$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft File: D441988C2049D77F9D98652623A88108BD7A9AE0.mft (raw, json) Hash identifier: iTG1356Y1c85M7FVhCXfXKIevnsF0hO/Y0LdVK38Vi4= Subject key identifier: 07:E5:ED:2B:F4:AB:CF:2C:18:B0:4D:5E:79:85:2D:D7:2F:B1:B8:0E Authority key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 Certificate issuer: /CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Certificate serial: 1CFC73A7C7548368AE2D4399CEE45FCA075E947B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 22:21:33 +0000 Manifest this update: Wed 16 Sep 2026 22:16:33 +0000 Manifest next update: Thu 17 Sep 2026 22:58:33 +0000 Files and hashes: 1: D441988C2049D77F9D98652623A88108BD7A9AE0.crl (hash: NnkVM5M7tjCZ0HBxZ4QeFlI34u0KCSYrzgl7NknZJpI=) 2: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: Ncv7w2hXW8e/iglgpSl3KIA/3oBjq+9ZdH/1lNnm5C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fc:73:a7:c7:54:83:68:ae:2d:43:99:ce:e4:5f:ca:07:5e:94:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D441988C2049D77F9D98652623A88108BD7A9AE0 Validity Not Before: Sep 16 22:16:33 2026 GMT Not After : Sep 17 22:58:33 2026 GMT Subject: CN=07E5ED2BF4ABCF2C18B04D5E79852DD72FB1B80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:79:4a:20:aa:59:2a:4a:54:c1:df:92:2c: bf:c3:32:0a:81:40:08:0c:bc:24:bb:56:8b:29:e5: 9a:d8:a2:50:4b:3d:c6:63:d3:7c:1e:f9:39:e8:c4: 96:52:d4:bb:37:6c:fe:7b:5f:50:7c:66:64:61:1b: 16:ce:a5:d4:d0:9a:d8:bc:45:7f:a3:bf:8a:bf:ed: 30:6c:2a:a4:84:36:c9:ca:08:92:5b:6e:48:d7:39: e8:84:d1:83:a9:52:c0:f0:e6:1f:10:ef:84:ea:57: c8:25:0c:dc:48:1f:96:06:90:0c:14:87:09:d7:04: 61:31:aa:14:8a:8f:ae:bf:5c:0b:0a:80:db:88:9c: c3:af:9e:ae:bc:0d:af:01:24:a4:de:2a:ef:42:cb: f5:ef:39:f3:04:70:19:d7:ee:16:7e:db:dc:2b:1f: 22:4b:4b:5e:d6:29:48:5b:02:54:54:ce:dc:03:4e: 6f:ef:15:9f:59:a5:b3:06:39:1f:92:c9:c0:51:2c: 0f:54:21:5e:d9:79:69:db:00:aa:dc:18:51:61:7d: 60:c9:25:70:97:ac:da:61:51:64:34:c6:5a:ac:f3: 19:d4:79:e5:98:f8:f4:f0:53:ff:af:4a:14:8a:1f: 1e:a9:bc:2c:76:a8:45:c3:c6:21:6c:36:36:78:13: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:ED:2B:F4:AB:CF:2C:18:B0:4D:5E:79:85:2D:D7:2F:B1:B8:0E X509v3 Authority Key Identifier: keyid:D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:33:44:3a:46:01:4a:52:09:80:e2:07:f8:36:60:96:b8:1e: 89:9f:69:4a:ff:09:4a:b3:65:61:84:38:ec:2a:77:b6:9e:85: 43:a4:01:5c:b9:c0:3a:d5:4c:46:04:3a:a2:2b:04:75:62:1c: 30:2e:d3:48:3b:c7:59:da:2d:14:6b:d4:df:b5:4a:ba:76:c3: c6:64:8b:cb:d8:31:1d:9c:cb:20:a2:5a:dc:d5:e7:3c:5c:ca: b3:d6:c2:67:24:3e:a5:7b:f1:b7:aa:ed:ed:ed:0a:d6:17:99: 6e:52:06:fd:67:3c:be:66:25:5d:50:05:14:86:4c:76:7e:8b: 44:c6:7a:5b:48:40:3f:f9:fb:98:18:38:32:bb:be:90:66:14: 9d:60:bc:cb:b9:b3:2c:bd:65:f8:37:5b:ae:67:1b:3c:47:12: 2b:6e:12:75:1c:de:95:88:66:a2:6b:b2:b1:e5:e7:23:46:19: 08:18:34:68:65:ea:4d:88:bd:5b:e7:e4:f3:a4:26:ed:ab:32: 23:a3:68:0a:64:76:35:9d:b9:dc:aa:b6:69:6f:b2:78:62:c0: ed:ca:e5:9d:cc:55:af:ae:c6:33:59:d1:b4:c1:e2:e5:88:8b: bf:52:e7:29:53:d0:96:41:53:98:11:2a:88:33:52:1d:d2:0d: 98:22:54:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPxzp8dUg2iuLUOZzuRfygdelHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhC RDdBOUFFMDAeFw0yNjA5MTYyMjE2MzNaFw0yNjA5MTcyMjU4MzNaMDMxMTAvBgNV BAMTKDA3RTVFRDJCRjRBQkNGMkMxOEIwNEQ1RTc5ODUyREQ3MkZCMUI4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadnlKIKpZKkpUwd+SLL/DMgqB QAgMvCS7Vosp5ZrYolBLPcZj03we+TnoxJZS1Ls3bP57X1B8ZmRhGxbOpdTQmti8 RX+jv4q/7TBsKqSENsnKCJJbbkjXOeiE0YOpUsDw5h8Q74TqV8glDNxIH5YGkAwU hwnXBGExqhSKj66/XAsKgNuInMOvnq68Da8BJKTeKu9Cy/XvOfMEcBnX7hZ+29wr HyJLS17WKUhbAlRUztwDTm/vFZ9ZpbMGOR+SycBRLA9UIV7ZeWnbAKrcGFFhfWDJ JXCXrNphUWQ0xlqs8xnUeeWY+PTwU/+vShSKHx6pvCx2qEXDxiFsNjZ4E5RfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB+XtK/SrzywYsE1eeYUt1y+xuA4wHwYDVR0j BBgwFoAU1EGYjCBJ13+dmGUmI6iBCL16muAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMy MDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhCRDdBOUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENDQxOTg4QzIwNDlENzdGOUQ5ODY1MjYyM0E4ODEwOEJEN0E5 QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgx MDhCRDdBOUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMzRDpGAUpSCYDiB/g2YJa4HomfaUr/CUqz ZWGEOOwqd7aehUOkAVy5wDrVTEYEOqIrBHViHDAu00g7x1naLRRr1N+1Srp2w8Zk i8vYMR2cyyCiWtzV5zxcyrPWwmckPqV78beq7e3tCtYXmW5SBv1nPL5mJV1QBRSG THZ+i0TGeltIQD/5+5gYODK7vpBmFJ1gvMu5syy9Zfg3W65nGzxHEituEnUc3pWI ZqJrsrHl5yNGGQgYNGhl6k2IvVvn5POkJu2rMiOjaApkdjWdudyqtmlvsnhiwO3K 5Z3MVa+uxjNZ0bTB4uWIi79S5ylT0JZBU5gRKogzUh3SDZgiVA4= -----END CERTIFICATE-----Generated at Thu Sep 17 12:22:26 2026 by rpki-client