$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json) Hash identifier: etVyJxCuSzY2b/FI6P7w2kKHEkfwEGM4D6qihTD+CRg= Subject key identifier: 7E:D5:7E:D9:BD:98:FB:4B:C8:AA:64:40:52:25:34:75:FE:43:33:FC Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Certificate serial: 08FF36D1BB8683A0B411EB41B47325F635A3F2D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 13:33:19 +0000 Manifest this update: Mon 21 Sep 2026 13:28:19 +0000 Manifest next update: Tue 22 Sep 2026 15:48:19 +0000 Files and hashes: 1: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: t46bqla4Ce4cdR4zvrxt4FMoqoRhWCAlqPfHW+lVbec=) 2: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=) 3: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ff:36:d1:bb:86:83:a0:b4:11:eb:41:b4:73:25:f6:35:a3:f2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Validity Not Before: Sep 21 13:28:19 2026 GMT Not After : Sep 22 15:48:19 2026 GMT Subject: CN=7ED57ED9BD98FB4BC8AA644052253475FE4333FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:30:5d:d8:e6:88:57:80:7d:bc:fc:50:0f: ad:2b:e9:dd:ed:5a:fe:57:80:86:f1:ca:ac:1d:53: cf:db:31:2f:a3:aa:a5:15:74:83:90:1c:37:11:30: ad:1f:68:76:24:33:85:85:aa:cb:70:12:f8:80:56: 2b:d9:06:84:f5:0f:1c:9f:fd:f7:79:f7:84:90:25: 0c:5c:11:1a:4c:2d:c5:ed:5c:c4:97:8b:3c:b9:19: 84:ea:72:50:a5:7b:05:f2:a9:db:f4:b8:4d:03:f3: 0a:f6:5e:1a:95:d3:bf:f0:c8:10:0d:bf:c5:f2:76: 8b:ad:1b:97:53:d5:71:58:ae:f5:84:f8:11:8e:9e: 60:1a:87:95:62:0d:3c:3e:e3:68:ff:e4:b4:dc:a7: 5b:c1:08:97:69:ab:fa:97:72:51:4b:84:0b:6f:ec: a1:59:f3:0f:51:33:b2:fd:1a:5c:82:c6:03:ef:87: fd:87:e5:23:3c:02:9d:34:db:c3:a5:29:eb:27:ef: d9:f9:66:a7:2f:1e:4c:b7:0a:af:a9:e4:09:be:cb: b7:2b:86:eb:ad:70:2f:d5:99:2b:e1:cc:8e:c1:bf: ae:0c:81:cf:03:da:4a:01:dd:35:fd:aa:64:47:ba: 4e:58:bf:64:19:a4:7f:ff:18:e5:bc:a3:39:47:1b: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D5:7E:D9:BD:98:FB:4B:C8:AA:64:40:52:25:34:75:FE:43:33:FC X509v3 Authority Key Identifier: keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c4:89:64:9f:fa:d9:8e:7f:1e:ea:a9:4f:c7:db:10:a5:bc: 0a:a3:d7:12:eb:42:e1:b5:e3:38:89:7a:91:5a:63:ed:e4:aa: 5b:48:9b:e7:f3:0b:28:8c:e0:d4:09:84:c9:2a:c5:f5:a4:21: af:9f:a4:6a:b0:bd:bf:06:42:27:0f:51:48:ea:a6:48:55:a5: c9:43:0f:32:23:47:fc:ce:d5:01:e0:e3:47:d6:85:0f:7c:4a: 80:f5:5c:4b:7e:b2:0f:6e:96:06:b4:e8:03:92:fd:65:f1:80: 97:1f:26:6d:78:08:44:41:9b:d7:00:b7:04:1c:ce:5d:86:f7: aa:db:67:c3:87:f9:c5:e4:1a:7b:ff:c0:ee:aa:c2:70:5b:80: e5:cc:9f:cb:0d:89:5a:90:e5:b1:90:bb:11:2e:88:eb:ca:e9: 53:82:80:c9:72:9f:c9:6d:e5:1e:a6:42:75:39:05:61:b6:f3: 33:4b:58:d4:88:e3:cd:07:db:b2:d7:57:f5:77:44:42:a4:ac: 07:44:3d:db:98:95:fa:43:ee:3e:72:bd:2a:7e:62:97:84:27: a9:42:4b:c5:b7:5d:58:6c:0b:19:3d:4e:87:9d:4f:08:45:1f: e3:90:b6:4d:eb:3e:b6:11:2e:bf:e3:84:dc:bb:9b:3d:7b:0e: 23:4f:f6:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCP820buGg6C0EetBtHMl9jWj8tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkz Njc3N0JDOTAeFw0yNjA5MjExMzI4MTlaFw0yNjA5MjIxNTQ4MTlaMDMxMTAvBgNV BAMTKDdFRDU3RUQ5QkQ5OEZCNEJDOEFBNjQ0MDUyMjUzNDc1RkU0MzMzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ODBd2OaIV4B9vPxQD60r6d3t Wv5XgIbxyqwdU8/bMS+jqqUVdIOQHDcRMK0faHYkM4WFqstwEviAVivZBoT1Dxyf /fd594SQJQxcERpMLcXtXMSXizy5GYTqclClewXyqdv0uE0D8wr2XhqV07/wyBAN v8XydoutG5dT1XFYrvWE+BGOnmAah5ViDTw+42j/5LTcp1vBCJdpq/qXclFLhAtv 7KFZ8w9RM7L9GlyCxgPvh/2H5SM8Ap0028OlKesn79n5ZqcvHky3Cq+p5Am+y7cr huutcC/VmSvhzI7Bv64Mgc8D2koB3TX9qmRHuk5Yv2QZpH//GOW8ozlHGxARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftV+2b2Y+0vIqmRAUiU0df5DM/wwHwYDVR0j BBgwFoAUVF6pkoUa8nJtzo/h8pOL6TZ3e8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlYWM5YzAtZGUxYi00NmRkLWJmMzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4 NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkzNjc3N0JDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDVFQTk5Mjg1MUFGMjcyNkRDRThGRTFGMjkzOEJFOTM2Nzc3 QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhC RTkzNjc3N0JDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXEiWSf+tmOfx7qqU/H2xClvAqj1xLrQuG1 4ziJepFaY+3kqltIm+fzCyiM4NQJhMkqxfWkIa+fpGqwvb8GQicPUUjqpkhVpclD DzIjR/zO1QHg40fWhQ98SoD1XEt+sg9ulga06AOS/WXxgJcfJm14CERBm9cAtwQc zl2G96rbZ8OH+cXkGnv/wO6qwnBbgOXMn8sNiVqQ5bGQuxEuiOvK6VOCgMlyn8lt 5R6mQnU5BWG28zNLWNSI480H27LXV/V3REKkrAdEPduYlfpD7j5yvSp+YpeEJ6lC S8W3XVhsCxk9ToedTwhFH+OQtk3rPrYRLr/jhNy7mz17DiNP9mo= -----END CERTIFICATE-----Generated at Mon Sep 21 15:31:58 2026 by rpki-client