$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json) Hash identifier: hJcGDH8lj133lxkmVTDUBe8wFmEcaQ3MBTC7enBapYQ= Subject key identifier: 42:53:15:76:44:85:B0:17:DA:6F:13:D6:F9:A1:BF:30:F8:93:90:3C Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Certificate serial: 2CF642605380E1200052153A0520392AD500CEB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:17:25 +0000 Manifest this update: Thu 24 Sep 2026 01:12:25 +0000 Manifest next update: Fri 25 Sep 2026 03:36:25 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=) 2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: k3LcEFqW3OGdd5tcpndHgnOGwgDn5hOZHg/jyseHlTk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f6:42:60:53:80:e1:20:00:52:15:3a:05:20:39:2a:d5:00:ce:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36 Validity Not Before: Sep 24 01:12:25 2026 GMT Not After : Sep 25 03:36:25 2026 GMT Subject: CN=425315764485B017DA6F13D6F9A1BF30F893903C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:41:ca:7e:03:65:3a:41:f4:b4:87:23:e7: 44:1a:02:dc:32:f5:24:84:ec:07:23:4f:3b:a8:ee: 4e:ed:6e:42:4b:81:75:2a:8f:61:c4:87:d3:d7:66: 41:8c:db:f7:21:2c:73:78:6e:a6:b8:6e:22:81:e1: 62:c1:87:60:14:5d:ba:25:6c:4a:eb:c5:45:50:84: 44:1f:f1:12:e8:8e:96:7b:f0:49:91:f1:81:7b:ab: f2:bf:2e:74:25:e6:0b:e1:c6:4e:58:78:f9:e4:0f: ce:79:a4:f8:fb:25:62:94:ef:32:15:d8:c7:78:85: 91:63:01:3e:4a:c3:69:6d:f6:26:e0:cb:79:36:49: a0:6e:a2:92:03:57:f5:15:e0:9d:95:97:d5:b1:30: 1d:41:ee:26:ba:3e:57:50:18:23:8b:d1:1c:02:09: 02:e9:f7:2a:23:67:66:d1:fd:0f:de:01:09:7b:88: 4d:d4:aa:f7:fb:00:90:ae:85:4b:01:45:79:15:bf: 3e:a7:de:3f:86:fc:58:ba:a2:52:ad:58:1f:bc:d7: 46:8c:1c:d5:3a:3b:1d:7e:14:75:8a:de:ec:83:31: 87:c3:1b:78:fb:4a:61:b5:0a:18:66:fd:02:20:17: 3f:93:76:b4:8c:74:ec:08:67:fd:3b:5a:dd:51:f7: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:15:76:44:85:B0:17:DA:6F:13:D6:F9:A1:BF:30:F8:93:90:3C X509v3 Authority Key Identifier: keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:90:61:1c:48:3d:9c:f6:4a:f2:13:b7:c6:ab:88:35:c4:99: 71:4f:ab:32:1c:ec:36:93:d5:00:2a:82:06:6c:ee:44:db:56: 31:8c:17:a4:32:f8:df:7a:c1:3c:3d:9b:60:81:fb:f1:1c:1e: ac:73:ff:27:64:3a:d2:38:18:65:6f:31:58:1f:d2:23:58:d6: e9:c6:5c:86:83:48:42:5b:1f:b1:af:dc:80:df:13:46:b4:ab: ea:26:39:a2:42:81:91:6b:8d:4b:b9:e6:85:2d:34:36:72:fa: de:6f:dc:22:21:c5:9c:96:ae:38:f9:84:6b:35:e5:d8:18:46: 98:68:1e:dc:3b:97:5d:a8:4b:d3:72:c7:96:75:d7:8b:85:2b: 4f:0b:96:8f:9c:91:9e:95:43:7f:74:19:ec:bd:ae:a3:d5:eb: b1:be:e9:cb:91:79:cf:b9:ee:26:a0:03:f1:5f:32:2c:49:14: 85:ae:60:9f:63:b6:38:0b:f7:1d:92:6e:ac:71:a9:96:9d:ba: ff:09:87:84:99:18:5f:94:c5:be:da:01:77:e4:98:5e:fd:f9: bb:90:a9:c1:fc:ee:78:a5:2a:a5:f5:23:f5:d7:19:41:d5:66: 90:3c:53:34:90:e8:96:f3:27:8f:b1:e7:93:53:e0:fc:a1:96: 87:61:76:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPZCYFOA4SAAUhU6BSA5KtUAzrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5 NUZBRUMzNjAeFw0yNjA5MjQwMTEyMjVaFw0yNjA5MjUwMzM2MjVaMDMxMTAvBgNV BAMTKDQyNTMxNTc2NDQ4NUIwMTdEQTZGMTNENkY5QTFCRjMwRjg5MzkwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2EHKfgNlOkH0tIcj50QaAtwy 9SSE7AcjTzuo7k7tbkJLgXUqj2HEh9PXZkGM2/chLHN4bqa4biKB4WLBh2AUXbol bErrxUVQhEQf8RLojpZ78EmR8YF7q/K/LnQl5gvhxk5YePnkD855pPj7JWKU7zIV 2Md4hZFjAT5Kw2lt9ibgy3k2SaBuopIDV/UV4J2Vl9WxMB1B7ia6PldQGCOL0RwC CQLp9yojZ2bR/Q/eAQl7iE3Uqvf7AJCuhUsBRXkVvz6n3j+G/Fi6olKtWB+810aM HNU6Ox1+FHWK3uyDMYfDG3j7SmG1Chhm/QIgFz+TdrSMdOwIZ/07Wt1R92xzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlMVdkSFsBfabxPW+aG/MPiTkDwwHwYDVR0j BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+QYRxIPZz2SvITt8ariDXEmXFPqzIc7DaT 1QAqggZs7kTbVjGMF6Qy+N96wTw9m2CB+/EcHqxz/ydkOtI4GGVvMVgf0iNY1unG XIaDSEJbH7Gv3IDfE0a0q+omOaJCgZFrjUu55oUtNDZy+t5v3CIhxZyWrjj5hGs1 5dgYRphoHtw7l12oS9Nyx5Z114uFK08Llo+ckZ6VQ390Gey9rqPV67G+6cuRec+5 7iagA/FfMixJFIWuYJ9jtjgL9x2SbqxxqZaduv8Jh4SZGF+Uxb7aAXfkmF79+buQ qcH87nilKqX1I/XXGUHVZpA8UzSQ6JbzJ4+x55NT4Pyhlodhdv4= -----END CERTIFICATE-----Generated at Thu Sep 24 08:39:29 2026 by rpki-client