$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft File: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft (raw, json) Hash identifier: L+NB/kMOfvNBRdUJbWSxHQKnfmz6OhsO2A59JKPLnrk= Subject key identifier: A5:98:5B:DA:F9:F8:45:F9:D7:19:77:DC:B8:C7:45:AF:D8:58:3C:53 Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 Certificate issuer: /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Certificate serial: 24678BA622941C3243EF0EE5833F70E23CAF16DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:57:56 +0000 Manifest this update: Sun 20 Sep 2026 20:52:56 +0000 Manifest next update: Mon 21 Sep 2026 21:02:56 +0000 Files and hashes: 1: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: zoDD4RhxLX2w3djQTafSQhXib0k+dFwrPjaxCZF6N3M=) 2: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: Y8+QftugPZbHwSkPpvPN8/JuYMkdCrQIqoTMc5y/xEM=) 3: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: 95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=) 4: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl (hash: /UzCo80+9BMsVUI7i4XmzvY7UcfdY75CYE8v8oeP7M0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:67:8b:a6:22:94:1c:32:43:ef:0e:e5:83:3f:70:e2:3c:af:16:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Validity Not Before: Sep 20 20:52:56 2026 GMT Not After : Sep 21 21:02:56 2026 GMT Subject: CN=A5985BDAF9F845F9D71977DCB8C745AFD8583C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:c0:05:2a:48:2e:e4:0f:c6:65:f7:91:53: eb:78:48:ad:b1:aa:0f:7d:e3:64:73:58:18:bf:64: f7:fc:9e:f3:02:78:1f:4d:95:8f:1a:8e:0a:8e:33: d2:fe:1d:f7:6a:39:9c:61:b8:42:c0:0c:2c:69:a8: 6e:48:4b:e6:8c:74:ce:82:59:11:60:c6:d5:2d:fc: 2f:bf:5b:68:c4:a0:d5:16:80:9e:0f:c9:53:6b:79: 93:47:88:63:9f:5e:64:d4:87:6d:4e:02:55:d0:19: 8f:3f:ab:62:53:bb:7e:d1:9c:2a:fd:71:e3:d5:aa: 0a:55:6a:91:fa:a5:23:85:8f:24:d5:13:71:7b:12: be:88:b7:09:7c:cf:e0:1e:51:e7:e3:40:a2:92:8b: 6e:9c:03:33:cb:27:5f:dc:58:7f:53:4c:e5:60:05: 4a:c1:49:40:e1:b0:42:07:ba:52:ea:84:1c:4d:3b: a9:42:61:d7:12:33:6e:53:2b:33:ed:25:af:c5:8e: a7:61:9c:91:b1:c1:43:33:6c:3b:9b:84:b3:7e:58: 13:6b:a4:ef:1a:e7:0b:04:49:45:83:b1:4a:f8:52: a0:bc:99:24:7f:45:33:37:fc:99:30:68:02:a3:7d: 82:25:cd:c3:26:f4:ec:ee:d5:09:35:66:44:7d:1e: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:98:5B:DA:F9:F8:45:F9:D7:19:77:DC:B8:C7:45:AF:D8:58:3C:53 X509v3 Authority Key Identifier: keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:99:a3:fc:75:59:dc:b8:a3:2d:90:ca:03:cc:5e:82:0f:25: 04:5e:9a:c1:f8:8c:32:ea:27:19:03:cb:6e:1b:d3:88:fe:ac: cb:9c:ab:6e:d5:12:1d:8d:7e:04:57:63:a6:3e:cb:41:34:03: 8d:97:0a:e5:03:d3:46:2d:8d:40:27:2b:d6:3e:12:ec:84:56: af:18:43:ec:e9:c0:7b:f7:23:40:1d:8e:d6:73:8f:5d:f7:a8: b3:1a:9c:e0:29:74:d9:28:ce:47:66:c0:16:33:81:1b:9a:13: 63:22:d7:79:01:2d:68:fb:9d:fe:11:c1:ff:f6:98:48:e6:62: d0:d7:16:4e:81:55:4f:19:25:66:7c:b3:98:05:40:a7:13:0e: 62:96:28:df:a7:f8:3d:1a:62:f2:a3:1f:cf:5e:e2:4c:6a:19: 9e:67:02:e6:c6:35:33:69:eb:0f:63:43:77:85:f4:93:5b:3e: c7:c1:97:24:2a:43:1a:e2:da:c6:e7:e3:2b:66:b9:7e:02:82: cf:aa:8c:c2:5b:34:63:e4:c2:2f:8e:d2:9a:2e:40:a5:10:5b: 99:3e:3d:60:4a:eb:4a:e8:a9:43:c1:9c:30:27:c1:6a:aa:2f: f2:9b:12:27:3b:b2:84:9c:7a:bc:b5:d9:68:a1:98:5b:45:8b: 9a:0b:fe:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGeLpiKUHDJD7w7lgz9w4jyvFtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZC N0Q4NkU5MzAeFw0yNjA5MjAyMDUyNTZaFw0yNjA5MjEyMTAyNTZaMDMxMTAvBgNV BAMTKEE1OTg1QkRBRjlGODQ1RjlENzE5NzdEQ0I4Qzc0NUFGRDg1ODNDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkv8AFKkgu5A/GZfeRU+t4SK2x qg9942RzWBi/ZPf8nvMCeB9NlY8ajgqOM9L+HfdqOZxhuELADCxpqG5IS+aMdM6C WRFgxtUt/C+/W2jEoNUWgJ4PyVNreZNHiGOfXmTUh21OAlXQGY8/q2JTu37RnCr9 cePVqgpVapH6pSOFjyTVE3F7Er6Itwl8z+AeUefjQKKSi26cAzPLJ1/cWH9TTOVg BUrBSUDhsEIHulLqhBxNO6lCYdcSM25TKzPtJa/FjqdhnJGxwUMzbDubhLN+WBNr pO8a5wsESUWDsUr4UqC8mSR/RTM3/JkwaAKjfYIlzcMm9Ozu1Qk1ZkR9HpxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZhb2vn4RfnXGXfcuMdFr9hYPFMwHwYDVR0j BBgwFoAUkzVI8Idnd117AovR2KjAtrfYbpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDUxMWYtYWZmZi00ZmVjLTg3MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4 NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZCN0Q4NkU5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzM1NDhGMDg3Njc3NzVEN0IwMjhCRDFEOEE4QzBCNkI3RDg2 RTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMw QjZCN0Q4NkU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyZo/x1Wdy4oy2QygPMXoIPJQRemsH4jDLq JxkDy24b04j+rMucq27VEh2NfgRXY6Y+y0E0A42XCuUD00YtjUAnK9Y+EuyEVq8Y Q+zpwHv3I0AdjtZzj133qLManOApdNkozkdmwBYzgRuaE2Mi13kBLWj7nf4Rwf/2 mEjmYtDXFk6BVU8ZJWZ8s5gFQKcTDmKWKN+n+D0aYvKjH89e4kxqGZ5nAubGNTNp 6w9jQ3eF9JNbPsfBlyQqQxri2sbn4ytmuX4Cgs+qjMJbNGPkwi+O0pouQKUQW5k+ PWBK60roqUPBnDAnwWqqL/KbEic7soScery12WihmFtFi5oL/oQ= -----END CERTIFICATE-----Generated at Mon Sep 21 10:12:04 2026 by rpki-client