$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft File: 1AD9403233542883A89282A52F92A9AC66CB9D45.mft (raw, json) Hash identifier: TMycH4W5vwF+X9lTO0g1+7o5wfFk9IyOixUrgXrhcNw= Subject key identifier: DF:83:3A:68:6A:4C:4F:9F:A1:55:E5:AE:55:E6:D8:FD:D1:89:42:EF Authority key identifier: 1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 Certificate issuer: /CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Certificate serial: 5E4199F8A690862DAC02EB488172E006540B0BDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft Manifest number: AF Signing time: Thu 10 Sep 2026 17:28:29 +0000 Manifest this update: Thu 10 Sep 2026 17:23:29 +0000 Manifest next update: Fri 11 Sep 2026 20:00:29 +0000 Files and hashes: 1: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: mJSGu8A/4Dy8uEYCBOpVGIvPxs11huUPRlbNbg4vJUA=) 2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: PAkY9cD4hOLFVdGNgMNY2HQi6aJ2ztIpajYc1pjG9X8=) 3: 1AD9403233542883A89282A52F92A9AC66CB9D45.crl (hash: 97AGPLUGjRjfBVbmYNyDX5JPitiTrgbavmd1EtCoSEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:41:99:f8:a6:90:86:2d:ac:02:eb:48:81:72:e0:06:54:0b:0b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD9403233542883A89282A52F92A9AC66CB9D45 Validity Not Before: Sep 10 17:23:29 2026 GMT Not After : Sep 11 20:00:29 2026 GMT Subject: CN=DF833A686A4C4F9FA155E5AE55E6D8FDD18942EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:5d:08:c7:63:5d:ec:9f:78:a3:7a:a1:de: cb:e8:2c:79:ef:74:45:05:6d:13:83:c1:2c:e1:7d: ab:0f:90:ab:8d:5a:a3:e5:b3:03:97:b2:75:2e:f3: d1:96:f2:eb:6e:25:70:33:ae:34:2c:4c:b8:95:09: 1d:7e:16:b0:a1:a7:ab:f0:ac:c3:94:71:03:ea:3d: ef:3c:bc:8c:0d:3f:1a:35:2e:1d:c0:5c:67:4e:bc: 08:f4:68:e0:ea:e9:24:7c:a3:99:c4:d6:9f:a7:cb: 80:8d:44:41:6b:6a:32:9c:1b:d5:c6:7b:c4:37:b6: 35:7d:c6:e1:a8:04:44:48:b3:9f:4f:2a:fd:fc:94: 17:52:b2:f8:14:a2:48:79:06:d1:40:22:b5:19:33: af:87:60:46:69:86:f8:5f:3f:b5:ae:2f:c9:dc:00: e0:43:00:44:71:6e:78:bb:95:c7:60:5f:2f:5c:e4: dc:a3:4f:92:fb:17:07:ee:9c:b3:cf:99:71:0a:61: b6:35:ae:bf:a1:ab:c2:f8:88:96:d9:9c:9c:5c:e2: 46:5f:8e:5e:6c:bb:56:5f:33:d6:95:ab:81:7c:95: d6:86:b7:61:3c:20:cb:14:0e:e7:71:d6:61:72:08: 40:95:a3:b3:f6:f5:d5:e1:e8:f3:6d:d7:9f:10:ef: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:83:3A:68:6A:4C:4F:9F:A1:55:E5:AE:55:E6:D8:FD:D1:89:42:EF X509v3 Authority Key Identifier: keyid:1A:D9:40:32:33:54:28:83:A8:92:82:A5:2F:92:A9:AC:66:CB:9D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AD9403233542883A89282A52F92A9AC66CB9D45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/1AD9403233542883A89282A52F92A9AC66CB9D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:cd:f2:d3:af:2b:d0:16:7c:3d:32:d3:ee:64:39:05:34:84: 6d:79:10:74:34:f4:e5:e5:66:f1:61:4a:6a:87:30:7e:27:40: 5b:e7:00:70:91:d2:ed:0c:54:da:df:20:1a:f7:5a:77:61:56: dd:61:53:37:32:88:ca:9d:50:43:4e:c7:ec:f7:98:5f:78:fc: d8:d2:2c:e8:63:98:fb:be:5e:41:40:36:5a:d4:5b:39:d4:5e: 44:c6:e3:e6:9b:e7:b5:d1:61:8a:a8:e7:05:13:89:7f:80:2c: 1e:47:bb:a6:43:31:27:b9:88:ad:ca:2f:59:67:19:f4:fd:58: 40:c3:45:ad:da:f2:52:7f:60:25:06:2d:cc:b9:61:b9:2b:8f: a8:47:3c:ce:0f:4e:4e:83:16:da:40:23:ff:ff:95:bf:a9:c1: ea:a0:25:aa:d8:63:aa:f2:0d:57:74:2f:c0:5a:55:e9:67:bb: 81:93:a4:31:10:d5:bb:b0:74:19:82:4d:32:55:70:69:f1:8e: 69:14:76:8b:a0:93:7c:7d:1d:5f:ea:33:54:d3:36:9c:49:3d: dd:d4:47:07:dd:bd:90:e8:32:9c:13:c6:52:cf:b0:b7:f3:c9: 9e:d3:08:12:e8:f2:61:36:27:ae:b6:70:42:49:79:b1:e9:ae: ce:b4:c8:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkGZ+KaQhi2sAutIgXLgBlQLC98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2 NkNCOUQ0NTAeFw0yNjA5MTAxNzIzMjlaFw0yNjA5MTEyMDAwMjlaMDMxMTAvBgNV BAMTKERGODMzQTY4NkE0QzRGOUZBMTU1RTVBRTU1RTZEOEZERDE4OTQyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Y10Ix2Nd7J94o3qh3svoLHnv dEUFbRODwSzhfasPkKuNWqPlswOXsnUu89GW8utuJXAzrjQsTLiVCR1+FrChp6vw rMOUcQPqPe88vIwNPxo1Lh3AXGdOvAj0aODq6SR8o5nE1p+ny4CNREFrajKcG9XG e8Q3tjV9xuGoBERIs59PKv38lBdSsvgUokh5BtFAIrUZM6+HYEZphvhfP7WuL8nc AOBDAERxbni7lcdgXy9c5NyjT5L7FwfunLPPmXEKYbY1rr+hq8L4iJbZnJxc4kZf jl5su1ZfM9aVq4F8ldaGt2E8IMsUDudx1mFyCECVo7P29dXh6PNt158Q77zjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34M6aGpMT5+hVeWuVebY/dGJQu8wHwYDVR0j BBgwFoAUGtlAMjNUKIOokoKlL5KprGbLnUUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MTQ1MDctNzE3NC00ZjFlLTg1NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIz MzU0Mjg4M0E4OTI4MkE1MkY5MkE5QUM2NkNCOUQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUQ5NDAzMjMzNTQyODgzQTg5MjgyQTUyRjkyQTlBQzY2Q0I5 RDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvMUFEOTQwMzIzMzU0Mjg4M0E4OTI4MkE1MkY5MkE5 QUM2NkNCOUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANbN8tOvK9AWfD0y0+5kOQU0hG15EHQ09OXl ZvFhSmqHMH4nQFvnAHCR0u0MVNrfIBr3WndhVt1hUzcyiMqdUENOx+z3mF94/NjS LOhjmPu+XkFANlrUWznUXkTG4+ab57XRYYqo5wUTiX+ALB5Hu6ZDMSe5iK3KL1ln GfT9WEDDRa3a8lJ/YCUGLcy5Ybkrj6hHPM4PTk6DFtpAI///lb+pweqgJarYY6ry DVd0L8BaVelnu4GTpDEQ1buwdBmCTTJVcGnxjmkUdougk3x9HV/qM1TTNpxJPd3U RwfdvZDoMpwTxlLPsLfzyZ7TCBLo8mE2J662cEJJebHprs60yOQ= -----END CERTIFICATE-----Generated at Fri Sep 11 08:25:13 2026 by rpki-client