$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json) Hash identifier: Fkc40YDgaXsUi3R1RLT1dZ0bshj2EaNUKTyOWdgnE2k= Subject key identifier: 67:B7:18:59:70:60:82:32:E4:49:55:A9:44:FB:D7:DD:E0:0A:8B:4D Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Certificate serial: 750BD6295D49DAE4F8E577B67F70FFE1FD3AA42B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft Manifest number: FA Signing time: Tue 03 Nov 2026 22:15:34 +0000 Manifest this update: Tue 03 Nov 2026 22:10:34 +0000 Manifest next update: Wed 04 Nov 2026 22:50:34 +0000 Files and hashes: 1: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=) 2: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: pay41M+XfBlgV3m4Qw7ajM3atx9mG92EwwupcDp3y14=) 3: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:d6:29:5d:49:da:e4:f8:e5:77:b6:7f:70:ff:e1:fd:3a:a4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Validity Not Before: Nov 3 22:10:34 2026 GMT Not After : Nov 4 22:50:34 2026 GMT Subject: CN=67B7185970608232E44955A944FBD7DDE00A8B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:dd:0e:05:14:64:9d:90:28:c0:65:a9:83: 6d:63:fa:e2:6b:88:69:86:ad:76:05:55:a9:c3:a2: df:47:4f:45:9b:82:83:6e:71:13:bc:6a:eb:c1:7a: 38:ac:f5:89:21:48:79:44:fc:de:62:10:81:6c:53: 9d:a9:15:95:3a:b0:39:f0:cd:bd:b7:cc:4b:ac:b0: 6d:60:b2:88:13:08:0c:4e:85:92:4c:71:5c:a5:9a: 9a:08:fb:33:ed:26:70:53:20:f5:1e:c7:c5:0a:33: dd:ba:7a:75:93:20:9f:a4:3d:c4:3a:e1:8a:40:a5: ed:d5:9d:ce:1d:79:52:c7:90:18:1f:9b:4e:0c:10: 99:3d:58:49:df:1a:ab:5d:96:90:a8:f9:4e:4b:4e: ac:5f:bd:5a:49:29:b4:b6:e0:cd:b4:b4:f3:18:d5: 0d:22:f1:16:c6:73:2f:2e:a7:6f:da:3d:e9:4c:4b: 18:93:7b:a7:54:86:e3:80:11:fb:f3:4a:62:d9:b9: 60:9a:d9:e7:c9:d7:6e:eb:a3:02:ae:ca:49:d2:b0: 54:d5:69:34:86:b2:aa:9d:71:4e:ed:1b:2c:c6:97: b7:f3:a1:a4:f7:60:1a:23:b9:55:fe:94:f7:31:1f: 19:60:74:b8:b3:75:85:48:ad:4d:9e:f2:d4:3a:59: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B7:18:59:70:60:82:32:E4:49:55:A9:44:FB:D7:DD:E0:0A:8B:4D X509v3 Authority Key Identifier: keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:75:ab:5e:6c:43:93:59:ff:72:c2:7b:4b:4e:b3:f0:d3:86: 2f:6f:6b:a8:89:b1:38:a9:55:9d:cb:c2:98:73:5f:88:a1:da: b4:39:cb:e4:11:09:a8:d0:2f:40:f6:82:76:d5:5d:d6:02:c7: 6b:12:ec:ae:d5:d6:0f:ab:8f:80:d1:b4:b2:0d:ae:9a:fb:29: e3:4a:73:40:b3:04:5a:7f:1c:44:c4:d7:63:f5:01:fc:cf:95: ab:8a:23:df:76:29:5c:1b:fd:15:d1:39:4d:2f:49:88:b5:6b: 27:78:cb:cf:c5:f5:58:c9:c5:f1:dd:ed:2b:69:71:50:22:db: 2e:f5:c6:86:25:3d:e7:2b:07:1e:d3:9a:0d:eb:fd:f7:dd:e3: 03:6d:6d:a2:7a:fc:48:d1:e1:41:cb:3e:b2:4f:6f:0c:4d:5b: 03:aa:89:0f:97:31:9c:0c:77:d4:95:62:a6:fc:47:91:f8:4b: d1:74:74:f1:67:3e:05:75:1b:83:94:57:6e:7f:65:b5:54:ba: b8:8f:13:65:02:ce:ce:59:25:dd:56:3b:6b:30:5b:02:da:a8: 0b:17:f5:87:0d:cf:20:51:ae:32:5c:90:77:72:60:d2:23:59: 16:d0:db:d8:ea:97:89:ee:4c:1b:67:49:04:8b:e5:e8:0d:fd: 89:b3:a1:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQvWKV1J2uT45Xe2f3D/4f06pCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkz Njc3N0JDOTAeFw0yNjExMDMyMjEwMzRaFw0yNjExMDQyMjUwMzRaMDMxMTAvBgNV BAMTKDY3QjcxODU5NzA2MDgyMzJFNDQ5NTVBOTQ0RkJEN0RERTAwQThCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJR90OBRRknZAowGWpg21j+uJr iGmGrXYFVanDot9HT0WbgoNucRO8auvBejis9YkhSHlE/N5iEIFsU52pFZU6sDnw zb23zEussG1gsogTCAxOhZJMcVylmpoI+zPtJnBTIPUex8UKM926enWTIJ+kPcQ6 4YpApe3Vnc4deVLHkBgfm04MEJk9WEnfGqtdlpCo+U5LTqxfvVpJKbS24M20tPMY 1Q0i8RbGcy8up2/aPelMSxiTe6dUhuOAEfvzSmLZuWCa2efJ127rowKuyknSsFTV aTSGsqqdcU7tGyzGl7fzoaT3YBojuVX+lPcxHxlgdLizdYVIrU2e8tQ6WfczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7cYWXBggjLkSVWpRPvX3eAKi00wHwYDVR0j BBgwFoAUVF6pkoUa8nJtzo/h8pOL6TZ3e8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlYWM5YzAtZGUxYi00NmRkLWJmMzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4 NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkzNjc3N0JDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDVFQTk5Mjg1MUFGMjcyNkRDRThGRTFGMjkzOEJFOTM2Nzc3 QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhC RTkzNjc3N0JDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh1q15sQ5NZ/3LCe0tOs/DThi9va6iJsTip VZ3LwphzX4ih2rQ5y+QRCajQL0D2gnbVXdYCx2sS7K7V1g+rj4DRtLINrpr7KeNK c0CzBFp/HETE12P1AfzPlauKI992KVwb/RXROU0vSYi1ayd4y8/F9VjJxfHd7Stp cVAi2y71xoYlPecrBx7Tmg3r/ffd4wNtbaJ6/EjR4UHLPrJPbwxNWwOqiQ+XMZwM d9SVYqb8R5H4S9F0dPFnPgV1G4OUV25/ZbVUuriPE2UCzs5ZJd1WO2swWwLaqAsX 9YcNzyBRrjJckHdyYNIjWRbQ29jql4nuTBtnSQSL5egN/YmzoQk= -----END CERTIFICATE-----Generated at Wed Nov 4 01:31:51 2026 by rpki-client