$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft File: 01B748FE9E379A963DF80DAA39E554231A002AB4.mft (raw, json) Hash identifier: 5vJW7ALWKKJHi+XqNxC1u6IAyZBxSfS2lw+Ba/+diEE= Subject key identifier: 4A:02:8E:D5:A7:C6:8A:0D:4B:53:B0:69:1E:57:5E:1C:32:F8:4C:A5 Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 Certificate issuer: /CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Certificate serial: 63ABAFB64302EF96E23F18D8D16F2D283AA21C1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 02:48:40 +0000 Manifest this update: Fri 25 Sep 2026 02:43:40 +0000 Manifest next update: Sat 26 Sep 2026 03:01:40 +0000 Files and hashes: 1: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=) 2: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: OUi2dWqVUs4mn5PgnV5FjoZyNlm2gHfbdDmeMNM+lt0=) 3: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=) 4: 01B748FE9E379A963DF80DAA39E554231A002AB4.crl (hash: kuZbq2G29eQpI0UdNuMkTck8sToLtLgPQrj6KT0A57k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ab:af:b6:43:02:ef:96:e2:3f:18:d8:d1:6f:2d:28:3a:a2:1c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Validity Not Before: Sep 25 02:43:40 2026 GMT Not After : Sep 26 03:01:40 2026 GMT Subject: CN=4A028ED5A7C68A0D4B53B0691E575E1C32F84CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:ae:68:60:97:b0:e8:86:30:e3:97:91:7a: b6:44:ca:86:37:a8:de:25:b2:8b:ba:4d:f9:20:35: 55:73:1c:b7:9a:9f:bb:eb:76:f1:87:fd:b7:6e:5b: 0e:55:f5:2c:eb:69:41:64:87:b9:65:d7:c8:4e:3c: 01:cf:5b:39:e2:1b:53:a0:87:a6:39:43:e6:5a:ef: 25:17:a6:c4:82:29:42:9e:88:22:20:63:a6:06:96: 7d:97:00:ad:30:d3:b7:e6:f1:90:36:dd:a9:0a:e1: 9c:7d:5a:5f:f3:78:22:c8:26:ce:ec:ca:ff:4a:62: be:b9:3d:c0:bf:6d:c7:86:ab:22:31:f5:ef:68:db: c7:f9:d8:5c:09:c1:71:2a:47:2e:46:94:a1:da:10: d3:eb:b6:f8:bc:b8:b5:c4:d2:6d:02:f1:ef:f2:03: 3f:bc:89:99:57:64:58:8b:27:dd:df:4e:9e:4f:77: 64:ec:89:02:9b:f4:f1:2b:05:f0:cc:da:94:26:01: 52:5f:50:88:7e:c6:f7:eb:93:4d:86:7a:72:f3:4e: 52:56:c1:2c:53:1c:ee:f9:08:2d:78:5a:1b:e3:a9: ef:a7:d6:a6:77:e0:86:0e:a0:60:5d:83:75:7d:8a: 46:c0:30:82:3a:b4:c2:d3:cd:95:8c:50:41:0c:c0: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:02:8E:D5:A7:C6:8A:0D:4B:53:B0:69:1E:57:5E:1C:32:F8:4C:A5 X509v3 Authority Key Identifier: keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:91:71:d5:8c:79:e0:00:4b:6a:a2:ba:80:b3:a9:18:ff:fc: 35:ec:ef:fc:5f:4f:58:90:c5:93:a0:09:95:9c:07:74:f9:70: 12:b9:8b:1c:9b:a0:8b:23:c7:c1:42:3d:1a:ec:0c:b6:af:b2: c9:8e:26:be:fd:a1:6f:14:d6:bf:5b:5a:f2:78:6b:8d:3e:93: 43:32:fb:0b:88:c9:00:44:b5:6c:92:f8:05:5f:a5:0b:dd:3d: 55:6a:c5:9b:37:c6:e0:6d:83:d4:1b:7c:47:a6:95:7e:7f:07: a3:1a:d1:59:d9:0c:b3:a0:4c:53:a4:1b:77:7c:01:be:bb:f6: 2e:ff:68:18:c6:19:1b:be:db:c6:cc:a1:33:56:e5:48:5b:32: 43:bb:2f:e4:51:ac:6d:c4:56:02:1e:84:f1:e8:67:fd:d1:7b: 0e:38:4a:75:3a:a9:07:9a:8c:ed:ce:b5:5e:cf:83:1c:df:c2: ec:b8:73:5c:07:94:7e:11:e5:7d:e0:2d:78:28:c9:0c:87:a4: 2e:0d:61:c3:fc:2d:03:1b:21:fa:a4:23:9b:34:bf:f1:ff:34: 71:2d:1e:8d:58:ad:68:96:21:41:17:16:7a:a1:37:1d:07:f5: d1:5e:b8:54:06:c4:b9:5f:e8:f2:d1:2a:db:f9:28:08:d6:49: 53:3d:d9:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6uvtkMC75biPxjY0W8tKDqiHB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0MjMx QTAwMkFCNDAeFw0yNjA5MjUwMjQzNDBaFw0yNjA5MjYwMzAxNDBaMDMxMTAvBgNV BAMTKDRBMDI4RUQ1QTdDNjhBMEQ0QjUzQjA2OTFFNTc1RTFDMzJGODRDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2K5oYJew6IYw45eRerZEyoY3 qN4lsou6TfkgNVVzHLean7vrdvGH/bduWw5V9SzraUFkh7ll18hOPAHPWzniG1Og h6Y5Q+Za7yUXpsSCKUKeiCIgY6YGln2XAK0w07fm8ZA23akK4Zx9Wl/zeCLIJs7s yv9KYr65PcC/bceGqyIx9e9o28f52FwJwXEqRy5GlKHaENPrtvi8uLXE0m0C8e/y Az+8iZlXZFiLJ93fTp5Pd2TsiQKb9PErBfDM2pQmAVJfUIh+xvfrk02GenLzTlJW wSxTHO75CC14Whvjqe+n1qZ34IYOoGBdg3V9ikbAMII6tMLTzZWMUEEMwFWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgKO1afGig1LU7BpHldeHDL4TKUwHwYDVR0j BBgwFoAUAbdI/p43mpY9+A2qOeVUIxoAKrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM1MDVjYjMtYjU1ZS00MGU0LWFjNzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5 RTM3OUE5NjNERjgwREFBMzlFNTU0MjMxQTAwMkFCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUI3NDhGRTlFMzc5QTk2M0RGODBEQUEzOUU1NTQyMzFBMDAy QUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0 MjMxQTAwMkFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiRcdWMeeAAS2qiuoCzqRj//DXs7/xfT1iQ xZOgCZWcB3T5cBK5ixyboIsjx8FCPRrsDLavssmOJr79oW8U1r9bWvJ4a40+k0My +wuIyQBEtWyS+AVfpQvdPVVqxZs3xuBtg9QbfEemlX5/B6Ma0VnZDLOgTFOkG3d8 Ab679i7/aBjGGRu+28bMoTNW5UhbMkO7L+RRrG3EVgIehPHoZ/3Rew44SnU6qQea jO3OtV7Pgxzfwuy4c1wHlH4R5X3gLXgoyQyHpC4NYcP8LQMbIfqkI5s0v/H/NHEt Ho1YrWiWIUEXFnqhNx0H9dFeuFQGxLlf6PLRKtv5KAjWSVM92YI= -----END CERTIFICATE-----Generated at Fri Sep 25 05:16:48 2026 by rpki-client