$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json) Hash identifier: xsOz9pgD+DCza9YCIAA2ci4rRTryI0SOH6/0w+oO2ls= Subject key identifier: 01:33:BE:03:36:0A:60:7B:D7:D9:05:E1:08:F6:DB:FD:BD:79:8B:36 Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Certificate serial: 784DBF0A8DD4DF00DBEF941D50D77FC69EB98F28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft Manifest number: A1 Signing time: Mon 31 Aug 2026 12:29:29 +0000 Manifest this update: Mon 31 Aug 2026 12:24:29 +0000 Manifest next update: Tue 01 Sep 2026 13:10:29 +0000 Files and hashes: 1: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: zuvLuQoWSBI/IuyVKvVhxwawJ27SeC0o3YjhYp6p9vM=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 13:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4d:bf:0a:8d:d4:df:00:db:ef:94:1d:50:d7:7f:c6:9e:b9:8f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Validity Not Before: Aug 31 12:24:29 2026 GMT Not After : Sep 1 13:10:29 2026 GMT Subject: CN=0133BE03360A607BD7D905E108F6DBFDBD798B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:bb:eb:3a:47:50:c9:4c:e8:45:2d:87:df: be:a5:f6:9f:b0:09:0f:8d:db:3f:ce:2d:0d:cb:4d: 51:17:02:57:2b:b1:b3:65:76:39:01:68:e5:05:3e: 1c:bd:32:97:66:ed:b5:b2:fb:ff:7a:31:e1:ef:93: 39:5c:d8:b5:38:4d:6c:02:5b:0b:f6:d0:2d:51:d8: c7:53:bf:97:c1:5b:af:ea:ca:b3:26:f6:de:c4:49: 92:3d:d5:ec:f9:dd:1c:f3:87:a3:a3:c3:fa:e4:79: 95:cb:86:49:95:81:af:be:b6:1d:f1:82:7e:83:ec: 5f:c5:a3:69:e9:d1:4c:44:03:54:76:9a:f8:60:d0: 92:3c:b1:95:a7:f8:b2:e8:89:36:d4:85:23:d9:44: 39:44:30:d6:60:37:2f:31:49:2e:9f:c7:5d:06:2e: db:ff:54:98:cf:76:1c:db:af:7c:98:35:26:20:9e: 64:0f:37:ef:6b:85:5f:d1:26:59:1b:0a:33:41:0e: 04:46:27:2a:af:71:ce:c1:5d:7c:8d:13:ca:0c:d5: c2:77:7a:c2:9d:bb:38:0f:e4:a4:b0:28:48:3c:dd: eb:df:d2:fa:40:23:a0:41:73:53:d3:99:7b:57:3e: ce:64:c4:c6:0b:6b:6e:ca:15:08:93:83:e8:85:04: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:BE:03:36:0A:60:7B:D7:D9:05:E1:08:F6:DB:FD:BD:79:8B:36 X509v3 Authority Key Identifier: keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ae:5f:b9:ff:01:56:0e:ec:e4:e2:fc:74:4d:f5:7f:6a:09: 2a:3a:d1:b9:33:aa:04:51:aa:8e:67:e0:8f:55:a6:48:15:d3: d6:76:89:c3:04:1c:ba:54:b1:51:59:4a:06:0f:83:77:bb:8b: 13:78:6a:6f:b1:73:98:29:ce:5f:97:f5:ea:b4:76:92:94:e9: 30:5e:77:a9:45:4c:5d:00:f1:12:14:b0:86:58:47:55:7a:5e: e2:9e:59:8a:db:da:d7:54:71:87:4b:4f:8a:74:ea:db:86:15: d0:ae:a3:36:92:69:27:67:95:8f:01:01:b5:87:a3:15:c4:f8: 5f:3f:10:fe:b1:95:5d:a4:ea:56:91:8b:78:d4:77:4d:97:60: 3b:a1:89:98:48:36:41:ca:82:fc:ed:e6:22:cb:5e:3e:bd:9a: 18:78:bc:ea:1f:3e:63:31:06:1a:9d:f9:03:60:cb:45:7b:f8: 93:d1:c0:f3:2a:c0:8f:2f:27:fb:13:95:13:ee:e4:8d:44:73: 8e:80:a0:23:a1:8d:2d:91:f9:68:ce:e3:87:14:01:a9:9d:d6: e3:0b:8d:cb:10:f4:cd:3f:1a:02:9f:d4:36:fa:32:11:ec:f9: 43:c4:9d:0c:df:32:0a:5b:0e:9b:12:05:98:7f:ff:01:22:52: 90:c8:f4:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeE2/Co3U3wDb75QdUNd/xp65jygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNE RTI5MEI4OTAeFw0yNjA4MzExMjI0MjlaFw0yNjA5MDExMzEwMjlaMDMxMTAvBgNV BAMTKDAxMzNCRTAzMzYwQTYwN0JEN0Q5MDVFMTA4RjZEQkZEQkQ3OThCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzrvrOkdQyUzoRS2H376l9p+w CQ+N2z/OLQ3LTVEXAlcrsbNldjkBaOUFPhy9Mpdm7bWy+/96MeHvkzlc2LU4TWwC Wwv20C1R2MdTv5fBW6/qyrMm9t7ESZI91ez53Rzzh6Ojw/rkeZXLhkmVga++th3x gn6D7F/Fo2np0UxEA1R2mvhg0JI8sZWn+LLoiTbUhSPZRDlEMNZgNy8xSS6fx10G Ltv/VJjPdhzbr3yYNSYgnmQPN+9rhV/RJlkbCjNBDgRGJyqvcc7BXXyNE8oM1cJ3 esKduzgP5KSwKEg83evf0vpAI6BBc1PTmXtXPs5kxMYLa27KFQiTg+iFBHf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATO+AzYKYHvX2QXhCPbb/b15izYwHwYDVR0j BBgwFoAUHzstEr0pdGO6dxfyV6QPc94pC4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUyY2FjY2YtMzI3ZS00MmJkLTliMzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJC RDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNERTI5MEI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjNCMkQxMkJEMjk3NDYzQkE3NzE3RjI1N0E0MEY3M0RFMjkw Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBG NzNERTI5MEI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6uX7n/AVYO7OTi/HRN9X9qCSo60bkzqgRR qo5n4I9VpkgV09Z2icMEHLpUsVFZSgYPg3e7ixN4am+xc5gpzl+X9eq0dpKU6TBe d6lFTF0A8RIUsIZYR1V6XuKeWYrb2tdUcYdLT4p06tuGFdCuozaSaSdnlY8BAbWH oxXE+F8/EP6xlV2k6laRi3jUd02XYDuhiZhINkHKgvzt5iLLXj69mhh4vOofPmMx Bhqd+QNgy0V7+JPRwPMqwI8vJ/sTlRPu5I1Ec46AoCOhjS2R+WjO44cUAamd1uML jcsQ9M0/GgKf1Db6MhHs+UPEnQzfMgpbDpsSBZh//wEiUpDI9MM= -----END CERTIFICATE-----Generated at Tue Sep 1 06:21:41 2026 by rpki-client