$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft File: CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft (raw, json) Hash identifier: IqMtMS//vpSluKnbKE+qELTtFZ6aBOexnFyijlh1qCQ= Subject key identifier: 57:AC:EA:8E:7E:1C:D3:61:AD:50:F8:98:42:3C:64:5F:76:25:98:E6 Authority key identifier: CC:45:D9:11:E8:D4:09:F5:FE:F2:A1:5C:8F:82:F0:C6:89:19:C7:45 Certificate issuer: /CN=CC45D911E8D409F5FEF2A15C8F82F0C68919C745 Certificate serial: 5D70097CB1017A56098AA5C9708B38803C7BB352 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 01:57:40 +0000 Manifest this update: Sat 26 Sep 2026 01:52:40 +0000 Manifest next update: Sun 27 Sep 2026 05:49:40 +0000 Files and hashes: 1: CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl (hash: 6D9VELYoqkHfoz+G2d16nv0aIe3+eb8qTU/WOaa5Kh8=) 2: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: 1w4JR+H10y3ISU68cZA0S9gj5TwIQFq6stHAsiX3hNo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 05:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:70:09:7c:b1:01:7a:56:09:8a:a5:c9:70:8b:38:80:3c:7b:b3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC45D911E8D409F5FEF2A15C8F82F0C68919C745 Validity Not Before: Sep 26 01:52:40 2026 GMT Not After : Sep 27 05:49:40 2026 GMT Subject: CN=57ACEA8E7E1CD361AD50F898423C645F762598E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:f7:b2:5f:e0:87:9c:39:b2:c8:b8:79:b8: a4:c8:8b:b7:1b:1b:88:49:70:90:47:75:52:f8:b9: d6:37:e8:1a:0b:d7:c2:66:6c:a8:cd:d2:fa:b7:89: 49:f6:83:bb:2f:b4:00:21:e7:6e:f8:d0:ba:9d:f1: 87:07:f3:9a:ad:ed:f0:68:d9:e3:9c:55:fb:3a:f3: 20:6c:db:94:90:78:0d:6a:68:89:7c:1c:bd:af:8f: bf:70:ba:dd:f5:b6:fc:9c:1a:94:f4:08:a6:a0:0b: 4b:f2:c7:b4:9e:34:0f:e4:b5:42:df:9d:1a:96:82: 0f:e7:46:80:87:54:8d:fa:22:5f:79:72:6c:b1:78: c3:68:b5:81:c2:ff:fd:38:38:ca:90:e4:5d:c2:a2: 2d:34:9f:01:c3:4a:b8:4c:40:5a:bf:96:70:0b:31: fe:ee:b0:3d:9a:3e:dc:ad:5e:70:38:88:07:ae:76: 6a:b7:db:67:b0:2b:31:55:cc:77:5d:10:a5:f3:57: f9:83:02:c6:6d:ec:ca:bf:46:cf:ce:be:45:a7:c9: a2:5e:1f:90:2f:ad:37:5d:f4:c9:bf:2f:d0:d0:a7: 58:0b:c3:3a:95:bf:a0:c2:a8:92:97:a5:1a:4e:3d: ad:a9:ec:bb:0a:3d:d4:d4:8f:37:69:8d:d7:a4:4f: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AC:EA:8E:7E:1C:D3:61:AD:50:F8:98:42:3C:64:5F:76:25:98:E6 X509v3 Authority Key Identifier: keyid:CC:45:D9:11:E8:D4:09:F5:FE:F2:A1:5C:8F:82:F0:C6:89:19:C7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ab:00:a2:bf:35:29:a8:51:59:e3:05:18:34:6e:6d:27:32: 99:b0:14:2d:5a:5a:55:44:55:69:49:b4:d8:17:7d:21:33:dc: da:0b:75:0a:dc:c5:f0:b1:c0:c2:7a:86:23:bc:38:17:c7:ce: 6a:74:6a:b3:64:68:55:7e:84:4a:cd:d1:4f:e6:e4:b0:0d:78: 84:c1:6d:c9:0d:44:65:02:e0:96:a8:d7:b7:79:e4:d4:88:87: 33:bf:8b:36:61:23:54:ab:59:46:50:83:13:26:66:8c:29:3c: 83:68:2a:cd:ad:05:13:0a:4d:e9:de:cd:96:0d:05:f8:ae:ec: 49:68:b7:79:76:91:3c:20:78:ef:ab:1a:9b:c2:f6:a1:aa:87: ac:3c:72:40:53:f4:5b:ee:1d:58:47:df:cc:4f:ed:54:66:54: 6b:9f:9d:f5:75:1c:7d:8e:8d:5c:97:e6:0f:7a:58:ad:3c:2f: 91:bc:3f:09:23:51:44:29:1d:29:4d:13:9c:dd:78:85:4b:ef: 2d:62:56:80:7f:1b:58:46:39:cd:e1:24:73:e2:39:d9:02:0d: d2:b2:8b:b7:e0:33:66:cb:c7:ee:88:33:87:78:a5:40:b5:de: a3:75:3d:f6:f1:4b:81:77:35:4f:41:c0:61:f0:36:ef:17:93: 91:da:88:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXAJfLEBelYJiqXJcIs4gDx7s1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0NUQ5MTFFOEQ0MDlGNUZFRjJBMTVDOEY4MkYwQzY4 OTE5Qzc0NTAeFw0yNjA5MjYwMTUyNDBaFw0yNjA5MjcwNTQ5NDBaMDMxMTAvBgNV BAMTKDU3QUNFQThFN0UxQ0QzNjFBRDUwRjg5ODQyM0M2NDVGNzYyNTk4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORPeyX+CHnDmyyLh5uKTIi7cb G4hJcJBHdVL4udY36BoL18JmbKjN0vq3iUn2g7svtAAh52740Lqd8YcH85qt7fBo 2eOcVfs68yBs25SQeA1qaIl8HL2vj79wut31tvycGpT0CKagC0vyx7SeNA/ktULf nRqWgg/nRoCHVI36Il95cmyxeMNotYHC//04OMqQ5F3Coi00nwHDSrhMQFq/lnAL Mf7usD2aPtytXnA4iAeudmq322ewKzFVzHddEKXzV/mDAsZt7Mq/Rs/OvkWnyaJe H5AvrTdd9Mm/L9DQp1gLwzqVv6DCqJKXpRpOPa2p7LsKPdTUjzdpjdekT4x7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6zqjn4c02GtUPiYQjxkX3YlmOYwHwYDVR0j BBgwFoAUzEXZEejUCfX+8qFcj4LwxokZx0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU2Njk4MDctMDUwZS00M2FlLTg3MDgtYjQ2Yjg4MTc4NDJjLzAvQ0M0NUQ5MTFF OEQ0MDlGNUZFRjJBMTVDOEY4MkYwQzY4OTE5Qzc0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzQ1RDkxMUU4RDQwOUY1RkVGMkExNUM4RjgyRjBDNjg5MTlD NzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvQ0M0NUQ5MTFFOEQ0MDlGNUZFRjJBMTVDOEY4MkYw QzY4OTE5Qzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACrAKK/NSmoUVnjBRg0bm0nMpmwFC1aWlVE VWlJtNgXfSEz3NoLdQrcxfCxwMJ6hiO8OBfHzmp0arNkaFV+hErN0U/m5LANeITB bckNRGUC4Jao17d55NSIhzO/izZhI1SrWUZQgxMmZowpPINoKs2tBRMKTenezZYN Bfiu7Elot3l2kTwgeO+rGpvC9qGqh6w8ckBT9FvuHVhH38xP7VRmVGufnfV1HH2O jVyX5g96WK08L5G8PwkjUUQpHSlNE5zdeIVL7y1iVoB/G1hGOc3hJHPiOdkCDdKy i7fgM2bLx+6IM4d4pUC13qN1PfbxS4F3NU9BwGHwNu8Xk5HaiMk= -----END CERTIFICATE-----Generated at Sat Sep 26 16:46:51 2026 by rpki-client