$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: 2KK8hGHxwxTCwU9NrjO5vUtaDraczun/d3EcEYtSVJM= Subject key identifier: 41:28:F2:23:88:42:1A:49:06:A0:B6:C0:FD:64:DE:85:B2:F1:4B:52 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 432B2C021FAF19D01DE25BCAA2D0A3D1AEFDDD57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:49:55 +0000 Manifest this update: Wed 16 Sep 2026 16:44:55 +0000 Manifest next update: Thu 17 Sep 2026 19:49:55 +0000 Files and hashes: 1: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: cx7aHW25Su5DbHG9tE82B/omHW+z5I1weemkn2ENOms=) 2: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) 3: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2b:2c:02:1f:af:19:d0:1d:e2:5b:ca:a2:d0:a3:d1:ae:fd:dd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Sep 16 16:44:55 2026 GMT Not After : Sep 17 19:49:55 2026 GMT Subject: CN=4128F22388421A4906A0B6C0FD64DE85B2F14B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fb:44:f4:e1:2d:4c:80:33:47:c4:83:4e:d8: d9:68:7a:1e:d5:b3:e4:ea:c7:ff:f5:eb:55:51:17: 59:c7:4f:f6:75:75:a8:17:d7:ff:e9:c7:66:43:9b: a8:53:8a:45:4f:f5:50:73:61:7e:7e:6d:f6:3c:9a: 6e:e5:d9:c1:fc:9c:0a:51:b2:1f:af:f8:6d:f4:0a: 27:8b:29:f7:d6:3a:4c:af:59:fc:f9:38:bc:5d:b2: 45:8c:c0:97:9c:f6:34:99:c2:c9:0c:18:55:5f:f5: c1:7d:9c:6d:8e:54:5b:1e:b4:e4:7f:a1:bd:64:20: db:1f:55:35:bc:98:46:a2:04:e1:d2:43:6f:fa:c4: 9e:15:4a:32:97:a4:b8:37:36:96:47:d6:98:2c:cc: 24:54:bf:6f:da:bf:27:a1:90:24:c4:c0:99:f9:76: b8:64:12:e2:07:0d:2f:e1:c3:ba:dc:fb:fc:70:84: ac:86:61:a5:25:a8:5c:65:1b:85:91:33:5d:8a:59: 55:bb:ee:ea:fa:41:4d:88:ef:5b:96:34:07:a3:1b: d7:bd:aa:e8:5b:96:28:dd:fc:9c:a4:dc:17:64:3b: 83:04:0c:5d:84:eb:7f:32:f9:8c:9e:da:2d:97:fe: e4:f1:73:85:85:73:a9:6d:e5:50:8d:a9:da:05:10: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:28:F2:23:88:42:1A:49:06:A0:B6:C0:FD:64:DE:85:B2:F1:4B:52 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:28:8a:82:11:31:02:f8:ed:91:53:b9:cd:1b:c4:1f:c3:d2: 80:bd:f4:46:d1:8d:33:41:35:f7:3a:15:be:f5:d7:4d:d7:b4: 1d:5e:0b:7d:92:c5:7e:0f:27:ea:e5:df:2e:51:73:e8:26:94: 3c:04:83:36:19:e6:09:62:e5:17:e9:c3:68:88:bc:f8:bd:9f: de:92:72:18:e4:9e:c7:9b:4b:31:7d:47:72:5a:44:49:39:14: 9b:9e:cc:2f:2a:8e:9c:b9:b4:2d:df:b6:04:17:8d:ad:83:d8: d6:95:1d:70:51:1d:7d:48:78:59:c9:5a:b8:26:9c:69:38:c7: ac:1e:ab:05:77:37:a1:d6:a3:45:9d:3d:6c:c5:f8:fa:a9:ad: 71:d2:50:ec:be:8b:35:ea:12:1c:43:e5:42:14:50:b0:3c:b7: 43:bf:73:2f:18:3c:0f:ce:30:68:df:a6:c9:0e:fd:74:9b:9d: 1e:31:fa:46:a8:29:89:45:f3:16:72:fc:f9:b8:65:e7:61:88: 6e:cd:c9:cb:0d:7c:c7:c3:3d:52:53:a6:fa:1d:a9:d2:d7:0a: 4e:39:14:d9:db:bc:e1:47:f6:3f:f8:f0:31:fa:5c:2d:dc:7b: 4a:c3:a9:2c:6f:82:22:bd:05:fa:dc:7d:49:7c:bf:60:28:0a: e7:10:97:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyssAh+vGdAd4lvKotCj0a793VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjA5MTYxNjQ0NTVaFw0yNjA5MTcxOTQ5NTVaMDMxMTAvBgNV BAMTKDQxMjhGMjIzODg0MjFBNDkwNkEwQjZDMEZENjRERTg1QjJGMTRCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+0T04S1MgDNHxINO2Nloeh7V s+Tqx//161VRF1nHT/Z1dagX1//px2ZDm6hTikVP9VBzYX5+bfY8mm7l2cH8nApR sh+v+G30CieLKffWOkyvWfz5OLxdskWMwJec9jSZwskMGFVf9cF9nG2OVFsetOR/ ob1kINsfVTW8mEaiBOHSQ2/6xJ4VSjKXpLg3NpZH1pgszCRUv2/avyehkCTEwJn5 drhkEuIHDS/hw7rc+/xwhKyGYaUlqFxlG4WRM12KWVW77ur6QU2I71uWNAejG9e9 quhblijd/Jyk3BdkO4MEDF2E638y+Yye2i2X/uTxc4WFc6lt5VCNqdoFEOCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQSjyI4hCGkkGoLbA/WTehbLxS1IwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0oioIRMQL47ZFTuc0bxB/D0oC99EbRjTNB Nfc6Fb71103XtB1eC32SxX4PJ+rl3y5Rc+gmlDwEgzYZ5gli5Rfpw2iIvPi9n96S chjknsebSzF9R3JaREk5FJuezC8qjpy5tC3ftgQXja2D2NaVHXBRHX1IeFnJWrgm nGk4x6weqwV3N6HWo0WdPWzF+PqprXHSUOy+izXqEhxD5UIUULA8t0O/cy8YPA/O MGjfpskO/XSbnR4x+kaoKYlF8xZy/Pm4ZedhiG7NycsNfMfDPVJTpvodqdLXCk45 FNnbvOFH9j/48DH6XC3ce0rDqSxvgiK9BfrcfUl8v2AoCucQlys= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:44 2026 by rpki-client