$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: LR8OSjAC3y2HDOcRhGpxbdznwiaxF3SfsAfXphZZJm0= Subject key identifier: CE:5E:D8:D0:5E:FF:23:7A:91:B1:8B:E5:91:05:FC:D8:91:50:33:ED Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 6D98AFCEB89DACB4B5CB70BAEFB3797947ECBF9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:09:00 +0000 Manifest this update: Wed 16 Sep 2026 20:04:00 +0000 Manifest next update: Thu 17 Sep 2026 23:16:00 +0000 Files and hashes: 1: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) 2: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: Qdrh0ev/KqDZNsLimtb7f8pSB+TPIHcomxVYONII3p4=) 3: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:98:af:ce:b8:9d:ac:b4:b5:cb:70:ba:ef:b3:79:79:47:ec:bf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Sep 16 20:04:00 2026 GMT Not After : Sep 17 23:16:00 2026 GMT Subject: CN=CE5ED8D05EFF237A91B18BE59105FCD8915033ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:6c:bd:34:c4:12:81:c2:3c:da:5b:ea:cf: 5d:09:ef:4d:ee:2f:69:70:e7:d9:72:55:73:3b:f2: 4d:10:f9:f0:8c:95:0c:ac:58:9f:98:41:e4:ff:05: b1:d6:29:03:dd:16:82:86:d2:f7:ff:c6:aa:d0:38: ca:c4:54:dd:6b:69:da:42:2c:f1:db:e7:94:05:97: 25:2c:82:0d:00:63:b3:5e:39:96:ec:13:61:0c:9f: c7:8a:6b:a3:55:8e:0c:b4:80:cd:9d:ac:6f:4c:2a: 46:26:6a:40:5e:46:36:b1:37:5d:1c:f9:ba:94:b2: 96:c1:cb:55:42:88:72:e8:ae:eb:bc:3e:67:56:56: 70:48:be:02:fe:0f:b2:bd:bb:a5:c9:54:9c:26:82: ce:c3:a4:b7:d8:d0:85:b0:46:29:4b:23:8a:2d:e0: 64:5c:a4:6a:72:e2:da:e4:f4:3d:ee:b3:bf:27:6a: e8:b7:bc:56:7b:98:01:d7:f4:27:4d:f6:c3:5e:c3: 97:39:ac:fe:54:fa:e3:a6:34:90:24:31:16:b1:a2: 29:5a:d7:51:c4:5a:5a:40:44:41:11:95:71:e8:db: 5c:da:b5:a7:ef:67:30:cc:a4:b5:9a:39:2e:51:1c: 2c:0c:43:80:b4:b0:0f:b1:2a:da:76:90:7c:9b:b2: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:D8:D0:5E:FF:23:7A:91:B1:8B:E5:91:05:FC:D8:91:50:33:ED X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:02:c9:c6:3c:0c:e6:a8:12:a0:b3:78:ab:b9:59:8b:c9:49: d8:d1:a2:eb:be:aa:4d:eb:2c:bf:be:f5:43:77:89:35:71:2b: 08:a4:5e:2a:da:e1:24:0e:8f:aa:42:0e:1b:ef:fc:14:f5:c9: 8e:49:be:ba:19:04:c1:87:91:8d:be:75:34:e0:86:75:14:d7: 14:2b:d5:e5:dc:3c:11:a0:5b:5a:39:02:55:71:a3:fb:fd:dc: f8:e1:59:4e:8d:8e:8b:de:9d:b3:56:aa:f7:e6:94:e0:7f:59: a9:44:cf:35:25:32:7f:06:b4:e1:35:10:94:cf:fc:2c:f5:24: f5:06:4e:5e:ac:e2:3a:48:ba:91:1c:29:24:bf:bf:0f:59:2c: db:95:36:c1:cd:9e:58:1f:f4:b1:66:f5:14:cf:d8:f2:86:96: a5:7e:fc:86:2e:bd:73:75:fa:3f:ae:0a:f4:9e:7a:cc:39:b1: 9b:9c:8f:8c:e6:62:98:82:13:c8:f2:26:63:ec:7b:42:b6:9a: 90:20:9c:29:d5:87:f5:0f:0f:36:d0:eb:6a:3d:e9:74:54:f7: 10:a0:49:ce:2c:c9:99:ed:6c:d4:36:17:f8:3f:0a:e1:bc:a1: 47:64:4b:c6:6a:26:e9:ac:3b:e6:0e:4f:04:8c:02:1a:3a:61: 70:2e:1f:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZivzridrLS1y3C677N5eUfsv5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA5MTYyMDA0MDBaFw0yNjA5MTcyMzE2MDBaMDMxMTAvBgNV BAMTKENFNUVEOEQwNUVGRjIzN0E5MUIxOEJFNTkxMDVGQ0Q4OTE1MDMzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaB2y9NMQSgcI82lvqz10J703u L2lw59lyVXM78k0Q+fCMlQysWJ+YQeT/BbHWKQPdFoKG0vf/xqrQOMrEVN1radpC LPHb55QFlyUsgg0AY7NeOZbsE2EMn8eKa6NVjgy0gM2drG9MKkYmakBeRjaxN10c +bqUspbBy1VCiHLoruu8PmdWVnBIvgL+D7K9u6XJVJwmgs7DpLfY0IWwRilLI4ot 4GRcpGpy4trk9D3us78naui3vFZ7mAHX9CdN9sNew5c5rP5U+uOmNJAkMRaxoila 11HEWlpAREERlXHo21zatafvZzDMpLWaOS5RHCwMQ4C0sA+xKtp2kHybslHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzl7Y0F7/I3qRsYvlkQX82JFQM+0wHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHECycY8DOaoEqCzeKu5WYvJSdjRouu+qk3r LL++9UN3iTVxKwikXira4SQOj6pCDhvv/BT1yY5JvroZBMGHkY2+dTTghnUU1xQr 1eXcPBGgW1o5AlVxo/v93PjhWU6NjovenbNWqvfmlOB/WalEzzUlMn8GtOE1EJTP /Cz1JPUGTl6s4jpIupEcKSS/vw9ZLNuVNsHNnlgf9LFm9RTP2PKGlqV+/IYuvXN1 +j+uCvSeesw5sZucj4zmYpiCE8jyJmPse0K2mpAgnCnVh/UPDzbQ62o96XRU9xCg Sc4syZntbNQ2F/g/CuG8oUdkS8ZqJumsO+YOTwSMAho6YXAuHw4= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:43 2026 by rpki-client