$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: ZYZVOZDHdorewjw3lw3A+/wkAw8tWrQK5AqoyjLOfWw= Subject key identifier: 85:57:41:E8:60:4D:8A:0B:3F:43:8A:98:CB:4A:63:44:28:CE:05:54 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 35907280B178C0C8D22D0BCE1C6FBB61A37592E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 22:33:54 +0000 Manifest this update: Wed 23 Sep 2026 22:28:54 +0000 Manifest next update: Fri 25 Sep 2026 01:08:54 +0000 Files and hashes: 1: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: J/+l+b+SPRmsrKcsyADzDha6qVctGMQcFiJYMZR5pM8=) 2: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:90:72:80:b1:78:c0:c8:d2:2d:0b:ce:1c:6f:bb:61:a3:75:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Sep 23 22:28:54 2026 GMT Not After : Sep 25 01:08:54 2026 GMT Subject: CN=855741E8604D8A0B3F438A98CB4A634428CE0554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:e4:09:8e:6a:6f:f7:03:82:cd:d3:6c:e1: 45:b8:4f:18:73:79:6f:cc:e2:16:a6:8e:b5:98:58: af:a1:d0:2d:c3:a3:dd:9c:1b:fe:5c:ea:f0:9a:ad: 83:3b:d6:4d:c5:be:37:8e:18:d3:86:00:19:6b:6c: 17:b4:07:2a:3b:04:34:fa:c8:5b:6d:3f:4d:55:71: 3d:d5:7c:ca:25:71:0a:f8:89:c4:29:28:9f:6c:72: e7:c7:ea:cb:2a:e9:07:14:e7:5c:fe:f9:56:dd:6e: 37:21:8e:36:1c:d9:aa:e1:63:84:db:39:2f:12:21: f3:66:8d:0f:1e:cf:2b:87:fc:7b:01:2d:ab:91:bf: bb:87:cd:5a:7b:45:44:13:e8:8c:15:94:16:af:4c: 7f:5b:df:89:b0:ae:d6:e1:1b:9d:3d:04:dd:3b:f4: a0:16:64:c2:48:e6:0a:fc:34:73:ab:2e:18:0e:98: 2b:50:ab:3a:85:73:41:cb:1e:a3:5f:30:83:47:2d: b3:a8:e3:ed:6e:b3:f5:8d:ea:a3:e1:9f:ab:a7:97: a8:b1:57:fd:2c:5b:fb:23:3a:66:0a:d8:30:10:8c: ba:fa:00:18:80:10:0e:70:c3:c3:06:55:99:de:24: 8b:cc:fb:33:3e:08:b9:bc:91:df:ee:eb:03:69:22: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:57:41:E8:60:4D:8A:0B:3F:43:8A:98:CB:4A:63:44:28:CE:05:54 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:a4:50:7d:3f:6d:9d:8c:36:b1:18:e1:8d:50:93:8f:5e: db:2f:13:10:fc:dd:ad:d1:44:e2:c2:6e:6c:ea:e7:26:bc:e5: dd:17:e2:8b:ff:bf:8c:2b:36:fc:18:25:48:fe:8e:f6:0d:db: f5:85:a7:05:a6:6b:80:e0:d5:a6:25:d2:cf:ba:e8:c8:6d:e8: 5b:a9:11:95:ea:c2:c9:e3:2b:59:4f:29:ef:e0:a6:8d:b7:b8: ba:f0:92:b6:52:ea:94:06:a8:f1:06:1e:aa:cb:72:8a:c2:08: 8f:db:19:15:4c:54:b9:47:ee:4c:75:2a:15:94:82:d9:ab:9a: 15:7a:05:bc:fd:35:91:d0:e0:87:17:d8:e9:9e:9d:96:27:89: 24:d9:c7:e3:65:86:fd:2e:16:23:61:58:f1:cc:a6:9f:11:6c: af:f3:3f:74:3a:bd:de:11:8d:3b:dd:e5:d8:04:29:ad:7e:b2: ac:d2:f4:9c:64:26:36:02:e7:d6:83:01:0e:08:9f:33:45:bc: ea:9f:e0:20:44:d8:00:b6:5c:cf:e0:b6:f3:78:16:e7:6c:78: 9a:7d:5b:97:27:ef:c6:38:ed:4d:0e:af:1c:2d:6f:5d:7c:ca: d7:57:50:f8:98:79:71:c6:95:d7:1a:4a:53:90:d1:10:37:fc: 18:d9:f6:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZBygLF4wMjSLQvOHG+7YaN1kuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA5MjMyMjI4NTRaFw0yNjA5MjUwMTA4NTRaMDMxMTAvBgNV BAMTKDg1NTc0MUU4NjA0RDhBMEIzRjQzOEE5OENCNEE2MzQ0MjhDRTA1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7OQJjmpv9wOCzdNs4UW4Txhz eW/M4hamjrWYWK+h0C3Do92cG/5c6vCarYM71k3FvjeOGNOGABlrbBe0Byo7BDT6 yFttP01VcT3VfMolcQr4icQpKJ9scufH6ssq6QcU51z++VbdbjchjjYc2arhY4Tb OS8SIfNmjQ8ezyuH/HsBLauRv7uHzVp7RUQT6IwVlBavTH9b34mwrtbhG509BN07 9KAWZMJI5gr8NHOrLhgOmCtQqzqFc0HLHqNfMINHLbOo4+1us/WN6qPhn6unl6ix V/0sW/sjOmYK2DAQjLr6ABiAEA5ww8MGVZneJIvM+zM+CLm8kd/u6wNpIizXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVdB6GBNigs/Q4qYy0pjRCjOBVQwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdWpFB9P22djDaxGOGNUJOPXtsvExD83a3R ROLCbmzq5ya85d0X4ov/v4wrNvwYJUj+jvYN2/WFpwWma4Dg1aYl0s+66Mht6Fup EZXqwsnjK1lPKe/gpo23uLrwkrZS6pQGqPEGHqrLcorCCI/bGRVMVLlH7kx1KhWU gtmrmhV6Bbz9NZHQ4IcX2OmenZYniSTZx+Nlhv0uFiNhWPHMpp8RbK/zP3Q6vd4R jTvd5dgEKa1+sqzS9JxkJjYC59aDAQ4InzNFvOqf4CBE2AC2XM/gtvN4FudseJp9 W5cn78Y47U0Orxwtb118ytdXUPiYeXHGldcaSlOQ0RA3/BjZ9vU= -----END CERTIFICATE-----Generated at Thu Sep 24 17:19:23 2026 by rpki-client