$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: QJ3J1W5aFvi5dVqzdigRm/n6EFujnY6sMSvfDGPtB8A= Subject key identifier: 44:56:98:BD:F0:2E:F1:D3:04:77:7A:0D:21:E1:51:BA:EE:29:E7:CE Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 4BD3B4E72D55676324B34DBD76B8EBD58F3355C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: A4 Signing time: Mon 31 Aug 2026 16:09:31 +0000 Manifest this update: Mon 31 Aug 2026 16:04:31 +0000 Manifest next update: Tue 01 Sep 2026 18:45:31 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 3: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: Sbdw/aB01cuy0A/0mFUYywE0LSdF/0Lk3x5UMllOPzc=) 4: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 18:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d3:b4:e7:2d:55:67:63:24:b3:4d:bd:76:b8:eb:d5:8f:33:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Aug 31 16:04:31 2026 GMT Not After : Sep 1 18:45:31 2026 GMT Subject: CN=445698BDF02EF1D304777A0D21E151BAEE29E7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:e3:a6:81:24:9f:17:e8:25:8c:ce:74:c9: 20:d7:97:ce:89:f9:e5:d2:95:e7:59:64:55:a7:47: 33:56:3a:db:14:cc:68:5b:a7:22:15:ab:39:a9:ae: d9:44:f1:a6:c3:f1:c3:ac:56:f1:13:cf:e9:dc:aa: b1:d2:5c:c4:31:a5:68:fd:79:d5:77:e9:89:b6:0c: cd:b2:1d:97:27:95:33:fd:ce:9d:d7:c7:1b:3f:b1: a2:b6:14:96:12:eb:c3:f8:ad:54:7b:23:c2:fc:ff: 4b:d3:90:c8:fc:0e:c2:ee:89:e2:b2:f2:59:a9:51: 19:29:fa:56:bf:39:ed:6d:1a:f8:b3:81:86:d5:19: 3d:76:b1:0e:2b:3b:6c:9d:72:86:b9:96:7c:87:71: 0f:c6:51:6c:30:92:94:3b:c1:b4:a3:cb:f7:fc:47: e2:96:60:ec:cc:1a:90:b7:96:5f:f8:e9:dd:41:7b: 53:2e:f3:d9:07:1a:a9:3a:e2:0a:83:a8:1b:c9:08: 15:b0:0e:c1:1d:ae:25:28:e9:a2:e8:d7:b3:58:59: 87:bb:a1:7c:d2:90:37:02:bc:6b:6b:47:f8:f0:59: 7f:ce:0c:a1:7a:5b:a5:64:9b:92:46:1c:cb:ae:8a: c7:da:e7:d0:91:d1:ad:84:f8:af:81:d9:79:ff:05: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:56:98:BD:F0:2E:F1:D3:04:77:7A:0D:21:E1:51:BA:EE:29:E7:CE X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6d:ad:fc:a9:7a:d4:60:44:fa:c7:40:87:35:b6:fb:6a:4c: 19:c2:0f:67:82:de:db:86:f9:65:18:2e:b8:dd:68:63:90:fb: 98:3c:f7:a9:e8:e1:45:b5:96:c3:90:cc:db:3f:aa:55:d4:73: 9d:22:99:fd:95:e4:19:ac:f2:f8:26:e4:d7:71:78:a5:4b:04: 4b:31:f8:84:35:56:d3:2d:99:e1:45:09:2a:37:a1:3f:a0:1c: 80:4f:ab:bb:6c:6f:e3:b9:38:19:ee:b5:df:92:6c:73:a6:24: 75:84:cd:55:23:28:b7:87:7f:dd:e0:42:99:31:a2:7a:79:45: e5:91:66:10:af:14:f1:a0:a2:ce:5d:bf:5a:92:e2:3f:d7:17: 1d:c0:fa:95:72:9b:c3:3a:7e:4e:cf:4a:d3:d9:c1:4c:c6:09: 23:89:15:4e:b2:b7:00:be:94:74:fd:e4:d8:1a:08:fa:af:f4: d4:b9:8e:01:66:0d:f7:ef:f6:0a:28:a5:be:d4:96:96:d2:36: 16:36:b1:94:8a:aa:66:87:c0:47:7b:58:51:ae:09:03:b3:88: 2e:26:a1:ec:2a:43:db:c2:ea:a8:e9:53:33:07:2c:f5:e3:34: 1a:3e:05:d0:b9:8f:a3:97:9e:85:cb:3a:63:1a:68:92:31:e7: f4:bf:9e:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9O05y1VZ2Mks029drjr1Y8zVcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA4MzExNjA0MzFaFw0yNjA5MDExODQ1MzFaMDMxMTAvBgNV BAMTKDQ0NTY5OEJERjAyRUYxRDMwNDc3N0EwRDIxRTE1MUJBRUUyOUU3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzuOmgSSfF+gljM50ySDXl86J +eXSledZZFWnRzNWOtsUzGhbpyIVqzmprtlE8abD8cOsVvETz+ncqrHSXMQxpWj9 edV36Ym2DM2yHZcnlTP9zp3Xxxs/saK2FJYS68P4rVR7I8L8/0vTkMj8DsLuieKy 8lmpURkp+la/Oe1tGvizgYbVGT12sQ4rO2ydcoa5lnyHcQ/GUWwwkpQ7wbSjy/f8 R+KWYOzMGpC3ll/46d1Be1Mu89kHGqk64gqDqBvJCBWwDsEdriUo6aLo17NYWYe7 oXzSkDcCvGtrR/jwWX/ODKF6W6Vkm5JGHMuuisfa59CR0a2E+K+B2Xn/BYuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFaYvfAu8dMEd3oNIeFRuu4p584wHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9trfypetRgRPrHQIc1tvtqTBnCD2eC3tuG +WUYLrjdaGOQ+5g896no4UW1lsOQzNs/qlXUc50imf2V5Bms8vgm5NdxeKVLBEsx +IQ1VtMtmeFFCSo3oT+gHIBPq7tsb+O5OBnutd+SbHOmJHWEzVUjKLeHf93gQpkx onp5ReWRZhCvFPGgos5dv1qS4j/XFx3A+pVym8M6fk7PStPZwUzGCSOJFU6ytwC+ lHT95NgaCPqv9NS5jgFmDffv9goopb7UlpbSNhY2sZSKqmaHwEd7WFGuCQOziC4m oewqQ9vC6qjpUzMHLPXjNBo+BdC5j6OXnoXLOmMaaJIx5/S/ngo= -----END CERTIFICATE-----Generated at Tue Sep 1 05:44:43 2026 by rpki-client