$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json) Hash identifier: em8UeMV3+vYyom4ykp+MVHYJJVGr8Kpx7yiPSna2YiE= Subject key identifier: 25:AC:E4:BB:D7:9B:88:15:B1:B2:F2:44:8F:29:D2:B8:2D:27:16:4A Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 3EA75164471ECAB550C2773572FDD47852783919 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:05:41 +0000 Manifest this update: Thu 24 Sep 2026 04:00:41 +0000 Manifest next update: Fri 25 Sep 2026 05:12:41 +0000 Files and hashes: 1: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=) 2: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=) 3: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=) 4: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=) 5: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=) 6: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=) 7: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: OCKfdhbpK8SDGg2GlC5f5sYAlZQVOVSbnFKNhvpcwfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a7:51:64:47:1e:ca:b5:50:c2:77:35:72:fd:d4:78:52:78:39:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: Sep 24 04:00:41 2026 GMT Not After : Sep 25 05:12:41 2026 GMT Subject: CN=25ACE4BBD79B8815B1B2F2448F29D2B82D27164A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:e3:35:b9:ce:3f:48:58:ca:2f:1e:bb:92: 1c:b7:4f:1a:c7:92:7d:a4:48:57:bf:0e:3a:47:14: 58:e4:c9:9b:2f:c7:fc:f6:70:f7:c7:8a:5f:08:2f: 3e:1d:76:e2:61:b4:5a:bf:9f:7b:5b:cd:c5:3e:70: 85:61:2a:a1:c7:fb:19:3b:4b:65:8c:58:c9:56:99: be:01:ef:b4:80:a5:a7:3f:07:bc:73:c4:cc:28:20: ac:1c:a2:26:cc:b6:fc:6f:7c:db:56:b4:4b:84:bc: 8a:7b:cd:88:6f:cf:0c:88:72:7a:1f:22:c8:13:5a: 26:12:c3:38:24:f7:90:22:1b:f7:d1:56:43:57:64: 8e:95:49:52:68:d3:ed:cb:bb:33:7d:37:0e:d0:0a: a0:3e:d2:2c:e4:df:51:5f:82:6e:6d:d4:7b:54:44: 9f:46:9c:de:c5:a4:1d:a8:bb:00:ac:b6:7f:1e:5a: ec:63:0b:ea:82:9d:0f:76:52:ba:51:1e:8d:af:53: 58:f5:59:ad:54:6f:73:14:98:9f:c2:5b:0c:91:ea: e1:c8:97:24:45:10:39:aa:89:d1:22:0d:f5:5b:1b: 37:58:8e:1a:70:bb:4b:a2:25:22:1c:66:72:ae:11: a1:88:d9:82:72:91:3d:c4:0e:89:4f:07:65:dd:55: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:E4:BB:D7:9B:88:15:B1:B2:F2:44:8F:29:D2:B8:2D:27:16:4A X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:b6:bb:28:c0:10:c4:86:fb:bb:35:16:38:69:76:e7:d3: 64:a0:73:36:54:84:f9:4c:db:27:df:2f:ce:47:13:75:8b:4a: 54:c5:56:88:91:79:7a:ed:1f:63:f3:99:1a:bc:ed:32:d0:0d: 15:41:72:ab:00:79:06:cc:35:6e:ac:a1:c1:c9:09:09:6d:50: 7c:d5:d8:1c:8e:19:9a:f6:c0:98:f4:91:0a:11:78:42:e6:28: 5b:a9:e3:8a:a6:32:97:50:6d:2f:be:25:ec:45:22:97:8a:52: 73:e7:09:e1:8a:35:32:16:0d:39:70:e7:9b:20:02:37:94:fb: f6:49:7c:f7:0b:67:c0:81:b7:51:1e:fa:64:3d:7d:9a:fe:70: 73:27:60:1d:de:31:96:87:7c:cb:8c:c5:68:88:80:15:a3:e2: ee:b7:c5:23:99:ca:9d:b4:24:82:79:2e:df:d3:0f:d3:61:b7: 5d:71:50:04:04:ff:cb:4b:04:7e:5a:56:f1:1c:d9:85:14:f7: 5e:54:87:c1:74:7f:b6:c3:b8:fd:92:5b:87:4d:c7:3e:ad:86: fa:d1:50:6b:38:5e:a5:8a:92:89:c2:d7:d0:5d:fa:cb:da:6b: 92:13:97:dc:57:cd:d1:d4:f6:eb:82:4d:2e:a0:9a:30:b7:0b: 74:86:1c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqdRZEceyrVQwnc1cv3UeFJ4ORkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA5MjQwNDAwNDFaFw0yNjA5MjUwNTEyNDFaMDMxMTAvBgNV BAMTKDI1QUNFNEJCRDc5Qjg4MTVCMUIyRjI0NDhGMjlEMkI4MkQyNzE2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUOM1uc4/SFjKLx67khy3TxrH kn2kSFe/DjpHFFjkyZsvx/z2cPfHil8ILz4dduJhtFq/n3tbzcU+cIVhKqHH+xk7 S2WMWMlWmb4B77SApac/B7xzxMwoIKwcoibMtvxvfNtWtEuEvIp7zYhvzwyIcnof IsgTWiYSwzgk95AiG/fRVkNXZI6VSVJo0+3LuzN9Nw7QCqA+0izk31Ffgm5t1HtU RJ9GnN7FpB2ouwCstn8eWuxjC+qCnQ92UrpRHo2vU1j1Wa1Ub3MUmJ/CWwyR6uHI lyRFEDmqidEiDfVbGzdYjhpwu0uiJSIcZnKuEaGI2YJykT3EDolPB2XdVWV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJazku9ebiBWxsvJEjynSuC0nFkowHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0 RTFFRDJERjJENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiotrsowBDEhvu7NRY4aXbn02SgczZUhPlM 2yffL85HE3WLSlTFVoiReXrtH2PzmRq87TLQDRVBcqsAeQbMNW6socHJCQltUHzV 2ByOGZr2wJj0kQoReELmKFup44qmMpdQbS++JexFIpeKUnPnCeGKNTIWDTlw55sg AjeU+/ZJfPcLZ8CBt1Ee+mQ9fZr+cHMnYB3eMZaHfMuMxWiIgBWj4u63xSOZyp20 JIJ5Lt/TD9Nht11xUAQE/8tLBH5aVvEc2YUU915Uh8F0f7bDuP2SW4dNxz6thvrR UGs4XqWKkonC19Bd+svaa5ITl9xXzdHU9uuCTS6gmjC3C3SGHJE= -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:36 2026 by rpki-client