$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: SruFJgXqjYadFopvW7ALVIQBp/+C1orL5OrTPK3Vjx4= Subject key identifier: 44:C3:24:8E:12:CB:9D:1F:7D:1D:4C:C8:F5:1C:4E:E0:79:A9:61:3B Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 14D088B203D6444CA7584967C65C368B3CF4417B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:27:35 +0000 Manifest this update: Wed 23 Sep 2026 17:22:35 +0000 Manifest next update: Thu 24 Sep 2026 19:32:35 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) 2: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: 7+X7D721/4IHSO5s/iZ+0TEOe1KVVNShUfzQH7E5QuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d0:88:b2:03:d6:44:4c:a7:58:49:67:c6:5c:36:8b:3c:f4:41:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: Sep 23 17:22:35 2026 GMT Not After : Sep 24 19:32:35 2026 GMT Subject: CN=44C3248E12CB9D1F7D1D4CC8F51C4EE079A9613B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:14:5c:bf:c2:37:4f:67:ca:21:ef:47:b4: 79:74:82:29:08:26:ab:d4:c1:02:b7:40:b4:1c:d8: 3b:7b:d4:01:8a:0f:5f:7d:bc:19:d1:b4:76:58:a3: eb:ca:db:9c:48:8c:51:51:2b:a8:7f:da:92:70:34: b2:c7:b5:09:ce:7e:bc:0e:0c:87:ef:6d:8d:3f:9c: fb:1b:b0:52:b2:8c:e8:47:58:36:87:34:d4:7e:bc: a3:82:ca:ce:16:3b:c1:6b:39:f7:bc:9c:68:8d:fd: f9:30:a1:9b:1d:02:9f:d4:5c:4e:ac:33:5f:ed:87: 99:cb:11:63:5d:cb:29:a5:87:0d:88:40:1e:38:30: c9:0c:2c:e6:57:cd:12:ab:21:80:f3:e3:c1:54:a0: 66:25:43:61:7c:fd:df:22:5b:61:43:b3:0a:73:5a: db:98:59:9a:82:46:55:51:9f:7f:67:f6:7d:45:22: 55:3e:65:e5:16:b6:08:ec:c9:be:49:16:48:3d:b0: 5c:b5:69:c4:6c:bf:ce:e4:64:95:63:fc:54:41:2f: cc:6c:36:61:4e:68:98:eb:ba:a0:fa:60:db:6e:c3: 7d:e8:74:d3:bd:15:3c:6e:76:68:cd:e1:82:56:1d: e9:1e:83:8b:69:b8:9a:a9:ef:4d:01:30:32:a3:b2: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C3:24:8E:12:CB:9D:1F:7D:1D:4C:C8:F5:1C:4E:E0:79:A9:61:3B X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:48:c3:ca:69:6b:46:fe:a7:f1:91:db:bb:52:97:73:06:7b: 98:d1:70:db:97:dc:aa:03:d0:d4:34:c7:ee:ed:ed:d2:88:96: 7e:a7:d1:ea:ba:95:20:11:69:4c:54:97:2c:56:d5:80:3c:63: 4e:16:90:66:64:f0:14:92:35:dc:1c:6d:81:b0:1c:be:47:19: 12:8d:00:88:53:5b:47:e9:0c:2f:50:44:9c:c2:9d:3f:bf:3c: 70:60:85:26:9c:bf:24:be:15:b0:03:98:be:c3:01:df:bf:84: 3e:fb:2f:4e:bf:47:ba:f0:e6:18:84:37:62:20:45:20:00:9c: 19:c6:29:14:9d:69:b5:b4:c9:c4:b7:1e:bf:46:0e:d0:2f:ae: e6:24:9a:05:0b:8f:4d:4e:67:21:2a:a6:c0:cd:ff:c4:f0:13: 67:33:21:5b:c3:9e:b8:05:14:4c:4e:57:61:38:0b:f6:40:63: 7f:c8:4e:83:0a:2e:74:17:59:44:f1:d1:52:fd:92:1e:e7:c1: 4e:ad:17:aa:65:a0:3e:7b:dd:ba:ed:93:ec:b9:a8:08:a4:3b: b7:8f:44:ef:d3:d7:52:d2:60:2a:9e:f3:dd:c8:d7:de:bd:95: c6:79:a6:16:95:e3:05:05:3e:ed:4f:bd:4c:5d:f3:ca:e0:ba: 9e:04:c5:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNCIsgPWREynWElnxlw2izz0QXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjA5MjMxNzIyMzVaFw0yNjA5MjQxOTMyMzVaMDMxMTAvBgNV BAMTKDQ0QzMyNDhFMTJDQjlEMUY3RDFENENDOEY1MUM0RUUwNzlBOTYxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlRRcv8I3T2fKIe9HtHl0gikI JqvUwQK3QLQc2Dt71AGKD199vBnRtHZYo+vK25xIjFFRK6h/2pJwNLLHtQnOfrwO DIfvbY0/nPsbsFKyjOhHWDaHNNR+vKOCys4WO8FrOfe8nGiN/fkwoZsdAp/UXE6s M1/th5nLEWNdyymlhw2IQB44MMkMLOZXzRKrIYDz48FUoGYlQ2F8/d8iW2FDswpz WtuYWZqCRlVRn39n9n1FIlU+ZeUWtgjsyb5JFkg9sFy1acRsv87kZJVj/FRBL8xs NmFOaJjruqD6YNtuw33odNO9FTxudmjN4YJWHekeg4tpuJqp700BMDKjshttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMMkjhLLnR99HUzI9RxO4HmpYTswHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5Iw8ppa0b+p/GR27tSl3MGe5jRcNuX3KoD 0NQ0x+7t7dKIln6n0eq6lSARaUxUlyxW1YA8Y04WkGZk8BSSNdwcbYGwHL5HGRKN AIhTW0fpDC9QRJzCnT+/PHBghSacvyS+FbADmL7DAd+/hD77L06/R7rw5hiEN2Ig RSAAnBnGKRSdabW0ycS3Hr9GDtAvruYkmgULj01OZyEqpsDN/8TwE2czIVvDnrgF FExOV2E4C/ZAY3/IToMKLnQXWUTx0VL9kh7nwU6tF6ploD573brtk+y5qAikO7eP RO/T11LSYCqe893I1969lcZ5phaV4wUFPu1PvUxd88rgup4ExRQ= -----END CERTIFICATE-----Generated at Thu Sep 24 04:21:16 2026 by rpki-client