$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: TmFMhF3hDkfUY9XnyE1jHI2r7nAj/QKOfXsaPaEll9s= Subject key identifier: 61:8E:E0:E4:5F:AF:62:C1:4F:84:7B:7A:82:89:92:24:15:D4:6D:BF Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 16CBD2EA38D6237AE032B0374D529AC8ABF43159 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:27:44 +0000 Manifest this update: Thu 17 Sep 2026 07:22:44 +0000 Manifest next update: Fri 18 Sep 2026 08:51:44 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) 2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: Z1GTzJhd5tWPrbukJ+ktWQzL0F1Ysgb9wJX/5sqJ1KQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cb:d2:ea:38:d6:23:7a:e0:32:b0:37:4d:52:9a:c8:ab:f4:31:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: Sep 17 07:22:44 2026 GMT Not After : Sep 18 08:51:44 2026 GMT Subject: CN=618EE0E45FAF62C14F847B7A8289922415D46DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:96:4e:d0:16:8c:4e:dc:3c:27:14:f2:80: 34:8d:ed:45:a6:09:98:98:88:f2:bd:1e:33:42:01: 9e:bf:83:c3:93:17:28:7f:06:9f:f8:f8:e8:12:d2: 03:aa:e2:6f:9d:62:fa:57:5d:3a:bd:92:a0:44:97: bb:45:21:79:f1:7b:71:40:fd:1e:41:0f:95:37:b1: 5f:dd:62:e6:ee:a1:78:79:cf:18:9c:34:b4:ba:0d: c5:e7:68:f1:72:18:79:df:37:f6:b1:b9:0b:79:f2: 60:10:bf:76:39:92:25:02:9e:17:77:75:35:fe:9d: 78:b0:94:25:aa:1f:89:56:b3:74:9b:3c:da:c0:21: bc:a7:a1:30:30:6d:95:a2:b7:fc:0f:6a:14:3e:a6: 98:8a:dd:c8:2b:6d:a7:a8:57:ca:a6:ce:ec:4c:5e: fd:2d:95:54:11:61:9c:c6:70:1a:6a:8a:cf:20:29: 84:11:a5:a0:7b:1f:0c:8e:5a:39:c2:a4:32:4e:38: 1e:6e:15:0d:f4:bb:c2:88:15:57:2f:51:0f:37:8b: 75:9d:c9:e9:54:e8:3c:95:93:59:04:8c:de:2b:b7: d0:35:2c:ac:ab:40:22:56:60:ab:d5:21:07:b4:24: a5:f6:d8:f2:a4:80:ae:38:fb:49:1f:68:ca:22:55: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8E:E0:E4:5F:AF:62:C1:4F:84:7B:7A:82:89:92:24:15:D4:6D:BF X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:72:56:36:78:67:d3:e2:26:52:b1:f7:98:3e:fa:ba:5c:22: 02:8f:30:a2:5c:35:5b:e9:7a:60:c8:d3:b7:c7:46:4c:e6:04: 09:f7:da:1b:5c:ca:f2:f0:65:aa:2f:76:a0:fc:98:80:c2:cd: 40:e7:1b:bc:e0:e9:b5:24:46:1f:60:18:a8:ee:cd:e8:4a:54: f4:d5:73:6d:ca:9d:3a:03:c6:82:ca:87:19:13:5a:7b:88:11: 3d:bd:4c:45:d3:89:91:4a:45:ae:a3:d3:e5:dd:9e:fe:91:7b: 78:8d:e3:6f:43:bf:2b:8c:aa:b7:ad:3a:e2:2b:97:fa:7f:8e: 23:72:60:aa:bb:68:77:03:21:52:32:04:b1:6d:41:b7:c9:e9: 0e:4c:35:b6:3b:4c:dd:54:50:9f:7c:84:ae:ec:cd:00:6c:ba: 92:3e:90:fb:2c:6b:fc:7e:2f:a3:0f:d0:64:b4:60:3d:78:40: 39:dc:6a:5e:74:1c:b2:1e:58:9b:7a:79:e8:48:00:61:8c:31: 2d:47:6d:89:a1:78:70:01:cc:a4:a2:6e:85:ed:95:78:38:70: 63:2b:5d:76:3c:c2:7c:54:56:21:ac:f7:2b:b3:c8:be:7c:a7: 1f:c8:ad:ec:e5:fa:cd:26:55:44:8d:8f:82:b2:7e:c0:65:24: af:ca:3a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsvS6jjWI3rgMrA3TVKayKv0MVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA5MTcwNzIyNDRaFw0yNjA5MTgwODUxNDRaMDMxMTAvBgNV BAMTKDYxOEVFMEU0NUZBRjYyQzE0Rjg0N0I3QTgyODk5MjI0MTVENDZEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucpZO0BaMTtw8JxTygDSN7UWm CZiYiPK9HjNCAZ6/g8OTFyh/Bp/4+OgS0gOq4m+dYvpXXTq9kqBEl7tFIXnxe3FA /R5BD5U3sV/dYubuoXh5zxicNLS6DcXnaPFyGHnfN/axuQt58mAQv3Y5kiUCnhd3 dTX+nXiwlCWqH4lWs3SbPNrAIbynoTAwbZWit/wPahQ+ppiK3cgrbaeoV8qmzuxM Xv0tlVQRYZzGcBpqis8gKYQRpaB7HwyOWjnCpDJOOB5uFQ30u8KIFVcvUQ83i3Wd yelU6DyVk1kEjN4rt9A1LKyrQCJWYKvVIQe0JKX22PKkgK44+0kfaMoiVUL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYY7g5F+vYsFPhHt6gomSJBXUbb8wHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxyVjZ4Z9PiJlKx95g++rpcIgKPMKJcNVvp emDI07fHRkzmBAn32htcyvLwZaovdqD8mIDCzUDnG7zg6bUkRh9gGKjuzehKVPTV c23KnToDxoLKhxkTWnuIET29TEXTiZFKRa6j0+Xdnv6Re3iN429DvyuMqretOuIr l/p/jiNyYKq7aHcDIVIyBLFtQbfJ6Q5MNbY7TN1UUJ98hK7szQBsupI+kPssa/x+ L6MP0GS0YD14QDncal50HLIeWJt6eehIAGGMMS1HbYmheHABzKSiboXtlXg4cGMr XXY8wnxUViGs9yuzyL58px/Irezl+s0mVUSNj4KyfsBlJK/KOg8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:11 2026 by rpki-client