$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft File: 44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json) Hash identifier: IzifyfQpIMSuo4zdCzsnZtSNSnU4fFWsH6iuNpRNYzI= Subject key identifier: 88:6E:83:52:D4:2A:99:78:16:30:39:18:9B:FF:51:D2:CE:90:82:24 Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B Certificate issuer: /CN=44428DF327C8FF800708E2196181BCB000E14F9B Certificate serial: 77A3B201C9C5DB190B7F6194E03F08E8747733B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:26:31 +0000 Manifest this update: Wed 23 Sep 2026 12:21:31 +0000 Manifest next update: Thu 24 Sep 2026 13:51:31 +0000 Files and hashes: 1: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: TnwPze263iDkpt6KJRpwDasaqU1/d86H/21ajBwJ90Q=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a3:b2:01:c9:c5:db:19:0b:7f:61:94:e0:3f:08:e8:74:77:33:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B Validity Not Before: Sep 23 12:21:31 2026 GMT Not After : Sep 24 13:51:31 2026 GMT Subject: CN=886E8352D42A9978163039189BFF51D2CE908224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:30:17:17:dc:9f:73:14:a0:73:21:d0:b0: 66:df:9d:fd:83:a5:69:3b:a0:27:28:3a:ed:ff:4a: a3:59:6a:fe:cd:12:4a:e1:e6:08:56:d2:38:65:39: 64:41:89:24:3e:78:7f:f2:ca:97:6b:dd:2f:24:5c: 77:9b:83:c7:44:ab:a1:c2:0c:06:31:0c:9b:3e:aa: bf:2b:1e:3e:63:32:4f:f9:56:a8:17:7f:60:d8:37: 98:c6:00:c1:7b:72:97:e0:cc:08:49:be:a8:f9:31: da:0d:8c:a4:94:2d:1a:87:48:b8:94:81:0a:02:7f: a1:ba:25:88:db:91:a4:5f:42:45:bc:6a:c8:d8:72: 1a:99:6f:34:70:86:20:12:a9:36:a0:38:74:7b:01: e8:5d:a3:ad:78:55:c7:04:2b:6d:95:49:5e:97:4f: 9a:f0:b5:1f:c6:4a:ed:76:d3:60:43:95:20:6b:03: 75:5d:1d:52:20:1a:7d:54:1d:e6:9f:78:1b:45:7a: ea:85:50:32:8b:9e:1b:94:b4:5e:e7:4d:96:85:0e: b5:e3:40:a4:7b:41:48:ee:96:65:fc:ce:ab:c7:9d: 5f:2e:63:4d:7e:75:3a:1e:3a:e4:c9:a0:01:d6:65: 25:f4:44:b1:e9:c5:ea:c2:ea:e7:89:f2:6d:bf:83: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6E:83:52:D4:2A:99:78:16:30:39:18:9B:FF:51:D2:CE:90:82:24 X509v3 Authority Key Identifier: keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c0:47:bb:75:1c:53:4a:e9:bf:9f:b8:cb:3d:4f:fc:a1:f4: f9:47:97:b1:db:5c:b4:6b:2a:b4:57:30:37:0c:53:b9:86:26: 87:1f:70:82:d0:cd:24:b4:53:74:e7:16:8d:bc:cc:81:a4:12: 39:2b:51:fa:27:0f:58:68:ae:5d:0a:b6:f9:a3:00:ce:b0:1a: 99:99:f1:e7:5b:fc:53:95:68:9f:44:ec:c4:c8:56:4b:8c:0e: 43:19:3f:6b:7a:86:7b:a5:66:09:63:2f:e2:b4:55:11:cf:cd: d3:1c:ea:43:47:12:91:58:d1:0e:7b:11:30:45:d7:e1:3c:57: a6:c2:e0:b9:1b:8b:e7:51:4d:e1:85:07:b4:be:2c:b3:82:a1: 31:26:49:03:76:b7:0f:d7:08:3e:98:e5:53:46:8c:d7:1d:81: 31:c3:aa:bc:33:38:9a:25:d6:17:ad:73:0a:ca:55:35:a4:21: 74:df:09:69:61:13:66:f5:80:ea:df:96:fc:f3:2d:19:3e:98: 31:d5:de:60:7f:90:dd:19:fc:54:91:61:73:cf:9f:48:c9:9d: a8:0c:6a:70:6b:13:bd:c8:73:8d:c0:67:9c:64:87:c7:65:15: 13:97:3d:f0:b0:05:75:dc:4b:b2:5d:a7:67:e6:68:e8:ac:0d: f8:61:1f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6OyAcnF2xkLf2GU4D8I6HR3M7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAw MEUxNEY5QjAeFw0yNjA5MjMxMjIxMzFaFw0yNjA5MjQxMzUxMzFaMDMxMTAvBgNV BAMTKDg4NkU4MzUyRDQyQTk5NzgxNjMwMzkxODlCRkY1MUQyQ0U5MDgyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2TAXF9yfcxSgcyHQsGbfnf2D pWk7oCcoOu3/SqNZav7NEkrh5ghW0jhlOWRBiSQ+eH/yypdr3S8kXHebg8dEq6HC DAYxDJs+qr8rHj5jMk/5VqgXf2DYN5jGAMF7cpfgzAhJvqj5MdoNjKSULRqHSLiU gQoCf6G6JYjbkaRfQkW8asjYchqZbzRwhiASqTagOHR7Aehdo614VccEK22VSV6X T5rwtR/GSu1202BDlSBrA3VdHVIgGn1UHeafeBtFeuqFUDKLnhuUtF7nTZaFDrXj QKR7QUjulmX8zqvHnV8uY01+dToeOuTJoAHWZSX0RLHpxerC6ueJ8m2/gyeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiG6DUtQqmXgWMDkYm/9R0s6QgiQwHwYDVR0j BBgwFoAUREKN8yfI/4AHCOIZYYG8sADhT5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMy N0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAwMEUxNEY5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDQyOERGMzI3QzhGRjgwMDcwOEUyMTk2MTgxQkNCMDAwRTE0 RjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJD QjAwMEUxNEY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLAR7t1HFNK6b+fuMs9T/yh9PlHl7HbXLRr KrRXMDcMU7mGJocfcILQzSS0U3TnFo28zIGkEjkrUfonD1horl0KtvmjAM6wGpmZ 8edb/FOVaJ9E7MTIVkuMDkMZP2t6hnulZgljL+K0VRHPzdMc6kNHEpFY0Q57ETBF 1+E8V6bC4Lkbi+dRTeGFB7S+LLOCoTEmSQN2tw/XCD6Y5VNGjNcdgTHDqrwzOJol 1hetcwrKVTWkIXTfCWlhE2b1gOrflvzzLRk+mDHV3mB/kN0Z/FSRYXPPn0jJnagM anBrE73Ic43AZ5xkh8dlFROXPfCwBXXcS7Jdp2fmaOisDfhhHyo= -----END CERTIFICATE-----Generated at Thu Sep 24 00:53:35 2026 by rpki-client