$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft File: 44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json) Hash identifier: 7Fk/p25U63m/L5R9p26ATL/dpadee1Mgvd4YyHkdJKk= Subject key identifier: F2:42:F9:03:EF:41:60:DA:8E:D6:3C:F2:B9:99:A2:EE:BB:BF:50:14 Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B Certificate issuer: /CN=44428DF327C8FF800708E2196181BCB000E14F9B Certificate serial: 42A87E19B06B330A6DAAD6F9F3D103A973E49F02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 12:34:18 +0000 Manifest this update: Thu 17 Sep 2026 12:29:18 +0000 Manifest next update: Fri 18 Sep 2026 12:41:18 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=) 2: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: c+B4C9NjjSJbsCcBKZnA+x/9aive2QUCZ9N9fqnDdaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a8:7e:19:b0:6b:33:0a:6d:aa:d6:f9:f3:d1:03:a9:73:e4:9f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B Validity Not Before: Sep 17 12:29:18 2026 GMT Not After : Sep 18 12:41:18 2026 GMT Subject: CN=F242F903EF4160DA8ED63CF2B999A2EEBBBF5014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:8e:41:b3:47:1b:17:26:0d:0a:6b:79:ec: 1b:10:ab:69:d2:b8:47:f3:1e:03:45:63:ad:34:13: 05:62:8a:78:26:8c:39:ee:f9:ff:29:44:bf:7d:cd: 32:9e:4e:52:d8:b5:7d:a7:b0:59:f1:4e:97:4f:43: f5:49:de:0d:c3:e8:58:e5:55:3b:32:71:01:36:bf: c9:2f:b6:f8:c4:6b:43:02:b9:a3:7d:b9:fa:93:09: 57:4c:92:ab:7d:0a:93:92:51:6a:ce:0a:20:d6:92: d3:fe:df:60:f1:3e:54:f4:c5:a4:19:fd:cb:fa:f7: ef:ac:6a:a1:d3:50:9a:76:48:a0:44:81:c2:8c:f2: ae:11:b5:64:ca:29:1e:34:e3:5a:4c:bc:44:70:ba: c6:03:02:97:51:67:d6:db:e6:9c:14:bd:8d:49:a3: 29:fa:87:f6:c8:be:90:63:88:70:ae:df:d6:a9:9d: 5c:b7:c0:e7:40:5c:82:c8:4b:c6:b6:59:31:92:3d: bf:eb:51:bf:8e:f5:c1:35:73:9b:c6:42:9b:50:6d: 57:74:17:ad:fd:8b:19:b4:80:ae:c1:51:2e:d9:04: 80:b2:3e:02:46:fe:6c:13:2a:d7:0e:de:34:76:2a: 50:28:f5:ec:78:22:3b:75:76:55:f5:09:6b:a1:e7: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:42:F9:03:EF:41:60:DA:8E:D6:3C:F2:B9:99:A2:EE:BB:BF:50:14 X509v3 Authority Key Identifier: keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:85:d5:43:59:d7:76:30:17:35:0e:fe:ef:8d:17:d7:d0:ca: 52:de:31:dd:f8:71:2c:83:0f:aa:ea:a5:1b:ad:ec:f6:41:8a: c6:29:9a:3c:3f:7e:24:23:c8:db:6b:28:2e:75:88:38:ce:6b: d5:c1:1a:68:10:8f:96:f0:27:57:af:e2:de:b2:3c:a2:de:98: 7d:1c:b7:54:16:0b:24:f6:05:cd:ad:99:28:1f:55:4f:02:d1: 34:e2:d1:39:b8:0a:86:3a:29:0a:d7:76:71:f6:b7:07:89:31: e0:df:85:23:8f:f0:a1:ae:35:4c:56:e6:78:8d:6e:74:01:62: 89:a0:d8:46:d9:b2:f3:8f:df:a1:c9:a0:09:ee:68:85:fc:11: 8a:50:a3:63:37:c4:ee:f8:4e:29:69:2f:6b:ee:97:4f:a9:67: 40:f4:5d:ef:db:d0:7c:35:88:45:56:eb:db:c8:d9:b4:3d:68: 6a:8b:2f:86:0f:0a:03:e0:7d:86:40:8f:0d:bc:54:d2:e8:b2: 17:40:9d:d3:fb:2d:10:33:69:43:40:21:33:4c:97:41:95:8d: 5c:c2:f2:19:8a:0e:c9:35:76:eb:86:50:44:01:07:44:76:0c: c8:76:65:c1:dd:ee:62:9b:88:12:f4:2a:78:2a:bc:0c:2b:5e: 7d:2a:7f:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqh+GbBrMwptqtb589EDqXPknwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAw MEUxNEY5QjAeFw0yNjA5MTcxMjI5MThaFw0yNjA5MTgxMjQxMThaMDMxMTAvBgNV BAMTKEYyNDJGOTAzRUY0MTYwREE4RUQ2M0NGMkI5OTlBMkVFQkJCRjUwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZo5Bs0cbFyYNCmt57BsQq2nS uEfzHgNFY600EwViingmjDnu+f8pRL99zTKeTlLYtX2nsFnxTpdPQ/VJ3g3D6Fjl VTsycQE2v8kvtvjEa0MCuaN9ufqTCVdMkqt9CpOSUWrOCiDWktP+32DxPlT0xaQZ /cv69++saqHTUJp2SKBEgcKM8q4RtWTKKR4041pMvERwusYDApdRZ9bb5pwUvY1J oyn6h/bIvpBjiHCu39apnVy3wOdAXILIS8a2WTGSPb/rUb+O9cE1c5vGQptQbVd0 F639ixm0gK7BUS7ZBICyPgJG/mwTKtcO3jR2KlAo9ex4Ijt1dlX1CWuh59GbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kL5A+9BYNqO1jzyuZmi7ru/UBQwHwYDVR0j BBgwFoAUREKN8yfI/4AHCOIZYYG8sADhT5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMy N0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAwMEUxNEY5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDQyOERGMzI3QzhGRjgwMDcwOEUyMTk2MTgxQkNCMDAwRTE0 RjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJD QjAwMEUxNEY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6F1UNZ13YwFzUO/u+NF9fQylLeMd34cSyD D6rqpRut7PZBisYpmjw/fiQjyNtrKC51iDjOa9XBGmgQj5bwJ1ev4t6yPKLemH0c t1QWCyT2Bc2tmSgfVU8C0TTi0Tm4CoY6KQrXdnH2tweJMeDfhSOP8KGuNUxW5niN bnQBYomg2EbZsvOP36HJoAnuaIX8EYpQo2M3xO74TilpL2vul0+pZ0D0Xe/b0Hw1 iEVW69vI2bQ9aGqLL4YPCgPgfYZAjw28VNLoshdAndP7LRAzaUNAITNMl0GVjVzC 8hmKDsk1duuGUEQBB0R2DMh2ZcHd7mKbiBL0KngqvAwrXn0qf1s= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:36 2026 by rpki-client