$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft File: C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft (raw, json) Hash identifier: CQCmXMbg0rTi6H/OECLmGpv3OwwRPRJIkujJtdsp+x8= Subject key identifier: 2A:EB:3A:E2:65:98:C0:4C:11:F4:F7:DE:0E:83:E0:FC:4B:AC:AC:7B Authority key identifier: C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65 Certificate issuer: /CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565 Certificate serial: 68E6E0FDAF37326F591A0259A89B5676B81599F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 21:13:55 +0000 Manifest this update: Wed 02 Sep 2026 21:08:55 +0000 Manifest next update: Fri 04 Sep 2026 00:38:55 +0000 Files and hashes: 1: C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl (hash: Gv2w6jP4lIbwYxUcCj+ZYyPxCqBnjT8yxhDVl5JfGaQ=) 2: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: p+CL8hwVFzphQY/nfttVe+5YPaPbL2hnFsuYyuP2nzU=) 3: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: Xtze3enD88H0jWQr3pzCrNkQCDOxQucFqEYtQB78EWg=) 4: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: ZC4+oqUfm9Dn/bzPBC5/o0iqNV8btw9KufEPtcg/nWs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e6:e0:fd:af:37:32:6f:59:1a:02:59:a8:9b:56:76:b8:15:99:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565 Validity Not Before: Sep 2 21:08:55 2026 GMT Not After : Sep 4 00:38:55 2026 GMT Subject: CN=2AEB3AE26598C04C11F4F7DE0E83E0FC4BACAC7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:37:2b:e0:6e:52:c6:b8:2f:48:75:26:3e: cd:a0:2d:2f:36:4a:09:34:e1:62:54:38:5f:41:31: d4:d8:15:6d:fe:d1:ac:90:c7:64:cd:e7:71:c2:9a: 24:5b:23:4a:94:fe:78:55:88:36:62:b5:62:e9:a5: ba:99:23:cf:05:f4:90:5f:a4:43:d1:9b:79:43:49: f2:02:28:a9:18:3c:d0:bb:d6:37:49:c5:5b:b1:f2: 1b:3e:4c:7a:67:1e:9c:cf:f8:b0:fc:42:f6:47:02: d8:d7:bf:c7:a0:4f:11:57:f3:f0:8b:c7:14:1d:b6: 44:36:1f:ca:2b:8c:22:f6:9c:fd:84:e3:06:7f:5e: 19:86:48:f4:ab:3b:08:96:dd:c9:c0:92:0e:9d:89: 19:49:89:fb:9a:05:77:a6:22:2a:05:dc:a7:6a:72: 94:27:ac:6e:db:48:1a:2d:81:15:dc:67:c5:b2:42: d1:83:5e:4e:a5:2f:eb:9b:88:bd:9f:cf:3a:3d:6a: f4:55:66:61:e2:fe:cb:6b:d4:3f:1f:ac:22:16:23: 76:29:fc:6b:f5:e8:9d:6f:ab:7d:70:82:63:0a:88: 91:37:a3:95:9b:8f:c7:19:4d:8d:3b:f4:ad:8f:5f: 30:61:72:53:b2:62:9c:33:7e:aa:58:b2:36:08:70: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:3A:E2:65:98:C0:4C:11:F4:F7:DE:0E:83:E0:FC:4B:AC:AC:7B X509v3 Authority Key Identifier: keyid:C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fe:2f:40:61:c6:5b:d4:b3:11:ef:58:66:a1:1c:7a:01:d4: 26:0c:a6:06:2f:36:d1:b9:c3:aa:5b:67:06:be:0e:46:24:b6: cb:77:a4:9a:e7:eb:2b:cc:77:10:70:2e:6f:b3:00:35:c5:3e: f8:21:06:d1:ed:33:f3:ea:47:dd:04:cc:16:84:95:1a:71:ed: 91:44:56:f9:db:fc:ca:db:25:e7:30:17:9f:ae:76:c8:e2:dd: ec:82:43:c3:b7:3d:e3:d5:90:25:a1:50:c4:21:40:e6:79:61: 4b:51:f2:55:83:d5:0f:9b:97:2e:48:35:22:d0:cf:06:ff:71: db:c4:52:f1:3e:d3:91:f4:53:7d:5c:e2:df:10:df:3d:79:89: 69:28:20:46:27:95:f3:59:d1:a2:d7:61:d2:c9:2d:7b:3f:71: 1f:10:4a:e2:53:4c:c8:25:ab:34:65:71:15:eb:34:cd:28:ae: 7e:37:b3:df:ce:7c:e5:ea:c8:78:66:44:22:76:bc:a1:91:06: 17:aa:bc:33:85:29:07:21:b0:a6:f0:ba:14:ea:f1:b4:3a:0d: 91:3e:74:83:73:5c:a9:ca:5a:99:94:83:91:fb:a4:0e:0d:8c: 82:cd:6b:ac:70:be:ad:8d:3c:ce:60:52:72:e4:0c:15:c4:9e: ea:8d:f3:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaObg/a83Mm9ZGgJZqJtWdrgVmfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0RTc1QjJEOTYzMEY0NjIyQ0Q0Qzc5QTQwRUNFNjUw QTNDODU2NTAeFw0yNjA5MDIyMTA4NTVaFw0yNjA5MDQwMDM4NTVaMDMxMTAvBgNV BAMTKDJBRUIzQUUyNjU5OEMwNEMxMUY0RjdERTBFODNFMEZDNEJBQ0FDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyzcr4G5SxrgvSHUmPs2gLS82 Sgk04WJUOF9BMdTYFW3+0ayQx2TN53HCmiRbI0qU/nhViDZitWLppbqZI88F9JBf pEPRm3lDSfICKKkYPNC71jdJxVux8hs+THpnHpzP+LD8QvZHAtjXv8egTxFX8/CL xxQdtkQ2H8orjCL2nP2E4wZ/XhmGSPSrOwiW3cnAkg6diRlJifuaBXemIioF3Kdq cpQnrG7bSBotgRXcZ8WyQtGDXk6lL+ubiL2fzzo9avRVZmHi/str1D8frCIWI3Yp /Gv16J1vq31wgmMKiJE3o5Wbj8cZTY079K2PXzBhclOyYpwzfqpYsjYIcAn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKus64mWYwEwR9PfeDoPg/EusrHswHwYDVR0j BBgwFoAUxE51stljD0YizUx5pA7OZQo8hWUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFiYjY2ZDAtYTkzMy00MTEwLWEwOTMtMDM4ZGE5ZWM4YjdlLzAvQzQ0RTc1QjJE OTYzMEY0NjIyQ0Q0Qzc5QTQwRUNFNjUwQTNDODU2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDRFNzVCMkQ5NjMwRjQ2MjJDRDRDNzlBNDBFQ0U2NTBBM0M4 NTY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvQzQ0RTc1QjJEOTYzMEY0NjIyQ0Q0Qzc5QTQwRUNF NjUwQTNDODU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP+L0BhxlvUsxHvWGahHHoB1CYMpgYvNtG5 w6pbZwa+DkYktst3pJrn6yvMdxBwLm+zADXFPvghBtHtM/PqR90EzBaElRpx7ZFE Vvnb/MrbJecwF5+udsji3eyCQ8O3PePVkCWhUMQhQOZ5YUtR8lWD1Q+bly5INSLQ zwb/cdvEUvE+05H0U31c4t8Q3z15iWkoIEYnlfNZ0aLXYdLJLXs/cR8QSuJTTMgl qzRlcRXrNM0orn43s9/OfOXqyHhmRCJ2vKGRBheqvDOFKQchsKbwuhTq8bQ6DZE+ dINzXKnKWpmUg5H7pA4NjILNa6xwvq2NPM5gUnLkDBXEnuqN8wA= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:26 2026 by rpki-client