$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json) Hash identifier: walV98doji/k7BbjgXH/VwLYPagtEN2MuBTh4blSQRs= Subject key identifier: FD:02:71:A3:7E:B3:85:D6:36:20:9E:0E:D5:9D:0B:3D:27:53:D3:9D Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F Certificate serial: 750EB288A7511C7311CAE3FDE714448A8E5D5E61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft Manifest number: B4 Signing time: Sat 12 Sep 2026 11:03:54 +0000 Manifest this update: Sat 12 Sep 2026 10:58:54 +0000 Manifest next update: Sun 13 Sep 2026 12:12:54 +0000 Files and hashes: 1: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=) 2: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=) 3: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=) 4: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=) 5: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=) 6: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=) 7: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=) 8: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: r3nd+iF87bRhvlRxOqHLHC49ix3Uu/C/xYauFCPm9jE=) 9: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=) 10: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 12:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:b2:88:a7:51:1c:73:11:ca:e3:fd:e7:14:44:8a:8e:5d:5e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F Validity Not Before: Sep 12 10:58:54 2026 GMT Not After : Sep 13 12:12:54 2026 GMT Subject: CN=FD0271A37EB385D636209E0ED59D0B3D2753D39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:2c:01:62:7e:fe:13:c5:c0:3b:e8:73:0e: 83:dd:78:1a:2b:50:0a:55:9e:e0:4a:d5:4c:74:da: 94:b7:4a:cc:40:d1:87:21:6d:5d:b8:2d:f4:97:b7: 52:83:b0:18:8e:7a:c4:f5:01:bd:4c:f6:eb:eb:ae: 7a:57:0f:00:a6:4f:4a:73:a2:2f:91:1d:01:d3:a2: 97:0a:fd:8e:ef:51:2f:25:d4:6f:38:dc:f7:1c:fe: 08:43:47:94:ad:bc:13:9d:c6:fb:27:e3:34:62:9c: 9f:20:ab:0c:bc:91:e9:30:91:a2:99:7f:27:f0:95: 64:d6:b1:ab:80:5f:c1:08:a6:9f:17:e8:28:2d:5c: ac:f3:1c:60:c8:c3:b2:e9:e8:e8:4d:b7:f1:35:35: 34:90:48:53:4b:b0:01:9a:b9:6f:30:30:5a:4d:29: 02:4e:56:d4:0d:db:16:4d:d1:27:0f:9c:94:ef:d4: 4a:16:b2:ff:1d:b5:45:c7:b9:1a:95:1f:a7:34:b4: 99:2b:f8:ad:17:b2:23:8d:31:19:ef:e2:89:7f:dc: 8d:7b:ea:ec:6c:06:5a:33:a5:59:d3:5a:b7:a3:a4: 10:c5:8c:48:62:24:00:bc:1e:01:cf:ce:88:b7:c7: fe:6f:ca:d7:a9:a8:46:4d:e1:d9:a9:91:c6:d1:f4: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:02:71:A3:7E:B3:85:D6:36:20:9E:0E:D5:9D:0B:3D:27:53:D3:9D X509v3 Authority Key Identifier: keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:59:43:dc:e6:ac:cd:07:be:14:7e:20:7c:47:e6:02:ee:3f: 36:0f:83:97:a8:02:ba:f4:6f:75:97:86:7e:0e:18:2e:da:a0: 49:f0:c9:5b:55:ea:59:29:17:b9:0d:78:0c:73:47:16:be:9b: c9:6c:33:c2:9c:cd:ac:82:f0:95:e5:27:fa:74:0a:20:d6:1b: 04:59:c2:a6:8f:9c:33:d3:37:b1:6d:72:a7:1c:28:6e:20:2f: b1:27:6f:3a:7a:41:ca:b4:c6:dc:96:b9:c2:b6:2a:e0:5c:c3: 2e:8c:ed:6b:96:a7:72:f5:5d:3d:30:ff:e8:88:ca:f9:19:26: 66:03:0f:62:b1:69:18:5e:10:d3:c6:13:81:02:a7:dc:44:ba: 7f:ef:f6:b2:c2:0c:6b:02:ac:28:f9:d0:59:6d:d4:0d:1b:a3: 07:0d:3a:25:31:2c:71:87:dc:66:2d:ab:4a:f9:fd:34:2f:ac: 89:24:48:df:38:7b:dc:13:82:fc:b3:e1:c2:d4:73:cd:25:9e: 74:3e:7c:84:de:a1:12:ac:2a:53:8a:00:8d:a4:67:c7:8e:92: c5:67:4c:d8:74:b8:6e:cb:7c:a2:e4:e5:f9:86:3c:9b:66:7e: 3e:1b:e8:27:3c:a3:4c:3f:ec:85:4b:af:24:27:72:64:07:c3: af:f0:ea:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQ6yiKdRHHMRyuP95xREio5dXmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgyOTkw NEVBQUI5RjAeFw0yNjA5MTIxMDU4NTRaFw0yNjA5MTMxMjEyNTRaMDMxMTAvBgNV BAMTKEZEMDI3MUEzN0VCMzg1RDYzNjIwOUUwRUQ1OUQwQjNEMjc1M0QzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWuSwBYn7+E8XAO+hzDoPdeBor UApVnuBK1Ux02pS3SsxA0YchbV24LfSXt1KDsBiOesT1Ab1M9uvrrnpXDwCmT0pz oi+RHQHTopcK/Y7vUS8l1G843Pcc/ghDR5StvBOdxvsn4zRinJ8gqwy8kekwkaKZ fyfwlWTWsauAX8EIpp8X6CgtXKzzHGDIw7Lp6OhNt/E1NTSQSFNLsAGauW8wMFpN KQJOVtQN2xZN0ScPnJTv1EoWsv8dtUXHuRqVH6c0tJkr+K0XsiONMRnv4ol/3I17 6uxsBlozpVnTWrejpBDFjEhiJAC8HgHPzoi3x/5vytepqEZN4dmpkcbR9JcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QJxo36zhdY2IJ4O1Z0LPSdT050wHwYDVR0j BBgwFoAUBEbVcbX9V9InhrCHLHSCmQTqq58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMyODk3MDYtYTRmNC00ZTFmLTlhNmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFC NUZENTdEMjI3ODZCMDg3MkM3NDgyOTkwNEVBQUI5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2RDU3MUI1RkQ1N0QyMjc4NkIwODcyQzc0ODI5OTA0RUFB QjlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh NmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgy OTkwNEVBQUI5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFZQ9zmrM0HvhR+IHxH5gLuPzYPg5eoArr0 b3WXhn4OGC7aoEnwyVtV6lkpF7kNeAxzRxa+m8lsM8KczayC8JXlJ/p0CiDWGwRZ wqaPnDPTN7FtcqccKG4gL7Enbzp6Qcq0xtyWucK2KuBcwy6M7WuWp3L1XT0w/+iI yvkZJmYDD2KxaRheENPGE4ECp9xEun/v9rLCDGsCrCj50Flt1A0bowcNOiUxLHGH 3GYtq0r5/TQvrIkkSN84e9wTgvyz4cLUc80lnnQ+fITeoRKsKlOKAI2kZ8eOksVn TNh0uG7LfKLk5fmGPJtmfj4b6Cc8o0w/7IVLryQncmQHw6/w6vI= -----END CERTIFICATE-----Generated at Sun Sep 13 02:17:39 2026 by rpki-client