$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: hqKm0R8TbLiwhwKdTMdkwt9N6p6CBm38iX3/AamBVZc= Subject key identifier: D6:F6:89:DB:AB:07:33:BC:51:23:07:E3:52:3F:C5:E9:69:88:99:E0 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 5CD1DF9CCF79CEBA8BD29F39703454F4B0E2CB11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:11:21 +0000 Manifest this update: Mon 21 Sep 2026 12:06:21 +0000 Manifest next update: Tue 22 Sep 2026 13:04:21 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) 2: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: 0tJHME6tkHPYSC7BuBEtjHRoBvSIbYLgxMba2eUrhJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d1:df:9c:cf:79:ce:ba:8b:d2:9f:39:70:34:54:f4:b0:e2:cb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Sep 21 12:06:21 2026 GMT Not After : Sep 22 13:04:21 2026 GMT Subject: CN=D6F689DBAB0733BC512307E3523FC5E9698899E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:be:45:3b:cc:78:43:98:19:f5:f5:07:51: fd:02:5e:9b:15:c6:77:11:24:b1:31:f2:2d:6d:bb: 34:19:40:63:62:e7:75:eb:cc:a3:b4:21:a3:11:ca: 1f:75:90:57:95:29:a9:62:5b:bf:c5:1e:97:0e:0d: 3a:73:2f:dc:17:9b:d6:10:46:09:74:ab:02:3d:fa: 3c:5d:6d:18:e8:12:6c:8c:14:ae:ce:6c:c7:f5:54: 5e:6a:cb:94:25:ec:1f:c1:3d:c8:c6:ea:15:8b:ab: 03:2e:6a:eb:74:9c:36:da:b3:b6:6d:5e:1b:3a:27: bb:f0:ac:36:a7:64:86:df:3e:c6:fe:74:25:d3:2e: 6a:c4:e6:37:cf:13:03:d0:3c:10:9b:0e:53:b9:aa: 68:db:ae:12:01:b8:aa:7c:62:49:09:9c:05:f1:78: d8:ae:4a:7d:57:03:e3:be:64:a8:4d:da:35:22:72: d4:96:5c:cd:76:1c:61:c0:d3:4c:14:76:2c:ab:1d: a9:f7:82:18:73:79:fe:75:34:56:9e:b9:66:36:2e: 2a:3a:88:fb:a9:c2:2f:98:d2:b3:c5:7a:1e:35:2d: 7e:82:62:93:15:26:3a:25:b7:47:06:cf:22:96:92: 72:92:36:c8:de:ef:f3:c1:0e:2e:28:75:11:72:76: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F6:89:DB:AB:07:33:BC:51:23:07:E3:52:3F:C5:E9:69:88:99:E0 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:90:82:56:ce:e1:45:96:e9:3f:be:dd:e4:a4:57:d6:6e:b6: 81:fe:3c:00:fc:d8:0f:9c:c3:79:3b:bd:38:48:cd:74:e9:f5: d9:fa:ba:e5:16:cd:56:96:94:b2:64:8c:24:1d:a5:48:57:0d: 66:c3:9e:a6:82:90:5d:54:9f:88:9d:2c:42:c9:f3:18:31:80: 6d:a2:e0:df:d4:1b:2d:4f:01:98:b4:c2:78:41:6d:e8:68:ad: 83:2f:ac:89:99:45:2e:3e:56:70:5b:de:91:7a:af:fd:4d:d6: e9:a8:83:d1:28:59:5f:5e:2d:84:55:21:af:49:ee:cc:ac:05: a2:05:78:53:01:5b:40:91:35:a6:ab:92:9c:69:df:f1:65:da: 31:a8:fd:fc:f5:7f:bc:64:8c:73:c4:52:c3:23:96:5f:98:c4: 48:40:9c:d8:20:06:ae:2e:eb:0e:69:2f:61:d4:bf:77:82:0a: 9c:32:0a:73:c2:3c:0f:91:50:d7:f3:b8:f7:9a:e4:ab:8f:ae: a9:43:3a:8d:67:6c:8d:b0:23:ec:16:79:14:f1:4e:3e:86:70: 51:af:d4:03:97:99:03:20:10:30:5e:2f:ed:ce:0f:ab:20:b2: b6:71:94:b2:4b:a2:61:37:ab:5e:6e:89:43:8c:46:ee:7e:59: 35:44:8e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNHfnM95zrqL0p85cDRU9LDiyxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA5MjExMjA2MjFaFw0yNjA5MjIxMzA0MjFaMDMxMTAvBgNV BAMTKEQ2RjY4OURCQUIwNzMzQkM1MTIzMDdFMzUyM0ZDNUU5Njk4ODk5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9r5FO8x4Q5gZ9fUHUf0CXpsV xncRJLEx8i1tuzQZQGNi53XrzKO0IaMRyh91kFeVKaliW7/FHpcODTpzL9wXm9YQ Rgl0qwI9+jxdbRjoEmyMFK7ObMf1VF5qy5Ql7B/BPcjG6hWLqwMuaut0nDbas7Zt Xhs6J7vwrDanZIbfPsb+dCXTLmrE5jfPEwPQPBCbDlO5qmjbrhIBuKp8YkkJnAXx eNiuSn1XA+O+ZKhN2jUictSWXM12HGHA00wUdiyrHan3ghhzef51NFaeuWY2Lio6 iPupwi+Y0rPFeh41LX6CYpMVJjolt0cGzyKWknKSNsje7/PBDi4odRFydlXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1vaJ26sHM7xRIwfjUj/F6WmImeAwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2QglbO4UWW6T++3eSkV9ZutoH+PAD82A+c w3k7vThIzXTp9dn6uuUWzVaWlLJkjCQdpUhXDWbDnqaCkF1Un4idLELJ8xgxgG2i 4N/UGy1PAZi0wnhBbehorYMvrImZRS4+VnBb3pF6r/1N1umog9EoWV9eLYRVIa9J 7sysBaIFeFMBW0CRNaarkpxp3/Fl2jGo/fz1f7xkjHPEUsMjll+YxEhAnNggBq4u 6w5pL2HUv3eCCpwyCnPCPA+RUNfzuPea5KuPrqlDOo1nbI2wI+wWeRTxTj6GcFGv 1AOXmQMgEDBeL+3OD6sgsrZxlLJLomE3q15uiUOMRu5+WTVEjvA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:00:41 2026 by rpki-client