$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: ivV/wWloHy3bXxvL7WNzUEggrr4Xwbmm/Q6jTyfO/Es= Subject key identifier: 77:BA:F2:E4:8E:A7:09:00:71:C0:7A:E4:DC:8A:60:8C:74:B4:6E:FC Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 73452E762E1F1481FEC1E94C54723D5A00332690 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: BD Signing time: Mon 21 Sep 2026 11:35:44 +0000 Manifest this update: Mon 21 Sep 2026 11:30:44 +0000 Manifest next update: Tue 22 Sep 2026 13:04:44 +0000 Files and hashes: 1: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: xkmTS+FqtMWLvo9f6vEqgA/5NsUSB5afiAJg7rjg7GA=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:45:2e:76:2e:1f:14:81:fe:c1:e9:4c:54:72:3d:5a:00:33:26:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Sep 21 11:30:44 2026 GMT Not After : Sep 22 13:04:44 2026 GMT Subject: CN=77BAF2E48EA7090071C07AE4DC8A608C74B46EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:ce:8c:2f:2c:4d:d7:0d:44:97:50:3e:84: 69:8f:1b:3e:0a:1a:3a:12:0e:da:8b:ba:ac:07:06: ba:8e:e2:32:94:03:de:38:4e:54:5e:a4:48:a1:5d: 2f:fc:7b:36:9c:a9:8e:91:f2:bd:06:2b:a6:01:1c: ed:36:b8:91:e1:04:cc:22:c5:e3:1d:61:10:82:1d: a6:70:14:2e:75:6d:bb:87:7a:81:5b:e9:ec:db:87: 79:2c:89:94:63:c9:80:9c:ee:1f:6f:03:68:cc:bc: 26:23:9c:95:e1:77:8b:a5:03:4a:e2:55:eb:12:8a: 66:d9:d1:87:05:b0:4e:6a:01:73:56:da:e2:a8:ff: 47:73:01:24:77:3c:4c:94:3b:ab:83:39:2c:9c:48: b8:f5:f3:18:06:05:b3:32:35:6b:49:20:a8:a4:47: a2:65:ef:cb:00:84:44:7d:dd:8e:60:ad:69:73:67: 17:3e:3b:90:63:f4:c8:2f:10:e0:3f:3d:d1:7c:21: 5e:e9:36:bc:99:9c:63:aa:95:8c:32:fc:81:e9:d7: f9:3e:43:d2:e7:6e:44:9a:d1:20:e1:b4:e3:7a:e0: 11:fc:15:11:08:37:07:6d:14:c1:ed:7b:32:33:46: 84:86:cf:0c:8e:99:43:0a:32:da:44:09:d2:af:0f: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BA:F2:E4:8E:A7:09:00:71:C0:7A:E4:DC:8A:60:8C:74:B4:6E:FC X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:25:2d:3c:59:d4:9a:cf:e0:b3:29:95:17:8b:e0:da:70:ba: ea:df:e7:13:53:cb:82:3f:03:0c:c3:bf:2c:06:05:c5:df:28: 2c:aa:d2:f4:78:77:51:51:79:d7:db:84:b5:9a:5f:89:39:63: 92:be:4b:8a:57:1c:33:a8:ed:18:c7:b2:cb:af:70:d5:98:dd: bf:c5:fd:96:a3:e5:64:4e:45:b9:b1:24:a8:44:83:f0:b0:61: 3f:fa:8c:0b:b6:d0:3f:00:4d:90:e8:b4:5d:62:f9:a5:9a:90: 5d:b4:ee:97:c3:4d:89:2b:ba:5e:d1:d1:ca:47:02:3e:e3:50: 23:fe:7b:8a:cd:85:a5:6f:2e:a6:80:0d:6b:0d:3a:0d:da:3a: 38:8c:d4:15:cf:72:2c:92:97:e4:db:c2:32:f2:30:52:19:61: ec:38:34:5a:9b:d5:be:dc:be:7e:c3:16:69:26:9d:da:2f:f3: ef:89:ce:d8:84:f6:db:a7:ee:c4:47:35:88:2a:c6:e2:0d:21: 67:94:73:18:1d:cd:ab:91:85:0f:fb:1b:ba:fb:67:75:1c:01: de:52:91:33:72:0c:ec:8a:6d:0f:7b:c9:4c:85:fc:97:d1:eb: 51:04:76:fa:7f:a1:ba:9d:e9:a0:54:ac:ce:cb:d3:65:c7:0c: 88:a4:1f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0Uudi4fFIH+welMVHI9WgAzJpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA5MjExMTMwNDRaFw0yNjA5MjIxMzA0NDRaMDMxMTAvBgNV BAMTKDc3QkFGMkU0OEVBNzA5MDA3MUMwN0FFNERDOEE2MDhDNzRCNDZFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7M6MLyxN1w1El1A+hGmPGz4K GjoSDtqLuqwHBrqO4jKUA944TlRepEihXS/8ezacqY6R8r0GK6YBHO02uJHhBMwi xeMdYRCCHaZwFC51bbuHeoFb6ezbh3ksiZRjyYCc7h9vA2jMvCYjnJXhd4ulA0ri VesSimbZ0YcFsE5qAXNW2uKo/0dzASR3PEyUO6uDOSycSLj18xgGBbMyNWtJIKik R6Jl78sAhER93Y5grWlzZxc+O5Bj9MgvEOA/PdF8IV7pNryZnGOqlYwy/IHp1/k+ Q9LnbkSa0SDhtON64BH8FREINwdtFMHtezIzRoSGzwyOmUMKMtpECdKvD2TLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7ry5I6nCQBxwHrk3IpgjHS0bvwwHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJElLTxZ1JrP4LMplReL4Npwuurf5xNTy4I/ AwzDvywGBcXfKCyq0vR4d1FRedfbhLWaX4k5Y5K+S4pXHDOo7RjHssuvcNWY3b/F /Zaj5WRORbmxJKhEg/CwYT/6jAu20D8ATZDotF1i+aWakF207pfDTYkrul7R0cpH Aj7jUCP+e4rNhaVvLqaADWsNOg3aOjiM1BXPciySl+TbwjLyMFIZYew4NFqb1b7c vn7DFmkmndov8++JztiE9tun7sRHNYgqxuINIWeUcxgdzauRhQ/7G7r7Z3UcAd5S kTNyDOyKbQ97yUyF/JfR61EEdvp/obqd6aBUrM7L02XHDIikHzQ= -----END CERTIFICATE-----Generated at Mon Sep 21 22:16:20 2026 by rpki-client