$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft File: 488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json) Hash identifier: Z6xpfqF7c1eu0zOgDxkKPN/FAcM83priGTNXbMVQqtk= Subject key identifier: 84:FE:AE:E0:F3:F8:FF:A0:37:3D:1A:CF:14:D0:52:33:C9:7A:66:9F Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 47C1509176D91F80FEC2D7FC030283CF3E2260AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft Manifest number: C4 Signing time: Wed 23 Sep 2026 18:59:30 +0000 Manifest this update: Wed 23 Sep 2026 18:54:30 +0000 Manifest next update: Thu 24 Sep 2026 21:24:30 +0000 Files and hashes: 1: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=) 2: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=) 3: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=) 4: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=) 5: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=) 6: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: ywnef+5wi3nKFxx0ECgGhGs76kOIgmXLKdiQIj9ULW8=) 7: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=) 8: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=) 9: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=) 10: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=) 11: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=) 12: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=) 13: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=) 14: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=) 15: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=) 16: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=) 17: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=) 18: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=) 19: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=) 20: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=) 21: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=) 22: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=) 23: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c1:50:91:76:d9:1f:80:fe:c2:d7:fc:03:02:83:cf:3e:22:60:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: Sep 23 18:54:30 2026 GMT Not After : Sep 24 21:24:30 2026 GMT Subject: CN=84FEAEE0F3F8FFA0373D1ACF14D05233C97A669F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:72:58:9b:b9:af:e9:43:06:8b:7c:3d:1e: e3:13:d9:ed:1b:b4:a8:1b:7d:4b:8b:30:3b:dd:35: cd:c1:4e:ef:26:af:6f:9d:ed:5e:f6:72:65:55:82: b1:56:36:5f:a2:72:04:32:0c:9f:0a:fe:0a:94:07: bf:72:b6:5e:05:91:40:db:53:07:cb:3a:e0:21:b8: 33:da:c3:ac:d7:2b:dc:1c:24:26:a2:46:f6:38:08: 5a:38:c0:1f:72:9d:2e:b7:27:ae:57:e1:f9:73:35: fa:8e:4c:6d:a3:5b:39:6e:e1:4a:2b:04:b4:42:0c: 89:fd:60:88:89:0c:8a:c3:45:47:a1:aa:2a:ee:6a: c9:d0:b8:9b:21:57:5d:76:7c:0c:76:f1:1f:c8:4d: 7f:2f:f9:cc:bc:c4:22:a0:de:90:9a:56:17:73:c8: 70:00:19:e5:69:96:51:67:cf:c6:3b:62:0a:7a:31: 38:aa:a3:2f:4b:a9:ee:85:42:ac:98:d8:3f:d5:42: 52:90:01:c1:b5:ff:db:39:48:88:25:62:2f:85:be: ca:0b:0b:f7:7a:06:23:cd:e6:8d:e3:95:aa:91:65: 98:9b:4b:f7:9d:4c:96:91:be:78:7c:1b:6e:45:a0: 16:4a:b8:4b:c7:d0:fc:e1:78:37:a6:2c:d9:15:05: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:AE:E0:F3:F8:FF:A0:37:3D:1A:CF:14:D0:52:33:C9:7A:66:9F X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:c9:a4:aa:6e:09:05:9c:28:a8:12:dc:c7:d1:2f:c4:0c:aa: 5d:75:5b:d8:c7:c9:61:fb:4f:30:1f:33:89:49:26:ca:8f:d8: 0b:81:75:d4:58:70:a2:e2:a9:21:71:88:31:45:9d:36:91:63: f9:26:bd:b7:57:81:50:2c:fc:7f:0e:d6:c6:53:39:a1:3c:4b: 3d:73:2a:42:ca:e3:58:e5:04:80:0f:70:88:aa:66:0d:99:fe: ed:9c:31:b8:1f:3e:20:a9:1f:2a:08:ba:18:c2:41:49:b5:41: e2:0f:78:e8:e1:04:d4:e0:f5:be:58:8d:1a:07:d8:ef:09:3d: b2:7c:30:ea:2d:fd:14:fa:f9:d6:58:c8:d7:ca:ec:56:b7:20: 43:da:32:1a:b3:26:56:a8:af:4e:28:f3:1c:48:99:94:48:9b: 92:bd:3b:05:4d:bd:63:b6:b0:31:8a:7d:2d:37:88:5a:6c:59: f0:07:9a:88:05:f4:82:15:90:a9:30:b5:d0:59:19:be:37:13: 18:85:a8:8f:0c:bd:5a:26:94:bd:65:8f:48:2c:47:18:d5:9b: 2c:cd:9c:7a:99:89:a3:ba:cb:6f:ac:29:67:5d:d8:87:bc:58: c2:b3:13:aa:b8:1b:87:e3:b0:a8:20:65:f1:2d:22:ea:9e:28: 13:92:90:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8FQkXbZH4D+wtf8AwKDzz4iYKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA5MjMxODU0MzBaFw0yNjA5MjQyMTI0MzBaMDMxMTAvBgNV BAMTKDg0RkVBRUUwRjNGOEZGQTAzNzNEMUFDRjE0RDA1MjMzQzk3QTY2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMHJYm7mv6UMGi3w9HuMT2e0b tKgbfUuLMDvdNc3BTu8mr2+d7V72cmVVgrFWNl+icgQyDJ8K/gqUB79ytl4FkUDb UwfLOuAhuDPaw6zXK9wcJCaiRvY4CFo4wB9ynS63J65X4flzNfqOTG2jWzlu4Uor BLRCDIn9YIiJDIrDRUehqiruasnQuJshV112fAx28R/ITX8v+cy8xCKg3pCaVhdz yHAAGeVpllFnz8Y7Ygp6MTiqoy9Lqe6FQqyY2D/VQlKQAcG1/9s5SIglYi+FvsoL C/d6BiPN5o3jlaqRZZibS/edTJaRvnh8G25FoBZKuEvH0PzheDemLNkVBZIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhP6u4PP4/6A3PRrPFNBSM8l6Zp8wHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3MDI3MjYtYjJjNi00NmZjLTgy OTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2 NEY1ODRGODU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOHJpKpuCQWcKKgS3MfRL8QMql11W9jHyWH7 TzAfM4lJJsqP2AuBddRYcKLiqSFxiDFFnTaRY/kmvbdXgVAs/H8O1sZTOaE8Sz1z KkLK41jlBIAPcIiqZg2Z/u2cMbgfPiCpHyoIuhjCQUm1QeIPeOjhBNTg9b5YjRoH 2O8JPbJ8MOot/RT6+dZYyNfK7Fa3IEPaMhqzJlaor04o8xxImZRIm5K9OwVNvWO2 sDGKfS03iFpsWfAHmogF9IIVkKkwtdBZGb43ExiFqI8MvVomlL1lj0gsRxjVmyzN nHqZiaO6y2+sKWdd2Ie8WMKzE6q4G4fjsKggZfEtIuqeKBOSkHo= -----END CERTIFICATE-----Generated at Thu Sep 24 04:34:53 2026 by rpki-client