$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: DTpmZYlvWva+9ChU8wMiYYbdI8/sPQJ9ACdKuSjKoZ0= Subject key identifier: CE:FF:CF:22:B6:81:FF:48:46:4C:23:6F:C1:C7:84:0D:B7:30:D6:AE Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 1E0CAF217B39B9C0512B85E5091D47EB9A65E3DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:45:37 +0000 Manifest this update: Wed 23 Sep 2026 15:40:37 +0000 Manifest next update: Thu 24 Sep 2026 18:20:37 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) 2: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: CEuMAxni4QZN+sfkKWqy7TBBbzsqN5UPhMe65SMXxek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0c:af:21:7b:39:b9:c0:51:2b:85:e5:09:1d:47:eb:9a:65:e3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Sep 23 15:40:37 2026 GMT Not After : Sep 24 18:20:37 2026 GMT Subject: CN=CEFFCF22B681FF48464C236FC1C7840DB730D6AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:3b:9d:7e:22:50:0f:3d:bd:03:42:0c:e2: 87:03:14:7e:39:83:95:c5:2a:39:54:a7:b7:c5:72: e2:78:d3:38:52:77:6c:08:e0:82:a6:47:fd:b2:8e: e3:44:a3:12:7c:99:52:56:43:79:75:8d:a6:94:28: 0c:23:18:3e:74:6e:ce:21:84:71:35:f6:0d:1f:53: 91:73:64:23:03:ac:51:a5:fd:90:cb:01:8f:ba:f9: 5c:82:e2:27:82:3c:60:f7:a0:4b:ee:09:ce:a9:8a: 53:f3:6e:71:19:76:83:e7:9a:f1:e2:47:f5:58:41: bb:49:ff:29:e9:bc:12:28:f0:a2:65:fc:f5:49:d5: a6:9d:e7:d1:0f:dc:98:51:8f:35:cf:f8:48:aa:4a: b8:8d:3c:90:63:64:4b:43:6f:48:ef:8c:e9:b4:7f: ad:d6:6c:86:bc:ce:30:12:53:ea:5b:75:d7:db:7d: 8b:12:b7:2d:e9:78:b0:2e:eb:bc:d7:aa:e1:62:43: fa:26:97:d2:87:7f:8d:98:e3:79:fb:24:14:7a:7a: f5:07:5f:79:2d:1f:28:3d:26:db:33:b5:4e:45:1c: 35:08:84:f1:71:86:5a:df:69:77:ec:d6:7f:48:21: 34:c5:4f:e1:1f:09:a5:dd:48:30:b9:22:71:7f:01: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:CF:22:B6:81:FF:48:46:4C:23:6F:C1:C7:84:0D:B7:30:D6:AE X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:85:f6:c6:07:0e:8e:d9:6f:6b:6f:bf:87:36:8d:d5:96:13: cf:75:af:10:8e:86:8f:f8:83:aa:78:88:25:44:2e:aa:f6:89: d9:e2:4e:c6:d8:c5:0f:86:a0:c1:4e:3c:8d:b2:49:57:96:f2: 99:a4:8b:93:a1:82:3a:3d:a1:ae:cc:79:4f:3a:2b:f9:c8:1b: 79:bf:4d:7b:89:87:25:40:0d:16:4f:44:0d:6a:29:0a:02:46: b7:75:c6:5d:d1:b1:1a:52:1c:77:b3:1f:35:ae:fb:a1:52:fc: d3:bf:e6:89:17:4f:6c:fc:80:3a:30:60:5c:0e:81:2f:6f:fa: 0c:fc:03:90:81:8b:63:d3:53:95:47:64:fb:7d:ff:fc:08:cc: d0:2f:cb:b3:68:79:d4:fd:f2:bc:a4:d8:47:73:96:69:aa:82: b5:61:40:f8:41:11:5d:0d:3d:8b:8b:0e:b2:a8:33:45:53:da: ef:a6:cc:e9:95:20:0a:2e:79:17:e9:19:2f:0a:ca:74:82:46: 7c:19:00:b7:d1:7a:aa:57:bc:49:0b:c3:ac:b8:e0:c4:d6:ee: f1:75:c1:22:09:71:2f:1d:51:a6:db:3e:b6:72:8b:fa:c4:8b: 76:24:2b:53:e4:a8:dd:4c:fe:cd:98:64:25:a9:9e:45:58:33: e1:31:49:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgyvIXs5ucBRK4XlCR1H65pl49wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA5MjMxNTQwMzdaFw0yNjA5MjQxODIwMzdaMDMxMTAvBgNV BAMTKENFRkZDRjIyQjY4MUZGNDg0NjRDMjM2RkMxQzc4NDBEQjczMEQ2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkTudfiJQDz29A0IM4ocDFH45 g5XFKjlUp7fFcuJ40zhSd2wI4IKmR/2yjuNEoxJ8mVJWQ3l1jaaUKAwjGD50bs4h hHE19g0fU5FzZCMDrFGl/ZDLAY+6+VyC4ieCPGD3oEvuCc6pilPzbnEZdoPnmvHi R/VYQbtJ/ynpvBIo8KJl/PVJ1aad59EP3JhRjzXP+EiqSriNPJBjZEtDb0jvjOm0 f63WbIa8zjASU+pbddfbfYsSty3peLAu67zXquFiQ/oml9KHf42Y43n7JBR6evUH X3ktHyg9JtsztU5FHDUIhPFxhlrfaXfs1n9IITTFT+EfCaXdSDC5InF/AaOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzv/PIraB/0hGTCNvwceEDbcw1q4wHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2F9sYHDo7Zb2tvv4c2jdWWE891rxCOho/4 g6p4iCVELqr2idniTsbYxQ+GoMFOPI2ySVeW8pmki5Ohgjo9oa7MeU86K/nIG3m/ TXuJhyVADRZPRA1qKQoCRrd1xl3RsRpSHHezHzWu+6FS/NO/5okXT2z8gDowYFwO gS9v+gz8A5CBi2PTU5VHZPt9//wIzNAvy7NoedT98ryk2EdzlmmqgrVhQPhBEV0N PYuLDrKoM0VT2u+mzOmVIAoueRfpGS8KynSCRnwZALfReqpXvEkLw6y44MTW7vF1 wSIJcS8dUabbPrZyi/rEi3YkK1PkqN1M/s2YZCWpnkVYM+ExSRY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:18:53 2026 by rpki-client