$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft File: 4560165A105018777E945437E2CDF8199768DFF6.mft (raw, json) Hash identifier: hKXQG2yQNVaaq50p+x4PcLD6EH34zs8Xhh2ih29Sxsw= Subject key identifier: CE:E1:16:73:37:13:50:77:D2:B3:00:56:44:79:48:42:40:2D:8E:AC Authority key identifier: 45:60:16:5A:10:50:18:77:7E:94:54:37:E2:CD:F8:19:97:68:DF:F6 Certificate issuer: /CN=4560165A105018777E945437E2CDF8199768DFF6 Certificate serial: 389C39D66DF58F225BB21C446665B70056FB610B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:07:50 +0000 Manifest this update: Wed 16 Sep 2026 19:02:50 +0000 Manifest next update: Thu 17 Sep 2026 19:36:50 +0000 Files and hashes: 1: 4560165A105018777E945437E2CDF8199768DFF6.crl (hash: JrhsZddM5+F3Q7N0mq7+cvju8xdMrdZr8pJvHdwsRro=) 2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: Ms7vmWNJU/eH2w3Abb6Bd4CfaUQxIKMjBcLzJ9Mjepo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.crl rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9c:39:d6:6d:f5:8f:22:5b:b2:1c:44:66:65:b7:00:56:fb:61:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4560165A105018777E945437E2CDF8199768DFF6 Validity Not Before: Sep 16 19:02:50 2026 GMT Not After : Sep 17 19:36:50 2026 GMT Subject: CN=CEE1167337135077D2B3005644794842402D8EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:49:9f:b4:fe:85:d4:7d:da:24:b4:5e:f6: c8:63:59:b3:20:73:4a:2a:e2:94:ba:1f:e1:8f:74: e6:36:7f:35:bc:3a:c2:7d:41:da:35:67:d7:c1:93: a7:86:c9:dd:d2:f4:23:2f:dd:de:3d:52:ad:a9:f9: a0:e4:a1:78:65:e9:e8:d2:44:34:e3:44:49:8c:b3: c5:79:59:f6:f1:18:a7:25:bb:eb:09:d4:6a:cc:0a: b2:72:70:fa:60:62:d3:ec:ec:3d:a7:e6:82:33:90: f9:59:3a:db:6b:f1:07:43:17:a8:23:62:0d:7b:2a: 9d:86:dc:13:9b:35:e7:27:e6:5d:1b:c8:cc:ea:56: 1b:f1:84:f9:4c:5f:1b:2e:c3:21:58:58:e7:83:31: eb:45:c3:1d:81:89:fa:a6:ce:79:38:f5:dc:65:99: 47:09:dd:4d:29:b5:c4:74:f3:4a:84:75:7b:02:94: 68:88:62:d6:a9:2c:63:3f:1a:35:ed:4d:b2:7d:d5: 28:d0:d3:1e:9b:de:76:41:3f:e2:20:62:41:3c:a7: b9:8c:05:52:35:ee:f5:69:c2:1e:cf:a4:fb:58:4e: 6e:e5:ed:98:d3:37:5f:bd:ec:80:72:59:c1:2a:d6: 01:8b:82:68:da:41:43:7f:66:91:01:02:ca:03:93: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E1:16:73:37:13:50:77:D2:B3:00:56:44:79:48:42:40:2D:8E:AC X509v3 Authority Key Identifier: keyid:45:60:16:5A:10:50:18:77:7E:94:54:37:E2:CD:F8:19:97:68:DF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a9:9f:5c:4f:29:64:5e:87:21:c8:c3:0a:20:a4:bb:66:26: 2b:1a:67:7b:4b:7d:7a:71:5e:c2:59:f2:ca:97:f7:4b:47:16: 38:dd:92:75:a0:c4:97:e4:7f:19:1a:72:44:8b:e1:58:04:e7: a0:1a:f4:3f:a3:e0:11:3f:cb:45:5c:60:b6:0b:5b:9e:c5:33: df:93:a7:e8:90:14:77:0d:6f:6d:81:98:df:20:bc:67:d4:65: ee:e2:14:90:71:c8:16:1c:89:24:8b:90:86:f0:2f:d4:89:b5: e2:1a:fc:77:eb:d7:9b:df:ba:cf:dc:fd:67:91:ef:5d:1d:9f: e2:c5:27:9e:4b:66:73:cc:c1:eb:84:3a:e6:14:ff:f8:fc:58: 39:de:a9:dd:bf:0e:49:e7:6d:51:8a:87:61:3f:f7:06:6d:f3: e6:5f:08:bf:3d:71:9a:30:d8:be:9b:12:f4:e5:c0:05:ab:23: 0a:4f:f0:79:80:90:4c:81:d7:81:14:c2:f6:f2:28:df:a3:77: 3e:ee:08:76:ae:33:d8:43:0d:19:d8:e4:7f:d3:21:46:22:68: 67:97:a5:c2:88:1a:c8:bd:cd:b6:56:d6:ff:f9:82:3d:c2:17: 3d:c7:07:58:df:dc:bd:9f:19:79:79:5b:a7:dc:fe:77:72:42: 4f:9a:23:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJw51m31jyJbshxEZmW3AFb7YQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2MDE2NUExMDUwMTg3NzdFOTQ1NDM3RTJDREY4MTk5 NzY4REZGNjAeFw0yNjA5MTYxOTAyNTBaFw0yNjA5MTcxOTM2NTBaMDMxMTAvBgNV BAMTKENFRTExNjczMzcxMzUwNzdEMkIzMDA1NjQ0Nzk0ODQyNDAyRDhFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g0mftP6F1H3aJLRe9shjWbMg c0oq4pS6H+GPdOY2fzW8OsJ9Qdo1Z9fBk6eGyd3S9CMv3d49Uq2p+aDkoXhl6ejS RDTjREmMs8V5WfbxGKclu+sJ1GrMCrJycPpgYtPs7D2n5oIzkPlZOttr8QdDF6gj Yg17Kp2G3BObNecn5l0byMzqVhvxhPlMXxsuwyFYWOeDMetFwx2Bifqmznk49dxl mUcJ3U0ptcR080qEdXsClGiIYtapLGM/GjXtTbJ91SjQ0x6b3nZBP+IgYkE8p7mM BVI17vVpwh7PpPtYTm7l7ZjTN1+97IByWcEq1gGLgmjaQUN/ZpEBAsoDk/RpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzuEWczcTUHfSswBWRHlIQkAtjqwwHwYDVR0j BBgwFoAURWAWWhBQGHd+lFQ34s34GZdo3/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGZkZmYzOTAtMTY5NS00NGVlLTg4ZTUtNDJlZDEyODE2YjAwLzAvNDU2MDE2NUEx MDUwMTg3NzdFOTQ1NDM3RTJDREY4MTk5NzY4REZGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTYwMTY1QTEwNTAxODc3N0U5NDU0MzdFMkNERjgxOTk3NjhE RkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNDU2MDE2NUExMDUwMTg3NzdFOTQ1NDM3RTJDREY4 MTk5NzY4REZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCpn1xPKWRehyHIwwogpLtmJisaZ3tLfXpx XsJZ8sqX90tHFjjdknWgxJfkfxkackSL4VgE56Aa9D+j4BE/y0VcYLYLW57FM9+T p+iQFHcNb22BmN8gvGfUZe7iFJBxyBYciSSLkIbwL9SJteIa/Hfr15vfus/c/WeR 710dn+LFJ55LZnPMweuEOuYU//j8WDneqd2/DknnbVGKh2E/9wZt8+ZfCL89cZow 2L6bEvTlwAWrIwpP8HmAkEyB14EUwvbyKN+jdz7uCHauM9hDDRnY5H/TIUYiaGeX pcKIGsi9zbZW1v/5gj3CFz3HB1jf3L2fGXl5W6fc/ndyQk+aIxE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:52:20 2026 by rpki-client