$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json) Hash identifier: xS9RUhBhjXMzwd5RfOZpXTHwvAbqwhQ1uy9SbVgxLnQ= Subject key identifier: 4A:37:D6:06:1C:40:ED:12:17:E8:6D:DA:61:6A:EF:46:B3:43:10:09 Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0 Certificate serial: 5C269642B01BD9D7679237626C8F9A2A7C0FA860 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 06:49:08 +0000 Manifest this update: Thu 24 Sep 2026 06:44:08 +0000 Manifest next update: Fri 25 Sep 2026 07:04:08 +0000 Files and hashes: 1: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=) 2: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=) 3: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=) 4: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: nMwCxiSOqdS/8Z6vBWNl7FygsYUeQQ5FVA2kB2Du0pc=) 5: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:26:96:42:b0:1b:d9:d7:67:92:37:62:6c:8f:9a:2a:7c:0f:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0 Validity Not Before: Sep 24 06:44:08 2026 GMT Not After : Sep 25 07:04:08 2026 GMT Subject: CN=4A37D6061C40ED1217E86DDA616AEF46B3431009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:20:55:fa:e0:26:0f:6c:3b:25:c3:44:db: b2:56:57:f1:ab:61:31:f1:e1:1e:d9:81:c3:21:76: e3:03:70:71:b5:b2:87:c3:7b:4e:c8:2e:a9:c6:a8: c6:95:08:a0:62:96:17:0f:8f:a3:c2:c5:53:be:96: 1c:f1:f3:e2:44:c5:73:f3:4d:01:67:c0:c9:5e:fb: ae:94:30:25:73:fe:ea:b4:a6:59:61:03:70:5c:4c: d8:27:d3:85:6e:75:32:2f:5a:b9:9c:d1:ee:d3:9b: cf:ef:ee:ed:f6:3c:8e:93:85:16:c5:72:94:e3:64: 78:1a:9a:64:c2:7c:1d:45:13:a9:1a:24:8b:da:fb: 41:31:df:f9:38:f1:01:d8:58:66:7a:1a:e2:43:99: b1:e4:6c:a6:fc:f6:10:71:c4:a2:41:5a:dd:69:75: 66:cf:b6:ca:ba:18:be:e9:f5:3d:c5:7d:31:6d:ed: 71:86:cf:a9:a6:5b:46:77:af:2a:9b:b3:a6:f3:9a: 8a:86:2c:22:8f:93:b2:2b:54:ff:35:2d:c4:15:41: a2:98:ce:ad:4b:73:3e:5f:cd:57:c5:14:c4:27:4b: ce:87:c2:bc:2e:3d:6d:d9:4c:ec:db:76:1f:d4:8d: 67:e8:14:ea:be:7e:72:ab:79:af:dc:70:9e:5a:27: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:D6:06:1C:40:ED:12:17:E8:6D:DA:61:6A:EF:46:B3:43:10:09 X509v3 Authority Key Identifier: keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dc:50:be:33:13:70:d8:56:52:57:3f:58:78:45:14:92:81: f3:bd:79:1f:48:bc:87:23:d7:ff:9a:cd:3d:17:73:5d:5e:86: 28:ec:a0:3c:f9:36:d2:b6:b9:31:8d:58:af:60:bf:af:fc:c2: 83:7d:ce:b6:b3:97:06:4d:3c:a0:a5:7a:f3:73:1a:0e:2b:9a: b2:0e:28:80:76:46:36:d7:ad:62:1d:64:e7:3f:72:60:34:41: 63:f3:91:55:27:60:32:d5:a4:3a:70:69:3c:ca:77:1e:68:8e: 8d:bd:9e:76:6c:9c:45:bd:f4:da:ca:3b:ed:02:7d:f3:bc:ec: 9f:68:6f:27:53:9c:68:ae:6d:47:21:00:e9:c7:7a:25:82:78: 3b:66:02:34:b4:8c:88:26:60:c0:53:a9:e9:03:f4:cb:df:a0: 84:ae:a8:5b:bb:c3:f4:43:a6:6f:b5:4b:50:ce:6a:98:e9:e1: 3a:26:f5:31:56:cb:c4:f4:b1:e8:06:93:68:47:9d:be:1b:d1: 76:5d:c4:70:b1:bb:64:e4:11:fe:ba:a4:66:c4:1c:80:01:ca: 51:db:77:11:83:13:76:69:ac:4c:2d:77:f1:c5:07:f6:6f:3e: e6:ff:65:b0:a7:ec:d7:86:9c:d4:62:47:3d:54:75:0d:e3:80: d4:db:e6:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCaWQrAb2ddnkjdibI+aKnwPqGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3 MTc2NjZFMDAeFw0yNjA5MjQwNjQ0MDhaFw0yNjA5MjUwNzA0MDhaMDMxMTAvBgNV BAMTKDRBMzdENjA2MUM0MEVEMTIxN0U4NkREQTYxNkFFRjQ2QjM0MzEwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuSBV+uAmD2w7JcNE27JWV/Gr YTHx4R7ZgcMhduMDcHG1sofDe07ILqnGqMaVCKBilhcPj6PCxVO+lhzx8+JExXPz TQFnwMle+66UMCVz/uq0pllhA3BcTNgn04VudTIvWrmc0e7Tm8/v7u32PI6ThRbF cpTjZHgammTCfB1FE6kaJIva+0Ex3/k48QHYWGZ6GuJDmbHkbKb89hBxxKJBWt1p dWbPtsq6GL7p9T3FfTFt7XGGz6mmW0Z3ryqbs6bzmoqGLCKPk7IrVP81LcQVQaKY zq1Lcz5fzVfFFMQnS86HwrwuPW3ZTOzbdh/UjWfoFOq+fnKrea/ccJ5aJ4krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSjfWBhxA7RIX6G3aYWrvRrNDEAkwHwYDVR0j BBgwFoAUSfRhFTZevfWIbn8s8TnmBnF2ZuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE0MTkzYzQtNGFiZC00ZTJjLWExZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUz NjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3MTc2NjZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OUY0NjExNTM2NUVCREY1ODg2RTdGMkNGMTM5RTYwNjcxNzY2 NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2 MDY3MTc2NjZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXcUL4zE3DYVlJXP1h4RRSSgfO9eR9IvIcj 1/+azT0Xc11ehijsoDz5NtK2uTGNWK9gv6/8woN9zrazlwZNPKClevNzGg4rmrIO KIB2RjbXrWIdZOc/cmA0QWPzkVUnYDLVpDpwaTzKdx5ojo29nnZsnEW99NrKO+0C ffO87J9obydTnGiubUchAOnHeiWCeDtmAjS0jIgmYMBTqekD9MvfoISuqFu7w/RD pm+1S1DOapjp4Tom9TFWy8T0segGk2hHnb4b0XZdxHCxu2TkEf66pGbEHIABylHb dxGDE3ZprEwtd/HFB/ZvPub/ZbCn7NeGnNRiRz1UdQ3jgNTb5m8= -----END CERTIFICATE-----Generated at Thu Sep 24 17:36:01 2026 by rpki-client