$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft File: D225946751D641016A8BDC8983AB89443F4481EE.mft (raw, json) Hash identifier: L6URf/T0SBFXOluWaxPYcgHIHa3n+4iG37iSnlig5lg= Subject key identifier: 32:20:01:9C:8B:4A:F3:7A:47:5B:E2:CB:FE:E0:19:9A:8B:52:DA:6E Authority key identifier: D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE Certificate issuer: /CN=D225946751D641016A8BDC8983AB89443F4481EE Certificate serial: 45F010AA935945D7943E4B2B1472A72B52BECA1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft Manifest number: D1 Signing time: Mon 05 Oct 2026 14:47:25 +0000 Manifest this update: Mon 05 Oct 2026 14:42:25 +0000 Manifest next update: Tue 06 Oct 2026 17:19:25 +0000 Files and hashes: 1: D225946751D641016A8BDC8983AB89443F4481EE.crl (hash: GMTIXCz40dDYUEigu9Mb1dMDGS79ajpEmd7wFJ6vFKo=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: jbs2GDDsgo2med8aBN6Q/a3OTj8U5cq+mFVfdUXlcps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 14:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f0:10:aa:93:59:45:d7:94:3e:4b:2b:14:72:a7:2b:52:be:ca:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D225946751D641016A8BDC8983AB89443F4481EE Validity Not Before: Oct 5 14:42:25 2026 GMT Not After : Oct 6 17:19:25 2026 GMT Subject: CN=3220019C8B4AF37A475BE2CBFEE0199A8B52DA6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:f4:7b:66:d2:30:d9:04:63:06:f2:48:5d: c4:92:9d:73:00:24:04:4a:36:4e:ff:e7:95:ed:d1: de:0b:63:0f:c8:da:c6:03:8a:ee:a7:9d:e4:e2:79: 94:8f:9b:e9:90:1b:50:55:27:56:3a:78:42:cf:38: 14:9f:ac:ce:54:e6:f6:d7:90:2b:d8:59:d5:5d:64: 50:f1:8f:60:27:0b:ef:c9:1b:59:6c:77:bf:35:be: 2c:35:ed:c9:29:19:82:96:b4:2e:b8:2b:7f:96:cb: 2e:68:33:08:59:e4:d4:c7:68:fe:69:be:54:7e:da: 8c:c8:f4:71:06:64:c1:9d:5b:3a:79:30:91:4b:f9: 04:3f:3a:3a:8a:e5:f4:3a:fe:b1:4f:0b:86:d3:c8: 76:14:5a:88:da:01:22:81:0f:19:45:3f:08:8f:d7: 61:c3:d1:67:e6:cb:e0:b0:62:9f:07:5b:8b:1f:9f: f0:84:54:76:ca:19:d9:35:a4:ea:1c:b1:50:73:7e: 24:e0:31:46:c7:46:c2:cb:d5:f0:63:65:a0:9e:4a: 4a:0d:86:3e:50:92:0d:81:c0:11:27:f4:84:83:89: 17:45:b9:4e:34:63:86:dd:da:9a:0a:7c:46:b9:51: af:07:07:63:90:f2:99:8f:a7:6d:00:bf:0d:c2:fd: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:01:9C:8B:4A:F3:7A:47:5B:E2:CB:FE:E0:19:9A:8B:52:DA:6E X509v3 Authority Key Identifier: keyid:D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1e:ce:9b:6a:c5:aa:0a:09:8d:16:01:3b:1e:17:ed:26:4f: 6c:e4:9b:90:ab:d4:1c:24:a4:11:42:33:e2:b7:eb:e4:07:3e: a0:6c:0b:2f:a2:8c:46:55:04:fb:82:6d:74:b4:cb:6b:b4:4c: 6f:99:73:f4:dc:54:92:af:fe:bb:b5:44:c9:30:f6:3d:7c:14: df:15:d2:b8:e8:45:15:10:b9:68:b7:f1:8d:87:c6:0f:35:2c: 60:0c:ff:73:f5:41:28:e5:ff:4a:c6:3e:01:6d:fc:46:7d:7d: b2:93:f9:3e:a6:4e:54:cf:96:f9:aa:6e:10:a9:77:e6:d1:c2: 29:fb:43:4b:34:a5:d3:3c:51:36:f9:87:0a:4a:a9:1b:57:cd: b7:d2:bd:b8:4f:fa:ee:54:89:ec:83:1c:8b:7a:63:22:2b:05: 9c:ac:07:2b:5c:2f:86:3b:4e:92:28:f4:7e:dc:07:b3:80:e8: 10:f0:2a:d1:9e:bb:b9:d6:3e:2e:2f:19:8b:ad:a0:a6:06:cf: be:d6:cf:15:16:68:a0:ac:fc:8c:99:d2:ea:2d:a0:4f:01:d2: ae:e4:db:b7:bd:67:af:e5:79:64:9e:95:44:e2:a2:84:85:de: 8a:04:72:cf:98:db:7e:1d:88:10:7f:70:8c:b3:be:51:a8:bd: 42:7d:c4:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfAQqpNZRdeUPksrFHKnK1K+yh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNTk0Njc1MUQ2NDEwMTZBOEJEQzg5ODNBQjg5NDQz RjQ0ODFFRTAeFw0yNjEwMDUxNDQyMjVaFw0yNjEwMDYxNzE5MjVaMDMxMTAvBgNV BAMTKDMyMjAwMTlDOEI0QUYzN0E0NzVCRTJDQkZFRTAxOTlBOEI1MkRBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNPR7ZtIw2QRjBvJIXcSSnXMA JARKNk7/55Xt0d4LYw/I2sYDiu6nneTieZSPm+mQG1BVJ1Y6eELPOBSfrM5U5vbX kCvYWdVdZFDxj2AnC+/JG1lsd781viw17ckpGYKWtC64K3+Wyy5oMwhZ5NTHaP5p vlR+2ozI9HEGZMGdWzp5MJFL+QQ/OjqK5fQ6/rFPC4bTyHYUWojaASKBDxlFPwiP 12HD0Wfmy+CwYp8HW4sfn/CEVHbKGdk1pOocsVBzfiTgMUbHRsLL1fBjZaCeSkoN hj5Qkg2BwBEn9ISDiRdFuU40Y4bd2poKfEa5Ua8HB2OQ8pmPp20Avw3C/XtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMiABnItK83pHW+LL/uAZmotS2m4wHwYDVR0j BBgwFoAU0iWUZ1HWQQFqi9yJg6uJRD9Ege4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NTY4MTUtYTQ0NS00OTg4LTlmYTgtMjQ2ODZkOTM2Zjg0LzAvRDIyNTk0Njc1 MUQ2NDEwMTZBOEJEQzg5ODNBQjg5NDQzRjQ0ODFFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjI1OTQ2NzUxRDY0MTAxNkE4QkRDODk4M0FCODk0NDNGNDQ4 MUVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvRDIyNTk0Njc1MUQ2NDEwMTZBOEJEQzg5ODNBQjg5 NDQzRjQ0ODFFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMezptqxaoKCY0WATseF+0mT2zkm5Cr1Bwk pBFCM+K36+QHPqBsCy+ijEZVBPuCbXS0y2u0TG+Zc/TcVJKv/ru1RMkw9j18FN8V 0rjoRRUQuWi38Y2Hxg81LGAM/3P1QSjl/0rGPgFt/EZ9fbKT+T6mTlTPlvmqbhCp d+bRwin7Q0s0pdM8UTb5hwpKqRtXzbfSvbhP+u5UieyDHIt6YyIrBZysBytcL4Y7 TpIo9H7cB7OA6BDwKtGeu7nWPi4vGYutoKYGz77WzxUWaKCs/IyZ0uotoE8B0q7k 27e9Z6/leWSelUTiooSF3ooEcs+Y234diBB/cIyzvlGovUJ9xKs= -----END CERTIFICATE-----Generated at Mon Oct 5 20:57:49 2026 by rpki-client