$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: sRLWytXwnFOfp+qSTB6xZ2Bn32MG3tcYx4e1zdIN8SM= Subject key identifier: 2F:ED:B3:24:A4:C4:6C:99:22:74:2F:05:AA:32:E8:ED:0D:0A:70:91 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 0B1EFCB9C6E17B9CBA577C4B0C9DD6678E9DB264 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 15:02:41 +0000 Manifest this update: Wed 16 Sep 2026 14:57:41 +0000 Manifest next update: Thu 17 Sep 2026 17:40:41 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 2: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: iJJ/2k36WZAFjt+N59OuxjUg6sg92qtxn6MQaJJZwQk=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1e:fc:b9:c6:e1:7b:9c:ba:57:7c:4b:0c:9d:d6:67:8e:9d:b2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Sep 16 14:57:41 2026 GMT Not After : Sep 17 17:40:41 2026 GMT Subject: CN=2FEDB324A4C46C9922742F05AA32E8ED0D0A7091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:30:2f:c4:41:73:d9:0c:14:7d:2b:5a:c4:51: 53:ba:b8:a5:79:f3:5e:92:21:fa:46:61:59:dc:94: 84:f7:71:a8:d9:78:7d:cb:06:a1:4a:cf:c8:58:b0: 94:f3:47:b7:52:db:87:e8:6d:57:e3:81:9a:ee:1c: ad:5d:c3:73:dc:2f:ea:97:f6:10:72:ac:b7:0c:dc: 80:7f:5e:36:24:5a:51:ba:ce:c0:bd:a1:8c:b9:ea: 7e:14:2d:5d:23:c7:e6:c6:f3:88:9a:3f:f2:4e:4e: 76:67:f5:a9:88:28:2f:fe:95:a5:e3:a8:e7:93:ff: 49:a2:2c:4c:11:b0:be:86:c5:53:27:5a:04:b8:62: b8:b3:4f:f5:06:39:ca:1d:91:b9:f2:dc:7d:b8:a5: 8f:78:63:9a:ff:d9:1e:e4:5c:ae:05:3f:19:44:cc: 2e:65:78:7c:b1:4b:e0:fa:64:f8:84:11:04:d8:83: cb:43:e6:27:34:ad:a0:17:cd:a2:e4:b7:af:65:07: 0c:da:5e:4e:b0:24:1b:19:9a:94:4c:54:a9:98:b6: c8:9e:87:33:04:c2:9e:73:53:7c:c7:4e:c3:d9:05: c0:7c:13:80:4b:7b:74:a4:c4:c4:5b:cd:9f:f4:86: e2:c6:54:7f:b1:ac:eb:fb:b8:53:78:55:e7:22:83: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:ED:B3:24:A4:C4:6C:99:22:74:2F:05:AA:32:E8:ED:0D:0A:70:91 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c5:75:f7:b3:1c:71:06:75:8e:91:be:ee:ae:e9:69:5c:f1: 35:5d:f9:25:7e:1a:de:e5:93:23:bb:35:eb:60:ec:18:a5:3a: d3:b3:04:02:a5:c7:62:2a:83:cc:60:4b:f2:c3:f3:50:57:2f: 42:41:6f:45:4d:28:11:45:94:5c:14:0e:f6:4b:2c:91:70:a3: ee:04:34:16:25:27:dc:b2:3f:05:9e:0e:07:29:b7:7e:e2:b8: 41:fd:cf:44:ce:8c:d0:e5:7d:6c:fa:f9:a2:33:5c:10:4d:96: 98:57:28:d6:92:b1:4c:15:28:64:10:4b:83:f4:ba:09:74:5d: 68:e5:d0:b5:b9:fb:5e:d0:26:73:5d:d2:cc:f8:f9:db:16:35: 1d:0d:0c:d2:9a:d5:da:f8:7f:99:d5:29:b2:b4:3a:31:9d:1b: 35:64:11:35:61:aa:e6:34:e8:2d:1c:38:04:ed:21:72:ef:e4: 0d:00:8d:10:49:e8:0b:42:16:7b:3b:4c:db:8c:c8:18:bc:02: 88:99:e5:f4:92:c7:b5:f3:7a:1e:ac:f2:48:d8:02:ff:68:8b: 41:18:5b:ce:68:bf:34:6a:d0:76:f2:73:68:c6:eb:22:b4:e5: 7a:01:73:f0:ef:0e:13:75:d6:a0:a7:e3:4d:80:38:d2:5c:b2: bf:09:1e:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCx78ucbhe5y6V3xLDJ3WZ46dsmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA5MTYxNDU3NDFaFw0yNjA5MTcxNzQwNDFaMDMxMTAvBgNV BAMTKDJGRURCMzI0QTRDNDZDOTkyMjc0MkYwNUFBMzJFOEVEMEQwQTcwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxMC/EQXPZDBR9K1rEUVO6uKV5 816SIfpGYVnclIT3cajZeH3LBqFKz8hYsJTzR7dS24fobVfjgZruHK1dw3PcL+qX 9hByrLcM3IB/XjYkWlG6zsC9oYy56n4ULV0jx+bG84iaP/JOTnZn9amIKC/+laXj qOeT/0miLEwRsL6GxVMnWgS4YrizT/UGOcodkbny3H24pY94Y5r/2R7kXK4FPxlE zC5leHyxS+D6ZPiEEQTYg8tD5ic0raAXzaLkt69lBwzaXk6wJBsZmpRMVKmYtsie hzMEwp5zU3zHTsPZBcB8E4BLe3SkxMRbzZ/0huLGVH+xrOv7uFN4Vecig4KtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+2zJKTEbJkidC8FqjLo7Q0KcJEwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnFdfezHHEGdY6Rvu6u6Wlc8TVd+SV+Gt7l kyO7Netg7BilOtOzBAKlx2Iqg8xgS/LD81BXL0JBb0VNKBFFlFwUDvZLLJFwo+4E NBYlJ9yyPwWeDgcpt37iuEH9z0TOjNDlfWz6+aIzXBBNlphXKNaSsUwVKGQQS4P0 ugl0XWjl0LW5+17QJnNd0sz4+dsWNR0NDNKa1dr4f5nVKbK0OjGdGzVkETVhquY0 6C0cOATtIXLv5A0AjRBJ6AtCFns7TNuMyBi8AoiZ5fSSx7Xzeh6s8kjYAv9oi0EY W85ovzRq0Hbyc2jG6yK05XoBc/DvDhN11qCn402AONJcsr8JHiI= -----END CERTIFICATE-----Generated at Thu Sep 17 07:32:04 2026 by rpki-client