$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: mDkwYDkxLsEJ1kck2q9DGob6y73YTsnB7gcvxCjkn4U= Subject key identifier: 45:15:48:C7:F5:0F:54:90:67:1C:80:90:94:29:AD:D0:FF:0E:8D:43 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 4C018AE921EE6A8D2CD6D3F736F2C1687F2B6CE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: B2 Signing time: Sat 12 Sep 2026 12:00:05 +0000 Manifest this update: Sat 12 Sep 2026 11:55:05 +0000 Manifest next update: Sun 13 Sep 2026 15:13:05 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) 2: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: NrRBLoMy8DMtfwsjc7f1SCDFAK2ImTGhSwjN5o8sw38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 15:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:01:8a:e9:21:ee:6a:8d:2c:d6:d3:f7:36:f2:c1:68:7f:2b:6c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Sep 12 11:55:05 2026 GMT Not After : Sep 13 15:13:05 2026 GMT Subject: CN=451548C7F50F5490671C80909429ADD0FF0E8D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:e3:e7:35:d1:aa:a4:23:19:00:6e:14:bd: ba:4c:90:6f:68:7a:d1:99:76:bf:19:07:bf:40:88: 47:18:2c:f0:a7:1c:b9:8a:f2:83:7f:56:07:5a:04: 43:3a:6a:00:d6:45:cf:09:4c:e7:4a:cd:d5:04:cb: b4:5f:6a:7b:39:b9:98:51:33:9f:df:9e:0b:63:20: 5d:66:08:26:cf:2e:e0:4b:af:df:db:8e:5d:5d:0c: ce:96:1a:93:1f:bc:5e:11:b8:97:d5:e2:a5:e7:c6: 7d:90:38:42:32:f6:6c:b0:01:32:0b:eb:80:4b:f0: 94:fc:a6:b1:49:8c:db:19:3c:38:93:03:b2:fc:33: f6:e2:61:e9:0e:52:df:5f:cd:f5:0d:f2:14:ee:cb: 98:00:75:40:96:ec:a3:7f:f3:41:e7:fe:21:fa:88: 0b:56:a7:31:a3:3b:38:b0:4f:93:96:61:91:86:62: 77:a2:cb:c0:20:ab:a0:9d:d4:58:da:43:57:55:cc: be:e8:ee:ab:8e:74:c2:7c:62:d3:56:f0:49:f0:24: 2b:85:6e:92:ff:22:27:db:64:56:18:23:14:77:37: 93:21:c0:61:08:59:13:2f:f7:06:0a:7a:79:32:84: eb:91:3e:15:63:d7:9e:7e:a8:24:6f:11:ba:a2:7d: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:15:48:C7:F5:0F:54:90:67:1C:80:90:94:29:AD:D0:FF:0E:8D:43 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:f8:74:3b:6e:37:b5:e8:39:81:b1:a6:48:ae:8c:52:97:bd: 1f:c0:f5:48:9c:f9:70:e5:41:d3:87:34:73:f4:f2:9c:8f:6c: 20:9a:05:a0:02:38:c0:c0:91:b8:1f:42:51:4e:14:aa:32:5f: e6:42:7b:60:85:9c:fc:df:36:f2:53:67:d0:7a:65:92:0e:c5: 76:99:6e:e3:aa:10:b2:a8:f6:f9:26:c6:18:83:fb:cb:49:cb: 5d:97:8b:fe:b9:52:b2:a4:0a:61:b1:fa:4f:8f:1b:60:fb:2e: 5b:a4:45:20:8b:bb:80:35:79:fe:70:68:55:52:01:94:eb:eb: 15:36:e0:fc:d1:a5:07:06:ae:db:b2:fb:76:2e:37:89:40:9f: 2e:7a:ad:0e:b9:b9:e1:61:8a:4e:e6:46:f8:ef:73:7b:7c:98: 2f:c1:72:d6:84:75:b6:92:f4:59:98:bb:97:9b:f6:1c:63:5c: bf:01:b7:d2:cc:14:94:c1:ba:ee:74:dc:2a:89:ba:59:71:4e: 68:91:a4:45:ab:c0:ef:58:6f:da:ba:b6:94:dc:11:23:3c:c9: 1c:1a:de:40:bd:5f:3d:fb:c8:5a:20:77:d8:25:d7:bd:b1:d5: db:b2:9c:b8:e7:a4:e5:8e:b3:cc:6f:36:06:66:cd:11:ae:51: c0:f5:df:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAGK6SHuao0s1tP3NvLBaH8rbOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA5MTIxMTU1MDVaFw0yNjA5MTMxNTEzMDVaMDMxMTAvBgNV BAMTKDQ1MTU0OEM3RjUwRjU0OTA2NzFDODA5MDk0MjlBREQwRkYwRThENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaePnNdGqpCMZAG4UvbpMkG9o etGZdr8ZB79AiEcYLPCnHLmK8oN/VgdaBEM6agDWRc8JTOdKzdUEy7Rfans5uZhR M5/fngtjIF1mCCbPLuBLr9/bjl1dDM6WGpMfvF4RuJfV4qXnxn2QOEIy9mywATIL 64BL8JT8prFJjNsZPDiTA7L8M/biYekOUt9fzfUN8hTuy5gAdUCW7KN/80Hn/iH6 iAtWpzGjOziwT5OWYZGGYneiy8Agq6Cd1FjaQ1dVzL7o7quOdMJ8YtNW8EnwJCuF bpL/IifbZFYYIxR3N5MhwGEIWRMv9wYKenkyhOuRPhVj155+qCRvEbqifZyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRVIx/UPVJBnHICQlCmt0P8OjUMwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMr4dDtuN7XoOYGxpkiujFKXvR/A9Uic+XDl QdOHNHP08pyPbCCaBaACOMDAkbgfQlFOFKoyX+ZCe2CFnPzfNvJTZ9B6ZZIOxXaZ buOqELKo9vkmxhiD+8tJy12Xi/65UrKkCmGx+k+PG2D7LlukRSCLu4A1ef5waFVS AZTr6xU24PzRpQcGrtuy+3YuN4lAny56rQ65ueFhik7mRvjvc3t8mC/BctaEdbaS 9FmYu5eb9hxjXL8Bt9LMFJTBuu503CqJullxTmiRpEWrwO9Yb9q6tpTcESM8yRwa 3kC9Xz37yFogd9gl172x1duynLjnpOWOs8xvNgZmzRGuUcD13wU= -----END CERTIFICATE-----Generated at Sun Sep 13 02:35:39 2026 by rpki-client