$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: BzfpN/9AolED9rZtngg6i7aVtAiqCz+DS3p9XqkLRy0= Subject key identifier: E9:32:6F:6B:51:4F:0D:CF:9D:83:3E:57:96:58:EA:E5:00:27:55:1C Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 52699B12964E60B7505F164FE0C0F8575B055A74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:01:08 +0000 Manifest this update: Wed 16 Sep 2026 21:56:08 +0000 Manifest next update: Fri 18 Sep 2026 01:28:08 +0000 Files and hashes: 1: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: pF8VDFEXETA05nNhaeONk9YovZ9ALUlGtivLC9Im3gU=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:69:9b:12:96:4e:60:b7:50:5f:16:4f:e0:c0:f8:57:5b:05:5a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Sep 16 21:56:08 2026 GMT Not After : Sep 18 01:28:08 2026 GMT Subject: CN=E9326F6B514F0DCF9D833E579658EAE50027551C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:a4:aa:ad:aa:ed:03:cc:3c:36:8a:75:b1: 4f:3c:96:95:cb:91:84:5a:46:7f:fd:64:4d:30:7e: 95:2b:0a:bb:85:e8:f4:e7:05:c7:ce:fa:12:4e:78: 9e:80:9f:5e:fb:c8:42:fe:ae:54:0a:d8:ea:e5:e7: 3c:c5:3d:0c:f8:78:c0:ab:f4:10:04:8e:6d:a6:85: e0:05:47:21:b0:0d:6e:51:d8:a4:04:81:92:25:64: 1a:a4:d6:c0:30:0e:2f:91:d1:1c:e0:9b:66:dc:39: a8:6d:7f:f2:9a:dd:01:49:6e:df:80:e4:88:4c:97: c7:9a:d9:4b:1d:11:57:61:78:f8:8c:f3:d6:d7:60: f9:2e:21:39:a5:df:e5:ad:5b:36:1a:25:33:72:9a: 78:93:48:5c:ca:03:c6:cb:56:c6:89:ee:df:b3:ff: 8d:22:e5:45:9b:61:40:d6:f6:02:fd:ca:f4:10:b1: 5b:8e:65:4e:84:3b:9b:de:92:80:e7:5b:0d:0b:99: 44:34:3a:92:22:eb:d3:dd:56:a3:8c:65:84:42:0c: 79:e6:d1:d1:30:af:58:b3:e5:75:ed:fe:91:05:7c: 3b:4c:9a:d7:eb:16:0b:f9:7e:93:45:fb:4f:14:4b: 48:00:ad:a9:1c:e0:92:08:ed:1a:08:f3:e6:ed:6a: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:6F:6B:51:4F:0D:CF:9D:83:3E:57:96:58:EA:E5:00:27:55:1C X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6b:f1:2d:ee:15:ac:19:f7:8b:5b:0d:48:29:3b:12:17:15: 12:c4:d4:c3:98:75:be:c8:90:d1:68:04:d8:e9:ac:8a:c5:ed: d5:67:3a:0b:72:23:f3:8f:e1:03:d6:1c:1b:3a:09:46:03:b9: 4b:d5:df:f7:b8:30:76:aa:00:db:da:6d:ef:b5:33:21:33:4c: 80:43:1b:6d:dc:13:95:95:61:fa:ec:32:c8:98:8d:e2:a5:b3: 66:d4:10:26:58:a2:b4:fc:12:4f:b3:85:3d:54:bc:69:c2:bf: 3d:dd:c4:e9:24:93:7b:df:6f:66:58:fb:ee:1e:9e:c2:96:09: 85:eb:d3:c9:df:3c:d3:2c:2b:85:a0:b5:ae:4b:12:d2:cc:f9: 8b:3a:ba:bb:3a:0c:40:47:50:ba:6e:76:f8:b3:4e:db:25:11: 71:37:69:e3:6d:3a:77:e8:e8:f1:ce:d7:18:db:87:65:0e:98: 86:e9:21:9f:cc:d0:65:2f:5d:2b:49:8b:18:fc:d9:80:6c:f8: 63:58:af:0b:e5:0a:3e:77:ad:4a:b7:74:b9:76:7b:e3:2e:14: ac:85:f8:a4:a9:6d:00:64:8e:ef:69:5c:fa:6a:79:d1:b7:88: 0d:47:58:83:a2:b5:28:dc:d1:22:c5:1f:83:a3:49:25:6d:81: 12:10:f2:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmmbEpZOYLdQXxZP4MD4V1sFWnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA5MTYyMTU2MDhaFw0yNjA5MTgwMTI4MDhaMDMxMTAvBgNV BAMTKEU5MzI2RjZCNTE0RjBEQ0Y5RDgzM0U1Nzk2NThFQUU1MDAyNzU1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuDqSqrartA8w8Nop1sU88lpXL kYRaRn/9ZE0wfpUrCruF6PTnBcfO+hJOeJ6An177yEL+rlQK2Orl5zzFPQz4eMCr 9BAEjm2mheAFRyGwDW5R2KQEgZIlZBqk1sAwDi+R0Rzgm2bcOahtf/Ka3QFJbt+A 5IhMl8ea2UsdEVdhePiM89bXYPkuITml3+WtWzYaJTNymniTSFzKA8bLVsaJ7t+z /40i5UWbYUDW9gL9yvQQsVuOZU6EO5vekoDnWw0LmUQ0OpIi69PdVqOMZYRCDHnm 0dEwr1iz5XXt/pEFfDtMmtfrFgv5fpNF+08US0gArakc4JII7RoI8+btarFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6TJva1FPDc+dgz5Xlljq5QAnVRwwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZr8S3uFawZ94tbDUgpOxIXFRLE1MOYdb7I kNFoBNjprIrF7dVnOgtyI/OP4QPWHBs6CUYDuUvV3/e4MHaqANvabe+1MyEzTIBD G23cE5WVYfrsMsiYjeKls2bUECZYorT8Ek+zhT1UvGnCvz3dxOkkk3vfb2ZY++4e nsKWCYXr08nfPNMsK4Wgta5LEtLM+Ys6urs6DEBHULpudvizTtslEXE3aeNtOnfo 6PHO1xjbh2UOmIbpIZ/M0GUvXStJixj82YBs+GNYrwvlCj53rUq3dLl2e+MuFKyF +KSpbQBkju9pXPpqedG3iA1HWIOitSjc0SLFH4OjSSVtgRIQ8n0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:21 2026 by rpki-client