$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: JpXTOUvUS4bgFY8xFG9/tS3egI+xSEkKqHrMAJOCBuw= Subject key identifier: A5:EC:7B:79:B5:A6:68:56:A0:11:35:E3:72:F8:E2:4B:7B:C3:7D:73 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 2B3FBDB9A4B898725DA815C74BC63634EDC48029 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:52:04 +0000 Manifest this update: Wed 23 Sep 2026 12:47:04 +0000 Manifest next update: Thu 24 Sep 2026 14:59:04 +0000 Files and hashes: 1: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: B4wE4KKJ4SGin0gPVM3pKu1oGcS1lMNnu9HKWMMN5ww=) 2: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3f:bd:b9:a4:b8:98:72:5d:a8:15:c7:4b:c6:36:34:ed:c4:80:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Sep 23 12:47:04 2026 GMT Not After : Sep 24 14:59:04 2026 GMT Subject: CN=A5EC7B79B5A66856A01135E372F8E24B7BC37D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:b2:a7:aa:d9:88:d8:83:bb:c2:85:91:0e: ac:be:96:4c:1e:0e:e9:54:bd:bc:0a:1c:1b:01:c3: 7f:73:30:2d:27:3f:13:56:23:d8:3c:26:95:ac:1f: 12:b0:d3:a4:05:f0:f6:b3:6b:50:cc:b1:80:64:08: b2:c4:ae:e7:19:fc:a1:40:a2:8a:be:1e:29:90:91: 59:7b:a6:d7:aa:e3:7a:1d:eb:04:14:d2:6f:5d:1b: e6:76:a2:7b:30:ee:7b:39:26:03:20:19:c8:26:4a: 5f:23:4e:03:1a:1d:bd:b4:3e:41:e3:93:48:2d:a0: 3e:74:e0:75:cd:88:01:f9:e9:76:7a:fc:6c:1d:d4: 3d:82:5f:de:e9:6e:3a:e3:7b:19:e1:83:ac:d7:cc: 0f:fa:86:63:ba:24:d2:20:a7:3a:66:fe:3f:eb:a9: 67:10:3e:8e:fb:b8:29:2c:89:57:cb:74:dd:9a:2c: 27:4a:85:96:53:5d:b5:95:be:67:de:8c:d5:55:60: d3:fd:fc:47:e1:9c:15:32:24:33:c0:36:f7:a3:a3: 29:3d:5d:10:35:94:a9:db:7f:3e:e9:a2:92:19:0e: b5:88:52:86:2e:a7:f1:2e:cd:4e:7a:df:e0:e0:30: 8f:59:52:01:cf:86:82:6f:4b:8c:1a:0a:82:3d:8b: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:7B:79:B5:A6:68:56:A0:11:35:E3:72:F8:E2:4B:7B:C3:7D:73 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8b:4f:3e:ed:0b:30:d3:e9:72:aa:0c:80:87:53:1b:eb:f6: c5:34:2a:98:28:be:c7:49:15:17:8f:7b:65:55:9a:91:7d:7e: cb:5a:05:81:61:df:57:1c:6c:2e:6b:ac:23:cc:69:69:f0:ce: d3:23:01:61:e2:37:db:5d:50:15:3a:31:ce:6d:6b:65:3e:8b: fb:4b:71:a8:aa:50:8a:4e:8d:db:b3:21:03:13:e6:81:43:44: c1:41:9d:2e:ad:ec:6e:fd:83:f8:34:a3:a7:fe:88:46:23:be: 2f:ee:d4:d7:86:c1:0f:52:4f:0a:a2:da:dd:1c:54:04:f4:89: 71:32:a5:a5:31:b4:73:43:d9:0d:94:40:44:56:11:5c:c4:d5: 39:04:19:e3:60:4d:af:22:ef:8d:e2:7f:03:bf:a2:24:57:78: c9:ad:0b:85:b6:a5:61:18:ba:64:b5:c2:8d:a5:05:7c:d5:bc: 30:93:c2:68:a2:aa:c3:36:65:c7:83:86:b0:7f:3a:0e:d8:0d: a4:92:44:31:08:fc:f7:db:ed:29:c5:eb:31:15:1c:8c:e3:04: 4f:9c:50:ff:e3:17:1d:92:c9:8c:e9:ba:af:8d:df:f4:98:58: 03:65:15:7e:63:88:f4:c1:16:98:ec:75:51:d5:ff:b8:c7:db: 9d:e0:64:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKz+9uaS4mHJdqBXHS8Y2NO3EgCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA5MjMxMjQ3MDRaFw0yNjA5MjQxNDU5MDRaMDMxMTAvBgNV BAMTKEE1RUM3Qjc5QjVBNjY4NTZBMDExMzVFMzcyRjhFMjRCN0JDMzdENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CLKnqtmI2IO7woWRDqy+lkwe DulUvbwKHBsBw39zMC0nPxNWI9g8JpWsHxKw06QF8Paza1DMsYBkCLLErucZ/KFA ooq+HimQkVl7pteq43od6wQU0m9dG+Z2onsw7ns5JgMgGcgmSl8jTgMaHb20PkHj k0gtoD504HXNiAH56XZ6/Gwd1D2CX97pbjrjexnhg6zXzA/6hmO6JNIgpzpm/j/r qWcQPo77uCksiVfLdN2aLCdKhZZTXbWVvmfejNVVYNP9/EfhnBUyJDPANvejoyk9 XRA1lKnbfz7popIZDrWIUoYup/EuzU563+DgMI9ZUgHPhoJvS4waCoI9i68nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpex7ebWmaFagETXjcvjiS3vDfXMwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyLTz7tCzDT6XKqDICHUxvr9sU0KpgovsdJ FRePe2VVmpF9fstaBYFh31ccbC5rrCPMaWnwztMjAWHiN9tdUBU6Mc5ta2U+i/tL caiqUIpOjduzIQMT5oFDRMFBnS6t7G79g/g0o6f+iEYjvi/u1NeGwQ9STwqi2t0c VAT0iXEypaUxtHND2Q2UQERWEVzE1TkEGeNgTa8i743ifwO/oiRXeMmtC4W2pWEY umS1wo2lBXzVvDCTwmiiqsM2ZceDhrB/Og7YDaSSRDEI/Pfb7SnF6zEVHIzjBE+c UP/jFx2SyYzpuq+N3/SYWANlFX5jiPTBFpjsdVHV/7jH253gZD4= -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:55 2026 by rpki-client