$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: c1ogUJZ3bX+1VyhYUzTbyQwSoONWcls4XeidGlsjxaE= Subject key identifier: 68:F6:00:E4:A6:F7:D9:46:A7:0F:99:46:CE:04:6B:41:EF:A7:3D:E4 Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 777AD8C38DE66680B3A1DE4B1F60E2DC67EF9188 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:30:08 +0000 Manifest this update: Wed 23 Sep 2026 23:25:08 +0000 Manifest next update: Thu 24 Sep 2026 23:46:08 +0000 Files and hashes: 1: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) 2: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 3: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: xh1HdbGoNirfqCV67+XQPQfSGAgptCxjhfVEEx1N0uM=) 4: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7a:d8:c3:8d:e6:66:80:b3:a1:de:4b:1f:60:e2:dc:67:ef:91:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Sep 23 23:25:08 2026 GMT Not After : Sep 24 23:46:08 2026 GMT Subject: CN=68F600E4A6F7D946A70F9946CE046B41EFA73DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:58:35:d7:d3:8f:99:a4:94:6b:38:42:9d: 36:10:d0:6a:19:e8:d6:40:37:ab:04:14:24:b0:2b: aa:bd:f2:10:9d:9b:fb:82:50:92:24:3b:99:ee:b2: a8:db:a5:49:c4:10:20:43:df:de:46:21:2d:f1:df: 2a:57:60:a8:39:3c:43:2f:ec:10:69:a3:26:97:c2: 68:37:c2:51:11:19:5b:a7:22:03:45:50:9a:9b:ce: 03:f9:93:6c:12:c2:04:f2:f7:76:e9:cc:0f:4f:26: a6:76:66:85:4b:ed:e8:a0:7c:13:80:c4:6f:b0:77: 59:61:56:ae:bf:fa:d9:83:bf:84:be:ac:87:2f:51: 7e:0c:c6:a4:6c:8f:28:e7:55:d4:46:2a:3a:42:0b: 92:7d:d3:d9:ae:df:42:99:17:97:33:36:c6:aa:a8: 8a:e0:65:b1:25:a6:40:4a:e8:2c:b6:ae:e9:f8:05: 41:53:63:7f:20:71:34:a4:8c:8e:2f:7a:00:f2:a2: 07:f7:75:94:09:7e:75:1d:79:e2:a4:55:b8:be:df: 8d:19:a1:21:a3:fb:1f:c9:93:7b:7f:cc:82:5c:62: cf:02:1c:29:44:29:17:bd:38:cf:f9:a4:22:86:b0: 3d:83:a5:4d:e0:5d:fc:a9:9f:2b:c0:5a:d7:9c:53: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F6:00:E4:A6:F7:D9:46:A7:0F:99:46:CE:04:6B:41:EF:A7:3D:E4 X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:18:56:e5:94:d1:8c:55:ad:e5:f1:c2:d3:37:01:2e:66:03: 6d:03:7f:46:3e:a4:53:ea:c8:74:92:4b:60:e9:68:41:a8:7c: 24:34:e2:a2:0c:48:9e:0c:de:83:2b:9b:ac:79:09:8e:37:3a: 07:b3:7c:e8:1e:38:d9:ac:c8:1c:09:b1:99:c4:bb:d0:b8:ac: cd:8c:28:99:38:10:57:2b:73:d9:c4:c1:da:80:7d:07:bf:0f: e4:f4:e4:2e:a5:a1:cb:37:9f:95:07:95:09:c3:87:36:3f:dc: 23:fa:3f:f4:b3:75:c1:d3:6b:3a:78:fe:9f:32:4b:b9:fc:f5: 85:26:a5:b9:83:01:83:12:06:45:29:97:3c:ba:1d:0e:c0:f7: fe:62:d3:04:d1:1c:13:2c:78:dc:3d:08:cd:df:91:0f:2c:92: 4d:32:39:4e:20:04:24:1d:aa:d8:72:93:38:07:e3:e3:29:f6: e4:78:1c:4b:0e:9c:cc:e7:dd:12:b3:71:f6:c5:7e:63:6b:d6: ad:d3:70:18:4e:7f:5a:13:1b:7f:c7:1b:94:f7:e9:0b:09:27: 34:2f:ec:12:b9:c2:08:93:05:f3:7a:bb:2e:0c:4a:cb:9e:30: 81:d6:63:5b:10:ad:4d:7d:71:b4:c4:9a:12:03:84:f0:11:0d: c6:48:2a:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3rYw43mZoCzod5LH2Di3GfvkYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA5MjMyMzI1MDhaFw0yNjA5MjQyMzQ2MDhaMDMxMTAvBgNV BAMTKDY4RjYwMEU0QTZGN0Q5NDZBNzBGOTk0NkNFMDQ2QjQxRUZBNzNERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgFg119OPmaSUazhCnTYQ0GoZ 6NZAN6sEFCSwK6q98hCdm/uCUJIkO5nusqjbpUnEECBD395GIS3x3ypXYKg5PEMv 7BBpoyaXwmg3wlERGVunIgNFUJqbzgP5k2wSwgTy93bpzA9PJqZ2ZoVL7eigfBOA xG+wd1lhVq6/+tmDv4S+rIcvUX4MxqRsjyjnVdRGKjpCC5J909mu30KZF5czNsaq qIrgZbElpkBK6Cy2run4BUFTY38gcTSkjI4vegDyogf3dZQJfnUdeeKkVbi+340Z oSGj+x/Jk3t/zIJcYs8CHClEKRe9OM/5pCKGsD2DpU3gXfypnyvAWtecUxcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPYA5Kb32UanD5lGzgRrQe+nPeQwHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8YVuWU0YxVreXxwtM3AS5mA20Df0Y+pFPq yHSSS2DpaEGofCQ04qIMSJ4M3oMrm6x5CY43OgezfOgeONmsyBwJsZnEu9C4rM2M KJk4EFcrc9nEwdqAfQe/D+T05C6locs3n5UHlQnDhzY/3CP6P/SzdcHTazp4/p8y S7n89YUmpbmDAYMSBkUplzy6HQ7A9/5i0wTRHBMseNw9CM3fkQ8skk0yOU4gBCQd qthykzgH4+Mp9uR4HEsOnMzn3RKzcfbFfmNr1q3TcBhOf1oTG3/HG5T36QsJJzQv 7BK5wgiTBfN6uy4MSsueMIHWY1sQrU19cbTEmhIDhPARDcZIKiQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:04:36 2026 by rpki-client