$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft File: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft (raw, json) Hash identifier: 5YhcACU3TjpRT8RNRHsDpjHlQNQoj8EkoH1m2z0ShdU= Subject key identifier: 9C:08:0A:15:D0:FC:82:22:2D:F9:B4:93:29:86:75:BE:32:87:61:8F Authority key identifier: 14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD Certificate issuer: /CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD Certificate serial: 3BE0EACEDF0FC5BBD71C11A6B27F7EF9F727287B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft Manifest number: BA Signing time: Thu 17 Sep 2026 07:17:32 +0000 Manifest this update: Thu 17 Sep 2026 07:12:32 +0000 Manifest next update: Fri 18 Sep 2026 11:14:32 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: 6AZ8JAgtI94iBZvhn289sOw/311Gf5HWF9lx3CgDg/c=) 2: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl (hash: vMXCbV0uk5poW+0in/uXrGM9hy4ugdWoEvEca1KAmYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e0:ea:ce:df:0f:c5:bb:d7:1c:11:a6:b2:7f:7e:f9:f7:27:28:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD Validity Not Before: Sep 17 07:12:32 2026 GMT Not After : Sep 18 11:14:32 2026 GMT Subject: CN=9C080A15D0FC82222DF9B493298675BE3287618F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:eb:c7:07:77:91:68:5a:fe:b5:05:94:1e: 33:f6:24:f7:e0:b6:bb:d6:80:b6:c7:f7:cf:65:31: 93:9b:10:11:af:c3:e7:b3:bd:3c:f3:44:5d:1e:b5: 03:9e:21:05:45:89:5b:4e:20:32:4f:79:bb:19:55: 99:4f:08:c9:85:74:20:48:c8:d8:1e:03:28:46:42: 1b:03:62:44:e4:82:37:4f:d9:ac:12:21:ec:1e:9e: 71:e5:18:63:e2:d3:a6:71:df:a5:f2:17:52:91:0d: 11:cc:6e:b9:17:0f:16:92:90:47:09:d2:f2:60:c9: 0b:95:14:b3:1c:6b:78:52:7c:46:e2:47:46:45:a9: 24:53:23:bb:bc:0e:6e:c9:c3:79:49:3e:24:2a:18: 52:48:d8:43:01:58:b4:65:e3:ef:5c:2a:7a:17:86: 66:7b:1e:74:d8:e7:cf:cf:ff:13:4b:e8:e5:73:28: 0e:f5:87:7e:e8:6d:09:14:4b:32:d5:28:5b:5f:33: dd:22:63:ed:27:86:7f:70:cf:2f:42:70:33:4f:b4: 9c:34:cf:e6:96:aa:9e:a9:7a:65:ca:c3:0b:1d:66: fb:24:9f:cf:3c:d6:8c:4b:06:17:7b:3c:fc:76:e8: 1d:5d:9c:7b:20:3b:d5:05:67:9f:02:94:1a:c4:28: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:08:0A:15:D0:FC:82:22:2D:F9:B4:93:29:86:75:BE:32:87:61:8F X509v3 Authority Key Identifier: keyid:14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:78:cd:38:33:00:05:c9:7d:86:01:03:3a:29:f4:8f:7b:f6: f1:15:54:4b:3a:32:26:67:2d:e0:84:9f:ed:f1:d2:f0:5b:1a: 75:41:01:0b:c9:0d:72:9f:3e:b7:c5:44:74:a1:24:3e:bc:58: 2d:a3:40:6e:12:cf:f6:ae:20:f9:12:59:04:3b:9a:6f:f4:6b: ec:7c:51:67:4f:5d:ee:69:ff:3d:09:85:5b:dc:99:3a:f3:1b: 66:5b:a6:17:80:55:8c:e9:91:ef:10:d5:3f:75:0b:dd:c0:87: e0:2a:3a:9b:0c:ff:30:46:59:cb:d6:13:b1:d2:7e:d3:f8:7e: 31:b7:40:dd:49:1e:b6:0e:1a:94:ab:eb:82:40:97:d1:9d:78: 69:e3:fe:2a:09:0d:7e:72:b1:41:7b:ec:4f:45:60:2b:59:37: 88:9e:d4:e9:f4:06:cd:03:8e:a0:f9:39:ec:2e:32:e7:91:82: 26:1b:df:3b:2d:e9:7b:ec:55:d3:3a:37:25:53:fa:af:8d:72: db:c6:38:91:f6:23:9c:e3:ae:60:d1:eb:d5:c7:b2:83:ae:32: 8e:89:d5:d9:b7:8f:66:f1:15:0e:64:f9:1f:6a:b5:d6:b9:6e: 53:67:43:f2:0a:e6:2a:45:df:64:eb:4b:52:e8:bd:13:21:e3: 48:ae:56:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+Dqzt8PxbvXHBGmsn9++fcnKHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5NzcyM0NC MzY5RjNDRDAeFw0yNjA5MTcwNzEyMzJaFw0yNjA5MTgxMTE0MzJaMDMxMTAvBgNV BAMTKDlDMDgwQTE1RDBGQzgyMjIyREY5QjQ5MzI5ODY3NUJFMzI4NzYxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKauvHB3eRaFr+tQWUHjP2JPfg trvWgLbH989lMZObEBGvw+ezvTzzRF0etQOeIQVFiVtOIDJPebsZVZlPCMmFdCBI yNgeAyhGQhsDYkTkgjdP2awSIewennHlGGPi06Zx36XyF1KRDRHMbrkXDxaSkEcJ 0vJgyQuVFLMca3hSfEbiR0ZFqSRTI7u8Dm7Jw3lJPiQqGFJI2EMBWLRl4+9cKnoX hmZ7HnTY58/P/xNL6OVzKA71h37obQkUSzLVKFtfM90iY+0nhn9wzy9CcDNPtJw0 z+aWqp6pemXKwwsdZvskn8881oxLBhd7PPx26B1dnHsgO9UFZ58ClBrEKE8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnAgKFdD8giIt+bSTKYZ1vjKHYY8wHwYDVR0j BBgwFoAUFCBIS9mL+DwcbF/2L5dyPLNp880wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMTVlNmYtMDY4OS00NzEzLWIwZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJE OThCRjgzQzFDNkM1RkY2MkY5NzcyM0NCMzY5RjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIwNDg0QkQ5OEJGODNDMUM2QzVGRjYyRjk3NzIzQ0IzNjlG M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5Nzcy M0NCMzY5RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR4zTgzAAXJfYYBAzop9I979vEVVEs6MiZn LeCEn+3x0vBbGnVBAQvJDXKfPrfFRHShJD68WC2jQG4Sz/auIPkSWQQ7mm/0a+x8 UWdPXe5p/z0JhVvcmTrzG2ZbpheAVYzpke8Q1T91C93Ah+AqOpsM/zBGWcvWE7HS ftP4fjG3QN1JHrYOGpSr64JAl9GdeGnj/ioJDX5ysUF77E9FYCtZN4ie1On0Bs0D jqD5OewuMueRgiYb3zst6XvsVdM6NyVT+q+NctvGOJH2I5zjrmDR69XHsoOuMo6J 1dm3j2bxFQ5k+R9qtda5blNnQ/IK5ipF32TrS1LovRMh40iuVi4= -----END CERTIFICATE-----Generated at Thu Sep 17 14:24:40 2026 by rpki-client