$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: u+fvk706pq5ikkFitJPMSpTZNAzQU+wNRzQRZjb3cjI= Subject key identifier: 2E:DB:6F:D1:49:EF:6E:A0:31:5C:0D:12:8A:ED:43:FE:B7:B0:3D:52 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 1E4E7582B90D29C9EC824FF77C1ADAC87583C7B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:16:42 +0000 Manifest this update: Wed 16 Sep 2026 18:11:42 +0000 Manifest next update: Thu 17 Sep 2026 20:26:42 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) 2: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: Bb76TkFr3q8BmwG384ML144QPoX4Sm/uJYj/MBObUj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4e:75:82:b9:0d:29:c9:ec:82:4f:f7:7c:1a:da:c8:75:83:c7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Sep 16 18:11:42 2026 GMT Not After : Sep 17 20:26:42 2026 GMT Subject: CN=2EDB6FD149EF6EA0315C0D128AED43FEB7B03D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:75:79:1b:c6:98:76:01:7c:b1:3f:99:8d: ad:5b:2a:b5:f7:c7:ac:ad:72:ae:ee:80:03:dc:d4: 06:29:36:05:86:83:6f:ae:48:a4:36:05:9c:40:d3: b8:75:4f:45:e8:2c:5b:cb:98:81:38:ee:ec:22:56: 5a:64:15:10:aa:93:e1:6a:da:d1:45:7f:cd:03:f5: a4:a7:43:7d:c3:b8:3c:58:37:d6:9e:c1:88:d5:1e: 0a:fa:f7:ae:b7:60:e3:93:d1:d8:ef:21:f5:43:38: d3:ff:52:a8:39:32:ad:5a:9f:74:58:23:b1:27:64: 9f:02:c1:26:d9:24:30:09:43:cd:57:b7:29:33:ff: ef:46:e9:44:56:02:bd:7d:95:02:d0:87:f8:2a:49: d9:05:5a:c7:93:bf:d0:84:17:fe:69:8f:05:a2:95: 6e:02:9c:e7:71:e3:ab:9f:2c:40:02:13:04:8d:fc: f1:ec:d9:6d:2d:97:2c:62:3d:a4:2e:dd:cd:62:23: 34:48:6c:37:c7:db:a3:88:bd:45:da:22:79:4a:2b: 14:84:88:f7:54:5e:e7:ba:e9:25:41:3e:37:e7:a0: 4b:f2:2f:e2:3f:5c:02:48:5b:a8:d2:80:92:b9:0d: 3a:4e:b5:da:4a:a1:5f:f4:f4:43:85:99:bc:8b:b5: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:6F:D1:49:EF:6E:A0:31:5C:0D:12:8A:ED:43:FE:B7:B0:3D:52 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:82:9f:01:8c:e0:e5:59:28:22:c5:83:47:4e:99:24:13:6e: aa:90:44:24:6e:3f:e2:41:e5:34:86:da:43:ca:e8:ae:16:f6: d6:fc:6b:25:38:7e:a7:0a:d9:48:8f:fc:ab:cf:95:78:34:2d: 1e:ca:80:91:0c:a0:62:7e:73:9c:ea:65:eb:5d:47:c0:d3:ff: 46:35:dd:be:cd:79:c4:4e:0a:32:d3:44:d3:18:97:44:f0:6b: be:ce:03:6b:a4:76:a4:eb:16:56:11:88:d8:67:8a:2c:f8:f7: 3d:a0:45:54:f2:4c:e5:61:4e:a6:54:72:17:ef:d5:d4:ae:33: 70:a5:63:3d:33:a8:d1:a4:8d:70:8e:0f:6c:03:8c:6d:94:3a: db:05:8f:a5:63:26:39:a5:56:ec:b7:af:f7:af:ec:ad:4d:d6: 57:f2:b6:23:fa:55:dc:35:79:43:cf:fd:61:48:b8:6c:7f:de: da:ea:e4:d4:ae:a1:62:41:18:fc:de:15:b7:e0:3b:51:36:10: 94:e0:44:49:ea:95:df:07:d9:aa:02:3f:e4:b4:43:28:aa:bb: 26:4a:e9:97:44:2d:6c:97:ae:95:68:10:76:dd:25:8f:69:3c: e6:6d:2e:6b:23:0c:b5:61:b1:3b:15:50:74:6c:26:20:e3:de: f7:a7:bb:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHk51grkNKcnsgk/3fBrayHWDx7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA5MTYxODExNDJaFw0yNjA5MTcyMDI2NDJaMDMxMTAvBgNV BAMTKDJFREI2RkQxNDlFRjZFQTAzMTVDMEQxMjhBRUQ0M0ZFQjdCMDNENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcS3V5G8aYdgF8sT+Zja1bKrX3 x6ytcq7ugAPc1AYpNgWGg2+uSKQ2BZxA07h1T0XoLFvLmIE47uwiVlpkFRCqk+Fq 2tFFf80D9aSnQ33DuDxYN9aewYjVHgr69663YOOT0djvIfVDONP/Uqg5Mq1an3RY I7EnZJ8CwSbZJDAJQ81Xtykz/+9G6URWAr19lQLQh/gqSdkFWseTv9CEF/5pjwWi lW4CnOdx46ufLEACEwSN/PHs2W0tlyxiPaQu3c1iIzRIbDfH26OIvUXaInlKKxSE iPdUXue66SVBPjfnoEvyL+I/XAJIW6jSgJK5DTpOtdpKoV/09EOFmbyLtcJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULttv0UnvbqAxXA0Siu1D/rewPVIwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACCnwGM4OVZKCLFg0dOmSQTbqqQRCRuP+JB 5TSG2kPK6K4W9tb8ayU4fqcK2UiP/KvPlXg0LR7KgJEMoGJ+c5zqZetdR8DT/0Y1 3b7NecROCjLTRNMYl0Twa77OA2ukdqTrFlYRiNhniiz49z2gRVTyTOVhTqZUchfv 1dSuM3ClYz0zqNGkjXCOD2wDjG2UOtsFj6VjJjmlVuy3r/ev7K1N1lfytiP6Vdw1 eUPP/WFIuGx/3trq5NSuoWJBGPzeFbfgO1E2EJTgREnqld8H2aoCP+S0QyiquyZK 6ZdELWyXrpVoEHbdJY9pPOZtLmsjDLVhsTsVUHRsJiDj3venu20= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:23 2026 by rpki-client