$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft File: 4032440C7B463FEA0D28A5D4682DFA954E77451E.mft (raw, json) Hash identifier: oHtuNzKDKwPu3SSDVaTcl6E0WdMt6oZvGsqAIdSEMtE= Subject key identifier: 7A:84:2A:EA:04:51:A0:50:2E:7E:8D:8D:5B:08:B2:D3:AB:3C:B2:63 Authority key identifier: 40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E Certificate issuer: /CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Certificate serial: 7ABFE6FF48D0D75A8B0794104DD3BFE446CB6BE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 10:12:23 +0000 Manifest this update: Sat 26 Sep 2026 10:07:23 +0000 Manifest next update: Sun 27 Sep 2026 10:55:23 +0000 Files and hashes: 1: 4032440C7B463FEA0D28A5D4682DFA954E77451E.crl (hash: EUzZxm/cxWC6lMLqkGfr5xyyvUHc702L0pgjIUq0xdw=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 8b7JHKN9jGh8XEFxRZEHDDGBc52rA0ln90frZNev8wg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bf:e6:ff:48:d0:d7:5a:8b:07:94:10:4d:d3:bf:e4:46:cb:6b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Validity Not Before: Sep 26 10:07:23 2026 GMT Not After : Sep 27 10:55:23 2026 GMT Subject: CN=7A842AEA0451A0502E7E8D8D5B08B2D3AB3CB263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:25:66:20:0a:53:b3:e7:59:59:ac:9a:b6: 52:7e:e7:7a:3c:ca:1c:b5:ed:71:0f:a5:80:a3:df: a1:9e:5e:7b:94:e8:80:9a:90:78:58:6c:74:00:14: bd:16:f9:c1:9f:e3:af:76:86:8d:b7:67:51:9e:9d: 04:4e:39:67:00:be:84:60:49:9e:e9:34:23:93:a0: 7d:a4:e3:1f:19:1e:f9:ae:36:6b:20:7a:19:d3:4b: 50:ad:47:83:23:65:96:b3:06:b4:7c:2c:75:a0:f9: e9:0e:b3:b6:fc:d1:99:2c:3b:17:89:9b:81:1e:93: 15:32:c6:9c:d8:f6:67:9f:d7:b0:5f:cc:53:36:be: bd:80:2e:7c:23:34:95:5e:56:a3:b1:65:15:66:dd: f2:0f:ec:bf:40:2d:f4:dd:c4:b3:1d:f5:7b:98:6a: e2:01:98:8c:f8:68:4a:16:ac:59:93:8b:e6:6d:47: 9e:bf:78:44:ee:4f:6e:c0:7c:ad:b3:43:d6:58:ed: d9:52:8a:73:a7:33:f2:4b:fb:b0:48:67:85:1b:23: 25:45:4a:df:26:69:97:07:b1:bf:f4:3f:13:17:3b: 6e:70:32:69:e0:81:16:ad:d2:a9:c0:fc:5f:0b:54: 43:f0:c2:04:c6:6e:4f:bf:b0:4f:34:19:c4:49:60: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:2A:EA:04:51:A0:50:2E:7E:8D:8D:5B:08:B2:D3:AB:3C:B2:63 X509v3 Authority Key Identifier: keyid:40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e6:b1:2e:53:35:43:0d:23:f8:88:65:be:d1:eb:27:60:55: 69:98:2f:87:0f:e9:9f:ad:e1:92:bd:f4:96:1c:67:de:a3:58: 50:35:63:b7:1c:1f:ba:d0:e4:88:ab:84:3b:ee:cf:71:ca:16: 3d:6c:d0:41:c8:7d:35:f2:08:a4:c0:52:74:16:23:f6:b6:20: 88:6d:c5:7f:ad:3b:a4:57:be:fe:b9:62:3e:a3:e9:72:bf:52: 84:41:fd:bc:87:b3:9f:10:b0:0f:61:62:e7:81:34:22:4f:1e: 19:c6:8c:44:b8:50:7f:ba:7e:8a:45:98:d6:1b:db:e9:73:1b: b6:c4:11:6f:2c:db:9d:3d:82:d4:fe:26:84:ea:08:43:7d:34: 4c:02:9a:71:64:af:95:bf:b1:84:ba:13:e4:8f:ce:a6:c9:ed: 88:21:f7:37:82:6c:64:83:18:9e:d6:08:eb:13:ab:c1:bf:9a: da:14:12:b5:ea:b0:a1:ee:2b:b8:9a:59:a4:64:0d:46:7f:44: 9a:f6:99:93:34:7b:96:37:66:af:96:dd:9b:0c:58:2c:1e:65: b0:57:dc:9b:12:7b:03:b7:07:86:bb:7b:4a:44:3b:72:78:ed: 83:06:c6:ee:f9:47:a9:b2:7f:9a:a9:ea:74:ae:31:7a:ba:dd: 44:28:cf:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUer/m/0jQ11qLB5QQTdO/5EbLa+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0 RTc3NDUxRTAeFw0yNjA5MjYxMDA3MjNaFw0yNjA5MjcxMDU1MjNaMDMxMTAvBgNV BAMTKDdBODQyQUVBMDQ1MUEwNTAyRTdFOEQ4RDVCMDhCMkQzQUIzQ0IyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3yVmIApTs+dZWayatlJ+53o8 yhy17XEPpYCj36GeXnuU6ICakHhYbHQAFL0W+cGf4692ho23Z1GenQROOWcAvoRg SZ7pNCOToH2k4x8ZHvmuNmsgehnTS1CtR4MjZZazBrR8LHWg+ekOs7b80ZksOxeJ m4EekxUyxpzY9mef17BfzFM2vr2ALnwjNJVeVqOxZRVm3fIP7L9ALfTdxLMd9XuY auIBmIz4aEoWrFmTi+ZtR56/eETuT27AfK2zQ9ZY7dlSinOnM/JL+7BIZ4UbIyVF St8maZcHsb/0PxMXO25wMmnggRat0qnA/F8LVEPwwgTGbk+/sE80GcRJYI2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeoQq6gRRoFAufo2NWwiy06s8smMwHwYDVR0j BBgwFoAUQDJEDHtGP+oNKKXUaC36lU53RR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMGNlNzYtZGI3NS00NjUxLTg1YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3 QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0RTc3NDUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDMyNDQwQzdCNDYzRkVBMEQyOEE1RDQ2ODJERkE5NTRFNzc0 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZB OTU0RTc3NDUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbmsS5TNUMNI/iIZb7R6ydgVWmYL4cP6Z+t 4ZK99JYcZ96jWFA1Y7ccH7rQ5IirhDvuz3HKFj1s0EHIfTXyCKTAUnQWI/a2IIht xX+tO6RXvv65Yj6j6XK/UoRB/byHs58QsA9hYueBNCJPHhnGjES4UH+6fopFmNYb 2+lzG7bEEW8s2509gtT+JoTqCEN9NEwCmnFkr5W/sYS6E+SPzqbJ7Ygh9zeCbGSD GJ7WCOsTq8G/mtoUErXqsKHuK7iaWaRkDUZ/RJr2mZM0e5Y3Zq+W3ZsMWCweZbBX 3JsSewO3B4a7e0pEO3J47YMGxu75R6myf5qp6nSuMXq63UQoz7A= -----END CERTIFICATE-----Generated at Sat Sep 26 16:42:02 2026 by rpki-client