$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft File: 4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json) Hash identifier: +UKJQEG4bWbsxxIYfG+M7mgNYk+IwqGZPhv6GFbRpBg= Subject key identifier: D8:8B:58:A1:F8:65:5D:1E:D0:80:56:A1:25:AE:4F:31:13:79:D5:81 Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41 Certificate issuer: /CN=4156BE0E036363A596E1CBC310489AB801DFF941 Certificate serial: 55AD11E86972C8916A938520179485777B0E2FFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 04:46:21 +0000 Manifest this update: Fri 25 Sep 2026 04:41:21 +0000 Manifest next update: Sat 26 Sep 2026 06:56:21 +0000 Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=) 2: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=) 3: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=) 4: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=) 5: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: X3CLg6DNpgXDaqqOBH66Mt7eK7wyYRSy6iMnCbdniWw=) 6: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=) 7: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=) 8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=) 9: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ad:11:e8:69:72:c8:91:6a:93:85:20:17:94:85:77:7b:0e:2f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941 Validity Not Before: Sep 25 04:41:21 2026 GMT Not After : Sep 26 06:56:21 2026 GMT Subject: CN=D88B58A1F8655D1ED08056A125AE4F311379D581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:e4:0d:99:1c:e5:51:72:84:9e:be:c7:02: 88:81:c0:c9:97:28:08:aa:23:eb:85:42:82:db:37: ff:c1:63:2a:6d:93:55:eb:84:2d:63:9c:7c:7c:72: d9:63:24:e3:10:20:cc:ae:db:bf:82:ba:0d:ef:20: 4e:4a:1a:39:5b:91:b2:a0:26:67:1f:4c:ac:d0:fd: 68:82:36:07:27:31:ce:04:a2:98:64:f0:c7:db:51: 5c:fc:e4:45:7b:21:fd:a7:63:19:33:1c:6f:bc:fa: e3:25:06:6d:60:b5:73:b5:61:89:8f:c1:51:11:5c: 25:fe:7d:20:fc:c2:94:62:c8:db:31:3d:97:d7:09: 3f:60:7d:95:29:2e:e2:5d:58:bf:9b:34:16:2b:47: b3:09:4e:c3:9f:9d:9e:ef:86:48:5c:71:f5:e2:b1: 80:eb:a0:80:0b:61:93:d2:c4:2a:67:30:d6:ad:33: 4f:df:dd:0c:f0:a7:8f:d1:88:ff:5d:7e:20:37:da: 66:ff:e1:f4:59:3f:88:c8:c1:d7:6f:b9:9b:08:52: 8a:fd:a6:46:e2:49:ea:d4:0a:e5:21:63:04:bf:67: 11:58:57:9e:b8:02:d6:bc:e4:e7:d8:f3:1c:37:08: 13:8c:51:38:af:22:33:30:81:13:0d:00:14:8f:3d: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8B:58:A1:F8:65:5D:1E:D0:80:56:A1:25:AE:4F:31:13:79:D5:81 X509v3 Authority Key Identifier: keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3b:cd:ec:30:67:50:96:19:17:89:56:f3:aa:79:ee:d3:e4: aa:93:b3:e6:ed:1e:ad:22:e8:71:20:6a:93:c4:d2:57:36:14: a2:bf:44:86:c7:af:b5:79:56:92:c0:ce:eb:22:11:50:67:2b: ea:f8:45:a5:76:ad:79:8c:e5:46:13:71:1a:80:08:ef:3d:18: be:68:53:b2:aa:9f:a5:81:e4:cb:42:93:65:57:bc:3d:93:43: b2:8a:f9:07:fc:43:80:3e:19:25:be:b3:e8:dc:a3:e3:4b:77: dd:06:99:9f:99:f5:e1:86:f3:54:f9:07:41:18:54:24:38:ba: f4:f5:d5:1f:b3:d5:c3:72:d0:c4:f9:2d:f1:d8:70:35:e2:c4: ee:49:94:6d:94:e4:50:b5:39:ad:fb:32:d5:88:0d:3d:41:63: 86:51:53:3e:86:f3:f8:57:0e:9b:bd:d3:47:f6:9b:0f:65:03: 4d:2a:94:eb:33:72:32:26:63:be:e6:fe:c8:f6:96:80:ac:a2: 30:55:40:30:9c:7e:9e:a8:ee:64:7d:5b:bd:db:79:2c:a3:8b: 31:1d:55:0b:80:12:3e:6a:b2:9d:13:53:16:3e:50:35:c0:b6: 10:5e:a7:8b:cd:3d:a6:0f:22:e4:0e:b2:72:3a:e7:a2:83:56: 4f:ae:49:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa0R6GlyyJFqk4UgF5SFd3sOL/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgw MURGRjk0MTAeFw0yNjA5MjUwNDQxMjFaFw0yNjA5MjYwNjU2MjFaMDMxMTAvBgNV BAMTKEQ4OEI1OEExRjg2NTVEMUVEMDgwNTZBMTI1QUU0RjMxMTM3OUQ1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ceQNmRzlUXKEnr7HAoiBwMmX KAiqI+uFQoLbN//BYyptk1XrhC1jnHx8ctljJOMQIMyu27+Cug3vIE5KGjlbkbKg JmcfTKzQ/WiCNgcnMc4Eophk8MfbUVz85EV7If2nYxkzHG+8+uMlBm1gtXO1YYmP wVERXCX+fSD8wpRiyNsxPZfXCT9gfZUpLuJdWL+bNBYrR7MJTsOfnZ7vhkhccfXi sYDroIALYZPSxCpnMNatM0/f3Qzwp4/RiP9dfiA32mb/4fRZP4jIwddvuZsIUor9 pkbiSerUCuUhYwS/ZxFYV564Ata85OfY8xw3CBOMUTivIjMwgRMNABSPPdoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ItYofhlXR7QgFahJa5PMRN51YEwHwYDVR0j BBgwFoAUQVa+DgNjY6WW4cvDEEiauAHf+UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODA3NThmMTUtNWRlOC00ODdkLTk5NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUw MzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgwMURGRjk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTU2QkUwRTAzNjM2M0E1OTZFMUNCQzMxMDQ4OUFCODAxREZG OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlB QjgwMURGRjk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF87zewwZ1CWGReJVvOqee7T5KqTs+btHq0i 6HEgapPE0lc2FKK/RIbHr7V5VpLAzusiEVBnK+r4RaV2rXmM5UYTcRqACO89GL5o U7Kqn6WB5MtCk2VXvD2TQ7KK+Qf8Q4A+GSW+s+jco+NLd90GmZ+Z9eGG81T5B0EY VCQ4uvT11R+z1cNy0MT5LfHYcDXixO5JlG2U5FC1Oa37MtWIDT1BY4ZRUz6G8/hX Dpu900f2mw9lA00qlOszcjImY77m/sj2loCsojBVQDCcfp6o7mR9W73beSyjizEd VQuAEj5qsp0TUxY+UDXAthBep4vNPaYPIuQOsnI656KDVk+uSY4= -----END CERTIFICATE-----Generated at Fri Sep 25 18:33:35 2026 by rpki-client