$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json) Hash identifier: Ys0z5GCXjAMiLvfN+VVKrIUa/qEybYzBG10An0x1mts= Subject key identifier: 4F:42:31:52:F2:26:E9:2B:65:A0:7E:14:D6:D3:BC:E2:D4:85:1F:1E Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Certificate serial: 5726E01F2E87F0566E3F901B953301586D4C021B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 21:44:35 +0000 Manifest this update: Wed 02 Sep 2026 21:39:35 +0000 Manifest next update: Fri 04 Sep 2026 00:27:35 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=) 2: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=) 3: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: yHpaLALlJv3cV0MumXHsWk+wD3iPO7/dCpZZbN3XBsQ=) 4: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:26:e0:1f:2e:87:f0:56:6e:3f:90:1b:95:33:01:58:6d:4c:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Validity Not Before: Sep 2 21:39:35 2026 GMT Not After : Sep 4 00:27:35 2026 GMT Subject: CN=4F423152F226E92B65A07E14D6D3BCE2D4851F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:ed:65:b4:13:5b:e6:07:9e:7b:c8:dd:bd: 83:ec:3f:5c:5a:57:bc:92:76:d8:6b:03:6b:ab:71: 7c:ae:34:77:e4:ce:50:be:5a:f7:33:ee:2a:21:f0: a4:db:94:49:07:1a:6f:93:ac:99:73:f4:b4:91:c8: c5:d5:48:df:93:35:da:ec:43:7a:71:3b:aa:c8:6a: fd:55:06:14:f0:c3:58:bd:aa:6c:89:41:1f:8c:12: df:db:a7:0e:87:cd:c4:55:b7:0a:66:ab:43:57:0d: c8:fd:86:af:b4:d8:5f:74:fa:72:bd:a6:9f:cf:d5: 49:54:9b:f4:0c:49:1a:b9:21:60:1b:5d:79:68:21: 83:cf:e5:f6:63:87:36:82:f8:e2:20:b7:43:24:f5: bd:9e:ae:d1:80:5d:39:a5:22:87:cd:f6:70:5e:d3: 32:39:51:7d:c9:2f:38:75:b0:60:73:53:22:9d:01: fb:57:bb:23:4b:5c:c0:de:97:cf:ac:af:4d:a7:bd: aa:4f:d2:92:66:d5:a5:ca:84:ec:db:3a:12:ce:f9: 45:df:d3:47:8e:4a:fd:50:0f:c3:65:8a:9b:ef:2c: c0:e0:d4:61:9a:10:4c:54:4c:a1:8b:9b:d5:e8:5d: 68:23:29:17:e8:fb:a3:f3:27:31:78:ca:d3:0a:3d: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:42:31:52:F2:26:E9:2B:65:A0:7E:14:D6:D3:BC:E2:D4:85:1F:1E X509v3 Authority Key Identifier: keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:56:c7:3c:f4:18:7f:fd:b6:71:b3:ba:ae:7f:2e:f1:77:2b: ae:49:16:2c:68:b5:c6:5f:38:b5:1a:bd:39:c8:73:fb:8b:8c: 3c:9d:02:91:81:f6:01:40:4e:c4:fb:d9:86:33:59:8c:a0:f2: 00:ed:ce:29:07:22:64:33:bd:e4:d4:9c:f1:ba:a8:5b:fc:c2: 9f:6f:61:84:2c:64:aa:68:4d:56:ef:6a:ec:0b:e6:55:9f:45: 24:f8:9b:91:88:e7:d8:c6:73:62:4d:06:77:20:74:60:36:1e: eb:99:ff:ea:00:35:a0:bd:12:55:ab:45:05:35:cb:de:21:03: 51:b9:db:f5:91:90:4d:91:61:9a:74:f5:9f:6c:bf:89:58:de: dd:29:99:83:89:e0:48:aa:21:d8:20:cd:5f:96:d0:ac:28:d2: c4:e8:1f:b1:de:10:63:3c:69:66:b0:0e:e8:a2:5e:6e:2b:1d: 75:ff:b2:bd:4a:10:55:3a:3d:d8:1f:cf:1d:bf:24:81:22:0c: 6c:fa:ff:fe:ce:34:e8:f5:67:f4:ea:14:f3:a4:05:ea:e0:ed: 32:b1:23:8d:b3:dc:4b:f3:cc:49:52:9f:76:45:83:92:bc:ee: 6b:d9:d5:25:ea:d6:43:b9:f5:52:0e:dc:77:1b:48:b2:e5:d5: 51:56:e7:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVybgHy6H8FZuP5AblTMBWG1MAhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFE NURDMEMxNzAeFw0yNjA5MDIyMTM5MzVaFw0yNjA5MDQwMDI3MzVaMDMxMTAvBgNV BAMTKDRGNDIzMTUyRjIyNkU5MkI2NUEwN0UxNEQ2RDNCQ0UyRDQ4NTFGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYdO1ltBNb5geee8jdvYPsP1xa V7ySdthrA2urcXyuNHfkzlC+Wvcz7ioh8KTblEkHGm+TrJlz9LSRyMXVSN+TNdrs Q3pxO6rIav1VBhTww1i9qmyJQR+MEt/bpw6HzcRVtwpmq0NXDcj9hq+02F90+nK9 pp/P1UlUm/QMSRq5IWAbXXloIYPP5fZjhzaC+OIgt0Mk9b2ertGAXTmlIofN9nBe 0zI5UX3JLzh1sGBzUyKdAftXuyNLXMDel8+sr02nvapP0pJm1aXKhOzbOhLO+UXf 00eOSv1QD8NlipvvLMDg1GGaEExUTKGLm9XoXWgjKRfo+6PzJzF4ytMKPQBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0IxUvIm6StloH4U1tO84tSFHx4wHwYDVR0j BBgwFoAU1VSIUV9JyeKpX2FHUrp8utXcDBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzNzBkMjQtYTY1Ni00MzM2LTg0MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1 RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFENURDMEMxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTU0ODg1MTVGNDlDOUUyQTk1RjYxNDc1MkJBN0NCQUQ1REMw QzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdD QkFENURDMEMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFWxzz0GH/9tnGzuq5/LvF3K65JFixotcZf OLUavTnIc/uLjDydApGB9gFATsT72YYzWYyg8gDtzikHImQzveTUnPG6qFv8wp9v YYQsZKpoTVbvauwL5lWfRST4m5GI59jGc2JNBncgdGA2HuuZ/+oANaC9ElWrRQU1 y94hA1G52/WRkE2RYZp09Z9sv4lY3t0pmYOJ4EiqIdggzV+W0Kwo0sToH7HeEGM8 aWawDuiiXm4rHXX/sr1KEFU6Pdgfzx2/JIEiDGz6//7ONOj1Z/TqFPOkBerg7TKx I42z3EvzzElSn3ZFg5K87mvZ1SXq1kO59VIO3HcbSLLl1VFW5+s= -----END CERTIFICATE-----Generated at Thu Sep 3 12:36:07 2026 by rpki-client