$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: VAUh5prjljcVVwk0n26ia+i1xjMiE/A9y2mKWelCuLo= Subject key identifier: 50:FC:40:86:E8:FF:81:C6:10:8B:07:C6:66:CD:94:FE:6A:B1:42:5A Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 7245C0E3612B3575DC434E7F1B29DD43354F2864 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 13:45:33 +0000 Manifest this update: Thu 17 Sep 2026 13:40:33 +0000 Manifest next update: Fri 18 Sep 2026 15:47:33 +0000 Files and hashes: 1: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: IvkERObcEhPoNP9ps8a+QvRc2hFpQrRtJfLKhmvuQoE=) 2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:45:c0:e3:61:2b:35:75:dc:43:4e:7f:1b:29:dd:43:35:4f:28:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Sep 17 13:40:33 2026 GMT Not After : Sep 18 15:47:33 2026 GMT Subject: CN=50FC4086E8FF81C6108B07C666CD94FE6AB1425A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:64:e0:c4:3a:17:d9:ac:17:4b:86:34:fb: 72:fe:1c:b3:5b:f4:47:2c:98:86:a2:a2:2e:77:b7: f1:15:1e:56:43:72:ae:1e:59:4b:7f:a4:46:22:9e: d4:20:bc:3a:54:eb:4c:66:5a:9b:89:d4:1d:29:ba: 03:86:eb:0b:70:ad:fd:f6:fc:e1:dc:f5:82:2e:7d: 3b:89:d7:17:2b:58:2c:24:82:42:a0:b9:fb:ed:34: 31:e6:34:57:91:2d:12:66:f5:16:60:ea:1f:ed:2e: b5:78:83:48:e7:53:8a:46:32:2f:4d:36:f4:d6:f4: dc:2d:f3:f8:ed:62:72:6e:4a:00:f6:62:66:ba:59: 93:92:b7:ad:c1:29:19:f7:fe:2b:df:3d:88:07:ea: 89:bd:aa:ef:a6:73:32:47:9f:b4:2c:5e:28:74:a4: 89:88:d8:84:22:2f:96:c9:2a:ac:71:ac:9c:44:1d: e7:9e:2a:8d:e0:f5:e2:b0:22:74:60:2b:ed:7a:29: a1:81:50:19:e4:50:5a:e2:a5:ce:26:bd:83:ed:8b: 87:3d:de:33:25:3d:a4:f0:f0:29:a9:1d:c9:0c:31: 2f:49:a4:54:f6:4c:c0:87:10:e6:8b:ed:5e:7a:41: 53:ba:06:97:32:9a:e5:0d:89:46:b5:6e:d7:9f:f2: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FC:40:86:E8:FF:81:C6:10:8B:07:C6:66:CD:94:FE:6A:B1:42:5A X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:11:55:5a:bf:f9:03:9a:87:c0:21:41:9a:f2:90:e4:b4:9c: 2a:ac:fd:76:82:08:fc:0d:ed:a5:49:01:17:99:f4:74:73:ed: 6b:68:d2:1a:3d:9e:b4:60:4f:43:99:e6:e5:88:a3:79:c2:7c: 6d:5c:47:d4:9e:54:db:2a:22:80:6b:37:2a:d4:fe:5e:ca:66: 13:de:09:3a:a2:0b:4a:9e:65:70:af:62:60:5c:64:4e:4d:13: 7e:38:ea:22:42:69:e5:69:c0:2e:1e:90:0d:f3:64:31:f3:76: 4f:cd:af:e3:fd:73:34:76:b7:4b:61:2e:d1:d0:d3:44:f1:a3: f9:a3:a2:5e:0d:31:ab:69:b7:2d:1b:bd:58:b7:64:ff:2e:47: 8c:6e:d5:e1:94:da:6e:09:92:fb:ad:81:27:d2:c5:0d:a4:c4: 98:2c:5f:fc:36:3c:35:99:1f:f3:96:fa:94:84:c3:f1:88:dc: 85:52:84:2f:76:22:db:fe:a6:08:e6:f5:22:b0:3a:32:3e:39: 55:67:43:10:59:18:f6:f9:78:91:3e:7e:0f:89:ad:7c:71:39: 52:3f:53:18:07:ab:50:65:72:23:75:ba:29:f8:59:ec:7a:62: 6a:3c:9c:a8:50:f3:bf:ce:d5:70:27:7a:84:b0:34:d0:c8:79: 4b:9a:10:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckXA42ErNXXcQ05/GyndQzVPKGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA5MTcxMzQwMzNaFw0yNjA5MTgxNTQ3MzNaMDMxMTAvBgNV BAMTKDUwRkM0MDg2RThGRjgxQzYxMDhCMDdDNjY2Q0Q5NEZFNkFCMTQyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3x2TgxDoX2awXS4Y0+3L+HLNb 9EcsmIaioi53t/EVHlZDcq4eWUt/pEYintQgvDpU60xmWpuJ1B0pugOG6wtwrf32 /OHc9YIufTuJ1xcrWCwkgkKgufvtNDHmNFeRLRJm9RZg6h/tLrV4g0jnU4pGMi9N NvTW9Nwt8/jtYnJuSgD2Yma6WZOSt63BKRn3/ivfPYgH6om9qu+mczJHn7QsXih0 pImI2IQiL5bJKqxxrJxEHeeeKo3g9eKwInRgK+16KaGBUBnkUFripc4mvYPti4c9 3jMlPaTw8CmpHckMMS9JpFT2TMCHEOaL7V56QVO6BpcymuUNiUa1btef8jb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUPxAhuj/gcYQiwfGZs2U/mqxQlowHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgRVVq/+QOah8AhQZrykOS0nCqs/XaCCPwN 7aVJAReZ9HRz7Wto0ho9nrRgT0OZ5uWIo3nCfG1cR9SeVNsqIoBrNyrU/l7KZhPe CTqiC0qeZXCvYmBcZE5NE3446iJCaeVpwC4ekA3zZDHzdk/Nr+P9czR2t0thLtHQ 00Txo/mjol4NMatpty0bvVi3ZP8uR4xu1eGU2m4JkvutgSfSxQ2kxJgsX/w2PDWZ H/OW+pSEw/GI3IVShC92Itv+pgjm9SKwOjI+OVVnQxBZGPb5eJE+fg+JrXxxOVI/ UxgHq1BlciN1uin4Wex6Ymo8nKhQ87/O1XAneoSwNNDIeUuaEAs= -----END CERTIFICATE-----Generated at Thu Sep 17 21:31:50 2026 by rpki-client