$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json) Hash identifier: wxIxnZ2tYHA0dvZhEAk+3JEEP6LuXvmIg4JRsV0VmIA= Subject key identifier: 17:18:90:35:01:CE:67:B6:D7:F2:64:21:25:6C:93:96:32:62:60:86 Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Certificate serial: 4481A7E9831BF25D3F36000D712A2B3DC3DF8969 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft Manifest number: DF Signing time: Thu 15 Oct 2026 18:37:45 +0000 Manifest this update: Thu 15 Oct 2026 18:32:45 +0000 Manifest next update: Fri 16 Oct 2026 19:43:45 +0000 Files and hashes: 1: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: wTTXAzfKJOU7HN3Zv8IbCQuv49jtR2AeB3FYfqnVUgA=) 2: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=) 3: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=) 4: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:81:a7:e9:83:1b:f2:5d:3f:36:00:0d:71:2a:2b:3d:c3:df:89:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Validity Not Before: Oct 15 18:32:45 2026 GMT Not After : Oct 16 19:43:45 2026 GMT Subject: CN=1718903501CE67B6D7F26421256C939632626086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:8e:28:a0:fd:10:1d:ed:d7:92:b5:2b:11: fb:f4:4b:01:60:df:04:4c:ff:9a:bf:55:01:7d:53: ed:62:7b:30:ef:50:61:70:81:b0:2e:df:9e:a5:49: 1c:f4:dc:34:75:25:b9:03:00:77:08:a5:00:bc:34: b5:84:40:90:60:72:ac:16:00:e3:6a:a8:bc:03:de: 3c:8f:4f:8c:40:3a:2e:9a:d9:f0:4d:02:60:9c:80: 45:e8:b5:15:15:4c:92:1d:c8:e6:d9:03:8d:50:e0: 23:27:a0:27:32:5a:70:e2:b1:30:5b:dd:2c:31:29: 4f:22:52:1b:c0:21:a2:8e:b1:91:da:e9:39:be:6b: 68:80:ee:d1:01:01:dd:0c:d3:a3:4c:7a:67:5e:95: a8:08:f9:62:96:a9:62:91:c9:19:6f:46:7a:8d:36: 3a:a3:6f:6c:dd:c3:ee:b3:18:96:17:b0:b0:90:75: e4:6e:d8:c7:9c:ad:6b:c9:7e:51:d7:c8:3b:b3:61: e9:43:68:24:26:45:79:ad:4b:52:8e:08:60:e2:a9: 9b:73:ef:57:22:f7:df:55:7f:25:ee:43:45:d1:ae: 46:db:1a:a7:52:86:a8:f9:c9:16:03:e4:a2:ae:9c: ba:99:ad:3a:59:f1:d7:da:3a:a5:73:c1:95:85:8c: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:18:90:35:01:CE:67:B6:D7:F2:64:21:25:6C:93:96:32:62:60:86 X509v3 Authority Key Identifier: keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:77:38:f9:a1:84:f4:e7:4c:99:0f:65:16:2e:cc:e2:3e:94: 49:bc:71:88:cc:1b:e8:0e:fe:a4:30:6e:58:59:2d:5e:27:7e: c1:02:12:2e:cf:35:44:e8:f6:d8:b4:f1:b2:6b:bd:ea:16:7f: 37:d8:d1:c6:02:ae:cd:5e:47:4e:3d:1b:3b:9b:2b:ce:0d:dd: a4:53:f1:07:e1:6f:6a:74:ab:58:39:c0:5e:50:d1:d5:0d:70: 7d:77:84:f2:92:89:e9:cf:1d:01:b2:07:5b:06:41:67:c7:13: 46:02:9a:f9:3d:a6:19:31:05:6f:99:74:03:b6:84:72:57:0b: f6:09:a6:95:dd:22:cb:ad:9b:b8:e1:71:7d:cd:5a:ca:5a:04: 54:11:b3:7d:e2:0d:8c:89:c9:9a:d2:89:f2:96:fc:9c:56:ca: 2d:a8:b3:b1:0d:7d:e3:63:a4:17:f2:83:d7:92:28:24:2c:c9: 6a:83:b4:a9:74:53:b4:2f:92:60:c2:ac:27:9b:f2:7a:ef:53: 92:8c:a7:cc:73:48:83:b0:d9:8d:a7:41:41:17:cb:22:6e:44: 7a:23:5a:28:84:fb:82:5d:b3:72:6c:1b:4e:07:12:d2:a2:e7: e0:05:80:f8:14:ec:f0:17:52:86:19:a7:bb:25:e4:ee:0c:57: 6a:dc:ea:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIGn6YMb8l0/NgANcSorPcPfiWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEw NDNENTc4QTAeFw0yNjEwMTUxODMyNDVaFw0yNjEwMTYxOTQzNDVaMDMxMTAvBgNV BAMTKDE3MTg5MDM1MDFDRTY3QjZEN0YyNjQyMTI1NkM5Mzk2MzI2MjYwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAo4ooP0QHe3XkrUrEfv0SwFg 3wRM/5q/VQF9U+1iezDvUGFwgbAu356lSRz03DR1JbkDAHcIpQC8NLWEQJBgcqwW AONqqLwD3jyPT4xAOi6a2fBNAmCcgEXotRUVTJIdyObZA41Q4CMnoCcyWnDisTBb 3SwxKU8iUhvAIaKOsZHa6Tm+a2iA7tEBAd0M06NMemdelagI+WKWqWKRyRlvRnqN Njqjb2zdw+6zGJYXsLCQdeRu2MecrWvJflHXyDuzYelDaCQmRXmtS1KOCGDiqZtz 71ci999VfyXuQ0XRrkbbGqdShqj5yRYD5KKunLqZrTpZ8dfaOqVzwZWFjIOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxiQNQHOZ7bX8mQhJWyTljJiYIYwHwYDVR0j BBgwFoAUwdXKyyhppFB0qi7vCq9ECgQ9V4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNzUwODgtMDg4ZS00MWMwLWJmY2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0Iy ODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEwNDNENTc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUQ1Q0FDQjI4NjlBNDUwNzRBQTJFRUYwQUFGNDQwQTA0M0Q1 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0 MEEwNDNENTc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp3OPmhhPTnTJkPZRYuzOI+lEm8cYjMG+gO /qQwblhZLV4nfsECEi7PNUTo9ti08bJrveoWfzfY0cYCrs1eR049GzubK84N3aRT 8Qfhb2p0q1g5wF5Q0dUNcH13hPKSienPHQGyB1sGQWfHE0YCmvk9phkxBW+ZdAO2 hHJXC/YJppXdIsutm7jhcX3NWspaBFQRs33iDYyJyZrSifKW/JxWyi2os7ENfeNj pBfyg9eSKCQsyWqDtKl0U7QvkmDCrCeb8nrvU5KMp8xzSIOw2Y2nQUEXyyJuRHoj WiiE+4Jds3JsG04HEtKi5+AFgPgU7PAXUoYZp7sl5O4MV2rc6lQ= -----END CERTIFICATE-----Generated at Fri Oct 16 04:04:56 2026 by rpki-client