$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: 0s769iGHr2O6kEMw6OZlYWqTPTMo6jWQkb6a7wnU6Vk= Subject key identifier: 52:42:AB:59:E4:20:09:18:B0:DA:F5:7A:F9:6C:89:03:21:EB:9B:FA Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 5ABA7E7011685BB52C0CC55DB0694D255312B645 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:52:12 +0000 Manifest this update: Wed 16 Sep 2026 22:47:12 +0000 Manifest next update: Fri 18 Sep 2026 01:59:12 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) 2: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: v4W59keYiAPtWCACt0AXFgPa3a4VMvdfyqnKaGBqI00=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ba:7e:70:11:68:5b:b5:2c:0c:c5:5d:b0:69:4d:25:53:12:b6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Sep 16 22:47:12 2026 GMT Not After : Sep 18 01:59:12 2026 GMT Subject: CN=5242AB59E4200918B0DAF57AF96C890321EB9BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:49:d8:bf:a6:b7:bf:e0:c0:fa:ee:2b:bf: b0:55:38:99:78:50:5a:e6:cc:c7:a8:d7:70:aa:6c: ee:de:48:02:f4:29:6b:f1:c5:6a:76:72:52:37:9f: 81:80:26:4e:3f:e4:34:da:72:3c:a6:4f:30:b0:6c: 60:fd:2b:1c:32:8a:97:39:2f:00:10:3f:3c:39:d2: a7:5a:1c:b7:21:85:54:ef:c6:b0:60:67:4f:7f:82: 38:00:d8:ac:59:c7:58:39:28:16:8b:4e:65:d4:fb: a7:38:4b:09:bc:df:d1:10:ec:3c:82:43:84:f2:be: 1e:be:6d:f6:ad:1a:70:8d:30:de:39:4d:b1:0b:87: d8:f5:01:82:9b:3c:12:52:18:71:0b:7c:7a:f6:70: e9:32:59:f9:37:17:60:5e:fe:ff:09:31:ef:eb:89: da:11:0e:b2:3b:8e:7b:36:91:58:f8:d0:60:0b:8b: fe:2b:76:d5:06:ef:03:30:83:7b:03:87:df:4e:0f: 31:a4:7f:db:2b:79:5c:f1:9a:f5:dd:88:77:64:54: 53:88:72:2a:72:a5:b5:53:10:67:8a:69:69:e4:7d: b0:32:4b:16:a0:e2:e5:e2:28:54:ee:ff:20:64:3b: 6e:8f:b3:0e:96:26:a2:ef:84:c7:e9:a4:09:66:24: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:AB:59:E4:20:09:18:B0:DA:F5:7A:F9:6C:89:03:21:EB:9B:FA X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:51:64:da:a0:0b:74:aa:6e:0a:9d:8e:3c:97:f9:0f:86:32: 3e:32:8c:53:4c:7d:0a:aa:7c:cd:a4:8b:b1:6b:44:f8:6d:6e: 8f:e5:36:0e:13:44:16:ac:3e:ba:ee:8f:fa:4e:19:ac:94:d2: ff:ad:88:ba:35:55:8c:71:3f:46:2a:f8:fc:b3:81:dd:3a:a5: 3b:86:22:72:46:ae:b6:6a:fd:36:45:7a:db:1f:e5:79:b0:0d: 93:41:cc:1b:b1:32:fb:81:ab:f0:34:15:e3:22:af:03:1a:97: a3:5d:31:16:d1:40:5e:40:28:5f:e8:fb:a5:43:f7:8b:47:11: 2b:24:32:bb:4a:6b:cc:8b:ed:0c:a1:ef:a7:41:c6:ff:86:8d: b5:3d:dc:3c:c2:f0:52:e8:b3:e4:6e:a4:dc:33:ce:17:e1:79: 00:a5:81:5c:e5:9f:92:55:6a:23:cc:7d:e4:31:27:dc:4a:4c: f5:e5:95:f0:c9:6b:6f:35:00:e5:cc:3d:5f:8a:00:0a:f2:97: 8a:af:a6:ae:09:c6:65:1e:97:a7:2f:d3:7b:b6:55:c5:43:64: 9e:c5:95:75:a2:94:7e:13:31:ac:6e:b8:a2:f8:58:44:4a:49: 41:c7:50:cd:36:46:05:68:bd:3f:9c:c6:a0:48:1d:73:f4:9a: be:d5:29:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrp+cBFoW7UsDMVdsGlNJVMStkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA5MTYyMjQ3MTJaFw0yNjA5MTgwMTU5MTJaMDMxMTAvBgNV BAMTKDUyNDJBQjU5RTQyMDA5MThCMERBRjU3QUY5NkM4OTAzMjFFQjlCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPN0nYv6a3v+DA+u4rv7BVOJl4 UFrmzMeo13CqbO7eSAL0KWvxxWp2clI3n4GAJk4/5DTacjymTzCwbGD9Kxwyipc5 LwAQPzw50qdaHLchhVTvxrBgZ09/gjgA2KxZx1g5KBaLTmXU+6c4Swm839EQ7DyC Q4Tyvh6+bfatGnCNMN45TbELh9j1AYKbPBJSGHELfHr2cOkyWfk3F2Be/v8JMe/r idoRDrI7jns2kVj40GALi/4rdtUG7wMwg3sDh99ODzGkf9sreVzxmvXdiHdkVFOI cipypbVTEGeKaWnkfbAySxag4uXiKFTu/yBkO26Psw6WJqLvhMfppAlmJE1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUkKrWeQgCRiw2vV6+WyJAyHrm/owHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdRZNqgC3SqbgqdjjyX+Q+GMj4yjFNMfQqq fM2ki7FrRPhtbo/lNg4TRBasPrruj/pOGayU0v+tiLo1VYxxP0Yq+Pyzgd06pTuG InJGrrZq/TZFetsf5XmwDZNBzBuxMvuBq/A0FeMirwMal6NdMRbRQF5AKF/o+6VD 94tHESskMrtKa8yL7Qyh76dBxv+GjbU93DzC8FLos+RupNwzzhfheQClgVzln5JV aiPMfeQxJ9xKTPXllfDJa281AOXMPV+KAAryl4qvpq4JxmUel6cv03u2VcVDZJ7F lXWilH4TMaxuuKL4WERKSUHHUM02RgVovT+cxqBIHXP0mr7VKcc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:35 2026 by rpki-client