$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft (raw, json) Hash identifier: uZGAyw8jrE9Orer3KvO4+vRRgbKq6NyD7TCCwnAMML4= Subject key identifier: 31:FF:11:96:59:35:3C:8D:9F:96:76:34:51:DE:9F:C9:40:95:23:FD Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 145CAF8C1FC172A73C5F1FF7783099F100C6727A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:17:00 +0000 Manifest this update: Sun 20 Sep 2026 20:12:00 +0000 Manifest next update: Mon 21 Sep 2026 23:33:00 +0000 Files and hashes: 1: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl (hash: MERt196gTTQazR/ZDZtOwvSdje33kmdiwhu5hdE08EA=) 2: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438=) 3: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: fxSYsouQPJ65g7CwW1EnalKBkWjJiK50KJBFUAXhZzA=) 4: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: VwsatNn5AXuJ/LUW+n8JXwWEwiaViEVC741lbFCSMBE=) 5: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: fgQOQ1ZPs6+mRIJ9mhffQJjtFV+ZjnGnsOoWLbAN6Mo=) 6: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nJl837iJi/5SwBSDbdYVongO7p9uzBZcmTZb0XAZTJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5c:af:8c:1f:c1:72:a7:3c:5f:1f:f7:78:30:99:f1:00:c6:72:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: Sep 20 20:12:00 2026 GMT Not After : Sep 21 23:33:00 2026 GMT Subject: CN=31FF119659353C8D9F96763451DE9FC9409523FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:a0:5c:d6:bd:b3:a7:2f:06:02:d2:b5:1f: 52:dd:cc:5f:e0:05:68:54:90:18:c6:f6:6b:1f:77: f3:ca:17:e0:4b:35:3d:ab:63:64:19:b9:07:cd:45: 93:d0:02:b2:48:6d:11:b2:32:b9:90:48:9f:3e:00: a8:20:8e:e4:c3:85:db:52:bd:1e:c9:6f:14:00:b0: c5:6d:92:31:31:ba:8c:97:cc:a6:87:66:b5:13:fb: e2:c6:03:4b:04:9c:14:73:4d:f4:ba:d4:1e:80:30: 2c:6b:69:47:55:5f:56:6f:3f:23:1c:38:64:79:87: 59:10:68:a7:dc:c0:c2:26:ea:b7:e7:b9:c8:5c:16: 74:76:84:33:39:5c:0a:28:c3:02:55:81:75:c6:cb: 57:ee:bf:61:d9:36:8f:34:5b:5d:40:cc:e4:27:1f: 1d:86:4a:ad:3c:bc:4b:f6:c7:9b:21:55:08:cd:b1: e8:ae:59:bb:7b:24:36:2d:cd:4a:37:69:fa:8e:68: c3:e0:72:3a:2c:5d:35:77:33:82:21:c3:0e:71:29: 1d:db:64:85:68:4d:95:c2:1e:bc:c2:df:7d:41:6b: ca:f8:ae:e7:9b:c5:ed:87:3a:fe:8a:77:ce:a3:bb: e9:a0:7a:c6:78:9e:f8:12:cd:b8:54:5d:ea:06:54: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FF:11:96:59:35:3C:8D:9F:96:76:34:51:DE:9F:C9:40:95:23:FD X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f6:c8:d0:28:30:41:ba:89:47:84:5b:0b:59:e8:35:67:b6: 46:80:cf:b3:11:53:92:a5:1f:71:87:57:52:d0:3d:d2:71:e2: 9e:f6:25:2d:9f:b3:fe:ae:62:23:88:44:a3:08:b9:24:56:18: c8:cf:a6:e5:bf:5e:0e:5e:40:fb:d6:fa:a7:5b:66:d1:f5:4b: c0:14:85:b7:16:58:e6:fe:95:c6:41:28:18:9b:b0:39:89:28: b6:28:1e:65:b1:44:c3:7d:43:6e:cb:71:a7:8e:82:65:f4:67: c0:a8:78:60:c4:16:67:b4:03:44:2a:65:70:f6:bf:6e:1b:ad: 12:47:72:69:54:13:a7:ea:82:85:41:e4:a9:64:ee:4d:9f:da: 65:cb:ec:09:3f:6f:c9:a6:96:d8:1a:a3:f2:5f:c0:4f:93:90: f2:26:97:53:bc:66:5c:dc:a0:fd:63:a7:29:6e:89:4b:32:95: ad:69:63:a5:98:1e:0e:8f:a5:b1:cd:55:19:dc:f3:b6:a9:21: 36:c0:69:b1:7a:ba:bd:6c:6c:03:3b:e1:31:f6:1d:81:e6:d9: b3:28:fb:c1:f2:e6:1b:ed:01:57:90:fe:5d:b0:df:c0:d6:12: 1f:ed:0c:95:6a:e8:ae:b5:50:20:4a:4f:9e:b9:d8:d7:0a:c4: 00:99:00:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFyvjB/Bcqc8Xx/3eDCZ8QDGcnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZGNkQy RDdDMDhCRTAeFw0yNjA5MjAyMDEyMDBaFw0yNjA5MjEyMzMzMDBaMDMxMTAvBgNV BAMTKDMxRkYxMTk2NTkzNTNDOEQ5Rjk2NzYzNDUxREU5RkM5NDA5NTIzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChv6Bc1r2zpy8GAtK1H1LdzF/g BWhUkBjG9msfd/PKF+BLNT2rY2QZuQfNRZPQArJIbRGyMrmQSJ8+AKggjuTDhdtS vR7JbxQAsMVtkjExuoyXzKaHZrUT++LGA0sEnBRzTfS61B6AMCxraUdVX1ZvPyMc OGR5h1kQaKfcwMIm6rfnuchcFnR2hDM5XAoowwJVgXXGy1fuv2HZNo80W11AzOQn Hx2GSq08vEv2x5shVQjNseiuWbt7JDYtzUo3afqOaMPgcjosXTV3M4Ihww5xKR3b ZIVoTZXCHrzC331Ba8r4ruebxe2HOv6Kd86ju+mgesZ4nvgSzbhUXeoGVNl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMf8Rllk1PI2flnY0Ud6fyUCVI/0wHwYDVR0j BBgwFoAUhT7derPvmhOgd58mEnhvbS18CL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDVkZmY5YjMtOTA0MS00ZGQ2LWI3YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FC M0VGOUExM0EwNzc5RjI2MTI3ODZGNkQyRDdDMDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0Mw OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZG NkQyRDdDMDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr2yNAoMEG6iUeEWwtZ6DVntkaAz7MRU5Kl H3GHV1LQPdJx4p72JS2fs/6uYiOIRKMIuSRWGMjPpuW/Xg5eQPvW+qdbZtH1S8AU hbcWWOb+lcZBKBibsDmJKLYoHmWxRMN9Q27LcaeOgmX0Z8CoeGDEFme0A0QqZXD2 v24brRJHcmlUE6fqgoVB5Klk7k2f2mXL7Ak/b8mmltgao/JfwE+TkPIml1O8Zlzc oP1jpyluiUsyla1pY6WYHg6PpbHNVRnc87apITbAabF6ur1sbAM74TH2HYHm2bMo +8Hy5hvtAVeQ/l2w38DWEh/tDJVq6K61UCBKT5652NcKxACZAJU= -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:53 2026 by rpki-client