$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft File: 4032440C7B463FEA0D28A5D4682DFA954E77451E.mft (raw, json) Hash identifier: uq4ljF8E57gG0di198xqdKlk46bkdojmj3Kh9TIixyM= Subject key identifier: 4A:50:02:5D:F7:E6:58:1A:58:C0:9E:6D:D2:1C:DE:07:C8:43:D0:D4 Authority key identifier: 40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E Certificate issuer: /CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Certificate serial: 23B5A63B8FD20ADBE097F1458CD06952C155D149 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 17:31:56 +0000 Manifest this update: Fri 25 Sep 2026 17:26:56 +0000 Manifest next update: Sat 26 Sep 2026 18:09:56 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 8b7JHKN9jGh8XEFxRZEHDDGBc52rA0ln90frZNev8wg=) 2: 4032440C7B463FEA0D28A5D4682DFA954E77451E.crl (hash: ggC190qyywCEjX+FAEV8+B1gDvzWc8JXa4JVb/RNtKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:a6:3b:8f:d2:0a:db:e0:97:f1:45:8c:d0:69:52:c1:55:d1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Validity Not Before: Sep 25 17:26:56 2026 GMT Not After : Sep 26 18:09:56 2026 GMT Subject: CN=4A50025DF7E6581A58C09E6DD21CDE07C843D0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:24:5f:f5:20:46:77:f8:56:c9:c8:f8:56: d1:4f:33:51:52:c2:78:dc:6d:8f:5d:a5:95:be:05: 05:7f:f7:45:0b:94:bc:72:62:60:54:73:ce:15:f7: 93:2f:1f:85:a5:74:4e:14:c0:d4:3b:17:69:10:06: bb:0b:20:e2:89:85:80:6e:68:df:4e:88:a6:dd:f0: e9:63:ac:7c:03:a7:b0:1a:64:68:e2:ad:e9:89:88: 50:dc:c9:a6:c9:8d:1b:ab:53:75:86:e5:64:14:55: ac:09:5b:0b:f4:17:87:55:50:ac:2d:18:46:99:75: 6c:24:43:37:1f:79:b2:8c:be:5f:b3:9c:da:63:6a: 79:4e:b5:38:60:59:c1:f7:09:74:8a:a0:cf:22:30: 70:6c:ed:dc:cf:58:73:26:ed:20:6f:cc:8e:b5:97: 05:a6:7b:7a:1f:62:29:31:ec:70:f7:f1:a3:75:62: 43:39:8d:67:8a:18:bc:51:56:36:83:67:30:17:01: 07:b2:ad:fb:0f:51:4b:5f:ec:a8:6a:10:4c:72:c8: 21:4c:5a:36:b1:c1:1d:00:c4:c4:0c:fd:e8:78:6c: 59:ed:4f:b5:c8:ad:cf:8e:68:25:1a:b1:fa:c5:e9: 38:cc:f9:44:bd:52:9e:e1:c5:cc:99:7f:5c:81:70: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:02:5D:F7:E6:58:1A:58:C0:9E:6D:D2:1C:DE:07:C8:43:D0:D4 X509v3 Authority Key Identifier: keyid:40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4c:30:6e:c9:10:65:b8:30:4c:a9:19:ac:5b:f9:5b:80:88: 88:d1:75:a8:2e:6e:a0:84:9e:45:2f:1b:17:f1:e4:03:b1:d4: 71:a6:6d:71:66:9a:c1:f6:11:36:c0:40:28:bd:52:56:84:c6: 1f:31:74:ad:91:05:8a:66:d1:95:03:fa:f5:45:8a:cb:a9:a6: 33:15:dd:a8:40:67:17:ea:1a:d8:8c:3b:61:df:50:93:5d:9e: 9f:67:97:00:5b:44:a9:b8:39:ef:e9:2a:70:a1:cf:8c:de:b9: 6b:60:b2:31:a6:27:99:26:47:17:d7:eb:52:74:c3:2b:a7:30: 6b:cd:f2:69:1d:08:b7:f2:c5:9b:36:f4:4e:7c:6d:44:7f:21: 8f:be:5e:e6:d8:44:d4:f8:17:60:2a:c9:ed:55:9c:28:7d:18: 7b:13:71:a5:a7:7d:10:bd:89:33:d9:56:ab:d2:70:07:78:1e: ad:66:90:34:b0:53:cf:4c:fb:70:91:b9:c4:2c:c4:8f:e8:05: fb:3e:2f:cd:d8:df:96:74:0a:bd:02:20:e3:3e:dc:9a:29:40: 74:71:cc:4a:9d:80:d6:91:8b:be:c3:bd:99:00:50:d1:2a:9f: cb:35:61:8b:75:b6:e1:27:29:6e:75:2a:0e:dd:4d:67:cb:9c: b4:1a:05:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7WmO4/SCtvgl/FFjNBpUsFV0UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0 RTc3NDUxRTAeFw0yNjA5MjUxNzI2NTZaFw0yNjA5MjYxODA5NTZaMDMxMTAvBgNV BAMTKDRBNTAwMjVERjdFNjU4MUE1OEMwOUU2REQyMUNERTA3Qzg0M0QwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqSRf9SBGd/hWycj4VtFPM1FS wnjcbY9dpZW+BQV/90ULlLxyYmBUc84V95MvH4WldE4UwNQ7F2kQBrsLIOKJhYBu aN9OiKbd8OljrHwDp7AaZGjiremJiFDcyabJjRurU3WG5WQUVawJWwv0F4dVUKwt GEaZdWwkQzcfebKMvl+znNpjanlOtThgWcH3CXSKoM8iMHBs7dzPWHMm7SBvzI61 lwWme3ofYikx7HD38aN1YkM5jWeKGLxRVjaDZzAXAQeyrfsPUUtf7KhqEExyyCFM WjaxwR0AxMQM/eh4bFntT7XIrc+OaCUasfrF6TjM+US9Up7hxcyZf1yBcDoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlACXffmWBpYwJ5t0hzeB8hD0NQwHwYDVR0j BBgwFoAUQDJEDHtGP+oNKKXUaC36lU53RR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMGNlNzYtZGI3NS00NjUxLTg1YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3 QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0RTc3NDUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDMyNDQwQzdCNDYzRkVBMEQyOEE1RDQ2ODJERkE5NTRFNzc0 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZB OTU0RTc3NDUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRMMG7JEGW4MEypGaxb+VuAiIjRdagubqCE nkUvGxfx5AOx1HGmbXFmmsH2ETbAQCi9UlaExh8xdK2RBYpm0ZUD+vVFisuppjMV 3ahAZxfqGtiMO2HfUJNdnp9nlwBbRKm4Oe/pKnChz4zeuWtgsjGmJ5kmRxfX61J0 wyunMGvN8mkdCLfyxZs29E58bUR/IY++XubYRNT4F2Aqye1VnCh9GHsTcaWnfRC9 iTPZVqvScAd4Hq1mkDSwU89M+3CRucQsxI/oBfs+L83Y35Z0Cr0CIOM+3JopQHRx zEqdgNaRi77DvZkAUNEqn8s1YYt1tuEnKW51Kg7dTWfLnLQaBSs= -----END CERTIFICATE-----Generated at Fri Sep 25 22:23:46 2026 by rpki-client