$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft File: 0453EE44B6298E574434A213BFD59854FBBC1AC9.mft (raw, json) Hash identifier: wadxj0VH3+BXUWbrsRONp1orq4N/BDvgU1ZXfwPgbjg= Subject key identifier: 4F:66:1E:17:E9:5F:D7:93:91:6F:3C:0D:5E:A8:5E:32:F9:C6:62:26 Authority key identifier: 04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 Certificate issuer: /CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Certificate serial: 726E2DD90DB4175DD83A95CE05B3EE3B8469FA6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 12:29:33 +0000 Manifest this update: Wed 16 Sep 2026 12:24:33 +0000 Manifest next update: Thu 17 Sep 2026 16:19:33 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: cIZPGEVWJFWOc4kuja4Zgt6H/ILhtTMjLdnFHfcUoyY=) 2: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: HWOy6TZ8QT68FcB2BCMFfmYX+XsnVwiXZ6wBXEIZ6YM=) 3: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: 9cSUjwh9z6+6ZJ3LgshkbKPWLwwzg4ImlK/YQG0hafg=) 4: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: 7NlmtYXZ6oozA3ARYN5xU0ZSurydVsw5V4omrofalOI=) 5: 0453EE44B6298E574434A213BFD59854FBBC1AC9.crl (hash: /NBzYIzpW+qVoOakyRx10SQrcOto7IuC2jA3HmPlpMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6e:2d:d9:0d:b4:17:5d:d8:3a:95:ce:05:b3:ee:3b:84:69:fa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Validity Not Before: Sep 16 12:24:33 2026 GMT Not After : Sep 17 16:19:33 2026 GMT Subject: CN=4F661E17E95FD793916F3C0D5EA85E32F9C66226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:0e:8f:d8:96:3f:95:e2:f1:95:4e:c7:60: 5e:58:78:81:54:8d:e1:01:86:f5:c1:e9:91:94:79: b6:11:9e:07:4a:98:5f:2e:10:e7:57:3f:31:cf:25: cf:a3:fa:12:d4:b5:5d:8d:7c:d2:0a:a6:30:cd:6f: 4b:40:35:54:aa:bb:d6:e0:11:0a:1b:c3:12:37:30: 47:ec:18:20:20:5e:94:e7:1b:58:a8:84:d9:80:95: ba:89:2a:0d:eb:14:c0:66:63:e1:d8:2e:82:66:02: 93:8a:73:25:c7:c1:cd:ca:8b:bb:fc:81:05:2f:7e: fc:60:86:4f:1d:8b:86:ce:17:29:c9:59:9a:f0:21: 7d:3d:7b:92:df:f6:c6:b0:6f:fa:b7:42:82:c2:79: 96:97:80:dd:0b:d2:d6:25:07:0c:c1:73:5a:42:07: 9a:0f:96:2d:a2:16:5b:6c:61:3d:0d:31:55:1b:ec: 68:12:0b:8b:a4:c3:0a:8f:1c:86:d2:22:73:53:33: b0:12:96:17:bd:7a:31:f5:60:01:5a:ce:56:f8:c2: 1c:34:70:ea:02:d7:41:f9:1f:35:72:5c:54:6f:89: 76:f7:c2:59:b7:89:a8:fc:fe:d9:7c:bf:bf:7d:af: b3:02:10:c8:8a:13:82:3b:f2:13:24:ea:c8:d0:fd: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:66:1E:17:E9:5F:D7:93:91:6F:3C:0D:5E:A8:5E:32:F9:C6:62:26 X509v3 Authority Key Identifier: keyid:04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:11:72:d7:db:bc:25:47:7c:70:e1:21:00:0a:d0:cc:24:8c: 26:99:d9:96:8f:e5:c2:04:df:25:e5:d6:27:de:1b:68:0c:b6: 16:cd:29:d4:ea:d0:83:57:e1:77:9d:b4:da:ac:5a:59:c7:72: af:5a:1f:b8:e4:64:ac:e5:cc:29:6b:83:b3:fc:28:a7:d5:7c: f8:c2:59:0c:0c:1d:e0:45:c0:c6:ae:a7:ac:19:b8:90:cd:ce: fc:07:26:c6:94:7a:cb:48:c2:c1:c3:6e:8a:9a:99:de:f8:3d: 02:af:02:4d:dc:a9:6a:76:c2:bc:58:38:88:f8:4f:84:c2:ad: ab:d9:a4:b2:c3:59:31:52:73:f4:3b:dd:14:e4:f3:0e:c4:8f: 18:27:b7:f2:72:31:3f:f7:12:72:34:1f:74:72:88:04:ce:1c: b4:bc:7f:d1:62:65:ef:2e:77:49:60:9e:af:5c:39:08:cb:76: eb:f6:c0:8b:ed:67:d3:eb:a8:3c:b3:a9:bb:e0:e5:0d:76:79: fd:3d:ce:16:0a:43:48:9e:47:05:d9:14:94:a1:1b:19:4e:e2: 1d:3e:81:88:9f:2d:ab:c0:13:cc:35:b7:61:b1:32:f2:25:d0: 80:1d:1a:18:8b:33:11:be:d3:28:72:5e:18:db:0c:d0:a5:1e: b9:a1:b0:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcm4t2Q20F13YOpXOBbPuO4Rp+m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRG QkJDMUFDOTAeFw0yNjA5MTYxMjI0MzNaFw0yNjA5MTcxNjE5MzNaMDMxMTAvBgNV BAMTKDRGNjYxRTE3RTk1RkQ3OTM5MTZGM0MwRDVFQTg1RTMyRjlDNjYyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tA6P2JY/leLxlU7HYF5YeIFU jeEBhvXB6ZGUebYRngdKmF8uEOdXPzHPJc+j+hLUtV2NfNIKpjDNb0tANVSqu9bg EQobwxI3MEfsGCAgXpTnG1iohNmAlbqJKg3rFMBmY+HYLoJmApOKcyXHwc3Ki7v8 gQUvfvxghk8di4bOFynJWZrwIX09e5Lf9sawb/q3QoLCeZaXgN0L0tYlBwzBc1pC B5oPli2iFltsYT0NMVUb7GgSC4ukwwqPHIbSInNTM7ASlhe9ejH1YAFazlb4whw0 cOoC10H5HzVyXFRviXb3wlm3iaj8/tl8v799r7MCEMiKE4I78hMk6sjQ/f1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2YeF+lf15ORbzwNXqheMvnGYiYwHwYDVR0j BBgwFoAUBFPuRLYpjldENKITv9WYVPu8GskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU3YjkwY2ItOGViZC00YzdiLThjMzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRC NjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRGQkJDMUFDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUzRUU0NEI2Mjk4RTU3NDQzNEEyMTNCRkQ1OTg1NEZCQkMx QUM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4 NTRGQkJDMUFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGARctfbvCVHfHDhIQAK0MwkjCaZ2ZaP5cIE 3yXl1ifeG2gMthbNKdTq0INX4XedtNqsWlnHcq9aH7jkZKzlzClrg7P8KKfVfPjC WQwMHeBFwMaup6wZuJDNzvwHJsaUestIwsHDboqamd74PQKvAk3cqWp2wrxYOIj4 T4TCravZpLLDWTFSc/Q73RTk8w7Ejxgnt/JyMT/3EnI0H3RyiATOHLS8f9FiZe8u d0lgnq9cOQjLduv2wIvtZ9PrqDyzqbvg5Q12ef09zhYKQ0ieRwXZFJShGxlO4h0+ gYifLavAE8w1t2GxMvIl0IAdGhiLMxG+0yhyXhjbDNClHrmhsPE= -----END CERTIFICATE-----Generated at Thu Sep 17 09:27:59 2026 by rpki-client