$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: SXavujsnicxZIPbIiwMhctAhvZGfSRtvDkYm5laJglo= Subject key identifier: 2C:88:16:9F:7A:76:31:E0:2B:0F:52:F6:D2:C9:B1:41:0F:6A:1E:B8 Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 6F82B13F6C55205FDD84DE3808133A82713E7A0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 22:31:47 +0000 Manifest this update: Wed 16 Sep 2026 22:26:47 +0000 Manifest next update: Thu 17 Sep 2026 23:14:47 +0000 Files and hashes: 1: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: aEQLRZE3o9JaF30h3OzyH0N/lHA3n2jJ311h6+eY3bc=) 2: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:82:b1:3f:6c:55:20:5f:dd:84:de:38:08:13:3a:82:71:3e:7a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Sep 16 22:26:47 2026 GMT Not After : Sep 17 23:14:47 2026 GMT Subject: CN=2C88169F7A7631E02B0F52F6D2C9B1410F6A1EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:be:86:16:50:7a:cd:ab:e5:e7:8d:51:ba: 18:87:60:d2:97:b0:2c:c7:04:e5:df:ed:63:99:fe: 7b:87:4d:65:f5:00:ed:55:24:f4:e4:dc:99:96:af: 8d:3f:fd:66:d6:f6:9c:25:21:66:d2:b4:ed:d6:fa: 89:a9:dd:41:98:4d:d3:39:48:71:3d:c7:c0:31:a1: 2b:a5:96:0b:5a:3e:c1:db:18:0d:04:9d:8b:e3:43: fb:1e:00:28:7f:3a:7e:1d:b9:a4:30:cd:75:72:4e: 5c:68:68:45:9a:30:15:3d:aa:36:e0:94:cd:04:51: 17:04:91:0c:f9:93:8f:41:ee:59:3a:11:3a:23:d8: e9:47:3d:b1:3f:3b:8a:cb:67:da:56:80:74:eb:63: 3e:38:16:0f:c6:cc:91:16:89:0c:a9:27:ec:99:10: 2b:01:b8:3a:1c:37:cf:5f:c2:32:77:b0:80:70:1a: 51:10:fa:9a:0f:aa:fb:23:42:a7:21:92:d5:85:71: af:03:4f:60:74:38:96:0a:15:0b:4b:cf:64:73:e8: 75:cf:35:0a:dc:86:e8:5a:ec:b4:c0:15:8c:06:2b: f0:65:d8:84:54:8f:61:a0:c3:e6:f6:9a:c2:40:a0: ba:27:21:87:40:18:d1:52:aa:fb:77:dd:e9:49:cb: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:16:9F:7A:76:31:E0:2B:0F:52:F6:D2:C9:B1:41:0F:6A:1E:B8 X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e6:fc:d0:d0:bb:86:60:bf:01:f7:8c:d7:82:c5:0a:9a:35: 47:de:1c:37:b6:73:5d:af:0d:88:6a:0d:52:c7:4f:27:14:1a: cb:71:0d:1b:ba:fb:2a:7c:b4:61:da:5a:64:4d:ec:ed:8b:df: f7:75:bc:5f:94:8a:53:88:be:5e:76:ba:d4:9c:4c:a4:fc:79: f8:c2:30:3a:6b:99:aa:47:dc:4a:b0:65:a1:59:0a:86:d6:ac: c2:52:e5:ce:08:66:3d:08:c6:b1:5d:7d:64:62:2c:dd:35:ec: 6b:03:52:3f:77:8c:46:f1:af:d8:3d:5b:ff:a9:bf:f5:46:a5: cf:1f:da:7a:06:38:23:e0:4c:b2:78:7a:ed:3c:8b:ec:4b:5e: f7:af:ac:79:f5:a5:33:91:5e:c2:a6:a2:8d:ef:b2:ee:44:c5: 67:00:05:c2:06:7b:bf:c4:cf:4c:96:7c:92:8d:76:82:ad:0d: ba:b1:ff:84:f4:9a:f2:3f:c2:27:97:d5:a2:8e:2b:d9:e1:6d: e2:5c:6f:f6:c1:b9:f3:7d:88:a2:df:a4:44:39:46:19:7b:d5: cb:47:2e:3c:4f:67:b3:be:dc:3e:51:08:7e:d5:4b:7b:5e:b7: 85:96:6e:c0:d6:7a:f4:59:e2:42:91:fd:22:ac:55:95:df:c0: a9:8e:ef:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4KxP2xVIF/dhN44CBM6gnE+eg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA5MTYyMjI2NDdaFw0yNjA5MTcyMzE0NDdaMDMxMTAvBgNV BAMTKDJDODgxNjlGN0E3NjMxRTAyQjBGNTJGNkQyQzlCMTQxMEY2QTFFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjL6GFlB6zavl541RuhiHYNKX sCzHBOXf7WOZ/nuHTWX1AO1VJPTk3JmWr40//WbW9pwlIWbStO3W+omp3UGYTdM5 SHE9x8AxoSullgtaPsHbGA0EnYvjQ/seACh/On4duaQwzXVyTlxoaEWaMBU9qjbg lM0EURcEkQz5k49B7lk6EToj2OlHPbE/O4rLZ9pWgHTrYz44Fg/GzJEWiQypJ+yZ ECsBuDocN89fwjJ3sIBwGlEQ+poPqvsjQqchktWFca8DT2B0OJYKFQtLz2Rz6HXP NQrchuha7LTAFYwGK/Bl2IRUj2Ggw+b2msJAoLonIYdAGNFSqvt33elJyyUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIgWn3p2MeArD1L20smxQQ9qHrgwHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3m/NDQu4ZgvwH3jNeCxQqaNUfeHDe2c12v DYhqDVLHTycUGstxDRu6+yp8tGHaWmRN7O2L3/d1vF+UilOIvl52utScTKT8efjC MDprmapH3EqwZaFZCobWrMJS5c4IZj0IxrFdfWRiLN017GsDUj93jEbxr9g9W/+p v/VGpc8f2noGOCPgTLJ4eu08i+xLXvevrHn1pTORXsKmoo3vsu5ExWcABcIGe7/E z0yWfJKNdoKtDbqx/4T0mvI/wieX1aKOK9nhbeJcb/bBufN9iKLfpEQ5Rhl71ctH LjxPZ7O+3D5RCH7VS3tet4WWbsDWevRZ4kKR/SKsVZXfwKmO77w= -----END CERTIFICATE-----Generated at Thu Sep 17 10:05:35 2026 by rpki-client