$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft File: 5645F0B82898A2A9A354AB086BC696E81297553D.mft (raw, json) Hash identifier: TEZrzucAKGCzXksKLAiu4EItWVn3aR/T/7fDGXL/Q5w= Subject key identifier: D9:16:2C:F3:21:D7:7A:E9:39:BE:65:ED:1D:4A:3E:1B:76:12:8A:92 Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D Certificate issuer: /CN=5645F0B82898A2A9A354AB086BC696E81297553D Certificate serial: 3612B650CA10CCD6A27BCF87B686CBDFF464C0C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft Manifest number: BF Signing time: Wed 23 Sep 2026 01:28:00 +0000 Manifest this update: Wed 23 Sep 2026 01:23:00 +0000 Manifest next update: Thu 24 Sep 2026 02:35:00 +0000 Files and hashes: 1: 5645F0B82898A2A9A354AB086BC696E81297553D.crl (hash: IklmE8hEQCs2Z+Mp2Q9VFNMRGh1F77wHyOjl4zqeGJw=) 2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:12:b6:50:ca:10:cc:d6:a2:7b:cf:87:b6:86:cb:df:f4:64:c0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D Validity Not Before: Sep 23 01:23:00 2026 GMT Not After : Sep 24 02:35:00 2026 GMT Subject: CN=D9162CF321D77AE939BE65ED1D4A3E1B76128A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:8b:52:90:f2:e8:6f:fe:a1:79:63:ab:d8: 97:39:f4:7f:64:f4:07:6d:21:55:20:08:ba:46:64: e6:0e:01:9b:46:f0:51:8b:9f:2a:3f:d3:30:66:0a: 84:b2:6a:7f:38:25:bd:12:9e:b2:25:1a:dc:43:d9: b7:0e:f4:a4:d1:97:d0:a7:44:a8:a7:41:b4:2c:f3: 26:0d:43:e7:76:b0:11:8b:f9:0a:f5:aa:15:17:9a: 85:68:15:39:db:32:6a:65:a2:e4:35:76:e3:70:41: d4:2d:f8:c5:a1:cd:23:34:7a:9f:ea:6d:66:23:5c: 22:3c:c5:89:80:e9:27:90:dd:72:49:43:f5:5f:12: 7f:b1:4d:09:00:92:af:fd:c5:64:5d:58:10:03:97: de:27:2c:b0:a8:25:57:dd:51:b3:b1:18:de:a8:8c: 0d:fa:73:78:e7:b7:9a:ac:6d:71:4d:6a:86:37:cd: c7:26:24:a8:9c:e5:0e:6b:eb:f5:c9:4d:d8:c9:62: e7:74:92:1d:59:be:5a:f5:22:93:4a:90:34:7f:7a: 11:0f:58:5e:ad:d1:16:de:55:fe:b6:2b:39:81:9b: 42:ae:69:67:6d:5f:a2:1b:af:46:31:af:d6:37:eb: d3:bf:65:bb:1f:d4:a0:a0:77:62:21:72:8b:49:c7: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:16:2C:F3:21:D7:7A:E9:39:BE:65:ED:1D:4A:3E:1B:76:12:8A:92 X509v3 Authority Key Identifier: keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:29:b7:1a:09:72:0d:2f:44:56:e1:a2:39:e2:14:2a:0a: a9:bf:2d:be:ac:3a:78:5b:b3:cb:53:3d:a4:32:bb:81:8e:a8: 31:70:1f:07:96:cb:ca:73:79:66:96:21:96:10:c3:6e:62:fa: 8e:52:b0:80:2b:c1:0b:8a:41:b3:a0:45:04:68:cd:af:92:25: b9:73:1f:c0:bb:7f:30:a0:30:42:cf:04:2b:e6:f1:c8:6e:9a: 51:6a:01:f5:95:a8:65:a5:85:14:21:5b:50:4f:68:33:48:11: d3:ba:db:07:ee:33:f3:27:9a:ba:67:98:77:80:61:35:d6:f4: 20:00:95:7c:52:c8:3e:33:60:06:b8:ba:ba:68:8d:98:4a:a1: 9f:fe:39:7a:70:c1:5a:92:92:c8:a4:d6:b4:b1:a5:54:96:9d: e6:22:e8:40:cb:c4:ee:6e:9f:bc:6d:c8:0e:c0:aa:6b:a9:78: 34:34:3e:87:3c:ac:65:97:62:67:7c:61:a2:06:a2:fa:03:32: a2:59:d2:23:4f:9d:9a:df:29:44:22:0f:7c:74:f5:38:77:b3: 9f:13:a1:38:fe:28:ca:9e:cf:f7:61:49:a1:2a:45:f8:69:14: d2:50:53:54:f1:90:de:a8:3d:1c:5a:16:0d:91:3a:81:af:dd: c4:82:bf:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhK2UMoQzNaie8+HtobL3/RkwMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY0NUYwQjgyODk4QTJBOUEzNTRBQjA4NkJDNjk2RTgx Mjk3NTUzRDAeFw0yNjA5MjMwMTIzMDBaFw0yNjA5MjQwMjM1MDBaMDMxMTAvBgNV BAMTKEQ5MTYyQ0YzMjFENzdBRTkzOUJFNjVFRDFENEEzRTFCNzYxMjhBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOotSkPLob/6heWOr2Jc59H9k 9AdtIVUgCLpGZOYOAZtG8FGLnyo/0zBmCoSyan84Jb0SnrIlGtxD2bcO9KTRl9Cn RKinQbQs8yYNQ+d2sBGL+Qr1qhUXmoVoFTnbMmplouQ1duNwQdQt+MWhzSM0ep/q bWYjXCI8xYmA6SeQ3XJJQ/VfEn+xTQkAkq/9xWRdWBADl94nLLCoJVfdUbOxGN6o jA36c3jnt5qsbXFNaoY3zccmJKic5Q5r6/XJTdjJYud0kh1Zvlr1IpNKkDR/ehEP WF6t0RbeVf62KzmBm0KuaWdtX6Ibr0Yxr9Y369O/Zbsf1KCgd2IhcotJx4XdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RYs8yHXeuk5vmXtHUo+G3YSipIwHwYDVR0j BBgwFoAUVkXwuCiYoqmjVKsIa8aW6BKXVT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBkOGRhMmQtYTUwNi00NzYzLWJjM2MtZTI4MGJmNzUxN2E0LzAvNTY0NUYwQjgy ODk4QTJBOUEzNTRBQjA4NkJDNjk2RTgxMjk3NTUzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjQ1RjBCODI4OThBMkE5QTM1NEFCMDg2QkM2OTZFODEyOTc1 NTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTY0NUYwQjgyODk4QTJBOUEzNTRBQjA4NkJDNjk2 RTgxMjk3NTUzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJBKbcaCXINL0RW4aI54hQqCqm/Lb6sOnhb s8tTPaQyu4GOqDFwHweWy8pzeWaWIZYQw25i+o5SsIArwQuKQbOgRQRoza+SJblz H8C7fzCgMELPBCvm8chumlFqAfWVqGWlhRQhW1BPaDNIEdO62wfuM/MnmrpnmHeA YTXW9CAAlXxSyD4zYAa4urpojZhKoZ/+OXpwwVqSksik1rSxpVSWneYi6EDLxO5u n7xtyA7AqmupeDQ0Poc8rGWXYmd8YaIGovoDMqJZ0iNPnZrfKUQiD3x09Th3s58T oTj+KMqez/dhSaEqRfhpFNJQU1TxkN6oPRxaFg2ROoGv3cSCvwc= -----END CERTIFICATE-----Generated at Wed Sep 23 10:18:33 2026 by rpki-client