$ rpki-client -vvvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft File: 4758527FF3B22322A18B7C6E96C4B735849522DD.mft (raw, json) Hash identifier: ZadoK8FhbmQhDNtNOfrljQV+f3Pq0AN+yoPXrjHlNHM= Subject key identifier: C3:55:BC:CD:1A:27:4E:A0:BD:08:C0:D9:78:BE:63:E9:FE:95:C0:25 Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD Certificate issuer: /CN=4758527FF3B22322A18B7C6E96C4B735849522DD Certificate serial: 7F8ABC3369EB71D9E2B588AD7B600DD9DA887CE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft Manifest number: 9C Signing time: Wed 26 Aug 2026 23:25:11 +0000 Manifest this update: Wed 26 Aug 2026 23:20:11 +0000 Manifest next update: Fri 28 Aug 2026 01:23:11 +0000 Files and hashes: 1: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=) 2: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=) 3: 4758527FF3B22322A18B7C6E96C4B735849522DD.crl (hash: ugz0HKhtEw83QGMMR+J+DV/I9ReKx+wWVnrk0Sh9BAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 01:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8a:bc:33:69:eb:71:d9:e2:b5:88:ad:7b:60:0d:d9:da:88:7c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD Validity Not Before: Aug 26 23:20:11 2026 GMT Not After : Aug 28 01:23:11 2026 GMT Subject: CN=C355BCCD1A274EA0BD08C0D978BE63E9FE95C025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:6c:69:a3:60:23:79:9c:3a:43:5d:b6:18: 82:d9:5f:c0:72:63:a1:5d:9c:d9:59:9b:25:f5:b9: 89:fb:d4:6a:f7:4f:ca:94:b3:89:fc:d3:b4:78:0b: 22:3a:5f:c0:4c:22:b3:cd:ba:18:a2:26:0b:8f:f9: c9:43:e8:b2:fe:b7:df:5f:6c:48:c3:da:93:6d:d4: c0:a5:7a:7c:98:c8:5b:e0:e5:5e:3d:db:cd:bd:1f: d2:dc:58:fc:cb:06:cb:c6:a2:5e:ea:ed:a3:4e:54: d5:5e:d8:ef:8b:36:af:ff:15:6d:24:b2:fa:e3:36: dc:66:1f:8c:4c:14:10:68:f6:2e:11:1c:43:dc:cb: e6:31:a5:08:ba:6b:30:d5:9e:ec:c7:4e:04:78:90: 1c:7d:7a:36:f8:f6:44:e2:35:4a:57:56:4e:2b:70: cf:c8:f4:a2:5c:f0:47:8a:be:93:53:14:db:3e:2b: ec:3c:44:4f:35:7d:22:eb:8d:f6:42:eb:7a:b8:cc: 93:25:1a:bb:d2:f9:75:0c:62:e5:2e:ea:2a:2f:8e: 50:62:00:4f:6e:00:b8:3d:17:1c:79:cb:59:50:94: a3:44:06:5b:c0:df:cd:74:e7:1c:e4:56:dc:f4:d6: de:94:56:d8:6b:9a:4b:ec:9c:87:5f:f8:28:07:07: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:55:BC:CD:1A:27:4E:A0:BD:08:C0:D9:78:BE:63:E9:FE:95:C0:25 X509v3 Authority Key Identifier: keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a8:78:8d:b2:f5:59:3a:a1:a8:0f:ca:d1:5e:fd:75:34:7b: e2:97:fd:13:c6:9f:cf:3d:26:42:b1:35:c2:8e:83:68:18:03: 61:2a:7d:9f:b6:9b:02:d0:de:88:6a:91:7e:a1:f3:5d:fd:3e: 9a:24:45:1e:48:02:c9:95:56:cb:f6:fa:d3:0d:17:11:8a:7a: 75:de:0b:b9:5c:b4:49:3e:27:1c:5a:fc:4c:1b:9f:c2:0b:de: 0a:eb:8b:b4:4d:55:a2:f2:54:a2:5d:87:b8:45:a0:09:16:fa: 6b:40:74:fe:16:03:8d:e5:81:21:31:8e:26:03:f5:ae:84:06: ee:27:cb:76:dd:c4:44:ae:8c:a9:6b:47:25:bc:7f:e5:55:7e: 4d:8d:41:5a:52:c2:e4:e9:f7:6f:cb:78:cd:78:21:4a:e0:cb: 4f:96:21:c4:0d:c4:76:49:65:7f:63:e9:5d:10:3d:c0:0f:b3: fa:18:94:db:6b:59:b4:9f:bd:83:62:c4:60:76:b8:10:fa:5b: 50:ef:63:08:59:b6:f2:2f:d9:01:d7:79:97:b8:1f:73:c7:67: 36:51:48:23:df:05:63:1b:5b:48:a5:7d:f7:ca:cf:8f:10:67: a4:53:b2:8a:41:bf:5d:49:10:7c:0c:4e:93:dd:c3:a3:5d:3c: 41:ac:0c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4q8M2nrcdnitYite2AN2dqIfOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4 NDk1MjJERDAeFw0yNjA4MjYyMzIwMTFaFw0yNjA4MjgwMTIzMTFaMDMxMTAvBgNV BAMTKEMzNTVCQ0NEMUEyNzRFQTBCRDA4QzBEOTc4QkU2M0U5RkU5NUMwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOyGxpo2AjeZw6Q122GILZX8By Y6FdnNlZmyX1uYn71Gr3T8qUs4n807R4CyI6X8BMIrPNuhiiJguP+clD6LL+t99f bEjD2pNt1MClenyYyFvg5V492829H9LcWPzLBsvGol7q7aNOVNVe2O+LNq//FW0k svrjNtxmH4xMFBBo9i4RHEPcy+YxpQi6azDVnuzHTgR4kBx9ejb49kTiNUpXVk4r cM/I9KJc8EeKvpNTFNs+K+w8RE81fSLrjfZC63q4zJMlGrvS+XUMYuUu6iovjlBi AE9uALg9Fxx5y1lQlKNEBlvA38105xzkVtz01t6UVthrmkvsnIdf+CgHB7O/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1W8zRonTqC9CMDZeL5j6f6VwCUwHwYDVR0j BBgwFoAUR1hSf/OyIyKhi3xulsS3NYSVIt0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1ZWU4ZmMtNmVmZS00MTVkLWI2YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZG M0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4NDk1MjJERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzU4NTI3RkYzQjIyMzIyQTE4QjdDNkU5NkM0QjczNTg0OTUy MkRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3 MzU4NDk1MjJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCoeI2y9Vk6oagPytFe/XU0e+KX/RPGn889 JkKxNcKOg2gYA2EqfZ+2mwLQ3ohqkX6h8139PpokRR5IAsmVVsv2+tMNFxGKenXe C7lctEk+Jxxa/Ewbn8IL3grri7RNVaLyVKJdh7hFoAkW+mtAdP4WA43lgSExjiYD 9a6EBu4ny3bdxESujKlrRyW8f+VVfk2NQVpSwuTp92/LeM14IUrgy0+WIcQNxHZJ ZX9j6V0QPcAPs/oYlNtrWbSfvYNixGB2uBD6W1DvYwhZtvIv2QHXeZe4H3PHZzZR SCPfBWMbW0ilfffKz48QZ6RTsopBv11JEHwMTpPdw6NdPEGsDOM= -----END CERTIFICATE-----Generated at Thu Aug 27 17:40:56 2026 by rpki-client