$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: NY0dfW/4vEsDSeX2/+UaOJAUEV/j/tkVK6QdI4p7DLw= Subject key identifier: 91:A3:2C:96:B9:23:62:21:5B:94:4C:3D:67:26:08:74:E1:C8:57:53 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 14395DBCD564BA536A53921FA85E598BF3C8C35B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: BB Signing time: Fri 18 Sep 2026 01:35:15 +0000 Manifest this update: Fri 18 Sep 2026 01:30:15 +0000 Manifest next update: Sat 19 Sep 2026 01:42:15 +0000 Files and hashes: 1: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 2: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) 3: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: 6Vai1LtCeouksBOG+miN3QnDtW/QuKjW3a7HwSnBi24=) 4: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) 5: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 01:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:39:5d:bc:d5:64:ba:53:6a:53:92:1f:a8:5e:59:8b:f3:c8:c3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Sep 18 01:30:15 2026 GMT Not After : Sep 19 01:42:15 2026 GMT Subject: CN=91A32C96B92362215B944C3D67260874E1C85753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:b7:9a:db:a6:0d:8b:c9:42:1d:6d:40:2d: bd:60:8f:92:68:48:d1:44:c9:91:b0:94:b0:8c:36: 94:42:e2:98:56:62:1f:1e:80:28:89:96:b3:5d:1f: d2:d3:2f:20:d7:16:16:fb:95:21:74:90:25:de:37: c7:0f:53:c8:80:f5:72:18:0c:82:4c:6d:55:1f:c4: fe:9a:34:28:59:75:12:5f:6b:8d:14:b4:9d:6a:09: 6d:8c:b0:e5:82:8b:8d:5a:1a:c7:95:6e:39:cd:14: 44:ca:39:ad:65:31:37:61:82:1e:5c:ff:32:5a:33: 1f:29:6c:a5:c0:2e:82:6f:19:a0:70:b1:b7:4d:f6: e9:a8:e9:4d:ec:4f:91:8e:e7:fa:6a:76:59:52:c5: cc:c2:17:48:c9:d1:16:d6:f7:81:3b:4d:26:e4:1a: 2a:82:8b:e9:3f:45:49:52:eb:95:67:f5:87:a5:38: 3c:92:46:7b:a4:a2:58:36:83:68:50:9e:77:4f:07: f6:54:18:af:75:08:7a:49:8d:45:57:38:cd:de:ab: 95:8d:fd:e6:af:fd:5e:59:20:01:85:64:0f:ec:dd: 4d:a4:49:79:c4:d0:97:61:d7:6b:dc:a3:c2:ca:55: df:33:1e:e2:0b:26:b0:d3:c9:ff:69:b9:4d:57:f2: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A3:2C:96:B9:23:62:21:5B:94:4C:3D:67:26:08:74:E1:C8:57:53 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:cd:4b:05:46:51:ab:ca:d1:cf:94:93:53:b2:e8:7b:45:38: 80:ae:01:41:56:6a:a8:0c:10:af:f6:59:36:13:3f:3f:f2:ec: 91:19:fa:d2:54:48:18:03:46:fe:62:f5:83:78:99:13:86:8b: 46:86:96:9c:f0:0f:14:e6:b0:15:eb:e7:fa:82:37:40:8f:a7: 18:2a:eb:55:99:ce:45:d5:6c:cb:26:73:16:ce:7f:7b:8c:24: 43:3a:e1:12:08:8c:01:ec:95:bf:8a:39:d9:8b:07:26:83:e8: 41:cf:b5:02:b8:20:fc:73:a1:93:7c:68:51:50:39:6b:01:c6: c3:ca:61:d6:d3:9f:c4:84:aa:31:bf:67:6d:7e:7a:9c:69:e9: a3:2e:0f:ea:fa:13:60:2c:5e:da:8c:73:57:24:ef:c7:74:a6: 51:7d:ac:b8:6e:76:fa:f1:c6:1e:d8:30:62:e9:de:d1:36:58: cb:70:a0:55:ea:d9:18:ef:65:af:8a:d5:20:42:16:dc:a5:53: 89:9d:26:09:0e:53:af:e3:dd:5e:07:3c:40:d5:ea:81:07:40: 46:f7:c8:dd:3b:59:b1:31:c5:8e:3a:46:7f:96:a4:2f:bf:e6: 74:33:40:9d:b3:ff:83:d2:02:09:b3:d5:d2:38:36:b0:2b:94: 7d:a6:a4:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDldvNVkulNqU5IfqF5Zi/PIw1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA5MTgwMTMwMTVaFw0yNjA5MTkwMTQyMTVaMDMxMTAvBgNV BAMTKDkxQTMyQzk2QjkyMzYyMjE1Qjk0NEMzRDY3MjYwODc0RTFDODU3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEc7ea26YNi8lCHW1ALb1gj5Jo SNFEyZGwlLCMNpRC4phWYh8egCiJlrNdH9LTLyDXFhb7lSF0kCXeN8cPU8iA9XIY DIJMbVUfxP6aNChZdRJfa40UtJ1qCW2MsOWCi41aGseVbjnNFETKOa1lMTdhgh5c /zJaMx8pbKXALoJvGaBwsbdN9umo6U3sT5GO5/pqdllSxczCF0jJ0RbW94E7TSbk GiqCi+k/RUlS65Vn9YelODySRnukolg2g2hQnndPB/ZUGK91CHpJjUVXOM3eq5WN /eav/V5ZIAGFZA/s3U2kSXnE0Jdh12vco8LKVd8zHuILJrDTyf9puU1X8jE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaMslrkjYiFblEw9ZyYIdOHIV1MwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHNSwVGUavK0c+Uk1Oy6HtFOICuAUFWaqgM EK/2WTYTPz/y7JEZ+tJUSBgDRv5i9YN4mROGi0aGlpzwDxTmsBXr5/qCN0CPpxgq 61WZzkXVbMsmcxbOf3uMJEM64RIIjAHslb+KOdmLByaD6EHPtQK4IPxzoZN8aFFQ OWsBxsPKYdbTn8SEqjG/Z21+epxp6aMuD+r6E2AsXtqMc1ck78d0plF9rLhudvrx xh7YMGLp3tE2WMtwoFXq2RjvZa+K1SBCFtylU4mdJgkOU6/j3V4HPEDV6oEHQEb3 yN07WbExxY46Rn+WpC+/5nQzQJ2z/4PSAgmz1dI4NrArlH2mpBY= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:51 2026 by rpki-client