$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: QrWhbAillJswSud5PaYJFg9WlPXAPb9qygKK1qyLYJE= Subject key identifier: 14:24:E1:30:53:C0:E5:6C:17:9B:32:D0:C3:41:10:5C:83:63:30:84 Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 5C0DC7FB092829F0943C147259728626E8E9007D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 02:06:10 +0000 Manifest this update: Thu 17 Sep 2026 02:01:10 +0000 Manifest next update: Fri 18 Sep 2026 02:25:10 +0000 Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) 2: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: bK8fV+YIyiUd+Q3NPEzWNXUXawveNaOp9Uwoai0PkNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0d:c7:fb:09:28:29:f0:94:3c:14:72:59:72:86:26:e8:e9:00:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Sep 17 02:01:10 2026 GMT Not After : Sep 18 02:25:10 2026 GMT Subject: CN=1424E13053C0E56C179B32D0C341105C83633084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:f5:d1:01:e6:22:34:4a:8e:b1:7a:c2:f1: d5:d4:9c:4d:5b:79:ce:f9:57:a9:c3:6b:95:7b:8f: f9:69:44:f3:54:da:13:0d:28:0d:15:2b:5d:1a:c6: 24:f5:66:a2:12:b8:89:7a:c4:a7:80:5d:63:01:ed: 56:49:8f:cc:aa:0b:8e:b7:d9:6f:c4:61:6c:29:73: ac:d3:80:95:c8:7c:bb:85:30:98:f5:de:ad:7e:ef: 67:81:c1:42:0f:88:22:65:4c:40:10:37:28:cd:0f: 21:fe:88:83:63:b0:1c:d4:af:aa:73:e2:e5:f7:b1: d5:fd:02:09:a5:28:4a:e5:94:49:1f:54:3c:79:30: 56:27:6c:dc:36:a9:a3:4b:14:df:d6:d1:22:f3:82: bd:eb:20:17:1f:58:79:51:4d:af:25:2a:53:d5:18: da:2d:f6:c5:ab:31:b7:ce:0e:e6:6f:ef:ee:ae:b0: 4c:a6:36:5a:cc:91:09:c7:17:ff:aa:84:58:68:07: 75:64:6c:55:1a:6c:0e:21:3a:5d:37:12:89:3b:6e: 1f:7e:32:3e:de:6d:c6:b7:49:c4:5a:ad:f6:3a:21: 30:af:5c:22:6d:1a:08:df:85:1b:b0:13:1c:2d:33: af:43:bf:cf:42:39:88:94:38:ce:6a:54:85:bb:79: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:E1:30:53:C0:E5:6C:17:9B:32:D0:C3:41:10:5C:83:63:30:84 X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c7:20:db:e7:a8:33:07:a5:6e:9f:e4:6a:9f:43:ab:59:5a: 6a:d9:c2:b7:02:c0:8f:c5:88:53:c5:0d:52:96:9b:55:a3:d8: d7:92:35:f8:5e:16:35:a0:c9:8a:b7:fe:b1:bd:eb:53:9d:0f: a3:b2:02:c5:be:cb:e4:8e:e4:b2:69:62:eb:ea:61:97:39:dc: 89:e3:6e:db:e9:b1:f7:09:f7:6c:41:22:25:2a:56:63:83:95: 59:d7:5a:99:5f:63:57:56:eb:cc:72:35:b3:9e:78:29:26:5d: 24:44:d9:1b:4d:11:02:44:ab:57:c4:d6:b7:63:0f:e3:08:20: d9:c9:7c:9c:2b:5d:a9:0b:30:b5:7f:bf:ea:e4:11:f3:fd:06: 33:b6:cc:f9:4f:ea:76:8c:3d:4e:63:3e:83:3d:a3:9a:b2:83: 0a:e3:b4:5a:81:66:ca:b2:e1:16:64:02:21:d9:51:72:73:c7: 42:d5:73:75:4f:06:2e:fe:a3:6c:c1:09:4d:c3:9f:cd:da:5e: 76:f6:d2:2e:c3:08:1b:0f:55:a8:04:21:bc:dd:72:06:57:f5: 7f:83:8c:ec:c8:2e:5b:b3:eb:72:87:d8:e7:e3:99:e2:f3:7e: e3:c4:c0:ac:02:71:36:0f:08:f2:3c:a7:2b:93:88:e5:95:0c: a4:31:3f:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA3H+wkoKfCUPBRyWXKGJujpAH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjA5MTcwMjAxMTBaFw0yNjA5MTgwMjI1MTBaMDMxMTAvBgNV BAMTKDE0MjRFMTMwNTNDMEU1NkMxNzlCMzJEMEMzNDExMDVDODM2MzMwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUPXRAeYiNEqOsXrC8dXUnE1b ec75V6nDa5V7j/lpRPNU2hMNKA0VK10axiT1ZqISuIl6xKeAXWMB7VZJj8yqC463 2W/EYWwpc6zTgJXIfLuFMJj13q1+72eBwUIPiCJlTEAQNyjNDyH+iINjsBzUr6pz 4uX3sdX9AgmlKErllEkfVDx5MFYnbNw2qaNLFN/W0SLzgr3rIBcfWHlRTa8lKlPV GNot9sWrMbfODuZv7+6usEymNlrMkQnHF/+qhFhoB3VkbFUabA4hOl03Eok7bh9+ Mj7ebca3ScRarfY6ITCvXCJtGgjfhRuwExwtM69Dv89COYiUOM5qVIW7edxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFCThMFPA5WwXmzLQw0EQXINjMIQwHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPHINvnqDMHpW6f5GqfQ6tZWmrZwrcCwI/F iFPFDVKWm1Wj2NeSNfheFjWgyYq3/rG961OdD6OyAsW+y+SO5LJpYuvqYZc53Inj btvpsfcJ92xBIiUqVmODlVnXWplfY1dW68xyNbOeeCkmXSRE2RtNEQJEq1fE1rdj D+MIINnJfJwrXakLMLV/v+rkEfP9BjO2zPlP6naMPU5jPoM9o5qygwrjtFqBZsqy 4RZkAiHZUXJzx0LVc3VPBi7+o2zBCU3Dn83aXnb20i7DCBsPVagEIbzdcgZX9X+D jOzILluz63KH2OfjmeLzfuPEwKwCcTYPCPI8pyuTiOWVDKQxP7o= -----END CERTIFICATE-----Generated at Thu Sep 17 15:24:45 2026 by rpki-client