$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: rLXr5Hg76brlSviTcEvnT9DXJnpzWn5WIK+wcQyi/WY= Subject key identifier: 86:E3:9B:CD:16:DD:C9:E5:D3:90:BD:61:4C:37:70:CF:C4:B5:E4:56 Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 1ACDA7A27F3EC9BF901D960A857E24455A06DCE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:57:16 +0000 Manifest this update: Wed 16 Sep 2026 22:52:16 +0000 Manifest next update: Thu 17 Sep 2026 23:06:16 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: 1Y8tKN5XfLf1k/3Uskzj8ot64IZ09+gYPlCH3d88od0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cd:a7:a2:7f:3e:c9:bf:90:1d:96:0a:85:7e:24:45:5a:06:dc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: Sep 16 22:52:16 2026 GMT Not After : Sep 17 23:06:16 2026 GMT Subject: CN=86E39BCD16DDC9E5D390BD614C3770CFC4B5E456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:45:20:c0:29:15:07:84:ff:a6:ef:fa:ba: df:bf:1c:de:ea:b8:36:3f:87:1a:cc:2b:15:aa:eb: 5b:a1:e7:73:1f:0c:72:43:8c:52:4d:8a:78:8b:fb: c9:dc:c5:48:f0:75:f0:80:c5:b8:f6:68:72:a7:cf: ac:b8:a7:06:7a:84:b8:6c:dd:4e:48:84:8f:44:66: 34:4d:22:21:39:b6:65:02:ed:81:fe:43:6e:b0:0b: b9:ad:b0:01:d8:f5:38:19:9b:26:ad:5f:37:6d:9a: d7:90:5b:e2:9b:43:f0:df:27:36:34:06:c7:8e:13: d2:fa:cf:b5:9c:74:a3:4c:d8:29:3d:df:47:fd:44: 50:09:e5:a3:cd:90:55:fd:79:ba:56:ff:e0:ec:3c: 13:1c:f1:29:13:42:75:77:3c:1b:2b:ef:17:96:d5: dd:88:08:11:d3:2e:d7:d8:06:28:61:83:f2:c5:94: e4:d7:c3:b0:30:29:94:90:24:bb:bd:66:f6:1d:87: 4d:31:b8:0e:06:48:07:45:76:59:5a:11:cc:bb:c8: 63:7c:1f:94:5b:85:3f:d7:7c:18:fd:05:a0:3c:22: 0e:5b:b6:a4:eb:8a:b8:62:98:ff:7c:1d:8d:23:b3: ea:d8:a9:0d:ca:ba:21:3d:ec:71:6a:ac:45:69:c7: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E3:9B:CD:16:DD:C9:E5:D3:90:BD:61:4C:37:70:CF:C4:B5:E4:56 X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:55:46:05:50:b7:4c:f2:93:fa:da:a4:29:81:9a:67:2a:ec: 1a:47:94:10:8d:41:0d:51:02:38:ae:eb:8e:c3:c7:15:fe:93: 50:2d:aa:0b:b2:ae:d4:14:1a:e5:01:d6:29:6e:19:dc:6b:92: dd:e9:60:d3:dc:78:51:29:d2:20:26:0d:75:ad:4f:f7:7a:97: 2b:0b:85:90:89:f7:69:6c:1e:27:4d:4f:35:4c:22:b3:1c:2f: 82:b5:29:63:30:2a:89:9b:3e:c7:14:20:a5:6f:fc:ae:42:ae: 6f:11:9f:ec:d0:cb:57:28:40:f5:47:24:14:e2:27:7b:2c:a5: b1:a9:e2:01:8d:de:2b:2b:1e:22:04:a3:83:a3:51:2c:5a:20: fd:1c:9e:a7:cd:82:bc:49:d5:45:a9:9f:3d:66:cd:59:ec:0b: 20:26:45:d7:20:14:d3:2b:9b:2f:e3:2f:c8:90:7c:f4:a1:e3: 23:f7:13:70:5f:16:88:19:bd:53:54:66:14:6c:f9:f6:1e:0c: 11:32:2e:59:96:14:4e:d7:50:8d:23:92:64:58:c3:c6:ac:04: ac:bb:d1:0d:28:d2:ea:28:cf:19:2f:ee:c7:62:06:b5:38:d7: 74:27:2b:d1:26:b2:41:87:8e:17:48:a3:ea:cb:c0:90:ab:ac: 3b:eb:80:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGs2non8+yb+QHZYKhX4kRVoG3OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA5MTYyMjUyMTZaFw0yNjA5MTcyMzA2MTZaMDMxMTAvBgNV BAMTKDg2RTM5QkNEMTZEREM5RTVEMzkwQkQ2MTRDMzc3MENGQzRCNUU0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJEUgwCkVB4T/pu/6ut+/HN7q uDY/hxrMKxWq61uh53MfDHJDjFJNiniL+8ncxUjwdfCAxbj2aHKnz6y4pwZ6hLhs 3U5IhI9EZjRNIiE5tmUC7YH+Q26wC7mtsAHY9TgZmyatXzdtmteQW+KbQ/DfJzY0 BseOE9L6z7WcdKNM2Ck930f9RFAJ5aPNkFX9ebpW/+DsPBMc8SkTQnV3PBsr7xeW 1d2ICBHTLtfYBihhg/LFlOTXw7AwKZSQJLu9ZvYdh00xuA4GSAdFdllaEcy7yGN8 H5RbhT/XfBj9BaA8Ig5btqTrirhimP98HY0js+rYqQ3KuiE97HFqrEVpx+NRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhuObzRbdyeXTkL1hTDdwz8S15FYwHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANVVRgVQt0zyk/rapCmBmmcq7BpHlBCNQQ1R Ajiu647DxxX+k1AtqguyrtQUGuUB1iluGdxrkt3pYNPceFEp0iAmDXWtT/d6lysL hZCJ92lsHidNTzVMIrMcL4K1KWMwKombPscUIKVv/K5Crm8Rn+zQy1coQPVHJBTi J3sspbGp4gGN3isrHiIEo4OjUSxaIP0cnqfNgrxJ1UWpnz1mzVnsCyAmRdcgFNMr my/jL8iQfPSh4yP3E3BfFogZvVNUZhRs+fYeDBEyLlmWFE7XUI0jkmRYw8asBKy7 0Q0o0uoozxkv7sdiBrU413QnK9EmskGHjhdIo+rLwJCrrDvrgNQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:59 2026 by rpki-client