$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json) Hash identifier: kldBA/u7/Xpnlxd4NI+Vbw3BukHVpjniT4NNUB7Gn0E= Subject key identifier: 8B:3C:1E:50:EF:29:78:1B:18:E4:CF:10:C9:FE:59:C5:00:64:63:62 Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Certificate serial: 50AF4CDA77899675AB79127ABE1808F560473854 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:59:44 +0000 Manifest this update: Thu 17 Sep 2026 08:54:44 +0000 Manifest next update: Fri 18 Sep 2026 10:42:44 +0000 Files and hashes: 1: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=) 2: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=) 3: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: NbqA8Z43K7wJMZCkaG22T5Hh6BJGceKEURodW3qeMLo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:af:4c:da:77:89:96:75:ab:79:12:7a:be:18:08:f5:60:47:38:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Validity Not Before: Sep 17 08:54:44 2026 GMT Not After : Sep 18 10:42:44 2026 GMT Subject: CN=8B3C1E50EF29781B18E4CF10C9FE59C500646362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:4c:fa:f1:29:41:1f:8f:25:8f:d6:13:eb: a0:98:08:32:3c:7a:79:ed:d6:a8:4c:2c:3d:5a:5a: 1e:9d:c6:5a:27:36:7f:8d:ff:ca:35:9c:e6:06:33: c7:ba:74:68:f8:20:5b:5f:7e:9a:85:61:ae:74:dc: 65:be:28:e3:05:6a:25:7c:7a:89:f5:76:0d:37:a7: a3:0a:0a:fc:1e:9a:2e:98:2f:5a:db:d7:ff:38:53: 23:91:df:41:e2:f0:60:33:20:e9:35:89:67:af:cf: d3:8e:64:a5:a5:98:d3:7b:d0:84:c4:77:f6:ff:d7: 78:1d:6d:b4:00:f2:21:48:d5:cc:72:5b:16:a2:93: 26:53:e4:ed:88:9f:12:f4:83:e8:cc:40:6d:66:f3: f3:6f:c6:5f:35:57:63:08:70:59:03:e8:e4:2f:5c: c9:73:a2:7f:be:04:e0:4b:c2:45:52:95:58:ea:37: 1a:c1:b4:ac:2a:62:b2:c1:73:4b:a1:a3:bd:40:b8: b6:03:eb:6a:06:51:8a:0d:82:00:94:a2:3b:5e:76: 57:8e:1c:ed:bb:55:8a:3d:3d:2d:1e:c8:a6:f5:e0: 2a:75:de:48:4d:7e:b6:e5:89:d9:41:d0:8a:4c:a3: 26:8b:f6:fc:6d:97:5b:6e:78:43:5c:3d:89:c7:34: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:1E:50:EF:29:78:1B:18:E4:CF:10:C9:FE:59:C5:00:64:63:62 X509v3 Authority Key Identifier: keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5e:6a:bc:b5:b6:3a:04:f3:04:bd:fb:ba:4a:60:20:e3:48: ad:35:a0:4c:6a:f3:b3:b9:da:69:a0:ce:6c:59:38:91:ce:1c: 3e:fc:1b:60:34:1b:89:43:dd:2d:66:9f:7e:f7:8b:6c:30:d8: c8:81:30:a8:6c:fd:ce:e7:d5:58:b6:5a:37:eb:dc:33:8d:ff: 0b:da:2a:a6:08:a8:ce:ca:ab:47:a2:e0:33:96:3b:93:d8:83: 68:40:77:6c:72:9b:ff:fa:32:54:58:66:81:a1:ea:93:4e:34: 8c:6f:03:ef:ef:ff:30:02:d0:5c:28:42:85:3c:ef:b7:23:4f: b5:8a:4b:bf:4e:fd:8b:1d:98:14:a7:f9:ba:0d:60:a5:23:62: 55:84:be:f1:68:47:84:c3:6a:e4:5b:60:0d:a2:69:5a:23:81: d7:9f:ed:4c:5e:96:02:e5:5c:23:28:d8:31:1f:e3:56:f0:a8: 14:75:09:5d:5d:f5:9a:23:b5:64:ed:21:6c:54:ce:f6:22:17: ab:f9:b7:1e:f6:ce:0e:46:a1:2d:8c:d3:0b:4c:3d:4b:d0:97: 64:64:79:3f:34:2b:50:b5:cd:35:c1:99:5a:db:77:0f:97:24: 2e:41:a7:b2:c9:bc:6c:55:02:ff:8e:db:dc:31:98:64:12:9f: b7:a2:f8:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUK9M2neJlnWreRJ6vhgI9WBHOFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcw NDJDMzI1RTAeFw0yNjA5MTcwODU0NDRaFw0yNjA5MTgxMDQyNDRaMDMxMTAvBgNV BAMTKDhCM0MxRTUwRUYyOTc4MUIxOEU0Q0YxMEM5RkU1OUM1MDA2NDYzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQzEz68SlBH48lj9YT66CYCDI8 ennt1qhMLD1aWh6dxlonNn+N/8o1nOYGM8e6dGj4IFtffpqFYa503GW+KOMFaiV8 eon1dg03p6MKCvwemi6YL1rb1/84UyOR30Hi8GAzIOk1iWevz9OOZKWlmNN70ITE d/b/13gdbbQA8iFI1cxyWxaikyZT5O2InxL0g+jMQG1m8/Nvxl81V2MIcFkD6OQv XMlzon++BOBLwkVSlVjqNxrBtKwqYrLBc0uho71AuLYD62oGUYoNggCUojtedleO HO27VYo9PS0eyKb14Cp13khNfrblidlB0IpMoyaL9vxtl1tueENcPYnHNJgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizweUO8peBsY5M8Qyf5ZxQBkY2IwHwYDVR0j BBgwFoAUVI0ba2upoWXnet7v4oQkhwQsMl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YTdkOTgtMjMzOC00ZDc3LTk2NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2 QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcwNDJDMzI1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDhEMUI2QjZCQTlBMTY1RTc3QURFRUZFMjg0MjQ4NzA0MkMz MjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0 ODcwNDJDMzI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHheary1tjoE8wS9+7pKYCDjSK01oExq87O5 2mmgzmxZOJHOHD78G2A0G4lD3S1mn373i2ww2MiBMKhs/c7n1Vi2Wjfr3DON/wva KqYIqM7Kq0ei4DOWO5PYg2hAd2xym//6MlRYZoGh6pNONIxvA+/v/zAC0FwoQoU8 77cjT7WKS79O/YsdmBSn+boNYKUjYlWEvvFoR4TDauRbYA2iaVojgdef7UxelgLl XCMo2DEf41bwqBR1CV1d9ZojtWTtIWxUzvYiF6v5tx72zg5GoS2M0wtMPUvQl2Rk eT80K1C1zTXBmVrbdw+XJC5Bp7LJvGxVAv+O29wxmGQSn7ei+Ls= -----END CERTIFICATE-----Generated at Thu Sep 17 15:54:43 2026 by rpki-client