 8WTmD7aXRM4QvbnVx4Y5VxOEgvg/FkwH67FqTMmI7CqzBGqQcwHR8SdbnKMRyazf HHH4qOWTZ9iFbY+f9qvVXDb7RcwexZUbhmmn0y274os/2llXlpEo1TMu4s4M7Wb3 vcdj9DD5TKMJ+yYkNIhuvV+iXEyvUYUGljmKDhasBIl2ugnKVOhTcNC7X6gPskU5 FBb0jQmJYwwP4oON/vG8jWny43U56J/9Qy57sC2V1bZBsFtBm65Vy4W/wAv11LhJ 8B+tR7mM+H9afyxC5/LutNM1l1v8AIiCUZ9DKmWJ1x8PevmlYOg4BXx3txe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvfROjX2KaQwD8bYdhlxUOxM/YAcwHwYDVR0j BBgwFoAUGqYkMkFN3zWE/oa1xn+yKSWp07MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmYxM2E2ZWYtMzQzNC00NDAxLWIzZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0 MTREREYzNTg0RkU4NkI1QzY3RkIyMjkyNUE5RDNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUE2MjQzMjQxNERERjM1ODRGRTg2QjVDNjdGQjIyOTI1QTlE M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIy MjkyNUE5RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPeF/1jKOQM3gl6X2Bm2G0Qse/mZpAzdmEO THisRqENLEwHkkxt1KUxV/jQcfda3UaTEi/WoXed4CBBuvn8FdqwQ/ucIaoBETXb xo/2T2U9J68w9YNa+vZG05Me4Mm4S73QdXiVop2lPlwgpcrOzAThVXy+M3+ZuDRr FJYkgxE1UnxDRIVQGy0nWS5Bnpb+i3Lv9Md+TGOGp8npyeCNgMKSWNRtqCOWri5i uTLFnqSSMIZu8pKvKrc4t2NKyerjOq+/35rRo8nJpVt7+wAmvA0siTTrh5TyFu4m KvzVApr6Y8sBLcaetJU2VHsGQwbIBOWpAGntrXdlNJiDupquyTQ= -----END CERTIFICATE-----Generated at Fri Sep 18 17:07:24 2026 by rpki-client