$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: 0NGns9uB0SZTJBAnY4250YAmVAt2d4A1X1uPSTFa2zo= Subject key identifier: F0:20:F3:50:D0:78:EA:5A:32:09:4A:92:AB:C8:3A:E1:C8:6F:0A:68 Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 0159933A89ACD028205FDF1D94C5679275944E5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:22:32 +0000 Manifest this update: Thu 17 Sep 2026 07:17:32 +0000 Manifest next update: Fri 18 Sep 2026 08:06:32 +0000 Files and hashes: 1: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: k9UbG9YYz8A2pdXdkJ0O0S7Vy/Dn++SK4MfvG5LzGJw=) 2: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) 3: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) 4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:59:93:3a:89:ac:d0:28:20:5f:df:1d:94:c5:67:92:75:94:4e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Sep 17 07:17:32 2026 GMT Not After : Sep 18 08:06:32 2026 GMT Subject: CN=F020F350D078EA5A32094A92ABC83AE1C86F0A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:24:bc:03:2f:ad:95:de:9e:65:03:39:04: bc:99:be:5d:7a:a5:1c:f6:11:7f:ab:f7:60:77:dd: 61:7f:89:c5:b5:9c:04:58:09:01:d9:39:bb:20:6a: f4:bd:04:ea:ee:92:41:8b:77:54:d1:20:b6:60:70: 2c:66:76:79:25:44:cb:69:94:d7:5e:26:2a:b2:e5: 7f:1b:ea:aa:37:02:1b:cd:4f:f2:e8:a3:4e:39:4d: f7:5e:29:14:23:31:14:6c:cc:bb:04:54:82:8f:b6: 0e:4d:4a:0c:2f:ab:b6:70:df:53:6a:58:8a:3b:e0: 5b:96:ae:2e:05:2c:99:32:ca:68:c2:90:6b:cd:13: 6c:66:0f:c1:bb:e7:f2:5d:f2:83:c6:1a:c0:83:a2: ed:7a:94:de:a9:4f:ad:bc:2c:34:36:4e:ce:4d:98: 18:95:90:a4:04:bc:b2:f0:5e:99:bf:aa:2f:54:f5: 66:ab:dd:d7:6f:f4:52:4c:6e:63:7c:12:ab:12:d1: b1:e4:10:69:af:ed:70:d7:b2:f0:13:bb:fc:7e:fc: 1b:3d:3e:88:2c:d6:45:af:5f:66:a3:2d:0f:e4:98: 44:bf:43:08:e5:9c:00:bb:24:9e:e7:47:91:ce:ac: 71:f1:ae:97:2a:d4:04:e5:6e:af:01:50:36:8c:96: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:20:F3:50:D0:78:EA:5A:32:09:4A:92:AB:C8:3A:E1:C8:6F:0A:68 X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1b:9d:c2:44:97:6e:75:e9:52:af:b5:92:d2:6f:82:2d:16: 5d:d5:11:87:05:c1:ac:ce:6c:83:95:e3:8c:55:3c:1b:b1:62: be:e6:b4:a1:4e:a9:58:0a:39:f4:dd:dc:b1:f5:63:c1:5f:17: a8:88:21:96:30:5e:bf:c6:8c:48:a3:11:c8:b8:b3:7b:a7:08: 59:2c:4f:3e:a2:5c:53:9e:b4:74:c4:2e:4c:6d:78:28:d4:db: a4:b6:4d:dc:f7:6a:8f:1f:1a:8e:67:d5:a7:1f:00:d8:70:8e: 75:0c:6c:10:a3:96:b3:fc:ba:a7:fd:8b:7a:c4:4e:aa:62:53: 86:1c:c7:93:f3:1d:80:80:ee:06:e8:61:ee:8f:31:6a:8f:52: 6a:30:48:81:a4:bb:c1:73:a3:54:af:23:8b:03:6e:b4:c2:f5: bd:6d:22:2f:e8:df:80:ec:67:0e:0a:69:5d:b6:11:5a:e8:cc: b7:30:58:d5:e1:3b:24:a6:22:6c:0f:04:02:fd:9c:ac:d3:01: 38:21:a9:fa:eb:be:5e:ca:a8:dd:3a:6b:44:44:31:c6:8c:c2: a5:a2:c8:3f:ea:61:f3:4d:2d:31:a3:a0:e6:f4:bc:9a:2c:56: 63:c2:b2:45:a7:1f:d6:b1:5e:25:49:62:de:f5:e6:79:fc:96: 51:e8:43:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVmTOoms0CggX98dlMVnknWUTl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA5MTcwNzE3MzJaFw0yNjA5MTgwODA2MzJaMDMxMTAvBgNV BAMTKEYwMjBGMzUwRDA3OEVBNUEzMjA5NEE5MkFCQzgzQUUxQzg2RjBBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHFCS8Ay+tld6eZQM5BLyZvl16 pRz2EX+r92B33WF/icW1nARYCQHZObsgavS9BOrukkGLd1TRILZgcCxmdnklRMtp lNdeJiqy5X8b6qo3AhvNT/Loo045TfdeKRQjMRRszLsEVIKPtg5NSgwvq7Zw31Nq WIo74FuWri4FLJkyymjCkGvNE2xmD8G75/Jd8oPGGsCDou16lN6pT628LDQ2Ts5N mBiVkKQEvLLwXpm/qi9U9War3ddv9FJMbmN8EqsS0bHkEGmv7XDXsvATu/x+/Bs9 Pogs1kWvX2ajLQ/kmES/QwjlnAC7JJ7nR5HOrHHxrpcq1ATlbq8BUDaMluenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8CDzUNB46loyCUqSq8g64chvCmgwHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAbncJEl2516VKvtZLSb4ItFl3VEYcFwazO bIOV44xVPBuxYr7mtKFOqVgKOfTd3LH1Y8FfF6iIIZYwXr/GjEijEci4s3unCFks Tz6iXFOetHTELkxteCjU26S2Tdz3ao8fGo5n1acfANhwjnUMbBCjlrP8uqf9i3rE TqpiU4Ycx5PzHYCA7gboYe6PMWqPUmowSIGku8Fzo1SvI4sDbrTC9b1tIi/o34Ds Zw4KaV22EVrozLcwWNXhOySmImwPBAL9nKzTATghqfrrvl7KqN06a0REMcaMwqWi yD/qYfNNLTGjoOb0vJosVmPCskWnH9axXiVJYt715nn8llHoQyI= -----END CERTIFICATE-----Generated at Thu Sep 17 15:24:08 2026 by rpki-client