$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft File: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft (raw, json) Hash identifier: j18jGQ7ZUYV+f7Ms5p5ybbwp8uMLtniCwjrmwpkwWss= Subject key identifier: 44:FA:EE:A6:E2:94:72:85:75:08:A4:28:B6:98:F5:ED:29:CD:A6:7D Authority key identifier: 44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38 Certificate issuer: /CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338 Certificate serial: 2642BFA442516CB881468885665189C56DB6B992 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 05:01:50 +0000 Manifest this update: Thu 24 Sep 2026 04:56:50 +0000 Manifest next update: Fri 25 Sep 2026 07:52:50 +0000 Files and hashes: 1: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl (hash: DWmu2hkibOD3QH1KFSsb6Fe+/bB/aC6l4+Lxyrtx0B8=) 2: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: d1AieqPDTSFuqQUNZRSOLnDH+s/AlA829gDqC0nNU8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:42:bf:a4:42:51:6c:b8:81:46:88:85:66:51:89:c5:6d:b6:b9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338 Validity Not Before: Sep 24 04:56:50 2026 GMT Not After : Sep 25 07:52:50 2026 GMT Subject: CN=44FAEEA6E29472857508A428B698F5ED29CDA67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:6a:03:3f:2a:77:4b:41:23:19:d0:1f:72: 9a:07:15:88:d2:d9:de:da:3c:c5:9a:bc:32:1f:40: 08:60:7b:73:3a:1d:cc:54:e5:6a:1d:52:94:da:d9: d1:fa:7b:5e:97:32:21:8d:49:92:7c:0a:4c:8a:cf: bd:ff:0d:17:b2:bc:66:62:cd:a0:ae:44:f5:0a:47: 06:27:af:1e:76:a5:b0:ea:5d:55:59:8f:c8:a8:85: 52:ac:91:fe:1b:c7:86:60:c0:71:6b:b2:d7:e5:e9: f9:dc:14:e3:26:7b:12:b6:f2:09:b5:b4:f4:34:9b: d7:ea:f8:4d:1f:32:5c:bf:9a:3c:2b:66:38:bb:5b: ab:8d:78:89:a4:24:dc:75:1d:5e:2d:32:1f:ac:63: b4:3f:5c:d3:66:1c:d4:52:91:84:e9:5a:86:44:b9: 42:83:c9:80:1b:8d:ac:e7:b2:96:1a:e4:f0:c6:02: e4:56:78:24:df:d4:3d:ad:20:af:22:94:54:5a:2a: 94:64:be:84:e3:02:94:38:61:72:ba:a7:f9:67:7c: fe:dc:3d:37:22:cc:8d:52:fe:62:6b:e0:19:39:56: 4a:94:7d:06:60:ab:33:e6:e7:9e:60:44:29:73:9d: 8c:86:22:32:ab:39:ab:ba:c0:a6:82:19:e0:ba:d8: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FA:EE:A6:E2:94:72:85:75:08:A4:28:B6:98:F5:ED:29:CD:A6:7D X509v3 Authority Key Identifier: keyid:44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:bf:d5:16:8a:83:bb:ce:42:5a:5e:98:98:db:eb:63:88:af: d1:7a:9d:df:7e:68:dd:72:79:a1:f9:03:36:ea:93:2f:7e:9b: b8:98:1d:24:07:23:f9:f0:72:c6:27:9c:36:9d:48:3e:32:3b: e6:ea:f5:dd:b1:25:d4:52:ae:78:63:1c:32:89:50:4b:5e:01: 36:71:62:99:2b:1e:3f:9e:a9:ed:57:19:b2:fd:d7:68:f4:22: ce:9f:82:2e:da:68:4e:12:8b:26:30:3c:06:e9:c2:8c:20:d3: d8:d6:bf:6e:c2:99:ae:ab:48:e6:e6:fe:80:93:41:2d:4a:c4: a1:08:2d:f7:de:e9:71:27:a8:3d:84:d6:b9:8b:14:57:d9:e6: 30:40:8a:80:14:b3:42:0d:cb:52:54:8d:d2:18:0f:41:e6:f7: f6:bc:cf:fa:19:94:de:ee:d6:e0:31:d3:07:b4:64:bf:4c:4a: 00:31:91:f8:fa:75:2b:a5:f7:ed:66:73:c7:fe:1b:6c:0b:28: 53:1a:66:89:d7:5f:9c:f9:03:61:44:62:b1:32:33:fe:2a:b4: bf:77:e1:8e:1c:f7:71:1c:fb:06:55:81:e0:e4:13:df:a9:d6: 84:23:6e:20:ac:3c:f9:34:1d:17:0c:e0:a9:44:b8:0e:6a:5e: e3:b2:9a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkK/pEJRbLiBRoiFZlGJxW22uZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ1RkUwRjM2M0FCMzA2RTUzRjFFMkNEOTM5RUZEOEM4 QTEwMjMzODAeFw0yNjA5MjQwNDU2NTBaFw0yNjA5MjUwNzUyNTBaMDMxMTAvBgNV BAMTKDQ0RkFFRUE2RTI5NDcyODU3NTA4QTQyOEI2OThGNUVEMjlDREE2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyj2oDPyp3S0EjGdAfcpoHFYjS 2d7aPMWavDIfQAhge3M6HcxU5WodUpTa2dH6e16XMiGNSZJ8CkyKz73/DReyvGZi zaCuRPUKRwYnrx52pbDqXVVZj8iohVKskf4bx4ZgwHFrstfl6fncFOMmexK28gm1 tPQ0m9fq+E0fMly/mjwrZji7W6uNeImkJNx1HV4tMh+sY7Q/XNNmHNRSkYTpWoZE uUKDyYAbjaznspYa5PDGAuRWeCTf1D2tIK8ilFRaKpRkvoTjApQ4YXK6p/lnfP7c PTcizI1S/mJr4Bk5VkqUfQZgqzPm555gRClznYyGIjKrOau6wKaCGeC62M3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPrupuKUcoV1CKQotpj17SnNpn0wHwYDVR0j BBgwFoAURF/g82OrMG5T8eLNk579jIoQIzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGViZjYzZWQtZDQ1MC00NzdlLWIzMWItYWY5MmIxNzI2ZDJlLzAvNDQ1RkUwRjM2 M0FCMzA2RTUzRjFFMkNEOTM5RUZEOEM4QTEwMjMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDVGRTBGMzYzQUIzMDZFNTNGMUUyQ0Q5MzlFRkQ4QzhBMTAy MzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvNDQ1RkUwRjM2M0FCMzA2RTUzRjFFMkNEOTM5RUZE OEM4QTEwMjMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS/1RaKg7vOQlpemJjb62OIr9F6nd9+aN1y eaH5Azbqky9+m7iYHSQHI/nwcsYnnDadSD4yO+bq9d2xJdRSrnhjHDKJUEteATZx YpkrHj+eqe1XGbL912j0Is6fgi7aaE4SiyYwPAbpwowg09jWv27Cma6rSObm/oCT QS1KxKEILffe6XEnqD2E1rmLFFfZ5jBAioAUs0INy1JUjdIYD0Hm9/a8z/oZlN7u 1uAx0we0ZL9MSgAxkfj6dSul9+1mc8f+G2wLKFMaZonXX5z5A2FEYrEyM/4qtL93 4Y4c93Ec+wZVgeDkE9+p1oQjbiCsPPk0HRcM4KlEuA5qXuOymmg= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:48 2026 by rpki-client