$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: ef9fRHVLgaT1K8mf1UsNijWNjqZJ1UaAaoiT5IRuIrI= Subject key identifier: 2C:05:EE:09:A5:71:6A:17:81:D8:C1:67:32:42:A4:6B:81:04:6F:B2 Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 7F6F2D75E8CB8F0201CD64FD857267D929E4F373 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 04:54:30 +0000 Manifest this update: Thu 17 Sep 2026 04:49:30 +0000 Manifest next update: Fri 18 Sep 2026 07:53:30 +0000 Files and hashes: 1: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: 49oaIvlMY45lZV8ud1hpLrzlrHCZvnJ2GiJtjh7xGw4=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 3: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) 4: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6f:2d:75:e8:cb:8f:02:01:cd:64:fd:85:72:67:d9:29:e4:f3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: Sep 17 04:49:30 2026 GMT Not After : Sep 18 07:53:30 2026 GMT Subject: CN=2C05EE09A5716A1781D8C1673242A46B81046FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:d8:ae:59:8e:3c:81:04:85:ca:63:63:aa: a1:34:54:48:0a:1c:f0:27:f9:ec:42:f5:a6:b8:96: 63:7b:56:32:83:a3:ce:82:16:13:06:b1:b6:81:50: 08:ec:ca:d8:36:6c:6d:fd:97:b8:48:79:06:f4:15: e6:c0:5c:31:22:75:77:8d:d9:13:7b:e1:67:7f:60: e9:af:fa:71:77:d0:10:fe:ef:88:05:c8:b5:bf:99: cd:d6:10:a0:88:ec:2d:eb:31:48:69:3e:ce:c2:f0: 68:57:57:6a:8d:99:19:7d:83:50:2e:93:11:2d:dd: 04:44:c1:1a:68:b0:2f:cc:ab:3f:de:75:2c:4e:7f: a5:22:5d:c0:0e:41:eb:48:e3:85:3b:a1:51:d6:13: 17:55:d9:5f:17:b5:9b:1d:1b:32:3f:60:13:b1:42: 8f:3a:ff:ed:db:51:b0:74:04:bf:6a:33:20:88:75: 75:d6:e9:28:8a:b7:1f:85:b4:15:48:59:d4:e5:ab: eb:96:de:82:f8:c1:f4:19:38:8e:82:ca:b3:9c:b3: 63:bd:f4:63:f4:01:09:d4:db:c4:75:98:92:07:28: e8:c5:fa:f6:ab:c5:ed:be:72:48:82:10:17:68:a2: 41:74:50:be:ec:ac:56:9c:2c:1f:53:3f:4f:e7:a8: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:05:EE:09:A5:71:6A:17:81:D8:C1:67:32:42:A4:6B:81:04:6F:B2 X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:53:34:a6:ba:57:bc:6f:07:84:b1:48:5b:83:09:79:65:99: 9c:49:4c:21:72:36:fb:9c:5c:c7:5f:cd:23:03:ca:b2:31:8a: 23:b4:6d:e1:6d:e3:c4:e8:00:c9:08:37:27:af:c0:e0:9a:c0: 46:67:a7:2a:1f:45:ff:2d:06:ce:3f:d3:bf:db:93:84:59:5a: 49:8c:16:f5:9f:98:a4:af:9a:c3:15:11:ec:23:e6:05:45:23: 1f:ec:9b:36:49:b9:fa:52:10:b4:42:d1:2e:d8:92:a7:7c:5b: 0e:2c:44:77:5f:3f:55:aa:eb:18:1b:c2:c7:7d:96:70:24:ef: f4:11:6e:60:c4:4e:61:f8:c1:ab:72:15:df:43:14:bb:43:f2: bb:da:07:19:5a:0e:e7:c9:b5:e8:68:ab:7a:3c:65:dc:e4:df: 4b:40:fb:eb:65:73:78:65:46:ce:cc:bd:25:16:19:a4:fe:07: a4:49:56:eb:21:1b:46:4f:7a:b7:52:60:8d:d4:fc:c1:59:4f: ad:0f:fb:93:09:aa:44:30:cc:73:d1:d4:47:c3:37:92:d7:0f: ba:d0:82:90:30:34:b5:84:4b:b5:a5:f5:0f:24:f6:15:21:59: 89:fc:6b:8f:bf:8a:53:cb:31:21:6f:5f:2f:b2:b5:5f:b3:c6: 5a:cb:d8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf28tdejLjwIBzWT9hXJn2Snk83MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjA5MTcwNDQ5MzBaFw0yNjA5MTgwNzUzMzBaMDMxMTAvBgNV BAMTKDJDMDVFRTA5QTU3MTZBMTc4MUQ4QzE2NzMyNDJBNDZCODEwNDZGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAtiuWY48gQSFymNjqqE0VEgK HPAn+exC9aa4lmN7VjKDo86CFhMGsbaBUAjsytg2bG39l7hIeQb0FebAXDEidXeN 2RN74Wd/YOmv+nF30BD+74gFyLW/mc3WEKCI7C3rMUhpPs7C8GhXV2qNmRl9g1Au kxEt3QREwRposC/Mqz/edSxOf6UiXcAOQetI44U7oVHWExdV2V8XtZsdGzI/YBOx Qo86/+3bUbB0BL9qMyCIdXXW6SiKtx+FtBVIWdTlq+uW3oL4wfQZOI6CyrOcs2O9 9GP0AQnU28R1mJIHKOjF+varxe2+ckiCEBdookF0UL7srFacLB9TP0/nqMUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAXuCaVxaheB2MFnMkKka4EEb7IwHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1TNKa6V7xvB4SxSFuDCXllmZxJTCFyNvuc XMdfzSMDyrIxiiO0beFt48ToAMkINyevwOCawEZnpyofRf8tBs4/07/bk4RZWkmM FvWfmKSvmsMVEewj5gVFIx/smzZJufpSELRC0S7Ykqd8Ww4sRHdfP1Wq6xgbwsd9 lnAk7/QRbmDETmH4watyFd9DFLtD8rvaBxlaDufJtehoq3o8Zdzk30tA++tlc3hl Rs7MvSUWGaT+B6RJVushG0ZPerdSYI3U/MFZT60P+5MJqkQwzHPR1EfDN5LXD7rQ gpAwNLWES7Wl9Q8k9hUhWYn8a4+/ilPLMSFvXy+ytV+zxlrL2J8= -----END CERTIFICATE-----Generated at Thu Sep 17 15:25:09 2026 by rpki-client