$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: ZN+GK3BkQo28WDT1Wblx7T6aZoNH4MqoLEFeYc8JYMs= Subject key identifier: C2:B3:37:D7:98:2A:28:FA:C0:07:BC:39:31:B2:07:AC:48:20:FF:83 Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 5036D6276AD9E5A73DC91126F5F18DA24E01652A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:01:10 +0000 Manifest this update: Wed 16 Sep 2026 21:56:10 +0000 Manifest next update: Thu 17 Sep 2026 23:10:10 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) 2: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: UzFvbsMiuQ/aP15BDZ6mBDGFuDrRepHHKE/l3aiGMXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:36:d6:27:6a:d9:e5:a7:3d:c9:11:26:f5:f1:8d:a2:4e:01:65:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Sep 16 21:56:10 2026 GMT Not After : Sep 17 23:10:10 2026 GMT Subject: CN=C2B337D7982A28FAC007BC3931B207AC4820FF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:b1:1b:5a:37:a2:53:bf:20:27:3d:b1:22: 8e:8c:23:08:9d:8e:bc:29:4d:5e:91:aa:e5:60:6b: ce:c4:38:3a:5a:c0:e3:c1:0c:a4:1c:f2:97:18:d5: fa:1a:e3:cf:55:c8:30:d6:61:7c:cd:e4:72:be:11: 10:53:6b:15:08:2e:41:92:ff:10:75:7e:a0:47:a2: dd:91:60:fd:d2:f3:90:64:7e:d3:cd:ea:8e:1a:22: 3d:9b:48:ce:c0:60:38:70:b1:49:c9:bf:92:4b:f0: f9:a1:31:29:ee:7c:b4:9b:73:d2:be:2c:ee:ba:80: 95:67:d3:4c:36:b3:06:70:7e:bd:d6:1c:67:41:dc: d1:fe:5b:0c:98:77:31:3a:8b:e7:fb:6d:08:b2:83: b5:10:b5:46:f7:f7:2c:e6:29:52:3a:50:a6:fa:9e: 67:5c:04:7a:b7:15:a2:c9:2d:5c:3f:76:0c:10:3c: d9:10:1c:ff:eb:a5:79:2d:04:8e:85:0b:4e:56:ad: f4:47:46:38:7e:a8:18:21:02:e3:76:ca:a1:60:d8: 6e:31:59:79:b5:e8:d5:8a:0c:5d:3b:64:c5:3d:e5: e6:48:ca:b8:b9:12:fd:b5:8d:4a:fe:a3:aa:0f:19: 34:d5:8a:d1:fd:36:e0:2e:26:0a:b1:dc:78:ff:76: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B3:37:D7:98:2A:28:FA:C0:07:BC:39:31:B2:07:AC:48:20:FF:83 X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:28:e1:11:4e:15:cd:99:52:00:ba:ae:ca:73:2f:a0:f7:c8: 5d:75:75:b7:3e:b3:54:e9:74:62:34:78:f7:a1:39:e6:f1:91: 17:42:24:5a:a3:a1:6c:97:8d:b3:5b:ad:d6:fd:36:63:46:72: 3d:bc:92:98:6d:0b:dd:b3:24:b3:5d:1f:f9:bd:30:9e:d1:5c: 4f:bf:94:7f:b8:6d:27:aa:5d:09:6d:99:19:92:d4:c4:6c:79: 38:dc:8d:75:90:4f:54:77:20:15:4a:a3:59:a0:71:c1:2d:24: 8a:5f:4b:12:77:58:3c:90:78:89:84:f5:be:1e:ce:5d:2a:78: f0:fd:bd:64:38:39:51:bd:a7:65:92:cd:08:cd:b9:25:7b:a7: 81:e7:04:ab:82:5a:9c:d0:8c:66:ae:48:cb:92:1b:76:5f:a7: 8a:63:6f:ff:28:f1:45:39:36:f8:57:9d:7f:bf:0e:cf:51:48: dc:ce:85:55:56:68:29:18:94:90:94:6a:ca:53:5f:2c:2b:2b: f8:63:86:62:d2:99:cd:b4:ae:5d:27:69:3c:a1:96:42:1f:a4: c2:28:e8:95:ed:21:9a:d5:94:e4:93:cc:a7:11:86:e7:54:30: 36:e8:ee:1f:a1:4f:ec:c3:ba:18:89:cc:42:18:cd:d4:40:3c: a0:3d:7c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDbWJ2rZ5ac9yREm9fGNok4BZSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA5MTYyMTU2MTBaFw0yNjA5MTcyMzEwMTBaMDMxMTAvBgNV BAMTKEMyQjMzN0Q3OTgyQTI4RkFDMDA3QkMzOTMxQjIwN0FDNDgyMEZGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwobEbWjeiU78gJz2xIo6MIwid jrwpTV6RquVga87EODpawOPBDKQc8pcY1foa489VyDDWYXzN5HK+ERBTaxUILkGS /xB1fqBHot2RYP3S85BkftPN6o4aIj2bSM7AYDhwsUnJv5JL8PmhMSnufLSbc9K+ LO66gJVn00w2swZwfr3WHGdB3NH+WwyYdzE6i+f7bQiyg7UQtUb39yzmKVI6UKb6 nmdcBHq3FaLJLVw/dgwQPNkQHP/rpXktBI6FC05WrfRHRjh+qBghAuN2yqFg2G4x WXm16NWKDF07ZMU95eZIyri5Ev21jUr+o6oPGTTVitH9NuAuJgqx3Hj/dtD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrM315gqKPrAB7w5MbIHrEgg/4MwHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoo4RFOFc2ZUgC6rspzL6D3yF11dbc+s1Tp dGI0ePehOebxkRdCJFqjoWyXjbNbrdb9NmNGcj28kphtC92zJLNdH/m9MJ7RXE+/ lH+4bSeqXQltmRmS1MRseTjcjXWQT1R3IBVKo1mgccEtJIpfSxJ3WDyQeImE9b4e zl0qePD9vWQ4OVG9p2WSzQjNuSV7p4HnBKuCWpzQjGauSMuSG3Zfp4pjb/8o8UU5 NvhXnX+/Ds9RSNzOhVVWaCkYlJCUaspTXywrK/hjhmLSmc20rl0naTyhlkIfpMIo 6JXtIZrVlOSTzKcRhudUMDbo7h+hT+zDuhiJzEIYzdRAPKA9fKI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:07 2026 by rpki-client