$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: G7krWzRnkSyICHEFX3EYq9hHgxJ+YK/5X1B3FOubWlM= Subject key identifier: 9A:0D:C3:9F:CC:A8:D5:8C:CB:AC:7D:03:46:AA:C1:EE:1C:8B:B8:E2 Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 78D52A031771836B04AFA01B910B94383970460A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 08:26:10 +0000 Manifest this update: Fri 25 Sep 2026 08:21:10 +0000 Manifest next update: Sat 26 Sep 2026 09:37:10 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) 2: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) 3: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: p5gZsnZAQOqYc51OHpZNEJ7iIIt2OEvRWEo0q3znlLE=) 4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d5:2a:03:17:71:83:6b:04:af:a0:1b:91:0b:94:38:39:70:46:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Sep 25 08:21:10 2026 GMT Not After : Sep 26 09:37:10 2026 GMT Subject: CN=9A0DC39FCCA8D58CCBAC7D0346AAC1EE1C8BB8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:56:07:76:08:89:f6:b2:de:05:c5:14:10: 23:e0:7d:a6:10:a8:7d:11:7f:3c:66:d8:d0:30:c4: c4:d5:33:51:d0:f5:8a:39:c1:49:7d:56:5a:ae:e2: f6:0c:48:68:65:08:1f:11:ae:50:3a:8d:a8:0c:36: ee:fb:cc:31:21:5b:1d:f5:65:ba:15:bc:00:b9:57: f1:90:3b:e4:cf:53:b7:5f:37:65:50:02:e5:92:2d: b6:d0:9c:10:ac:65:97:a6:ca:ed:46:bc:47:2a:c5: 2e:34:09:fd:88:7d:35:59:d8:5b:bd:56:59:1b:3c: 7b:0d:b2:2a:7b:7d:8c:49:1c:e2:e3:98:86:c8:21: fe:f2:11:0f:7f:63:d3:a9:0c:46:a8:77:5e:d6:37: b8:fe:b7:ca:53:2a:7c:ba:9d:1d:3e:a3:40:ae:4d: 69:7e:13:29:c8:59:8e:87:a6:e6:7c:6c:51:79:29: 0c:aa:05:67:8c:c2:97:9a:ae:17:00:69:ce:44:86: ee:2b:28:0c:ac:4b:49:5e:75:b5:ab:cb:d9:38:96: c0:69:55:5a:87:60:f8:b5:b2:eb:e4:86:cc:79:63: 7f:e5:5f:11:d4:78:f9:39:5e:d8:be:00:93:b9:44: 8f:33:8d:c8:81:d4:e7:72:a3:e1:01:50:b3:af:1a: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0D:C3:9F:CC:A8:D5:8C:CB:AC:7D:03:46:AA:C1:EE:1C:8B:B8:E2 X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a1:ff:e5:59:27:c3:89:43:ab:50:a1:e5:09:c8:6d:7e:ec: b2:84:4c:78:d4:df:a2:32:42:ac:bb:f2:3e:64:00:d7:96:c3: e8:b9:30:e5:97:aa:69:0d:05:58:85:f6:9c:54:70:58:78:f9: d5:b3:fd:6b:4d:5e:ef:a7:b6:e5:7b:12:10:52:4a:d4:d5:9a: 2a:3a:19:79:83:1f:a4:ba:40:43:2e:db:da:63:5a:34:cc:fd: 2b:9e:7d:7e:8e:b6:4e:83:1e:87:ae:05:21:1e:7f:68:31:44: 67:9e:d5:af:d6:2c:42:be:72:3d:dd:72:38:02:aa:0e:a6:f8: 20:dd:54:4b:11:67:57:d2:2e:9b:4d:a8:6f:3f:58:57:87:38: 3f:da:9c:ca:f8:cb:ba:4e:39:82:23:72:e4:88:d0:eb:1d:e1: f8:fc:7b:e8:34:5a:56:81:71:69:11:92:7a:49:12:90:62:60: bf:12:4b:6e:85:fc:ca:2c:3b:e0:6c:71:60:a6:13:fd:27:2b: 84:0e:db:0e:32:61:60:0f:6e:b6:3c:ac:30:f9:bc:03:d1:59: 80:bd:03:26:83:93:a0:f2:10:0d:55:2a:aa:59:4b:11:db:87: a5:e3:f7:ea:28:6a:4a:5e:5b:15:27:8d:74:52:89:d3:49:4b: ee:6d:cc:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNUqAxdxg2sEr6AbkQuUODlwRgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA5MjUwODIxMTBaFw0yNjA5MjYwOTM3MTBaMDMxMTAvBgNV BAMTKDlBMERDMzlGQ0NBOEQ1OENDQkFDN0QwMzQ2QUFDMUVFMUM4QkI4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHFYHdgiJ9rLeBcUUECPgfaYQ qH0Rfzxm2NAwxMTVM1HQ9Yo5wUl9Vlqu4vYMSGhlCB8RrlA6jagMNu77zDEhWx31 ZboVvAC5V/GQO+TPU7dfN2VQAuWSLbbQnBCsZZemyu1GvEcqxS40Cf2IfTVZ2Fu9 VlkbPHsNsip7fYxJHOLjmIbIIf7yEQ9/Y9OpDEaod17WN7j+t8pTKny6nR0+o0Cu TWl+EynIWY6HpuZ8bFF5KQyqBWeMwpearhcAac5Ehu4rKAysS0ledbWry9k4lsBp VVqHYPi1suvkhsx5Y3/lXxHUePk5Xti+AJO5RI8zjciB1Odyo+EBULOvGiG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmg3Dn8yo1YzLrH0DRqrB7hyLuOIwHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6h/+VZJ8OJQ6tQoeUJyG1+7LKETHjU36Iy Qqy78j5kANeWw+i5MOWXqmkNBViF9pxUcFh4+dWz/WtNXu+ntuV7EhBSStTVmio6 GXmDH6S6QEMu29pjWjTM/SuefX6Otk6DHoeuBSEef2gxRGee1a/WLEK+cj3dcjgC qg6m+CDdVEsRZ1fSLptNqG8/WFeHOD/anMr4y7pOOYIjcuSI0Osd4fj8e+g0WlaB cWkRknpJEpBiYL8SS26F/MosO+BscWCmE/0nK4QO2w4yYWAPbrY8rDD5vAPRWYC9 AyaDk6DyEA1VKqpZSxHbh6Xj9+ooakpeWxUnjXRSidNJS+5tzE4= -----END CERTIFICATE-----Generated at Fri Sep 25 12:50:15 2026 by rpki-client