$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft File: 0453EE44B6298E574434A213BFD59854FBBC1AC9.mft (raw, json) Hash identifier: HDE0XdSb4jsW1wTKIZ1K6PjflmoV/L134sUcQEqmT0g= Subject key identifier: 1C:44:27:A0:B3:B1:3D:56:4D:A9:55:91:D7:0E:EA:F3:7C:FA:01:D6 Authority key identifier: 04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 Certificate issuer: /CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Certificate serial: 2DB2CADB6B5B629E46029A226692205105EDDE90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 13:22:02 +0000 Manifest this update: Fri 25 Sep 2026 13:17:02 +0000 Manifest next update: Sat 26 Sep 2026 16:58:02 +0000 Files and hashes: 1: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: HWOy6TZ8QT68FcB2BCMFfmYX+XsnVwiXZ6wBXEIZ6YM=) 2: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: 7NlmtYXZ6oozA3ARYN5xU0ZSurydVsw5V4omrofalOI=) 3: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: 9cSUjwh9z6+6ZJ3LgshkbKPWLwwzg4ImlK/YQG0hafg=) 4: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: cIZPGEVWJFWOc4kuja4Zgt6H/ILhtTMjLdnFHfcUoyY=) 5: 0453EE44B6298E574434A213BFD59854FBBC1AC9.crl (hash: 4BH2a4oLQBxrt4s7C2CZeehb7HeOTpCN1YR4vmir5fk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b2:ca:db:6b:5b:62:9e:46:02:9a:22:66:92:20:51:05:ed:de:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Validity Not Before: Sep 25 13:17:02 2026 GMT Not After : Sep 26 16:58:02 2026 GMT Subject: CN=1C4427A0B3B13D564DA95591D70EEAF37CFA01D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:b9:c0:03:57:75:0f:e4:72:93:20:fd:8d: 4a:50:ae:1a:f5:a1:b7:7c:ec:23:b9:30:54:e3:5b: fd:19:48:34:2e:ab:13:18:6d:74:d1:8a:e0:8f:7c: 0c:e9:c0:1c:09:58:26:af:c1:91:86:9a:b3:98:da: ff:c4:c8:3f:ae:79:74:35:cb:7c:25:66:cb:0e:bd: bf:52:7a:69:fb:76:05:2a:15:f5:6d:9e:e5:17:7e: 34:96:65:0d:fe:9c:51:6a:73:7f:ac:b0:ad:7e:64: 48:27:d1:e8:fb:c7:e6:88:0d:99:22:61:d3:f3:55: a0:c0:a4:ec:99:1e:84:e6:fe:d5:6e:02:1b:40:8f: 4a:71:5b:ab:85:da:ae:39:30:2d:a3:54:f6:94:cc: ac:11:53:07:b6:65:fb:8b:67:36:57:7b:58:f0:9e: ea:14:09:1f:d2:63:66:30:2f:e5:9e:49:ac:97:6b: 71:89:49:64:9c:e6:2d:b2:01:41:be:ad:bb:12:d4: fc:2b:e5:50:cd:69:2e:5f:3e:cf:5d:a1:db:d1:6e: d6:69:26:5d:2a:1d:f4:e6:db:5e:a8:e7:51:9e:d4: af:44:da:e1:dd:2a:bf:b4:61:98:37:83:90:b8:c2: 6b:c9:46:d6:50:40:96:d6:f7:4a:64:91:07:13:28: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:27:A0:B3:B1:3D:56:4D:A9:55:91:D7:0E:EA:F3:7C:FA:01:D6 X509v3 Authority Key Identifier: keyid:04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4f:1d:31:bc:c2:4d:96:11:9a:5f:f8:9c:c7:4b:6d:53:3b: 3f:29:d3:f3:77:91:89:a0:ef:1e:1c:08:a6:9a:1f:8c:fb:3a: a9:ee:d5:7f:85:fa:51:6d:d0:86:43:86:b1:cf:5b:ad:ec:46: 34:4e:81:ca:1c:ea:17:dd:03:5d:00:3b:74:db:0a:1f:ff:90: 63:a4:ae:75:37:24:7f:d0:74:dd:cb:fd:ef:12:32:fb:f9:77: 68:d7:0d:49:48:a8:ca:05:ff:52:b1:66:c1:ae:2a:a0:1b:fd: eb:0c:b7:11:78:61:09:b8:02:a7:b4:16:ab:fc:41:fb:93:e8: 83:2a:bf:81:d9:f5:ab:b3:b3:8f:ad:0b:d2:df:07:48:73:91: e1:ea:4e:5a:6c:a9:00:99:a1:69:78:2f:cf:50:60:93:46:17: 0a:8c:6a:b7:30:c0:14:68:71:9c:71:d2:6b:01:e6:cd:42:da: 36:24:ec:79:08:e6:f5:e9:50:5c:d3:93:20:49:79:95:0d:88: 40:11:69:53:d4:e6:95:6d:48:69:5f:19:7b:d5:c1:ff:14:9c: 01:f1:2b:3f:a4:ea:7a:9d:74:68:64:3e:db:fd:75:ff:f6:79: d4:fd:18:bc:c5:5e:70:d7:7e:a1:1f:9c:6a:e3:d8:a5:b9:4e: 6e:ff:c2:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbLK22tbYp5GApoiZpIgUQXt3pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRG QkJDMUFDOTAeFw0yNjA5MjUxMzE3MDJaFw0yNjA5MjYxNjU4MDJaMDMxMTAvBgNV BAMTKDFDNDQyN0EwQjNCMTNENTY0REE5NTU5MUQ3MEVFQUYzN0NGQTAxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdrnAA1d1D+RykyD9jUpQrhr1 obd87CO5MFTjW/0ZSDQuqxMYbXTRiuCPfAzpwBwJWCavwZGGmrOY2v/EyD+ueXQ1 y3wlZssOvb9Semn7dgUqFfVtnuUXfjSWZQ3+nFFqc3+ssK1+ZEgn0ej7x+aIDZki YdPzVaDApOyZHoTm/tVuAhtAj0pxW6uF2q45MC2jVPaUzKwRUwe2ZfuLZzZXe1jw nuoUCR/SY2YwL+WeSayXa3GJSWSc5i2yAUG+rbsS1Pwr5VDNaS5fPs9dodvRbtZp Jl0qHfTm216o51Ge1K9E2uHdKr+0YZg3g5C4wmvJRtZQQJbW90pkkQcTKHFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEQnoLOxPVZNqVWR1w7q83z6AdYwHwYDVR0j BBgwFoAUBFPuRLYpjldENKITv9WYVPu8GskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU3YjkwY2ItOGViZC00YzdiLThjMzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRC NjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRGQkJDMUFDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUzRUU0NEI2Mjk4RTU3NDQzNEEyMTNCRkQ1OTg1NEZCQkMx QUM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4 NTRGQkJDMUFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhPHTG8wk2WEZpf+JzHS21TOz8p0/N3kYmg 7x4cCKaaH4z7Oqnu1X+F+lFt0IZDhrHPW63sRjROgcoc6hfdA10AO3TbCh//kGOk rnU3JH/QdN3L/e8SMvv5d2jXDUlIqMoF/1KxZsGuKqAb/esMtxF4YQm4Aqe0Fqv8 QfuT6IMqv4HZ9auzs4+tC9LfB0hzkeHqTlpsqQCZoWl4L89QYJNGFwqMarcwwBRo cZxx0msB5s1C2jYk7HkI5vXpUFzTkyBJeZUNiEARaVPU5pVtSGlfGXvVwf8UnAHx Kz+k6nqddGhkPtv9df/2edT9GLzFXnDXfqEfnGrj2KW5Tm7/wg0= -----END CERTIFICATE-----Generated at Fri Sep 25 23:05:49 2026 by rpki-client