$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: ukmZv1swC2tN7sB+uUjIHTqSfKaiDozPuV7cC6IOFUs= Subject key identifier: 9D:FC:8D:26:F9:BA:DA:A9:CA:87:F1:96:4A:6E:E3:AF:01:06:4A:91 Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 1E6A5764289CD8138E04AE30314EC05CC84C5B0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 15:55:24 +0000 Manifest this update: Thu 24 Sep 2026 15:50:24 +0000 Manifest next update: Fri 25 Sep 2026 16:22:24 +0000 Files and hashes: 1: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: axbjiDFy/w2vEFfvgLnx0DZcBhwjqyZrbp1qXZ/RtTk=) 2: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) 3: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6a:57:64:28:9c:d8:13:8e:04:ae:30:31:4e:c0:5c:c8:4c:5b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Sep 24 15:50:24 2026 GMT Not After : Sep 25 16:22:24 2026 GMT Subject: CN=9DFC8D26F9BADAA9CA87F1964A6EE3AF01064A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:a6:4c:59:5f:03:72:13:ab:c0:4f:86:3f: 95:e5:b0:cb:df:f6:29:a4:6a:f9:bc:62:bf:f7:15: 53:e8:6d:b8:98:83:82:fe:1a:e1:34:f2:7a:75:df: 2f:92:f5:f4:59:dd:70:33:a9:47:e9:71:83:23:77: ea:7e:fa:90:b8:bb:e5:fd:a1:e9:5a:d3:17:74:83: dc:23:e3:78:87:fb:bc:52:06:da:61:cc:67:32:27: 98:55:f0:f0:91:4e:a8:a7:37:73:6d:80:0f:65:bd: ed:75:2c:34:52:40:36:d6:ce:1e:86:e2:f8:13:8e: 08:9c:11:27:1b:68:38:b5:9c:4e:67:75:d7:b5:57: 8a:9e:36:32:3e:ed:10:cc:07:69:ba:96:14:55:b5: b7:37:3b:2a:16:c1:06:48:ac:70:65:b2:a6:08:92: 01:ba:fd:67:14:57:57:5e:17:8e:0a:02:97:f0:38: 40:89:e5:e2:54:f3:46:3b:d5:70:b1:93:89:11:ee: 02:6f:a2:80:ea:87:c4:ae:8e:4b:d7:35:06:7e:74: 51:56:bb:95:82:94:83:c7:5d:5f:28:89:7a:cb:fa: 99:6c:09:7c:a9:93:5f:d1:70:0c:05:42:05:63:6c: cd:11:0a:2d:58:75:b0:be:79:92:32:9a:3c:4d:d8: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FC:8D:26:F9:BA:DA:A9:CA:87:F1:96:4A:6E:E3:AF:01:06:4A:91 X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:40:5b:84:23:33:d9:18:8b:7c:a2:bb:ce:7f:47:91:9e:08: b5:c8:14:3e:f6:01:cb:ea:13:7b:ab:fc:c2:ad:17:d2:d7:02: c7:6d:e1:c2:9d:54:a3:66:b8:46:61:1c:74:89:0d:34:fa:d1: 9b:01:fd:63:68:90:61:b5:82:63:29:28:ca:eb:35:21:8e:da: d7:c9:63:d4:3d:79:81:6b:55:44:fc:22:a4:bd:97:f6:80:ce: bf:63:8d:9f:3a:66:8e:6a:07:91:6d:23:b2:f0:86:25:6b:f5: 83:26:a7:86:1b:d0:71:21:d0:95:48:d6:5d:51:05:f3:a7:2b: ae:3e:dc:7e:ff:c9:dd:d8:06:ec:e7:15:74:9b:db:fb:c8:68: 13:ca:cf:ee:b2:fc:e0:5f:e2:78:37:03:43:aa:b7:c3:a2:79: f7:12:d1:ab:0b:1e:6a:19:ce:73:c6:30:1b:0a:f8:cc:3a:eb: 3e:a8:7a:d0:cd:10:c0:99:68:ae:21:1a:1a:bd:f8:26:1c:07: 54:9f:a0:88:5f:db:9d:b6:27:7e:3b:0a:e7:32:ea:81:f6:a3: 0a:98:b8:0b:50:c3:c4:f3:ec:c2:67:bf:a1:2a:a5:9a:37:74: 5c:a7:f7:9e:8d:0b:3a:88:fb:82:c3:dc:bd:f5:f1:94:d8:0d: b3:28:51:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmpXZCic2BOOBK4wMU7AXMhMWwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA5MjQxNTUwMjRaFw0yNjA5MjUxNjIyMjRaMDMxMTAvBgNV BAMTKDlERkM4RDI2RjlCQURBQTlDQTg3RjE5NjRBNkVFM0FGMDEwNjRBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSR6ZMWV8DchOrwE+GP5XlsMvf 9imkavm8Yr/3FVPobbiYg4L+GuE08np13y+S9fRZ3XAzqUfpcYMjd+p++pC4u+X9 oela0xd0g9wj43iH+7xSBtphzGcyJ5hV8PCRTqinN3NtgA9lve11LDRSQDbWzh6G 4vgTjgicEScbaDi1nE5ndde1V4qeNjI+7RDMB2m6lhRVtbc3OyoWwQZIrHBlsqYI kgG6/WcUV1deF44KApfwOECJ5eJU80Y71XCxk4kR7gJvooDqh8SujkvXNQZ+dFFW u5WClIPHXV8oiXrL+plsCXypk1/RcAwFQgVjbM0RCi1YdbC+eZIymjxN2EEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnfyNJvm62qnKh/GWSm7jrwEGSpEwHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFAW4QjM9kYi3yiu85/R5GeCLXIFD72Acvq E3ur/MKtF9LXAsdt4cKdVKNmuEZhHHSJDTT60ZsB/WNokGG1gmMpKMrrNSGO2tfJ Y9Q9eYFrVUT8IqS9l/aAzr9jjZ86Zo5qB5FtI7LwhiVr9YMmp4Yb0HEh0JVI1l1R BfOnK64+3H7/yd3YBuznFXSb2/vIaBPKz+6y/OBf4ng3A0Oqt8OiefcS0asLHmoZ znPGMBsK+Mw66z6oetDNEMCZaK4hGhq9+CYcB1SfoIhf2522J347Cucy6oH2owqY uAtQw8Tz7MJnv6EqpZo3dFyn956NCzqI+4LD3L318ZTYDbMoUU4= -----END CERTIFICATE-----Generated at Thu Sep 24 23:07:06 2026 by rpki-client