$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft File: D441988C2049D77F9D98652623A88108BD7A9AE0.mft (raw, json) Hash identifier: oIS5iX+sv3tpUaj9uTlhVahLMSyg0yXLw9pWC1QFqJY= Subject key identifier: EB:DB:F2:90:0E:D3:AD:B3:6A:F8:D5:15:64:5B:4E:74:F2:C2:93:D2 Authority key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 Certificate issuer: /CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Certificate serial: 1492B5D4252A21F7D143DC8C24088AA1A402D104 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 23:14:23 +0000 Manifest this update: Fri 25 Sep 2026 23:09:23 +0000 Manifest next update: Sat 26 Sep 2026 23:24:23 +0000 Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: Ncv7w2hXW8e/iglgpSl3KIA/3oBjq+9ZdH/1lNnm5C8=) 2: D441988C2049D77F9D98652623A88108BD7A9AE0.crl (hash: c7nSBDMRF52VDpObKV/T50CgXTgKJ96+fG4yDbzZyws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:92:b5:d4:25:2a:21:f7:d1:43:dc:8c:24:08:8a:a1:a4:02:d1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Validity Not Before: Sep 25 23:09:23 2026 GMT Not After : Sep 26 23:24:23 2026 GMT Subject: CN=EBDBF2900ED3ADB36AF8D515645B4E74F2C293D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:05:6c:49:25:cd:26:f8:28:9e:ab:85:75: b3:15:67:b8:2b:b5:bd:06:cf:be:3b:43:a7:7e:72: d8:42:8c:7e:b5:3d:b1:7b:d8:30:61:db:2e:ae:2b: 88:66:fa:0e:31:f5:80:66:a7:1a:85:14:9a:06:e3: 84:be:c0:d0:c4:4d:ca:bc:2f:46:69:34:22:04:7c: 96:77:bd:fd:a0:7a:fb:97:95:21:db:79:9d:73:96: 66:8a:92:3b:a7:b7:2d:e6:17:2b:a3:4b:cf:26:a9: f7:e5:0f:ff:f3:e4:9c:de:56:dd:22:0a:c6:6d:98: 6b:19:56:03:98:91:f4:8a:88:88:00:75:d3:2b:30: cd:2b:f5:c0:b6:35:10:22:79:17:69:4f:96:bd:67: 24:f5:ca:47:0f:24:36:2a:7c:d7:43:e4:dc:0b:a0: 09:08:9c:8a:00:8c:0f:1c:20:93:a2:9f:d1:d7:70: fe:52:9f:f8:a7:b8:4b:90:45:05:8b:a4:e8:30:95: 03:bc:44:da:d9:36:d6:4c:86:c8:c4:5e:25:1c:39: ee:b4:09:f5:60:3b:8a:f6:58:c5:84:24:cb:e9:08: a2:96:43:48:f1:d3:20:a3:09:80:d2:57:88:a5:c8: 69:5d:29:bd:55:c3:9d:ab:41:e8:51:b4:15:01:f0: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:F2:90:0E:D3:AD:B3:6A:F8:D5:15:64:5B:4E:74:F2:C2:93:D2 X509v3 Authority Key Identifier: keyid:D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1f:33:24:9c:ca:c5:63:08:c2:1c:a1:80:5a:67:7b:a5:7f: 98:21:07:d5:c1:db:af:bd:a6:a1:ea:00:57:5e:20:c5:5f:b8: 9b:07:53:fc:e5:88:dd:43:21:29:14:07:f7:1e:56:08:db:b9: 19:62:9c:0b:90:ba:a5:d1:bf:54:f1:fd:fd:78:d9:9e:24:34: 93:a9:9a:01:3e:6b:58:82:88:61:23:9f:c9:8c:6a:c3:d2:39: 96:27:c6:14:f1:11:9a:c6:cd:3a:cb:8a:12:78:55:aa:8a:53: 71:83:4b:b6:b5:9e:06:65:2a:61:69:3e:c1:4b:cf:7b:63:65: 05:38:e1:e0:35:45:aa:77:a4:03:e9:fe:da:4f:d3:12:ed:91: 4f:94:ae:6e:9b:6c:8a:a7:bb:7c:19:69:50:ec:bb:8b:1e:79: 3e:b2:6b:1f:0f:a4:f5:70:7c:56:d8:5b:00:a7:c7:b0:f6:be: 88:18:78:9b:25:eb:b8:0f:80:d9:27:13:b4:49:18:4a:c2:c3: 5b:6a:27:e8:82:da:58:ce:79:b7:a5:e2:73:9b:9b:7c:94:98: 66:79:25:ac:c2:3b:5e:34:3f:a0:bc:01:c1:e1:3a:0e:15:3e: 27:6d:e1:13:17:7d:3c:2f:f5:d5:6f:94:b6:80:62:69:f8:a7: 61:d9:06:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJK11CUqIffRQ9yMJAiKoaQC0QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhC RDdBOUFFMDAeFw0yNjA5MjUyMzA5MjNaFw0yNjA5MjYyMzI0MjNaMDMxMTAvBgNV BAMTKEVCREJGMjkwMEVEM0FEQjM2QUY4RDUxNTY0NUI0RTc0RjJDMjkzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauQVsSSXNJvgonquFdbMVZ7gr tb0Gz747Q6d+cthCjH61PbF72DBh2y6uK4hm+g4x9YBmpxqFFJoG44S+wNDETcq8 L0ZpNCIEfJZ3vf2gevuXlSHbeZ1zlmaKkjunty3mFyujS88mqfflD//z5JzeVt0i CsZtmGsZVgOYkfSKiIgAddMrMM0r9cC2NRAieRdpT5a9ZyT1ykcPJDYqfNdD5NwL oAkInIoAjA8cIJOin9HXcP5Sn/inuEuQRQWLpOgwlQO8RNrZNtZMhsjEXiUcOe60 CfVgO4r2WMWEJMvpCKKWQ0jx0yCjCYDSV4ilyGldKb1Vw52rQehRtBUB8NIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69vykA7TrbNq+NUVZFtOdPLCk9IwHwYDVR0j BBgwFoAU1EGYjCBJ13+dmGUmI6iBCL16muAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMy MDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhCRDdBOUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENDQxOTg4QzIwNDlENzdGOUQ5ODY1MjYyM0E4ODEwOEJEN0E5 QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgx MDhCRDdBOUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQfMyScysVjCMIcoYBaZ3ulf5ghB9XB26+9 pqHqAFdeIMVfuJsHU/zliN1DISkUB/ceVgjbuRlinAuQuqXRv1Tx/f142Z4kNJOp mgE+a1iCiGEjn8mMasPSOZYnxhTxEZrGzTrLihJ4VaqKU3GDS7a1ngZlKmFpPsFL z3tjZQU44eA1Rap3pAPp/tpP0xLtkU+Urm6bbIqnu3wZaVDsu4seeT6yax8PpPVw fFbYWwCnx7D2vogYeJsl67gPgNknE7RJGErCw1tqJ+iC2ljOebel4nObm3yUmGZ5 JazCO140P6C8AcHhOg4VPidt4RMXfTwv9dVvlLaAYmn4p2HZBk0= -----END CERTIFICATE-----Generated at Sat Sep 26 11:33:03 2026 by rpki-client