$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft (raw, json) Hash identifier: dMYT7XQW7bGLA3UpL36Q3WSiRTr88zCPrJklQYFbadc= Subject key identifier: D2:01:91:9D:8B:3F:E4:2E:9D:43:89:A8:B8:82:B6:FA:23:9D:B9:2F Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 0B2B8329B3C01BE9A06C204DD985FBD39EA0B680 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:59:19 +0000 Manifest this update: Thu 24 Sep 2026 14:54:19 +0000 Manifest next update: Fri 25 Sep 2026 18:33:19 +0000 Files and hashes: 1: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nJl837iJi/5SwBSDbdYVongO7p9uzBZcmTZb0XAZTJk=) 2: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: fxSYsouQPJ65g7CwW1EnalKBkWjJiK50KJBFUAXhZzA=) 3: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438=) 4: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl (hash: xvO5lga9IcNRKHI17cXNgVroHgUD7Aezxbl/ZETI48A=) 5: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: fgQOQ1ZPs6+mRIJ9mhffQJjtFV+ZjnGnsOoWLbAN6Mo=) 6: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: VwsatNn5AXuJ/LUW+n8JXwWEwiaViEVC741lbFCSMBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2b:83:29:b3:c0:1b:e9:a0:6c:20:4d:d9:85:fb:d3:9e:a0:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: Sep 24 14:54:19 2026 GMT Not After : Sep 25 18:33:19 2026 GMT Subject: CN=D201919D8B3FE42E9D4389A8B882B6FA239DB92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:8c:04:38:e2:78:02:58:87:81:98:86:e4: c7:b9:8c:77:a9:90:df:d8:2d:30:ff:be:ed:18:c1: 11:31:2f:94:ef:fe:55:48:ff:a1:dc:83:ef:c7:b0: cd:b4:c0:b2:eb:9d:85:b4:d8:84:e8:eb:57:f6:d9: 85:46:95:56:f5:0d:1a:89:ec:cc:1c:d8:e1:7c:8d: fa:c4:26:6f:88:02:98:7f:97:9e:72:bf:6a:71:c1: b1:eb:6b:dc:9d:1d:2f:01:8b:51:4b:8b:9b:d8:50: 70:bb:12:e7:4a:79:0a:e4:c2:ea:3d:8f:40:65:71: c0:a9:3b:c1:b1:ac:34:b5:30:ff:15:47:cd:21:33: 5f:d0:1f:20:f2:98:04:7c:60:b0:3f:cc:13:55:33: f0:73:95:33:47:57:d4:5a:53:58:ec:21:18:55:6e: cd:41:90:d8:0f:b2:14:0f:c3:68:f2:5c:7b:88:d0: 8c:48:62:15:b5:69:a2:17:92:0a:55:ad:ce:f4:dd: 7a:f0:24:19:73:ac:f3:9e:b0:09:e5:bb:da:c1:08: a4:7b:ed:f0:96:a0:0b:ab:8e:b9:3d:c6:e3:ec:cc: 9c:a7:ed:8c:65:0d:ae:e6:95:3e:b6:aa:7b:69:f7: c5:36:8a:5c:01:43:4e:8d:e0:a4:32:93:80:d8:41: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:01:91:9D:8B:3F:E4:2E:9D:43:89:A8:B8:82:B6:FA:23:9D:B9:2F X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9d:6d:02:0e:22:9d:9f:91:3f:04:82:0d:87:f0:82:b9:a6: f7:88:93:2e:9d:19:b8:ef:80:74:38:b8:55:dc:03:71:af:e0: 1f:e5:e4:38:ba:35:b4:fa:11:45:44:ac:56:4b:91:49:1b:b1: 0b:1a:59:6b:6b:ca:b8:e8:36:6c:fb:6b:83:90:5c:cd:2f:b1: bc:29:2e:4e:a1:d7:c5:b3:65:63:e8:e5:35:73:43:05:cc:26: 0b:c6:c1:6d:2e:c1:bb:ec:a4:8a:71:10:cf:50:4a:6f:82:4d: 15:a7:97:f1:2f:16:a5:f5:1d:49:29:00:55:e5:94:9b:3e:fb: 94:3d:bd:38:72:5f:6f:15:14:bc:78:80:93:35:37:d9:bf:65: 4a:b8:15:e4:d0:21:77:b5:46:e6:fb:85:e8:92:05:17:52:67: 1c:34:29:0f:4c:0b:90:45:b0:d7:39:d8:6b:09:df:d0:84:96: 27:5b:bb:fc:cb:eb:03:8a:38:db:e9:34:ac:d3:ef:01:74:b3: 74:9b:a1:8b:5e:39:3a:f2:25:aa:66:33:4a:d9:aa:29:14:8e: 9e:b0:25:68:bd:c1:89:4d:1f:e7:76:20:b6:95:da:33:31:5e: 16:73:0c:80:4f:75:70:6b:c8:8d:74:6c:9d:ba:60:3c:f5:bc: 82:ea:ac:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyuDKbPAG+mgbCBN2YX7056gtoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZGNkQy RDdDMDhCRTAeFw0yNjA5MjQxNDU0MTlaFw0yNjA5MjUxODMzMTlaMDMxMTAvBgNV BAMTKEQyMDE5MTlEOEIzRkU0MkU5RDQzODlBOEI4ODJCNkZBMjM5REI5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOT4wEOOJ4AliHgZiG5Me5jHep kN/YLTD/vu0YwRExL5Tv/lVI/6Hcg+/HsM20wLLrnYW02ITo61f22YVGlVb1DRqJ 7Mwc2OF8jfrEJm+IAph/l55yv2pxwbHra9ydHS8Bi1FLi5vYUHC7EudKeQrkwuo9 j0BlccCpO8GxrDS1MP8VR80hM1/QHyDymAR8YLA/zBNVM/BzlTNHV9RaU1jsIRhV bs1BkNgPshQPw2jyXHuI0IxIYhW1aaIXkgpVrc703XrwJBlzrPOesAnlu9rBCKR7 7fCWoAurjrk9xuPszJyn7YxlDa7mlT62qntp98U2ilwBQ06N4KQyk4DYQc2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gGRnYs/5C6dQ4mouIK2+iOduS8wHwYDVR0j BBgwFoAUhT7derPvmhOgd58mEnhvbS18CL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDVkZmY5YjMtOTA0MS00ZGQ2LWI3YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FC M0VGOUExM0EwNzc5RjI2MTI3ODZGNkQyRDdDMDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0Mw OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZG NkQyRDdDMDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWdbQIOIp2fkT8Egg2H8IK5pveIky6dGbjv gHQ4uFXcA3Gv4B/l5Di6NbT6EUVErFZLkUkbsQsaWWtryrjoNmz7a4OQXM0vsbwp Lk6h18WzZWPo5TVzQwXMJgvGwW0uwbvspIpxEM9QSm+CTRWnl/EvFqX1HUkpAFXl lJs++5Q9vThyX28VFLx4gJM1N9m/ZUq4FeTQIXe1Rub7heiSBRdSZxw0KQ9MC5BF sNc52GsJ39CElidbu/zL6wOKONvpNKzT7wF0s3SboYteOTryJapmM0rZqikUjp6w JWi9wYlNH+d2ILaV2jMxXhZzDIBPdXBryI10bJ26YDz1vILqrD4= -----END CERTIFICATE-----Generated at Thu Sep 24 17:32:31 2026 by rpki-client