$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft File: 13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft (raw, json) Hash identifier: 8mGyFJIf/dHQPm8tYmaCr8QW96qMxR8iFhz8u9O0+5U= Subject key identifier: 33:53:17:5D:B9:36:DB:FA:89:09:36:6C:7A:BF:4C:23:7B:7D:77:3E Authority key identifier: 13:16:4A:0B:7B:01:1F:7B:6F:8A:A0:39:06:46:2F:7A:37:2B:AA:47 Certificate issuer: /CN=13164A0B7B011F7B6F8AA03906462F7A372BAA47 Certificate serial: 4B101BAAA4BA824CEC05BA280B7F8A76CA93732B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:16:17 +0000 Manifest this update: Thu 17 Sep 2026 10:11:17 +0000 Manifest next update: Fri 18 Sep 2026 12:37:17 +0000 Files and hashes: 1: 3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (hash: VO3wRePJW0P5LPFqmLwt0og5x5dJDIO5oTuApv8v4iE=) 2: 13164A0B7B011F7B6F8AA03906462F7A372BAA47.crl (hash: cak1CscrOCdjlBEtaDTCJtWh3pPW4U/nF4OzstkV3dU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.crl rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:10:1b:aa:a4:ba:82:4c:ec:05:ba:28:0b:7f:8a:76:ca:93:73:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13164A0B7B011F7B6F8AA03906462F7A372BAA47 Validity Not Before: Sep 17 10:11:17 2026 GMT Not After : Sep 18 12:37:17 2026 GMT Subject: CN=3353175DB936DBFA8909366C7ABF4C237B7D773E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:a9:01:c1:0b:71:bc:3f:db:cf:24:85:80: 57:22:27:df:93:82:dd:25:63:45:d4:e9:13:1b:b2: 02:c0:11:db:76:0f:a5:30:df:38:6f:89:60:a4:e1: a3:a9:e2:e0:ff:71:63:9c:af:0a:8b:b9:16:9f:93: 4d:6c:01:13:cc:25:c8:ac:a6:21:9f:93:83:85:27: a1:0c:05:2b:33:fb:3b:6e:52:d5:64:ec:69:2a:ae: 5b:ba:a0:b7:f8:b0:8c:8f:78:9c:8f:af:90:9d:0b: 0a:59:9e:af:48:4f:7c:2c:2f:4b:cd:ff:c3:0e:13: 06:05:f1:e1:04:5e:cd:b6:c2:d6:a6:4b:09:f0:f0: d1:9e:7d:01:f4:d1:df:8f:fe:e7:77:33:8c:19:83: a0:a4:f8:c2:bc:49:77:f8:51:05:6e:e3:e6:46:48: 18:ea:54:d9:b1:ee:6b:61:59:bf:ab:9c:e7:c3:d4: e7:95:da:e1:bb:33:41:14:dd:cf:99:6d:b9:62:5d: 8c:ab:79:47:70:19:1c:ed:be:7d:42:87:b9:40:fe: 12:25:d5:14:93:8f:9d:cd:93:9a:21:e9:6d:9a:15: 7d:b6:03:89:ea:30:a2:ba:e0:38:80:f1:1b:da:43: 4e:00:bf:8d:af:e3:2d:39:25:02:02:4f:53:b9:3f: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:53:17:5D:B9:36:DB:FA:89:09:36:6C:7A:BF:4C:23:7B:7D:77:3E X509v3 Authority Key Identifier: keyid:13:16:4A:0B:7B:01:1F:7B:6F:8A:A0:39:06:46:2F:7A:37:2B:AA:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ca:32:0d:c1:b8:f3:31:44:e6:ac:81:50:bc:97:df:16:32: 27:79:b0:cb:76:b4:12:11:91:99:c3:32:f9:28:a0:ee:a0:3f: 52:ca:a1:93:0d:a6:18:a1:70:b9:8c:4e:a3:ed:71:fd:85:3c: 90:1c:9d:8d:d5:3e:c0:57:8c:cc:1e:de:b6:55:74:6d:29:0b: 0d:5d:f3:00:92:d7:f9:14:c3:ee:15:02:47:cb:dd:90:65:b9: ce:eb:71:db:31:0b:65:68:ff:81:f8:a4:20:bd:28:6a:b7:1c: f7:97:36:e3:e8:73:61:a5:e3:3d:56:dc:af:33:e2:8d:ad:ca: cb:0c:44:e0:56:47:f2:37:03:1e:8e:08:b4:45:c0:ea:79:84: 74:34:6b:fc:bb:1f:87:01:f0:d3:b6:f2:a2:c9:da:4c:95:90: 47:41:6f:2e:fa:2f:a9:2e:98:8d:f5:a4:57:4e:69:54:88:6e: d3:d7:3d:be:32:12:5b:ad:2c:33:fc:bf:e0:51:66:dc:89:d5: b8:ee:53:8f:fa:95:83:b2:2b:78:50:31:5d:e4:0f:21:3b:0d: af:44:4e:76:38:78:ec:46:c8:4f:d8:65:11:22:81:ce:65:2c: d8:08:da:48:61:91:d3:f2:0f:3e:e3:cc:fa:eb:bc:53:ff:51: 2e:cf:81:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxAbqqS6gkzsBbooC3+KdsqTcyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxNjRBMEI3QjAxMUY3QjZGOEFBMDM5MDY0NjJGN0Ez NzJCQUE0NzAeFw0yNjA5MTcxMDExMTdaFw0yNjA5MTgxMjM3MTdaMDMxMTAvBgNV BAMTKDMzNTMxNzVEQjkzNkRCRkE4OTA5MzY2QzdBQkY0QzIzN0I3RDc3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8W6kBwQtxvD/bzySFgFciJ9+T gt0lY0XU6RMbsgLAEdt2D6Uw3zhviWCk4aOp4uD/cWOcrwqLuRafk01sARPMJcis piGfk4OFJ6EMBSsz+ztuUtVk7Gkqrlu6oLf4sIyPeJyPr5CdCwpZnq9IT3wsL0vN /8MOEwYF8eEEXs22wtamSwnw8NGefQH00d+P/ud3M4wZg6Ck+MK8SXf4UQVu4+ZG SBjqVNmx7mthWb+rnOfD1OeV2uG7M0EU3c+ZbbliXYyreUdwGRztvn1Ch7lA/hIl 1RSTj53Nk5oh6W2aFX22A4nqMKK64DiA8RvaQ04Av42v4y05JQICT1O5PxDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM1MXXbk22/qJCTZser9MI3t9dz4wHwYDVR0j BBgwFoAUExZKC3sBH3tviqA5BkYvejcrqkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU1MTFhOGEtMzBkYS00NjcwLWEwMTAtNzkyNmQ3Y2Q1MTBiLzAvMTMxNjRBMEI3 QjAxMUY3QjZGOEFBMDM5MDY0NjJGN0EzNzJCQUE0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzE2NEEwQjdCMDExRjdCNkY4QUEwMzkwNjQ2MkY3QTM3MkJB QTQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU1MTFhOGEtMzBkYS00NjcwLWEw MTAtNzkyNmQ3Y2Q1MTBiLzAvMTMxNjRBMEI3QjAxMUY3QjZGOEFBMDM5MDY0NjJG N0EzNzJCQUE0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvKMg3BuPMxROasgVC8l98WMid5sMt2tBIR kZnDMvkooO6gP1LKoZMNphihcLmMTqPtcf2FPJAcnY3VPsBXjMwe3rZVdG0pCw1d 8wCS1/kUw+4VAkfL3ZBluc7rcdsxC2Vo/4H4pCC9KGq3HPeXNuPoc2Gl4z1W3K8z 4o2tyssMROBWR/I3Ax6OCLRFwOp5hHQ0a/y7H4cB8NO28qLJ2kyVkEdBby76L6ku mI31pFdOaVSIbtPXPb4yElutLDP8v+BRZtyJ1bjuU4/6lYOyK3hQMV3kDyE7Da9E TnY4eOxGyE/YZREigc5lLNgI2khhkdPyDz7jzPrrvFP/US7Pga0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:44 2026 by rpki-client