$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft File: 1345157B61F361F583DCB52DB3ECBCA10862599B.mft (raw, json) Hash identifier: BuS+lnBFFWHB7btG8oyiqQh53Y7gc/dQrfHC4b+GPwM= Subject key identifier: D2:FC:9F:E8:92:E8:47:F6:7A:4D:CA:BF:32:8E:A0:27:9B:D4:33:C1 Authority key identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B Certificate issuer: /CN=1345157B61F361F583DCB52DB3ECBCA10862599B Certificate serial: 2004C4CF9EA81DA8F2F075E5F1282FAD898E3DEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 19:41:52 +0000 Manifest this update: Thu 03 Sep 2026 19:36:52 +0000 Manifest next update: Fri 04 Sep 2026 23:02:52 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: jNEFs2GtzFKSgVBlfyDoiMOmxKN4+FK/qSYbZvqpibs=) 2: 1345157B61F361F583DCB52DB3ECBCA10862599B.crl (hash: DSEjbjRDbm56jFIO/rga+vhDPi/nOwOMtHMdrxDpRWI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 23:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:04:c4:cf:9e:a8:1d:a8:f2:f0:75:e5:f1:28:2f:ad:89:8e:3d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1345157B61F361F583DCB52DB3ECBCA10862599B Validity Not Before: Sep 3 19:36:52 2026 GMT Not After : Sep 4 23:02:52 2026 GMT Subject: CN=D2FC9FE892E847F67A4DCABF328EA0279BD433C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:d7:f0:84:af:35:97:52:b4:0c:31:f2:b8: 2e:d5:a3:0f:d0:0e:7a:b8:13:99:d6:a3:5f:35:2b: 63:ee:68:00:76:dc:29:86:bb:f8:63:a2:ff:1c:ef: 86:74:18:e3:62:89:f1:56:03:2f:3d:a5:de:0c:fa: 7f:ad:31:34:d8:9e:76:1b:06:9e:96:e3:7e:79:59: c5:b7:a1:6e:19:bf:06:20:a9:d1:ac:a8:f9:ed:6e: 11:5d:da:dc:19:11:7e:5b:b9:cd:02:71:a0:db:cf: 9f:61:50:c8:00:14:a3:98:29:c5:21:cb:44:d4:42: 91:b7:3a:ec:a9:88:0d:e5:96:08:e9:07:05:30:5b: 8c:f5:03:14:5d:62:92:4f:34:e2:82:86:29:7f:e7: f7:8e:64:f8:2c:40:19:c1:1b:e0:39:e4:33:64:32: 3a:3f:a9:87:f0:23:8b:42:24:2a:ae:15:bc:98:51: 8f:f8:ef:a0:c0:7c:ff:1a:84:0d:e4:5a:9b:a8:cd: 2e:4e:b5:2d:6c:99:84:9d:83:05:0b:bf:d9:93:3a: 4d:48:95:f8:3a:39:8c:88:ca:20:f9:63:92:8a:96: 18:21:9f:04:9f:42:6c:e1:51:00:a3:2b:e8:60:e1: 9e:eb:41:90:d2:7d:d4:aa:68:0d:a3:17:dc:9b:c0: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FC:9F:E8:92:E8:47:F6:7A:4D:CA:BF:32:8E:A0:27:9B:D4:33:C1 X509v3 Authority Key Identifier: keyid:13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7c:a3:01:df:bb:ec:ef:42:bc:31:58:6b:1b:90:d9:c4:38: f5:89:a9:d6:7d:c9:dc:ca:3a:05:40:e5:a2:5a:82:a9:c6:bd: 18:41:a5:2c:8b:4a:0f:0e:1c:b3:87:42:a0:72:ea:06:29:fc: 0e:ce:aa:18:94:8d:4e:f1:18:98:ae:28:54:c1:33:43:ea:e2: 82:c4:f6:f5:17:49:95:89:33:a1:ab:cc:28:37:07:ef:97:f4: c8:8b:85:80:a6:14:15:16:a4:91:46:4b:43:cc:f8:b4:e8:b8: ee:e1:d8:9f:fb:23:34:24:3f:83:b2:43:bb:54:53:97:cd:b1: dd:0d:88:ea:cb:1f:6b:02:3d:fd:de:13:2d:b7:4a:37:69:89: ad:c5:9a:1e:05:7a:b1:a2:4f:36:1a:71:e7:6f:b8:96:74:54: 09:2b:24:15:84:f6:d5:95:63:19:eb:eb:f1:7a:33:07:c9:33: 7c:52:b9:79:41:16:6e:69:55:b2:e8:aa:39:a1:2f:53:91:69: 16:34:05:15:b9:74:20:48:e0:fc:45:4a:ac:48:48:78:68:3c: da:0c:02:66:6f:e1:b9:ef:10:07:df:3b:d1:3e:8c:7d:b7:be: 4b:43:93:28:6e:eb:51:10:e1:ed:2b:04:b7:16:3f:87:8b:8e: b8:74:c6:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIATEz56oHajy8HXl8SgvrYmOPe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEw ODYyNTk5QjAeFw0yNjA5MDMxOTM2NTJaFw0yNjA5MDQyMzAyNTJaMDMxMTAvBgNV BAMTKEQyRkM5RkU4OTJFODQ3RjY3QTREQ0FCRjMyOEVBMDI3OUJENDMzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36tfwhK81l1K0DDHyuC7Vow/Q Dnq4E5nWo181K2PuaAB23CmGu/hjov8c74Z0GONiifFWAy89pd4M+n+tMTTYnnYb Bp6W4355WcW3oW4ZvwYgqdGsqPntbhFd2twZEX5buc0CcaDbz59hUMgAFKOYKcUh y0TUQpG3OuypiA3llgjpBwUwW4z1AxRdYpJPNOKChil/5/eOZPgsQBnBG+A55DNk Mjo/qYfwI4tCJCquFbyYUY/476DAfP8ahA3kWpuozS5OtS1smYSdgwULv9mTOk1I lfg6OYyIyiD5Y5KKlhghnwSfQmzhUQCjK+hg4Z7rQZDSfdSqaA2jF9ybwNHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vyf6JLoR/Z6Tcq/Mo6gJ5vUM8EwHwYDVR0j BBgwFoAUE0UVe2HzYfWD3LUts+y8oQhiWZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlZTQwZGMtNTFiYS00NzY5LTg2MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2 MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEwODYyNTk5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ1MTU3QjYxRjM2MUY1ODNEQ0I1MkRCM0VDQkNBMTA4NjI1 OTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JD QTEwODYyNTk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI18owHfu+zvQrwxWGsbkNnEOPWJqdZ9ydzK OgVA5aJagqnGvRhBpSyLSg8OHLOHQqBy6gYp/A7OqhiUjU7xGJiuKFTBM0Pq4oLE 9vUXSZWJM6GrzCg3B++X9MiLhYCmFBUWpJFGS0PM+LTouO7h2J/7IzQkP4OyQ7tU U5fNsd0NiOrLH2sCPf3eEy23Sjdpia3Fmh4FerGiTzYacedvuJZ0VAkrJBWE9tWV Yxnr6/F6MwfJM3xSuXlBFm5pVbLoqjmhL1ORaRY0BRW5dCBI4PxFSqxISHhoPNoM AmZv4bnvEAffO9E+jH23vktDkyhu61EQ4e0rBLcWP4eLjrh0xlw= -----END CERTIFICATE-----Generated at Fri Sep 4 11:18:00 2026 by rpki-client