$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json) Hash identifier: C/Gn6BIdY9FGzMyMRbFz+nPfL7J+blgZiK/WD+bWcIQ= Subject key identifier: 5F:41:9B:85:88:88:9A:07:8E:1E:E6:0A:9D:6C:93:C5:3E:0C:8D:E8 Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Certificate serial: 579968CE73FC7F54CB47B5B9BF6A3381FA686597 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 16:19:11 +0000 Manifest this update: Wed 16 Sep 2026 16:14:11 +0000 Manifest next update: Thu 17 Sep 2026 19:21:11 +0000 Files and hashes: 1: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=) 2: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: 8Z3eVCJ8q5Z7IcD8h82y7G4miBqfE6RzIJcTG+3PjE8=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:99:68:ce:73:fc:7f:54:cb:47:b5:b9:bf:6a:33:81:fa:68:65:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Validity Not Before: Sep 16 16:14:11 2026 GMT Not After : Sep 17 19:21:11 2026 GMT Subject: CN=5F419B8588889A078E1EE60A9D6C93C53E0C8DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:cf:12:63:7f:b6:68:c7:fa:81:41:b7:56: e8:0d:f7:cb:d6:85:a0:a5:0f:07:46:60:ba:d9:0c: 35:1c:4f:68:28:7d:ea:87:7e:38:5e:0b:8d:db:89: a1:47:85:16:e7:32:06:ae:2c:e0:8f:80:7d:da:91: 60:13:f7:28:98:1d:11:a8:48:84:43:88:5e:72:ee: 2d:43:99:28:a9:06:46:db:7f:81:92:39:8b:93:3f: 74:67:47:0e:55:80:06:c0:5a:1c:2f:a7:9b:cd:b6: 5b:63:33:41:dc:dc:5f:bd:3b:e8:1d:53:77:4f:ff: e3:2c:a1:a3:2a:98:10:33:59:50:51:18:b0:c9:f6: 4c:ae:1d:6b:d6:2c:0d:e9:ec:88:2b:d7:87:1c:d9: e5:51:53:2b:30:82:33:d3:dc:0f:62:07:31:aa:96: 35:66:da:82:62:e6:0f:01:c7:5a:32:ac:f0:f9:c8: 84:e3:e5:d7:0a:d7:1c:21:28:11:de:4a:a9:48:4c: 56:17:41:18:0f:61:31:e8:5c:49:8b:42:ae:84:8b: 6f:3c:f8:c7:ad:70:8a:f8:f4:2d:b6:0e:90:ae:cb: 9f:50:8c:5a:ff:24:df:ea:ec:1f:51:64:c2:7f:a9: ef:76:85:60:9a:a7:e0:b7:aa:49:7c:2f:fa:1a:11: 97:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:9B:85:88:88:9A:07:8E:1E:E6:0A:9D:6C:93:C5:3E:0C:8D:E8 X509v3 Authority Key Identifier: keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:99:58:c0:63:57:df:20:85:d8:62:8a:76:8b:82:88:68:ee: 34:e9:7f:1d:60:a7:2d:93:c3:37:00:8a:0b:2e:a8:13:b2:c7: 2b:0b:81:54:d1:71:e0:3a:e6:16:82:5b:45:ec:62:2f:54:f8: ee:5f:20:87:d7:b0:2f:3c:ac:ad:48:21:3a:68:3e:b4:53:dc: 91:0b:6e:d1:cd:05:6b:ff:a4:7b:91:c9:ca:0a:31:aa:d1:65: 5f:d2:95:89:13:9d:8a:85:77:a2:59:8f:10:ab:a3:d8:3f:68: 70:bb:39:cc:7a:e4:13:c2:43:5f:95:a9:06:57:8a:66:0a:ce: 30:b7:59:14:49:f9:77:88:8f:4b:eb:c0:fa:68:56:db:ca:0d: c1:50:c1:ae:34:9a:ad:42:8f:4b:26:80:30:50:a4:9a:35:c0: f0:4c:2e:ec:1a:bd:27:d5:6b:6d:de:7f:e8:ed:2d:0c:8b:d3: 3f:42:fc:6a:90:78:0e:cd:96:27:86:ab:a5:d6:63:6f:0b:f1: af:f5:b1:8c:03:3d:c8:14:17:c1:87:97:19:9d:91:fe:f5:fb: 69:1c:58:d8:35:20:b8:87:62:94:df:90:d8:47:c4:6e:b7:84: 9d:2d:e4:3f:de:08:3d:ee:ee:43:c6:f6:51:99:4b:e8:b2:09: 61:53:21:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5loznP8f1TLR7W5v2ozgfpoZZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBB MDM3NDFERjAeFw0yNjA5MTYxNjE0MTFaFw0yNjA5MTcxOTIxMTFaMDMxMTAvBgNV BAMTKDVGNDE5Qjg1ODg4ODlBMDc4RTFFRTYwQTlENkM5M0M1M0UwQzhERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVc8SY3+2aMf6gUG3VugN98vW haClDwdGYLrZDDUcT2gofeqHfjheC43biaFHhRbnMgauLOCPgH3akWAT9yiYHRGo SIRDiF5y7i1DmSipBkbbf4GSOYuTP3RnRw5VgAbAWhwvp5vNtltjM0Hc3F+9O+gd U3dP/+MsoaMqmBAzWVBRGLDJ9kyuHWvWLA3p7Igr14cc2eVRUyswgjPT3A9iBzGq ljVm2oJi5g8Bx1oyrPD5yITj5dcK1xwhKBHeSqlITFYXQRgPYTHoXEmLQq6Ei288 +MetcIr49C22DpCuy59QjFr/JN/q7B9RZMJ/qe92hWCap+C3qkl8L/oaEZf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0GbhYiImgeOHuYKnWyTxT4MjegwHwYDVR0j BBgwFoAUGikCyhQOWaKuNf8ytPbRIKA3Qd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlMzFlY2YtNTJhNC00Njc3LTkxMDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0Ex NDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBBMDM3NDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTI5MDJDQTE0MEU1OUEyQUUzNUZGMzJCNEY2RDEyMEEwMzc0 MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQx MjBBMDM3NDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImZWMBjV98ghdhiinaLgoho7jTpfx1gpy2T wzcAigsuqBOyxysLgVTRceA65haCW0XsYi9U+O5fIIfXsC88rK1IITpoPrRT3JEL btHNBWv/pHuRycoKMarRZV/SlYkTnYqFd6JZjxCro9g/aHC7Ocx65BPCQ1+VqQZX imYKzjC3WRRJ+XeIj0vrwPpoVtvKDcFQwa40mq1Cj0smgDBQpJo1wPBMLuwavSfV a23ef+jtLQyL0z9C/GqQeA7NlieGq6XWY28L8a/1sYwDPcgUF8GHlxmdkf71+2kc WNg1ILiHYpTfkNhHxG63hJ0t5D/eCD3u7kPG9lGZS+iyCWFTIXA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:20 2026 by rpki-client