$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft File: 1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json) Hash identifier: LW4yR6LJsgK1oFU6RDoOpM54hstQ5Qoo5jexWVkmfhc= Subject key identifier: 36:52:DE:E5:08:A4:6E:58:6A:E3:48:E0:B4:B5:2B:10:78:BE:E9:03 Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 Certificate issuer: /CN=1FF488AB707220858C10BA99E5944DE409195015 Certificate serial: 3BCC3FC237314C7858A8FB3F0CC904165ACA0588 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:02:43 +0000 Manifest this update: Wed 16 Sep 2026 14:57:43 +0000 Manifest next update: Thu 17 Sep 2026 18:54:43 +0000 Files and hashes: 1: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: ABRoWuCUbvOAhH+5rWzeoYfLsFBA3zcjFOoIt9ueD+E=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cc:3f:c2:37:31:4c:78:58:a8:fb:3f:0c:c9:04:16:5a:ca:05:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015 Validity Not Before: Sep 16 14:57:43 2026 GMT Not After : Sep 17 18:54:43 2026 GMT Subject: CN=3652DEE508A46E586AE348E0B4B52B1078BEE903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:f2:da:b9:3a:ae:07:1e:2e:02:f0:a0:6c: 1e:9f:9e:70:95:b3:02:7d:17:bb:d5:af:7a:3b:1d: 9c:a6:57:9f:5c:5f:1a:32:43:b1:1e:31:a9:0f:5c: 50:12:9c:cd:5a:8b:ed:cc:2b:a8:04:d5:f2:7a:72: 88:a1:4e:1b:3d:4e:82:e0:d9:2a:66:7f:bc:42:62: 0b:bd:2d:77:e6:9d:46:6d:21:2a:ed:89:21:96:50: 5e:58:c9:45:d2:08:ec:6b:11:5d:31:8b:68:1b:0a: 90:09:43:f6:db:35:45:1a:df:8f:1f:a2:ed:6c:bb: 56:86:d6:2d:d9:dd:61:16:48:45:92:9d:66:be:ba: 1c:e5:97:1e:0c:07:aa:12:6d:c7:c3:11:ff:3a:49: 11:df:42:98:1d:56:b5:63:f4:26:dd:71:b5:8a:15: cf:95:9b:49:ff:37:8b:9e:cb:19:39:fd:16:de:67: fd:33:cf:65:c6:c1:f5:34:60:05:eb:64:df:64:2e: e2:7d:73:d5:27:d9:a2:e9:d8:5b:43:52:2d:a2:b2: 85:b9:c8:d0:09:6b:76:25:48:ce:f3:fa:76:33:db: e5:6a:2b:67:29:64:82:32:79:80:9e:bc:c3:3a:d3: 5d:a1:a3:49:b5:1b:6e:03:5e:93:04:34:e0:d6:19: b4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:52:DE:E5:08:A4:6E:58:6A:E3:48:E0:B4:B5:2B:10:78:BE:E9:03 X509v3 Authority Key Identifier: keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8d:99:59:ee:45:51:ed:de:52:1a:38:b1:8a:c6:1e:ce:a4: d5:b2:4f:23:e9:67:ad:aa:72:bd:d2:d1:5d:8e:0f:f0:37:9c: 81:81:2c:ea:7a:f5:60:aa:37:65:ae:3e:30:74:51:b2:a1:9a: 1a:6b:79:45:d7:a5:68:f5:82:e2:ec:d5:e3:e9:48:b0:01:40: e3:8c:8e:4e:bb:e3:24:ca:c0:82:cc:b8:28:7a:de:1b:dc:2c: e9:db:32:fc:f2:ef:ba:20:d6:84:f3:33:62:db:3c:2b:8d:90: 25:36:c9:17:d4:36:d4:78:8a:cf:8a:3d:ae:cb:81:1a:2a:ac: 2f:18:b1:e0:8d:7b:8c:cc:ca:2a:b7:6c:b2:1f:9b:71:8d:bd: 16:84:36:89:b9:fd:3f:9b:d9:90:d6:2a:35:b3:90:5d:a1:46: d8:1d:14:27:54:da:e1:f3:3b:44:19:c6:6e:46:5e:a5:cd:dd: b6:b4:8e:5a:82:56:05:35:46:c0:e7:15:d0:83:2d:e8:13:de: a6:81:6d:7f:59:9f:25:e1:69:d0:9a:d1:cf:88:9c:06:5f:50: 89:66:b3:50:17:7a:9e:6d:55:be:cb:e5:31:ff:09:4d:0d:d9: 4e:72:a5:ca:5c:75:43:64:4e:66:3a:2f:e2:4e:a6:58:08:d3: d4:a6:37:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8w/wjcxTHhYqPs/DMkEFlrKBYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRERTQw OTE5NTAxNTAeFw0yNjA5MTYxNDU3NDNaFw0yNjA5MTcxODU0NDNaMDMxMTAvBgNV BAMTKDM2NTJERUU1MDhBNDZFNTg2QUUzNDhFMEI0QjUyQjEwNzhCRUU5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPpfLauTquBx4uAvCgbB6fnnCV swJ9F7vVr3o7HZymV59cXxoyQ7EeMakPXFASnM1ai+3MK6gE1fJ6coihThs9ToLg 2Spmf7xCYgu9LXfmnUZtISrtiSGWUF5YyUXSCOxrEV0xi2gbCpAJQ/bbNUUa348f ou1su1aG1i3Z3WEWSEWSnWa+uhzllx4MB6oSbcfDEf86SRHfQpgdVrVj9CbdcbWK Fc+Vm0n/N4ueyxk5/RbeZ/0zz2XGwfU0YAXrZN9kLuJ9c9Un2aLp2FtDUi2isoW5 yNAJa3YlSM7z+nYz2+VqK2cpZIIyeYCevMM6012ho0m1G24DXpMENODWGbTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNlLe5Qikblhq40jgtLUrEHi+6QMwHwYDVR0j BBgwFoAUH/SIq3ByIIWMELqZ5ZRN5AkZUBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1OWI2YTMtYjc0Yi00YmFhLTk5M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3 MDcyMjA4NThDMTBCQTk5RTU5NDRERTQwOTE5NTAxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkY0ODhBQjcwNzIyMDg1OEMxMEJBOTlFNTk0NERFNDA5MTk1 MDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRE RTQwOTE5NTAxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeNmVnuRVHt3lIaOLGKxh7OpNWyTyPpZ62q cr3S0V2OD/A3nIGBLOp69WCqN2WuPjB0UbKhmhpreUXXpWj1guLs1ePpSLABQOOM jk674yTKwILMuCh63hvcLOnbMvzy77og1oTzM2LbPCuNkCU2yRfUNtR4is+KPa7L gRoqrC8YseCNe4zMyiq3bLIfm3GNvRaENom5/T+b2ZDWKjWzkF2hRtgdFCdU2uHz O0QZxm5GXqXN3ba0jlqCVgU1RsDnFdCDLegT3qaBbX9ZnyXhadCa0c+InAZfUIlm s1AXep5tVb7L5TH/CU0N2U5ypcpcdUNkTmY6L+JOplgI09SmN30= -----END CERTIFICATE-----Generated at Thu Sep 17 09:31:55 2026 by rpki-client