$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: 7eIHEGT73tAPMIS07D9u0BAPIt78dRttSsKysak/rEk= Subject key identifier: 95:CB:4D:B6:16:5C:F7:CB:B8:FD:FC:95:D5:8F:D1:B4:7B:26:0D:44 Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 673EBA2F363889FB16CF8937807E366E0E5B31EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:31:14 +0000 Manifest this update: Thu 24 Sep 2026 08:26:14 +0000 Manifest next update: Fri 25 Sep 2026 12:16:14 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: esSUkMtbEDPgAeTwyXN2G6PnJkErkmxsjxz6xj79ymw=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3e:ba:2f:36:38:89:fb:16:cf:89:37:80:7e:36:6e:0e:5b:31:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Sep 24 08:26:14 2026 GMT Not After : Sep 25 12:16:14 2026 GMT Subject: CN=95CB4DB6165CF7CBB8FDFC95D58FD1B47B260D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:f1:18:02:13:7e:42:2b:3d:21:9b:54:85: c3:81:7a:b0:96:1c:3d:8d:b1:a8:1a:a4:52:2c:49: d6:92:ca:20:8c:51:6e:a8:44:ec:d8:3c:ea:46:e6: aa:f7:b2:e5:83:b5:d7:24:6c:02:e6:4c:ec:5f:b7: bd:d0:f2:d6:69:af:58:cc:96:cf:ea:e3:07:8e:ce: dd:9e:83:64:a5:6c:a0:dc:7d:08:c2:cf:24:13:2b: be:0d:0a:5d:7d:4e:b7:54:c3:c6:27:f5:ae:ac:25: 1d:f2:e0:c8:3f:c9:87:4e:89:f7:3b:e0:be:51:9b: 88:b6:cd:56:21:7a:cf:e2:39:a9:cc:b5:af:c3:91: ec:96:ec:97:99:ba:ac:d1:bc:da:d7:83:fd:cc:f0: 6d:73:c1:86:0a:b5:00:7e:1d:d0:2e:77:cf:87:9f: e6:05:56:e0:04:a8:53:14:6f:83:14:91:10:6d:03: 2c:fd:95:c1:8f:52:ae:78:97:d4:8d:04:b8:8f:3a: a4:0a:f1:50:8c:02:ee:6e:45:de:73:dc:44:01:c3: 39:a1:e6:2a:41:d6:a5:95:69:a5:b5:92:38:77:9d: 99:24:c7:bd:1e:7e:82:c6:63:d6:18:f1:e6:5a:cd: 72:fb:14:c1:0e:68:99:59:d1:8c:55:e8:a9:05:9e: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CB:4D:B6:16:5C:F7:CB:B8:FD:FC:95:D5:8F:D1:B4:7B:26:0D:44 X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8b:5a:63:63:b9:80:de:0d:c7:45:69:b1:5b:df:33:eb:77: 2f:a3:23:ee:a0:99:b2:b0:3b:9c:3e:e2:36:67:ee:59:ab:23: c6:64:6a:bf:71:9e:3b:92:b8:b7:3b:5c:b8:d3:44:ea:df:0c: f4:a0:21:34:f1:21:5f:28:b6:a4:59:ad:af:82:59:6a:94:98: e1:fc:f1:b4:d7:93:07:44:f2:31:bc:40:2c:34:82:bd:77:e4: 13:5b:1f:f5:28:cf:a1:48:14:8a:63:36:40:57:97:22:d5:90: 0b:2a:92:f1:fe:76:45:5d:fa:d9:36:c8:ac:7c:b7:d9:1e:8e: f6:9a:ba:02:ec:bb:0b:99:c2:60:88:6f:40:99:1e:48:94:e5: 7e:13:a3:8d:88:3b:bf:af:84:a0:a1:00:2f:01:d6:05:86:91: 8c:53:10:58:8e:8f:2e:25:63:62:4c:bf:48:f6:22:b1:7c:2d: 27:f6:d0:16:b9:8e:03:56:10:df:9f:a2:f6:07:ce:4d:54:d7: eb:0e:56:35:96:8c:69:8d:77:8f:44:c9:62:b4:36:ec:74:5a: 63:97:f1:cc:f0:a8:76:2a:f7:ac:66:39:e5:82:42:21:22:0e: ca:a9:bb:bf:8c:cb:d1:1e:37:a4:bb:c4:3b:d8:62:ae:51:24: bd:1f:12:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZz66LzY4ifsWz4k3gH42bg5bMeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA5MjQwODI2MTRaFw0yNjA5MjUxMjE2MTRaMDMxMTAvBgNV BAMTKDk1Q0I0REI2MTY1Q0Y3Q0JCOEZERkM5NUQ1OEZEMUI0N0IyNjBENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wvEYAhN+Qis9IZtUhcOBerCW HD2NsagapFIsSdaSyiCMUW6oROzYPOpG5qr3suWDtdckbALmTOxft73Q8tZpr1jM ls/q4weOzt2eg2SlbKDcfQjCzyQTK74NCl19TrdUw8Yn9a6sJR3y4Mg/yYdOifc7 4L5Rm4i2zVYhes/iOanMta/DkeyW7JeZuqzRvNrXg/3M8G1zwYYKtQB+HdAud8+H n+YFVuAEqFMUb4MUkRBtAyz9lcGPUq54l9SNBLiPOqQK8VCMAu5uRd5z3EQBwzmh 5ipB1qWVaaW1kjh3nZkkx70efoLGY9YY8eZazXL7FMEOaJlZ0YxV6KkFnt8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlctNthZc98u4/fyV1Y/RtHsmDUQwHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaLWmNjuYDeDcdFabFb3zPrdy+jI+6gmbKw O5w+4jZn7lmrI8Zkar9xnjuSuLc7XLjTROrfDPSgITTxIV8otqRZra+CWWqUmOH8 8bTXkwdE8jG8QCw0gr135BNbH/Uoz6FIFIpjNkBXlyLVkAsqkvH+dkVd+tk2yKx8 t9kejvaaugLsuwuZwmCIb0CZHkiU5X4To42IO7+vhKChAC8B1gWGkYxTEFiOjy4l Y2JMv0j2IrF8LSf20Ba5jgNWEN+fovYHzk1U1+sOVjWWjGmNd49EyWK0Nux0WmOX 8czwqHYq96xmOeWCQiEiDsqpu7+My9EeN6S7xDvYYq5RJL0fEqI= -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:18 2026 by rpki-client