$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft File: 04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json) Hash identifier: qwmrdZ9sGpAKHw3M3B/d1/PDXIjo989FkJkoLpZ42Ms= Subject key identifier: C9:B5:F2:67:13:00:3D:98:A2:EF:0D:48:96:D7:E9:23:3E:3E:9B:26 Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 Certificate issuer: /CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Certificate serial: 500781D57F75A9116344F6C2C89599E427CBCCB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:40:08 +0000 Manifest this update: Thu 24 Sep 2026 03:35:08 +0000 Manifest next update: Fri 25 Sep 2026 07:08:08 +0000 Files and hashes: 1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: E3st3nbQB8wSnEdEtau2IvWS934avLCIHWk9tNmJ/xQ=) 2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=) 3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:07:81:d5:7f:75:a9:11:63:44:f6:c2:c8:95:99:e4:27:cb:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Validity Not Before: Sep 24 03:35:08 2026 GMT Not After : Sep 25 07:08:08 2026 GMT Subject: CN=C9B5F26713003D98A2EF0D4896D7E9233E3E9B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:bd:13:dc:c1:dc:e4:01:e4:8c:87:6e:9a: ec:4f:8c:cf:84:52:60:02:c8:98:d1:2d:ff:61:36: 2f:dc:3d:0f:87:2c:b0:65:8a:9c:6c:be:48:18:58: 43:5a:55:6b:a5:5a:9d:4c:4a:9b:0c:67:84:1a:34: f1:23:d8:68:89:2a:b5:63:83:b1:9d:33:62:d5:44: b8:a0:f5:8c:05:ca:1d:06:ae:de:3e:b3:30:e0:46: af:1e:d2:79:89:ee:57:a5:7d:b7:ba:7a:70:a9:06: d0:fe:18:a4:04:20:58:26:58:a3:3b:0e:58:93:36: 3e:f1:df:48:5b:de:d0:75:34:9e:5c:96:88:e8:8b: 66:82:75:53:fd:81:5c:46:2d:e8:7a:d5:41:00:90: 03:10:5e:aa:91:86:a1:08:cf:74:90:49:7e:6c:b8: da:30:6b:d9:df:7e:36:34:4b:d1:1b:c6:1f:e2:e3: 2f:22:2a:52:b5:45:f6:5c:3f:2f:9f:36:d5:23:3e: 69:b2:bb:96:8e:6a:a2:b2:49:26:d8:de:2e:59:3c: 8a:d3:c2:9f:33:02:aa:ca:3c:5d:87:81:03:32:4c: 03:b7:6f:f5:41:e4:1d:2b:f7:c4:21:64:48:af:d8: d0:87:c8:3c:84:13:e3:68:11:c0:b9:dc:18:a3:3b: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B5:F2:67:13:00:3D:98:A2:EF:0D:48:96:D7:E9:23:3E:3E:9B:26 X509v3 Authority Key Identifier: keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:08:ec:66:79:9f:60:f5:c2:9c:fd:fe:61:0d:86:c8:52:b7: 68:b2:99:a6:e0:6c:6d:a3:bb:a4:bb:50:bb:00:6a:44:f7:a3: 61:c3:73:7c:46:40:76:04:45:19:28:c9:0a:a0:91:90:e8:64: 0b:9e:b5:1e:e5:7b:ba:28:d8:b8:19:f9:11:35:24:d6:1e:84: 06:78:44:54:a0:97:ce:91:3b:81:c8:7b:e2:dd:06:47:bb:ef: a6:08:e6:30:8a:6a:86:fa:0c:23:e8:b0:71:43:93:0a:23:c5: 7e:ba:7a:7e:b2:bc:3a:c4:44:49:1b:47:de:35:81:70:11:e9: 6b:9e:aa:59:38:f1:e4:a9:19:03:94:e0:00:23:03:ce:eb:67: aa:f6:65:09:d1:cb:4b:60:5c:ff:c7:67:ca:6b:9f:49:ea:6e: 46:7d:7b:ae:43:44:05:be:b4:13:85:cb:b9:2d:40:56:28:b5: f5:d0:73:78:d3:37:97:ed:e7:15:01:79:9f:58:75:a0:fb:30: 99:b5:2a:f5:0b:5c:b7:82:69:30:f1:ad:1f:6f:f9:ba:81:60: b0:c3:05:45:72:ca:63:ed:42:86:f9:34:1f:58:84:6f:f5:43: e4:68:e5:07:c4:4e:3f:d1:d0:dd:a6:a0:1a:ba:2c:98:f5:f5: fe:81:15:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAeB1X91qRFjRPbCyJWZ5CfLzLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRENTIwODNEODI3MjFGNjE2MzRFNjYyOUUxNkM3QzdB ODcwQjlGNTAeFw0yNjA5MjQwMzM1MDhaFw0yNjA5MjUwNzA4MDhaMDMxMTAvBgNV BAMTKEM5QjVGMjY3MTMwMDNEOThBMkVGMEQ0ODk2RDdFOTIzM0UzRTlCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRxb0T3MHc5AHkjIdumuxPjM+E UmACyJjRLf9hNi/cPQ+HLLBlipxsvkgYWENaVWulWp1MSpsMZ4QaNPEj2GiJKrVj g7GdM2LVRLig9YwFyh0Grt4+szDgRq8e0nmJ7lelfbe6enCpBtD+GKQEIFgmWKM7 DliTNj7x30hb3tB1NJ5clojoi2aCdVP9gVxGLeh61UEAkAMQXqqRhqEIz3SQSX5s uNowa9nffjY0S9Ebxh/i4y8iKlK1RfZcPy+fNtUjPmmyu5aOaqKySSbY3i5ZPIrT wp8zAqrKPF2HgQMyTAO3b/VB5B0r98QhZEiv2NCHyDyEE+NoEcC53BijOxP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUybXyZxMAPZii7w1IltfpIz4+myYwHwYDVR0j BBgwFoAUBNUgg9gnIfYWNOZinhbHx6hwufUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjI0M2EtNzYzZC00NGI4LTk4N2QtMDhiZDBkYTllZTNkLzAvMDRENTIwODNE ODI3MjFGNjE2MzRFNjYyOUUxNkM3QzdBODcwQjlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEQ1MjA4M0Q4MjcyMUY2MTYzNEU2NjI5RTE2QzdDN0E4NzBC OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvMDRENTIwODNEODI3MjFGNjE2MzRFNjYyOUUxNkM3 QzdBODcwQjlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsI7GZ5n2D1wpz9/mENhshSt2iymabgbG2j u6S7ULsAakT3o2HDc3xGQHYERRkoyQqgkZDoZAuetR7le7oo2LgZ+RE1JNYehAZ4 RFSgl86RO4HIe+LdBke776YI5jCKaob6DCPosHFDkwojxX66en6yvDrEREkbR941 gXAR6Wueqlk48eSpGQOU4AAjA87rZ6r2ZQnRy0tgXP/HZ8prn0nqbkZ9e65DRAW+ tBOFy7ktQFYotfXQc3jTN5ft5xUBeZ9YdaD7MJm1KvULXLeCaTDxrR9v+bqBYLDD BUVyymPtQob5NB9YhG/1Q+Ro5QfETj/R0N2moBq6LJj19f6BFQU= -----END CERTIFICATE-----Generated at Thu Sep 24 20:58:44 2026 by rpki-client