$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json) Hash identifier: encDtm8Btk+YwW3HGYhIp0LP6hp0/rJvkAKFX/a/ra0= Subject key identifier: A0:76:6D:66:7D:81:79:9D:B2:C2:A7:08:C1:07:46:6C:7E:80:BF:7B Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Certificate serial: 44DF4F711281013B6FF9E94C6B49F1FC1C5FAB34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:57:45 +0000 Manifest this update: Tue 22 Sep 2026 00:52:45 +0000 Manifest next update: Wed 23 Sep 2026 04:08:45 +0000 Files and hashes: 1: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=) 2: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=) 3: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: 4GdLf3zLQSCVG+r6tGySugNFQIjgfBnsQG9l7JFHOgo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:df:4f:71:12:81:01:3b:6f:f9:e9:4c:6b:49:f1:fc:1c:5f:ab:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Validity Not Before: Sep 22 00:52:45 2026 GMT Not After : Sep 23 04:08:45 2026 GMT Subject: CN=A0766D667D81799DB2C2A708C107466C7E80BF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:5a:bf:a4:62:b6:8d:17:f8:38:af:61:56: 12:b2:04:65:6c:d5:38:74:f8:b7:cd:67:af:b6:1b: c0:84:af:a4:53:c9:e8:ec:2d:e7:e1:1d:8f:d0:da: b7:d7:6f:d2:c6:2e:93:9b:bc:a3:37:ee:c7:83:b4: 04:e2:42:5d:b3:dc:57:05:96:fb:92:98:4e:7a:21: 76:a1:2d:88:29:0f:78:1e:f8:06:62:0a:39:c5:0d: b4:24:91:01:fc:80:f7:e5:6c:89:56:3b:28:fe:49: 8c:52:2c:cb:ac:8c:aa:64:ca:3e:63:0c:6e:96:dd: 48:7b:88:9c:16:81:b2:bb:96:66:55:03:06:dd:70: 79:d4:d8:31:e0:60:c1:fc:3b:40:cd:de:11:31:1f: 21:5c:e7:57:55:e9:3d:67:dc:1c:41:11:85:58:24: 6e:f2:c8:1b:1c:79:00:0a:ad:d0:a4:25:ae:96:6e: 29:21:b0:5b:de:2f:5d:25:39:d4:94:a8:30:3a:b9: 11:ef:e6:dc:6f:5a:1a:5e:fb:3f:0c:77:05:67:fa: e8:20:cf:cf:5a:07:5f:2a:9a:46:fa:9a:69:a1:8f: 63:83:1e:f5:c0:19:1c:b7:1b:af:17:57:ef:f8:33: 73:58:fa:81:2e:56:bd:dd:25:2d:b0:de:51:04:df: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:6D:66:7D:81:79:9D:B2:C2:A7:08:C1:07:46:6C:7E:80:BF:7B X509v3 Authority Key Identifier: keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:71:0f:cf:6c:6e:13:22:1a:ae:7f:3d:73:c1:2b:3b:a6:00: 25:04:f7:6a:eb:87:b0:84:9b:a5:a7:e3:ca:fa:a7:5c:f7:b7: 59:bf:f0:2c:07:34:d1:97:10:54:1c:fe:e7:e8:42:a1:94:f9: cc:7e:d3:2e:57:25:85:6e:1c:7f:23:40:1d:85:f2:7c:5e:cf: e5:ef:04:de:ef:92:3c:21:ac:4d:cc:e9:b1:9e:10:19:29:c1: 87:06:42:25:a1:28:ea:28:f7:9c:de:f8:41:af:84:9e:d6:f8: 4d:fa:bc:3a:15:17:0e:16:73:f1:ae:ab:86:98:4e:36:13:42: f9:23:2e:ee:78:44:07:7b:98:93:c3:70:d1:d0:07:28:aa:14: c8:cd:a0:9d:b8:81:ca:08:ec:69:26:a0:69:ac:e6:84:6a:3d: c3:2b:7b:b8:1f:d2:5e:74:fd:5c:41:30:e2:18:6a:3c:34:72: 95:b9:37:82:c1:ef:5b:df:80:e8:57:97:8a:88:ab:c1:9a:9f: a1:e7:87:5c:9f:9b:5c:50:00:00:97:4c:40:c2:16:1f:ff:99: 32:90:a2:65:6c:56:22:00:a6:5c:ec:88:17:5b:f4:58:da:c9: 83:1a:13:72:30:b4:23:ad:39:fd:3e:ca:ad:8b:fa:14:4a:da: 0a:5c:79:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURN9PcRKBATtv+elMa0nx/BxfqzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcw NDJDMzI1RTAeFw0yNjA5MjIwMDUyNDVaFw0yNjA5MjMwNDA4NDVaMDMxMTAvBgNV BAMTKEEwNzY2RDY2N0Q4MTc5OURCMkMyQTcwOEMxMDc0NjZDN0U4MEJGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMFq/pGK2jRf4OK9hVhKyBGVs 1Th0+LfNZ6+2G8CEr6RTyejsLefhHY/Q2rfXb9LGLpObvKM37seDtATiQl2z3FcF lvuSmE56IXahLYgpD3ge+AZiCjnFDbQkkQH8gPflbIlWOyj+SYxSLMusjKpkyj5j DG6W3Uh7iJwWgbK7lmZVAwbdcHnU2DHgYMH8O0DN3hExHyFc51dV6T1n3BxBEYVY JG7yyBsceQAKrdCkJa6WbikhsFveL10lOdSUqDA6uRHv5txvWhpe+z8MdwVn+ugg z89aB18qmkb6mmmhj2ODHvXAGRy3G68XV+/4M3NY+oEuVr3dJS2w3lEE35I1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHZtZn2BeZ2ywqcIwQdGbH6Av3swHwYDVR0j BBgwFoAUVI0ba2upoWXnet7v4oQkhwQsMl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YTdkOTgtMjMzOC00ZDc3LTk2NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2 QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcwNDJDMzI1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDhEMUI2QjZCQTlBMTY1RTc3QURFRUZFMjg0MjQ4NzA0MkMz MjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0 ODcwNDJDMzI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9xD89sbhMiGq5/PXPBKzumACUE92rrh7CE m6Wn48r6p1z3t1m/8CwHNNGXEFQc/ufoQqGU+cx+0y5XJYVuHH8jQB2F8nxez+Xv BN7vkjwhrE3M6bGeEBkpwYcGQiWhKOoo95ze+EGvhJ7W+E36vDoVFw4Wc/Guq4aY TjYTQvkjLu54RAd7mJPDcNHQByiqFMjNoJ24gcoI7GkmoGms5oRqPcMre7gf0l50 /VxBMOIYajw0cpW5N4LB71vfgOhXl4qIq8Gan6Hnh1yfm1xQAACXTEDCFh//mTKQ omVsViIAplzsiBdb9FjayYMaE3IwtCOtOf0+yq2L+hRK2gpcefw= -----END CERTIFICATE-----Generated at Tue Sep 22 05:27:52 2026 by rpki-client