$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: DFWUZmeIf6I/ZdGWM4npFXpkJk+NB110jCsW0n4e4Lg= Subject key identifier: 8F:93:5C:0F:C3:CF:CD:8A:57:9F:1A:9F:E3:35:C2:BD:F5:18:F9:5E Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 4C101CAD6423F8FC2221D48374FB87CEA0BD23CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:52:02 +0000 Manifest this update: Thu 17 Sep 2026 02:47:02 +0000 Manifest next update: Fri 18 Sep 2026 04:09:02 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) 2: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 3: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: 0le/W6fMBzOjSG0A40IKvbv5fpgoQvHPdBYQmzIxM68=) 4: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:10:1c:ad:64:23:f8:fc:22:21:d4:83:74:fb:87:ce:a0:bd:23:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Sep 17 02:47:02 2026 GMT Not After : Sep 18 04:09:02 2026 GMT Subject: CN=8F935C0FC3CFCD8A579F1A9FE335C2BDF518F95E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:04:83:65:73:e2:95:5f:45:ce:58:41:0e: 7b:47:90:c6:6c:7c:df:ce:e3:f0:6a:f9:e0:61:24: 03:97:8f:b6:d1:11:86:36:49:59:a9:9a:13:36:c4: a0:28:bc:5c:73:a6:4e:f8:46:b3:16:ae:f4:aa:bc: 36:d9:5a:0e:6a:73:49:40:ca:fe:e1:5a:7d:09:1a: ba:36:0b:8b:91:75:1b:69:d2:37:2b:da:2d:21:aa: 72:56:d5:9a:66:3c:73:b2:b9:68:70:f6:27:9e:2a: 92:99:57:0b:4f:40:0a:80:90:c8:a9:81:2f:fc:51: 0c:36:78:95:fe:03:8e:3c:19:37:ea:ee:06:89:62: 14:d4:aa:72:47:47:32:b9:6b:84:fa:0a:7c:07:9d: 45:57:31:90:70:66:ed:1f:4a:4f:b4:b5:18:e1:33: 73:f9:e1:0e:36:0f:71:7c:1e:3f:75:c9:5d:6a:42: 49:aa:c6:3e:0a:d5:da:52:d3:5b:45:b7:5f:e3:a0: 32:48:3b:7e:a5:3e:61:6c:ba:46:f1:ee:f6:22:6f: 44:43:75:06:66:69:e9:13:90:23:76:5b:18:85:8d: 0a:69:3f:be:d4:a2:60:10:47:c6:3f:4d:43:81:de: 08:f1:eb:95:00:d1:0c:e0:08:1a:4a:89:24:88:a2: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:93:5C:0F:C3:CF:CD:8A:57:9F:1A:9F:E3:35:C2:BD:F5:18:F9:5E X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3d:92:07:7d:83:a4:55:15:fa:f9:48:c2:82:a6:55:fc:72: ce:9a:cf:a7:5f:37:ae:7a:5a:1d:cc:37:3a:3b:5b:83:5e:b9: 38:2f:31:d2:64:c7:8e:95:6a:62:40:1b:a3:17:d1:36:2a:26: 7c:6b:a0:be:0c:e5:a1:97:bd:42:d4:a8:fb:b3:9d:6e:6a:99: 87:3e:bf:8e:01:99:b6:4a:63:6f:c9:16:70:27:f4:f6:6a:cc: 0c:56:07:fe:41:41:b0:4d:e9:fc:da:d4:e9:81:ac:ac:a2:39: 49:5d:e3:c6:a4:6c:a1:10:68:ab:b6:f5:62:28:ad:29:0d:20: b6:ba:37:a3:d0:3f:da:b4:66:b5:74:b5:23:2b:02:27:01:70: 39:30:a2:25:b3:5f:4e:5c:1c:0c:4e:eb:f5:2e:89:1e:a2:e1: 18:8d:2d:40:47:b1:28:bc:0d:5c:da:61:15:dd:cd:38:cc:24: c8:cd:5f:9e:59:e7:cc:50:00:f7:17:b7:60:e3:eb:91:93:63: 37:25:de:a4:5a:23:aa:3f:78:6d:e4:90:ad:96:bb:30:1f:98: 94:a4:5d:34:8a:76:e8:6d:66:87:1f:8d:1f:06:78:14:b0:59: 89:e3:a0:e3:cc:2e:73:23:73:0c:5e:f1:d9:3c:24:24:8a:d6: e5:b7:c2:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBAcrWQj+PwiIdSDdPuHzqC9I8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA5MTcwMjQ3MDJaFw0yNjA5MTgwNDA5MDJaMDMxMTAvBgNV BAMTKDhGOTM1QzBGQzNDRkNEOEE1NzlGMUE5RkUzMzVDMkJERjUxOEY5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxgSDZXPilV9FzlhBDntHkMZs fN/O4/Bq+eBhJAOXj7bREYY2SVmpmhM2xKAovFxzpk74RrMWrvSqvDbZWg5qc0lA yv7hWn0JGro2C4uRdRtp0jcr2i0hqnJW1ZpmPHOyuWhw9ieeKpKZVwtPQAqAkMip gS/8UQw2eJX+A448GTfq7gaJYhTUqnJHRzK5a4T6CnwHnUVXMZBwZu0fSk+0tRjh M3P54Q42D3F8Hj91yV1qQkmqxj4K1dpS01tFt1/joDJIO36lPmFsukbx7vYib0RD dQZmaekTkCN2WxiFjQppP77UomAQR8Y/TUOB3gjx65UA0QzgCBpKiSSIonMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5NcD8PPzYpXnxqf4zXCvfUY+V4wHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc9kgd9g6RVFfr5SMKCplX8cs6az6dfN656 Wh3MNzo7W4NeuTgvMdJkx46VamJAG6MX0TYqJnxroL4M5aGXvULUqPuznW5qmYc+ v44BmbZKY2/JFnAn9PZqzAxWB/5BQbBN6fza1OmBrKyiOUld48akbKEQaKu29WIo rSkNILa6N6PQP9q0ZrV0tSMrAicBcDkwoiWzX05cHAxO6/UuiR6i4RiNLUBHsSi8 DVzaYRXdzTjMJMjNX55Z58xQAPcXt2Dj65GTYzcl3qRaI6o/eG3kkK2WuzAfmJSk XTSKduhtZocfjR8GeBSwWYnjoOPMLnMjcwxe8dk8JCSK1uW3wqY= -----END CERTIFICATE-----Generated at Thu Sep 17 13:21:26 2026 by rpki-client