$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft File: C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft (raw, json) Hash identifier: MSD8SQY4g9SyontFs9UdLGdOUeMni4pMel9moTmqlYU= Subject key identifier: E9:6D:7C:94:E5:81:A6:31:37:AC:95:C7:5B:22:D2:88:26:D4:DA:56 Authority key identifier: C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65 Certificate issuer: /CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565 Certificate serial: 1BD74640371A95581DA7AFD39D745DD52FBDAAEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:36:25 +0000 Manifest this update: Wed 23 Sep 2026 20:31:25 +0000 Manifest next update: Thu 24 Sep 2026 21:49:25 +0000 Files and hashes: 1: C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl (hash: w0KC5gs3ev3wnkFHpEpV6O+WvIi3VpmWNOiR40IEbG4=) 2: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: ZC4+oqUfm9Dn/bzPBC5/o0iqNV8btw9KufEPtcg/nWs=) 3: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: p+CL8hwVFzphQY/nfttVe+5YPaPbL2hnFsuYyuP2nzU=) 4: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: Xtze3enD88H0jWQr3pzCrNkQCDOxQucFqEYtQB78EWg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d7:46:40:37:1a:95:58:1d:a7:af:d3:9d:74:5d:d5:2f:bd:aa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565 Validity Not Before: Sep 23 20:31:25 2026 GMT Not After : Sep 24 21:49:25 2026 GMT Subject: CN=E96D7C94E581A63137AC95C75B22D28826D4DA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:61:a4:1f:bd:b7:4a:7e:88:17:a8:ea:fb: ed:d9:6c:64:69:14:65:b8:c9:25:96:76:eb:12:c8: 6d:19:42:02:37:55:15:dc:68:49:a1:45:cf:9b:c0: ff:62:fc:85:95:83:44:d6:44:a1:dc:ca:54:b4:4b: 68:96:14:e6:a3:ba:4c:78:de:02:6f:c1:03:3b:a9: 2d:fd:b4:b9:36:39:f4:3b:03:6c:ed:f3:37:91:c9: d8:73:66:2e:08:69:87:ae:aa:8b:e5:e2:7c:05:8d: 54:f5:40:1e:bc:98:54:20:04:d4:c3:62:cc:7c:f1: 8c:06:cd:f3:62:0a:5e:d1:c5:4f:f6:6e:f7:1b:53: a2:6a:11:53:89:be:43:11:a4:6e:e9:80:48:ba:12: 43:31:c6:36:60:cd:6b:44:30:16:2e:7c:e4:f1:97: ed:70:40:92:82:b4:1d:23:af:c1:fd:a5:05:67:10: ce:ad:18:41:93:8d:4e:5a:be:2f:ca:b0:f3:77:0e: 06:67:92:63:8b:34:92:51:76:67:96:ad:a1:6b:fd: 30:4d:27:00:17:09:cf:ab:b4:df:50:7c:c0:dd:89: c7:20:36:5b:87:10:e0:be:51:34:78:cb:42:80:9d: fd:65:b9:e6:5e:f8:07:32:16:b0:ff:1c:ad:33:80: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:7C:94:E5:81:A6:31:37:AC:95:C7:5B:22:D2:88:26:D4:DA:56 X509v3 Authority Key Identifier: keyid:C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:27:0f:8f:7b:09:b0:74:9c:c4:3f:37:9d:19:54:84:a9:97: 65:da:5c:da:cd:87:71:05:57:c7:b8:9b:6b:f8:c7:de:99:fb: d1:68:c6:13:55:2c:41:c8:20:3e:76:02:91:24:2c:48:ac:19: 92:8a:16:c7:69:7a:c0:98:10:22:62:c6:58:03:49:36:c5:c8: 01:95:31:64:15:97:5a:82:d7:aa:39:92:09:ff:74:ba:7c:8c: bf:9d:1d:04:cd:09:02:65:3d:4c:b4:96:c8:e7:7c:07:e6:a9: 2e:4b:52:09:88:e0:5b:5e:79:bc:7d:70:71:b3:ea:9b:cf:50: c5:68:9d:a7:29:0e:ef:1d:31:57:b1:bb:15:ac:b8:48:2f:5a: 33:2f:68:95:7a:2a:9f:e3:c2:0f:4a:35:36:ce:5e:af:29:a2: 39:29:3f:da:b1:25:dd:ee:ff:c2:5d:a5:5b:14:56:f4:3c:3f: 9e:4f:d2:40:bc:7b:b1:a7:07:5d:93:63:7c:49:42:c4:23:09: 2e:69:4f:d8:5e:e1:1f:15:08:a9:9d:54:d5:0a:60:36:5c:cc: 36:21:6f:04:c4:f5:96:a9:f3:b8:e5:b4:fa:a8:64:6f:fc:c8: c3:1a:b6:9b:b2:60:2b:07:83:a1:4a:46:67:83:42:55:25:07: e5:fa:c6:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9dGQDcalVgdp6/TnXRd1S+9quowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0RTc1QjJEOTYzMEY0NjIyQ0Q0Qzc5QTQwRUNFNjUw QTNDODU2NTAeFw0yNjA5MjMyMDMxMjVaFw0yNjA5MjQyMTQ5MjVaMDMxMTAvBgNV BAMTKEU5NkQ3Qzk0RTU4MUE2MzEzN0FDOTVDNzVCMjJEMjg4MjZENERBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom2GkH723Sn6IF6jq++3ZbGRp FGW4ySWWdusSyG0ZQgI3VRXcaEmhRc+bwP9i/IWVg0TWRKHcylS0S2iWFOajukx4 3gJvwQM7qS39tLk2OfQ7A2zt8zeRydhzZi4IaYeuqovl4nwFjVT1QB68mFQgBNTD Ysx88YwGzfNiCl7RxU/2bvcbU6JqEVOJvkMRpG7pgEi6EkMxxjZgzWtEMBYufOTx l+1wQJKCtB0jr8H9pQVnEM6tGEGTjU5avi/KsPN3DgZnkmOLNJJRdmeWraFr/TBN JwAXCc+rtN9QfMDdiccgNluHEOC+UTR4y0KAnf1lueZe+AcyFrD/HK0zgG/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6W18lOWBpjE3rJXHWyLSiCbU2lYwHwYDVR0j BBgwFoAUxE51stljD0YizUx5pA7OZQo8hWUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFiYjY2ZDAtYTkzMy00MTEwLWEwOTMtMDM4ZGE5ZWM4YjdlLzAvQzQ0RTc1QjJE OTYzMEY0NjIyQ0Q0Qzc5QTQwRUNFNjUwQTNDODU2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDRFNzVCMkQ5NjMwRjQ2MjJDRDRDNzlBNDBFQ0U2NTBBM0M4 NTY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvQzQ0RTc1QjJEOTYzMEY0NjIyQ0Q0Qzc5QTQwRUNF NjUwQTNDODU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEnD497CbB0nMQ/N50ZVISpl2XaXNrNh3EF V8e4m2v4x96Z+9FoxhNVLEHIID52ApEkLEisGZKKFsdpesCYECJixlgDSTbFyAGV MWQVl1qC16o5kgn/dLp8jL+dHQTNCQJlPUy0lsjnfAfmqS5LUgmI4Fteebx9cHGz 6pvPUMVonacpDu8dMVexuxWsuEgvWjMvaJV6Kp/jwg9KNTbOXq8pojkpP9qxJd3u /8JdpVsUVvQ8P55P0kC8e7GnB12TY3xJQsQjCS5pT9he4R8VCKmdVNUKYDZczDYh bwTE9Zap87jltPqoZG/8yMMatpuyYCsHg6FKRmeDQlUlB+X6xpg= -----END CERTIFICATE-----Generated at Thu Sep 24 10:03:29 2026 by rpki-client