$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft File: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft (raw, json) Hash identifier: DQYSEV8E9zNGxOqTx48ZuaHWgvdDNia01NM8S6uUQcw= Subject key identifier: BA:0F:D1:38:2B:8E:C2:2D:5C:4E:7D:F6:F0:55:53:18:44:55:09:83 Authority key identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 Certificate issuer: /CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Certificate serial: 54E4B61F0011C127B3C6AC1D34CF23A50DD35351 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:28:17 +0000 Manifest this update: Wed 16 Sep 2026 19:23:17 +0000 Manifest next update: Thu 17 Sep 2026 22:07:17 +0000 Files and hashes: 1: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl (hash: 2+kMAlqGPdw3h4d1VIhjqC13gerdFFaQugi7ZXsfEf0=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: Tg4cupk2DXjSvW5xjuL6mIy6JAE0QREMVdBvwDzs2pY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e4:b6:1f:00:11:c1:27:b3:c6:ac:1d:34:cf:23:a5:0d:d3:53:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Validity Not Before: Sep 16 19:23:17 2026 GMT Not After : Sep 17 22:07:17 2026 GMT Subject: CN=BA0FD1382B8EC22D5C4E7DF6F055531844550983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:41:db:7b:5f:12:f4:08:32:43:76:8f:b2: 4f:1b:3d:c0:d1:6e:b2:f2:44:49:a3:5e:d2:6a:c6: 16:89:2d:a9:e7:09:a6:88:24:e0:db:5b:9b:ff:c7: cd:36:35:22:c0:f6:20:ff:9d:96:5b:22:d1:22:66: 5c:69:d8:fd:20:77:8d:33:a8:2a:92:9f:46:01:f9: 98:a7:e0:82:07:0d:b2:e1:b4:42:12:96:85:f5:ac: 36:00:c1:3d:24:c6:86:f1:ef:f7:b7:c3:2c:35:ab: ac:94:e9:e6:2d:8d:58:3d:d9:0f:1d:bb:7b:57:fe: 61:4b:3e:73:9a:e5:85:30:2a:0f:d6:9d:2c:d3:b8: 5c:e4:0a:23:61:8f:a4:95:a8:5f:e5:7e:25:f9:19: b6:43:dc:c7:5c:22:6b:b9:4a:47:0f:d2:10:a4:62: 11:d4:06:26:5e:04:9c:39:e0:bb:a1:8c:07:41:54: 95:2f:95:59:24:47:c3:e3:84:35:49:af:c0:89:2a: 12:0e:3d:29:9d:d9:1c:7e:45:d3:3a:eb:2c:7d:c9: 07:22:eb:98:9d:fd:26:25:88:6e:a6:50:1a:3a:d8: d8:35:f3:5b:d7:f3:bb:18:37:b1:76:ba:29:c1:75: ca:ff:02:6a:67:28:58:76:0d:89:8c:99:0c:c8:49: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0F:D1:38:2B:8E:C2:2D:5C:4E:7D:F6:F0:55:53:18:44:55:09:83 X509v3 Authority Key Identifier: keyid:04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ec:76:13:72:b0:9d:d3:72:f5:e2:fa:29:59:ef:8c:8e:a5: 72:80:cd:73:dc:fd:b1:16:c7:02:29:c1:3f:14:76:80:8f:a2: 48:69:6b:90:c6:d8:79:f5:b6:1b:b8:75:af:ca:b9:15:d8:f4: 1a:e4:3f:5d:64:0f:5f:78:d7:32:18:42:38:d4:9d:53:5a:f1: f8:9a:3b:c5:4b:70:e5:03:63:32:cd:06:17:5c:14:cc:47:99: 37:2a:64:a5:40:ed:7e:37:81:04:09:4b:99:b2:f7:6c:60:aa: 9a:e8:0b:ca:1f:2f:b2:16:24:8a:c2:9f:0f:51:5d:1f:f8:06: 54:b5:bf:1c:1d:66:09:a8:e2:35:ad:a7:23:15:f3:3d:c8:12: 9d:d3:52:8c:c1:c4:17:a1:0e:82:9e:a1:09:96:5a:13:bd:2d: 59:5a:60:e2:8a:58:71:f7:4a:17:ff:b6:5c:30:9d:43:c2:65: 46:92:81:7c:28:ee:6a:73:fa:35:3c:0f:ea:1f:65:47:b1:34: a3:21:cf:a2:45:86:ee:62:f7:6e:ba:67:3e:14:69:e6:1d:a1: 00:61:f3:19:27:75:d1:15:8c:d0:14:da:66:61:3c:f7:e5:e1: bb:4e:88:7c:e2:40:1d:af:94:0c:61:4d:48:91:e6:42:6e:d4: ab:b7:5a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOS2HwARwSezxqwdNM8jpQ3TU1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJB OUJDMURENDAeFw0yNjA5MTYxOTIzMTdaFw0yNjA5MTcyMjA3MTdaMDMxMTAvBgNV BAMTKEJBMEZEMTM4MkI4RUMyMkQ1QzRFN0RGNkYwNTU1MzE4NDQ1NTA5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAs0Hbe18S9AgyQ3aPsk8bPcDR brLyREmjXtJqxhaJLannCaaIJODbW5v/x802NSLA9iD/nZZbItEiZlxp2P0gd40z qCqSn0YB+Zin4IIHDbLhtEISloX1rDYAwT0kxobx7/e3wyw1q6yU6eYtjVg92Q8d u3tX/mFLPnOa5YUwKg/WnSzTuFzkCiNhj6SVqF/lfiX5GbZD3MdcImu5SkcP0hCk YhHUBiZeBJw54LuhjAdBVJUvlVkkR8PjhDVJr8CJKhIOPSmd2Rx+RdM66yx9yQci 65id/SYliG6mUBo62Ng181vX87sYN7F2uinBdcr/AmpnKFh2DYmMmQzISclrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUug/ROCuOwi1cTn328FVTGERVCYMwHwYDVR0j BBgwFoAUBF2eRu5ua70q/uR3lkxtm6m8HdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRmOWY5YTEtNGFkOC00OWNlLTlmYTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZF RTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJBOUJDMURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDVEOUU0NkVFNkU2QkJEMkFGRUU0Nzc5NjRDNkQ5QkE5QkMx REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZE OUJBOUJDMURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPsdhNysJ3TcvXi+ilZ74yOpXKAzXPc/bEW xwIpwT8UdoCPokhpa5DG2Hn1thu4da/KuRXY9BrkP11kD1941zIYQjjUnVNa8fia O8VLcOUDYzLNBhdcFMxHmTcqZKVA7X43gQQJS5my92xgqproC8ofL7IWJIrCnw9R XR/4BlS1vxwdZgmo4jWtpyMV8z3IEp3TUozBxBehDoKeoQmWWhO9LVlaYOKKWHH3 Shf/tlwwnUPCZUaSgXwo7mpz+jU8D+ofZUexNKMhz6JFhu5i9266Zz4UaeYdoQBh 8xknddEVjNAU2mZhPPfl4btOiHziQB2vlAxhTUiR5kJu1Ku3Wss= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:55 2026 by rpki-client