$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft File: 4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json) Hash identifier: ZiUmbF5DM+WZK884KdyNzVlUekjAKKLYslqyAEcxWlM= Subject key identifier: 5C:23:A0:8E:B2:94:2C:A3:3D:12:9C:D5:EC:03:D0:4B:7E:8A:E6:6E Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41 Certificate issuer: /CN=4156BE0E036363A596E1CBC310489AB801DFF941 Certificate serial: 52AF25BCA95FBAF4F8EBD9B4241C48DEE94790BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 09:07:01 +0000 Manifest this update: Thu 24 Sep 2026 09:02:01 +0000 Manifest next update: Fri 25 Sep 2026 12:42:01 +0000 Files and hashes: 1: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=) 2: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: O1VkDAZF39SZzVIMqcZP5L7/favJKKObhSjnJKfZ7FA=) 3: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=) 4: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=) 5: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=) 6: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=) 7: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=) 8: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=) 9: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:af:25:bc:a9:5f:ba:f4:f8:eb:d9:b4:24:1c:48:de:e9:47:90:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941 Validity Not Before: Sep 24 09:02:01 2026 GMT Not After : Sep 25 12:42:01 2026 GMT Subject: CN=5C23A08EB2942CA33D129CD5EC03D04B7E8AE66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:60:31:cb:b5:8d:f7:99:75:1b:d9:9c:11: 1d:48:8d:1b:70:49:e5:7d:28:7a:6f:58:f7:fb:56: 23:f8:af:8c:91:dc:30:f1:6a:bc:10:29:f6:79:88: 90:97:76:d2:05:60:76:77:d2:53:7e:e8:e4:cc:4e: f3:2c:66:f6:98:18:39:4f:24:f1:30:09:50:1b:f5: 88:fa:c0:50:4d:ea:b1:57:64:9f:7e:9a:0e:04:e9: df:1e:45:2c:2d:8a:de:76:ba:7b:8b:dd:49:17:7d: f6:d5:11:9b:4c:03:33:85:ba:ae:a9:51:f3:3e:ba: 9d:34:aa:ee:94:b4:cd:77:09:46:9a:4c:48:42:77: 7a:0e:b9:f7:83:d7:cf:9d:48:e9:ec:20:39:76:e0: 1d:87:9a:76:c9:99:13:b6:74:bd:b1:0c:0d:9d:85: 7c:14:27:54:5e:8f:a7:3a:32:32:d2:6b:75:b6:88: e6:2b:2f:73:ec:4a:a9:ba:32:6a:81:3f:7a:66:92: a4:20:8e:f0:d5:dd:61:8f:62:66:44:d9:b4:27:33: e7:00:cc:4e:10:16:e0:10:49:cc:66:26:0e:5e:d1: 72:ef:fb:ab:56:96:00:44:4e:f5:1a:67:aa:e1:7b: 4c:48:f7:64:19:97:55:10:a6:79:e4:60:ea:02:5a: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:A0:8E:B2:94:2C:A3:3D:12:9C:D5:EC:03:D0:4B:7E:8A:E6:6E X509v3 Authority Key Identifier: keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f6:34:53:71:bc:e5:4a:28:d8:5e:6d:91:32:38:03:d7:93: ec:57:0b:90:69:71:56:99:1e:3f:f4:68:42:3e:9f:73:ef:0f: 72:0c:53:73:b9:84:36:02:c7:a4:86:b0:22:5c:b4:fb:49:3c: 82:24:6f:b5:4e:27:62:fe:4a:8d:25:ee:b7:ea:05:db:bc:98: 7f:09:df:62:34:e7:0b:5b:c6:87:4b:f2:30:bd:04:7b:3c:7b: 23:c6:a9:a0:0b:dd:b4:a5:84:ad:f7:07:81:5e:d2:1d:53:74: 91:98:b7:19:d3:ba:23:14:64:3b:e9:eb:d9:8b:b0:3e:38:3f: 7b:8a:3d:c7:75:32:b9:32:c8:85:88:83:cf:9d:03:d4:65:e6: 58:3e:f7:aa:34:4b:c5:23:27:fc:6e:38:ea:77:ce:e0:d9:e9: ef:4d:8d:0d:a0:37:8b:b0:5c:65:d5:52:5c:bd:a8:53:f8:fb: b1:72:3c:fc:96:8a:51:81:af:53:ce:75:4c:05:5f:4b:c1:a2: 19:76:c4:ed:d1:79:6d:b1:b3:56:00:58:01:b7:6d:ac:1f:05: 97:05:45:fe:2b:08:e1:48:25:8e:96:ff:80:06:ed:d0:5e:84: 43:fb:e8:96:91:6c:c0:aa:b5:90:5f:6c:6b:59:d1:79:cb:5e: 5e:27:05:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUq8lvKlfuvT469m0JBxI3ulHkL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgw MURGRjk0MTAeFw0yNjA5MjQwOTAyMDFaFw0yNjA5MjUxMjQyMDFaMDMxMTAvBgNV BAMTKDVDMjNBMDhFQjI5NDJDQTMzRDEyOUNENUVDMDNEMDRCN0U4QUU2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58mAxy7WN95l1G9mcER1IjRtw SeV9KHpvWPf7ViP4r4yR3DDxarwQKfZ5iJCXdtIFYHZ30lN+6OTMTvMsZvaYGDlP JPEwCVAb9Yj6wFBN6rFXZJ9+mg4E6d8eRSwtit52unuL3UkXffbVEZtMAzOFuq6p UfM+up00qu6UtM13CUaaTEhCd3oOufeD18+dSOnsIDl24B2HmnbJmRO2dL2xDA2d hXwUJ1Rej6c6MjLSa3W2iOYrL3PsSqm6MmqBP3pmkqQgjvDV3WGPYmZE2bQnM+cA zE4QFuAQScxmJg5e0XLv+6tWlgBETvUaZ6rhe0xI92QZl1UQpnnkYOoCWlU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCOgjrKULKM9EpzV7APQS36K5m4wHwYDVR0j BBgwFoAUQVa+DgNjY6WW4cvDEEiauAHf+UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA3NThmMTUtNWRlOC00ODdkLTk5NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUw MzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgwMURGRjk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTU2QkUwRTAzNjM2M0E1OTZFMUNCQzMxMDQ4OUFCODAxREZG OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlB QjgwMURGRjk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL2NFNxvOVKKNhebZEyOAPXk+xXC5BpcVaZ Hj/0aEI+n3PvD3IMU3O5hDYCx6SGsCJctPtJPIIkb7VOJ2L+So0l7rfqBdu8mH8J 32I05wtbxodL8jC9BHs8eyPGqaAL3bSlhK33B4Fe0h1TdJGYtxnTuiMUZDvp69mL sD44P3uKPcd1MrkyyIWIg8+dA9Rl5lg+96o0S8UjJ/xuOOp3zuDZ6e9NjQ2gN4uw XGXVUly9qFP4+7FyPPyWilGBr1POdUwFX0vBohl2xO3ReW2xs1YAWAG3bawfBZcF Rf4rCOFIJY6W/4AG7dBehEP76JaRbMCqtZBfbGtZ0XnLXl4nBbo= -----END CERTIFICATE-----Generated at Fri Sep 25 04:49:44 2026 by rpki-client