$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: 0N137hu7ojXghYfIiJpZM3uW86r2yy0ThWp15Nv+kZ0= Subject key identifier: 39:8D:88:75:E2:0A:4D:1A:4E:4D:1C:4B:7D:E8:91:F2:93:9A:C0:8F Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 3E6A3A5BC3A2457E341E63A4A184286556BE064E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:57:19 +0000 Manifest this update: Wed 16 Sep 2026 22:52:19 +0000 Manifest next update: Fri 18 Sep 2026 02:15:19 +0000 Files and hashes: 1: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: jYjoBmh5EqXQWTW9r8II9rnSL9vkQ58Z3IZJQU3VwJs=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6a:3a:5b:c3:a2:45:7e:34:1e:63:a4:a1:84:28:65:56:be:06:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Sep 16 22:52:19 2026 GMT Not After : Sep 18 02:15:19 2026 GMT Subject: CN=398D8875E20A4D1A4E4D1C4B7DE891F2939AC08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:fa:0f:3e:99:c4:12:a1:5a:2e:fd:92:48: 02:5c:78:1e:23:8a:51:1d:7d:c5:2e:b5:fa:04:d9: e5:32:be:27:88:d7:32:26:cb:3e:ed:d5:6a:ce:bb: 9c:98:29:88:ab:69:d8:10:ad:de:ad:ea:1a:cc:74: a0:a0:ac:f5:38:7c:d1:e8:1b:e7:35:73:04:84:cf: 04:40:76:8b:bd:d4:39:d3:02:8e:ff:54:9a:ba:57: b9:a0:75:86:85:a0:a9:fb:92:91:3b:8c:39:cf:ad: 37:57:97:04:8b:ac:51:7e:23:05:f0:2b:93:ec:63: 49:81:d1:3a:dc:60:b9:4f:e2:d1:ea:6c:c2:67:b4: 31:14:c8:9c:49:50:6f:22:a7:7e:6f:9a:80:ca:b7: e7:4b:76:8a:c8:a1:21:4f:cb:7c:7b:71:99:b4:06: 97:1b:d8:b3:17:40:b5:81:0c:3e:ed:2d:7f:e8:26: 2a:59:0f:c1:a4:ef:a7:0e:68:cb:b6:58:58:74:c0: 5e:e8:f3:b4:78:e1:b5:fc:b8:69:11:54:9d:f8:43: 9f:87:60:d4:af:c0:4b:b6:e9:ba:17:d3:ac:05:40: 78:1e:2e:d7:08:c7:60:cc:69:e8:12:ff:43:7e:cf: 23:6e:ea:3c:83:e1:1a:d4:4c:b7:08:03:e2:44:02: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8D:88:75:E2:0A:4D:1A:4E:4D:1C:4B:7D:E8:91:F2:93:9A:C0:8F X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:00:1b:1a:1c:20:02:f8:f3:b1:e6:2b:f5:cc:89:90:68: a1:d9:64:08:54:db:59:5a:6b:86:c0:cf:7b:ec:81:73:7c:d8: 7d:35:4f:cd:40:b9:2b:14:51:45:45:2e:9a:99:32:ad:c5:f5: b0:3f:a8:db:de:75:b3:c6:b4:61:17:c1:21:c1:fa:df:f5:10: 2d:96:67:95:ab:cc:88:c4:40:6b:ff:ef:dc:8b:d3:0c:11:70: e2:87:d3:44:0e:e7:18:67:80:03:a0:60:96:d6:36:32:b9:c5: 18:75:83:9a:82:79:68:3e:14:1d:66:7f:38:51:61:15:18:fc: f1:b5:3a:2f:f8:91:a6:9f:3b:ed:11:46:f7:49:4e:ec:ac:19: c6:87:4f:d9:b8:5d:b4:85:1d:5f:07:e3:31:66:30:4d:0e:c0: e4:c5:78:07:4d:9f:0c:57:af:b1:0c:37:37:91:f5:d8:e1:88: a6:cf:4c:d9:1a:22:0e:5d:a4:02:8e:1d:2e:c5:a3:9e:24:a0: 4e:a6:22:14:f8:14:8f:e1:85:71:b5:58:07:d5:71:05:3b:4b: 4d:b8:c5:a3:2e:ad:bd:da:5c:de:03:8f:77:54:b9:03:6f:93: 3a:ba:de:d4:fd:e8:bc:93:13:3c:3d:d9:c8:59:11:3a:2d:b5: 52:53:98:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmo6W8OiRX40HmOkoYQoZVa+Bk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA5MTYyMjUyMTlaFw0yNjA5MTgwMjE1MTlaMDMxMTAvBgNV BAMTKDM5OEQ4ODc1RTIwQTREMUE0RTREMUM0QjdERTg5MUYyOTM5QUMwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xvoPPpnEEqFaLv2SSAJceB4j ilEdfcUutfoE2eUyvieI1zImyz7t1WrOu5yYKYiradgQrd6t6hrMdKCgrPU4fNHo G+c1cwSEzwRAdou91DnTAo7/VJq6V7mgdYaFoKn7kpE7jDnPrTdXlwSLrFF+IwXw K5PsY0mB0TrcYLlP4tHqbMJntDEUyJxJUG8ip35vmoDKt+dLdorIoSFPy3x7cZm0 Bpcb2LMXQLWBDD7tLX/oJipZD8Gk76cOaMu2WFh0wF7o87R44bX8uGkRVJ34Q5+H YNSvwEu26boX06wFQHgeLtcIx2DMaegS/0N+zyNu6jyD4RrUTLcIA+JEAq8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOY2IdeIKTRpOTRxLfeiR8pOawI8wHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkkABsaHCAC+POx5iv1zImQaKHZZAhU21la a4bAz3vsgXN82H01T81AuSsUUUVFLpqZMq3F9bA/qNvedbPGtGEXwSHB+t/1EC2W Z5WrzIjEQGv/79yL0wwRcOKH00QO5xhngAOgYJbWNjK5xRh1g5qCeWg+FB1mfzhR YRUY/PG1Oi/4kaafO+0RRvdJTuysGcaHT9m4XbSFHV8H4zFmME0OwOTFeAdNnwxX r7EMNzeR9djhiKbPTNkaIg5dpAKOHS7Fo54koE6mIhT4FI/hhXG1WAfVcQU7S024 xaMurb3aXN4Dj3dUuQNvkzq63tT96LyTEzw92chZETottVJTmOs= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:33 2026 by rpki-client