$ rpki-client -vvvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json) Hash identifier: FMwh7X8KPzNfilV35rGkoKXNMdSqm1p7zky5CYPy2Yc= Subject key identifier: 4A:7E:96:04:CB:C7:9E:82:55:71:A4:78:C5:18:F1:36:C9:2F:C5:C5 Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B Certificate serial: 3B084825F15920C8F1C5AFE9DA88D18817585470 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft Manifest number: A3 Signing time: Tue 01 Sep 2026 01:25:58 +0000 Manifest this update: Tue 01 Sep 2026 01:20:58 +0000 Manifest next update: Wed 02 Sep 2026 01:48:58 +0000 Files and hashes: 1: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: agm7TVL4LQj49zxMNEZpnfB/jH84AkzBxzrTV6W+NJQ=) 2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=) 3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 01:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:08:48:25:f1:59:20:c8:f1:c5:af:e9:da:88:d1:88:17:58:54:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B Validity Not Before: Sep 1 01:20:58 2026 GMT Not After : Sep 2 01:48:58 2026 GMT Subject: CN=4A7E9604CBC79E825571A478C518F136C92FC5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:15:ec:e1:ea:67:bf:33:b3:e9:a5:2d:0b: ec:ad:67:f3:cf:1e:2b:1d:8c:78:ec:fb:34:67:9c: 1a:7f:3e:eb:c6:a0:6c:25:07:98:69:ff:a6:81:ba: c8:43:48:cc:6b:2d:62:c2:bf:fe:07:1f:b2:19:ab: e2:ab:a3:0e:cd:d9:e4:9a:18:93:5e:62:70:7c:22: 2f:2e:cf:9e:8e:7e:6f:96:49:e8:59:ec:be:86:a2: 94:97:13:17:e5:80:f1:9b:17:38:16:4d:6e:9a:5d: 62:00:89:1a:5b:da:7c:d7:ff:fe:44:66:ea:da:84: a8:92:b0:e6:94:d1:a0:93:85:11:28:7a:4d:b1:8f: bf:df:5c:c3:90:26:71:0f:03:01:a4:d1:46:b5:3f: 3b:c1:91:f7:32:85:3a:be:da:8d:80:86:ea:9e:ff: 8e:64:61:ca:57:9e:4a:2d:2a:f7:22:6e:42:fe:88: 09:6d:b4:82:f6:f6:6d:97:17:54:ac:6a:76:ad:49: f2:0e:f5:59:37:22:bd:c4:d6:da:9a:51:f4:32:b5: 2e:60:d4:ff:b4:09:c8:57:13:65:47:48:8e:fe:e9: 0a:0c:15:8c:7e:3c:b0:c5:03:b3:e6:ef:ca:32:cd: 8b:69:0f:8a:b0:4f:46:50:86:dd:33:81:7c:88:ef: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7E:96:04:CB:C7:9E:82:55:71:A4:78:C5:18:F1:36:C9:2F:C5:C5 X509v3 Authority Key Identifier: keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8b:88:43:47:f0:bc:b1:5a:bf:9d:d3:bf:9f:55:db:65:5b: f2:8d:81:54:5b:20:b3:e3:98:47:fe:c1:1a:db:99:16:02:58: 1d:2d:e5:b2:c1:7c:77:b4:a3:02:d0:86:ca:9f:b6:68:60:09: 60:4e:94:0a:e3:58:53:90:21:d8:6e:cc:f2:cf:52:3f:af:b2: 8b:c8:30:0d:f7:fa:bd:a4:8b:99:dc:b4:4a:e6:ae:72:53:e7: 87:86:16:84:29:84:02:6f:2b:87:61:a1:09:f2:3a:69:50:28: fa:20:57:a0:19:21:1d:1d:c7:cc:34:cc:15:df:44:15:1e:71: 25:0c:73:ec:96:2b:c3:49:5e:55:1e:28:08:8f:91:75:f7:9d: f4:bc:32:e7:d3:17:95:c7:9a:8b:4f:12:c8:1b:e4:d0:1d:58: b7:06:85:79:e3:bd:5d:1a:2d:d7:ef:8f:40:e6:f1:9e:67:19: ca:dc:b3:4a:1f:64:c6:7a:1c:e5:c5:84:97:3f:74:44:2d:9f: 81:1e:17:7e:5b:3a:5c:a0:04:3b:68:36:dd:aa:1f:6f:5e:8f: b6:b8:f9:39:c4:84:3c:2a:3e:b4:9f:62:91:fa:fe:f0:9f:42: db:f6:0e:43:76:bd:ba:84:cd:cf:b6:43:b4:dc:89:1f:43:f9: ee:b9:f6:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwhIJfFZIMjxxa/p2ojRiBdYVHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5ODU4QzZDMzVGOEY5QzhDQUE3NUEwNjU2ODZGNzMy RjZGNEYzQjAeFw0yNjA5MDEwMTIwNThaFw0yNjA5MDIwMTQ4NThaMDMxMTAvBgNV BAMTKDRBN0U5NjA0Q0JDNzlFODI1NTcxQTQ3OEM1MThGMTM2QzkyRkM1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mRXs4epnvzOz6aUtC+ytZ/PP HisdjHjs+zRnnBp/PuvGoGwlB5hp/6aBushDSMxrLWLCv/4HH7IZq+Krow7N2eSa GJNeYnB8Ii8uz56Ofm+WSehZ7L6GopSXExflgPGbFzgWTW6aXWIAiRpb2nzX//5E ZurahKiSsOaU0aCThREoek2xj7/fXMOQJnEPAwGk0Ua1PzvBkfcyhTq+2o2Ahuqe /45kYcpXnkotKvcibkL+iAlttIL29m2XF1SsanatSfIO9Vk3Ir3E1tqaUfQytS5g 1P+0CchXE2VHSI7+6QoMFYx+PLDFA7Pm78oyzYtpD4qwT0ZQht0zgXyI7+o1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSn6WBMvHnoJVcaR4xRjxNskvxcUwHwYDVR0j BBgwFoAURJhYxsNfj5yMqnWgZWhvcy9vTzswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzAvNDQ5ODU4QzZD MzVGOEY5QzhDQUE3NUEwNjU2ODZGNzMyRjZGNEYzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80NDk4NThDNkMzNUY4RjlDOENBQTc1QTA2NTY4NkY3MzJGNkY0 RjNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNDQ5ODU4QzZDMzVGOEY5QzhDQUE3NUEwNjU2ODZG NzMyRjZGNEYzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuLiENH8LyxWr+d07+fVdtlW/KNgVRbILPj mEf+wRrbmRYCWB0t5bLBfHe0owLQhsqftmhgCWBOlArjWFOQIdhuzPLPUj+vsovI MA33+r2ki5nctErmrnJT54eGFoQphAJvK4dhoQnyOmlQKPogV6AZIR0dx8w0zBXf RBUecSUMc+yWK8NJXlUeKAiPkXX3nfS8MufTF5XHmotPEsgb5NAdWLcGhXnjvV0a Ldfvj0Dm8Z5nGcrcs0ofZMZ6HOXFhJc/dEQtn4EeF35bOlygBDtoNt2qH29ej7a4 +TnEhDwqPrSfYpH6/vCfQtv2DkN2vbqEzc+2Q7TciR9D+e659iA= -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:44 2026 by rpki-client