$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: W1F4afYXg/w740J003QdT3M/YPS4NZfM8U/hht4VXSQ= Subject key identifier: 3C:14:21:1B:BF:56:D2:B9:AD:DA:B7:6A:60:27:57:94:56:A8:00:D4 Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 7DF33B9E75EA2A85859B5FD8422CA9D88A744202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:57:46 +0000 Manifest this update: Mon 21 Sep 2026 00:52:46 +0000 Manifest next update: Tue 22 Sep 2026 02:18:46 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) 2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: gg2MYywJ3NKyx3GWRNkvqPaqLOmQtHvp1IUYEnf2S4Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f3:3b:9e:75:ea:2a:85:85:9b:5f:d8:42:2c:a9:d8:8a:74:42:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: Sep 21 00:52:46 2026 GMT Not After : Sep 22 02:18:46 2026 GMT Subject: CN=3C14211BBF56D2B9ADDAB76A6027579456A800D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:a5:31:d1:28:5a:0a:37:04:70:bd:0f:fc: 45:eb:ab:9b:39:a8:fd:2f:72:6a:c2:b1:c8:4f:66: 3b:39:69:40:ce:fd:ba:e3:b1:84:02:41:a3:de:2e: 19:fa:89:02:7d:c6:5f:db:c6:74:e3:5e:2a:3b:3f: ba:1e:0a:6f:45:14:b5:9c:9b:a8:f8:53:45:cc:86: a2:a9:2f:1d:fa:92:7d:ab:a0:8e:d7:01:52:f8:ba: 85:ba:92:3b:55:6d:93:c9:9e:9e:69:d5:65:d1:4c: 46:b3:9f:0e:6c:75:14:d9:84:6c:3c:8e:9e:e1:77: 03:46:d5:9a:27:56:1a:9b:11:d9:3c:0e:c0:87:0e: 04:73:77:f0:cb:58:8d:03:d3:d1:db:64:f4:02:c2: 5e:f3:2d:47:6d:ce:e6:d1:0b:54:50:7e:1b:50:77: f2:7c:90:e9:d2:88:23:dc:f0:36:8c:33:03:78:58: 59:9e:c6:b4:58:ca:aa:df:68:1a:0c:33:fb:d8:85: 65:1a:58:26:9a:df:b5:75:27:3c:be:1b:af:8d:3e: d8:26:52:01:69:f1:f8:2f:d9:d2:cd:96:22:dd:8e: f1:e4:da:6b:96:31:26:e1:af:bd:40:40:da:5b:71: 84:5f:5d:e0:bc:40:0d:c0:d5:94:30:86:10:85:7c: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:21:1B:BF:56:D2:B9:AD:DA:B7:6A:60:27:57:94:56:A8:00:D4 X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ae:ec:5c:28:38:ea:be:d6:7e:e0:af:15:ff:2c:a3:73:1c: fe:ef:9d:41:5a:48:ed:f0:22:fe:75:d1:78:34:f8:f4:8c:22: 1d:7f:88:c3:95:3f:d8:1c:3a:07:79:02:78:91:df:e0:d1:6c: ee:7c:e2:0f:43:b8:41:58:cb:57:18:a6:0d:3a:b2:c5:28:c4: a0:04:9d:46:54:0b:90:c1:7a:f2:1e:fc:7d:01:c9:5c:ce:73: 10:e1:49:63:ab:bd:a8:84:26:77:61:fc:41:5c:a8:f9:6a:f2: 3a:d5:7a:f6:93:85:3d:42:d4:2d:5e:6a:0f:6b:1f:dd:c8:d6: 6a:84:31:3d:af:0d:24:f8:d5:b3:33:cc:92:2c:c4:1c:27:21: 72:64:b3:98:9d:40:5d:ef:08:5c:23:c2:48:4c:9d:a5:06:0f: 8c:d8:af:ac:b9:22:f9:2c:9b:36:19:1d:53:c7:2f:93:cd:2e: 01:dd:1c:91:7f:ae:af:80:1c:c8:15:c1:68:90:49:74:87:92: c1:5a:fe:7c:08:8a:e8:3b:54:82:28:d1:8e:fe:0f:dc:a8:c1: 3d:ab:9c:5a:e1:31:e1:0d:d8:c8:4b:03:93:98:24:80:8d:4c: e8:29:b1:b8:56:70:32:8f:79:7f:88:b4:6e:3b:4a:41:ca:e4: 73:3e:73:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffM7nnXqKoWFm1/YQiyp2Ip0QgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA5MjEwMDUyNDZaFw0yNjA5MjIwMjE4NDZaMDMxMTAvBgNV BAMTKDNDMTQyMTFCQkY1NkQyQjlBRERBQjc2QTYwMjc1Nzk0NTZBODAwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTjqUx0ShaCjcEcL0P/EXrq5s5 qP0vcmrCschPZjs5aUDO/brjsYQCQaPeLhn6iQJ9xl/bxnTjXio7P7oeCm9FFLWc m6j4U0XMhqKpLx36kn2roI7XAVL4uoW6kjtVbZPJnp5p1WXRTEaznw5sdRTZhGw8 jp7hdwNG1ZonVhqbEdk8DsCHDgRzd/DLWI0D09HbZPQCwl7zLUdtzubRC1RQfhtQ d/J8kOnSiCPc8DaMMwN4WFmexrRYyqrfaBoMM/vYhWUaWCaa37V1Jzy+G6+NPtgm UgFp8fgv2dLNliLdjvHk2muWMSbhr71AQNpbcYRfXeC8QA3A1ZQwhhCFfJVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPBQhG79W0rmt2rdqYCdXlFaoANQwHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACu7FwoOOq+1n7grxX/LKNzHP7vnUFaSO3w Iv510Xg0+PSMIh1/iMOVP9gcOgd5AniR3+DRbO584g9DuEFYy1cYpg06ssUoxKAE nUZUC5DBevIe/H0ByVzOcxDhSWOrvaiEJndh/EFcqPlq8jrVevaThT1C1C1eag9r H93I1mqEMT2vDST41bMzzJIsxBwnIXJks5idQF3vCFwjwkhMnaUGD4zYr6y5Ivks mzYZHVPHL5PNLgHdHJF/rq+AHMgVwWiQSXSHksFa/nwIiug7VIIo0Y7+D9yowT2r nFrhMeEN2MhLA5OYJICNTOgpsbhWcDKPeX+ItG47SkHK5HM+c1c= -----END CERTIFICATE-----Generated at Mon Sep 21 05:35:39 2026 by rpki-client