$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: IDSV7apx9GTxuE0j7PRveF6zm9NWM1IcBmRJU9E4mdM= Subject key identifier: 4B:1B:4E:22:64:FA:FF:67:B0:B2:8A:0A:49:49:26:B1:3C:26:5B:23 Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 220B382830CCCE5CA5A7D11AD55BA9BCFCEE0229 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:26:22 +0000 Manifest this update: Thu 17 Sep 2026 06:21:22 +0000 Manifest next update: Fri 18 Sep 2026 07:21:22 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) 3: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: hUXSqm8yBLLl6uuGSg6MKKXU8pb+vsnWvsSeeJKmhyE=) 4: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0b:38:28:30:cc:ce:5c:a5:a7:d1:1a:d5:5b:a9:bc:fc:ee:02:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Sep 17 06:21:22 2026 GMT Not After : Sep 18 07:21:22 2026 GMT Subject: CN=4B1B4E2264FAFF67B0B28A0A494926B13C265B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:57:81:e7:bb:ba:74:3e:fc:66:9a:2d:5a: 57:0b:fd:c3:b2:8a:03:1d:da:c4:c8:1f:b8:71:a6: 45:32:41:04:2c:91:0a:47:15:74:d7:0c:f5:27:8f: 34:58:f2:bc:c5:aa:2a:33:2f:8e:1d:5b:c1:f9:b9: 01:b0:55:f2:59:27:02:41:84:2a:86:5b:5c:d0:a7: 1d:ed:38:e4:73:32:b1:f7:a9:1c:39:0b:42:e6:76: ca:4a:1e:c6:ec:1d:27:cf:97:c1:d6:ee:36:3a:34: 26:45:22:09:dc:97:40:1e:ef:b0:ff:35:48:bb:1a: a1:79:18:33:a8:d3:54:51:a4:1a:c4:dc:49:60:94: 57:91:5b:dc:84:ed:f4:16:69:ab:77:5f:36:15:c0: 12:b5:d8:57:32:8e:e4:5d:94:6f:68:44:84:b8:86: 5f:76:4e:12:37:72:57:9e:ca:71:db:cf:83:d4:b1: ee:5a:35:91:bd:ce:2d:20:f8:fa:15:1a:39:50:dd: 36:00:c4:16:d6:ac:0f:14:40:9c:48:e3:6a:16:48: 9e:b9:cc:23:8b:b8:76:e1:d2:7c:dc:11:8c:31:e7: 82:51:c3:ed:1a:0d:6d:9b:34:1f:d3:59:d8:40:25: 8b:90:96:4b:a8:ea:6e:c4:1d:40:9f:34:85:7f:b3: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:4E:22:64:FA:FF:67:B0:B2:8A:0A:49:49:26:B1:3C:26:5B:23 X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e1:55:96:d9:55:df:ff:1c:bb:fa:73:d9:f3:51:bb:1f:3e: ce:ef:cc:78:d7:0f:d2:c1:be:ef:36:ee:e3:3e:df:1b:84:f0: d1:8a:9e:3a:73:5a:93:2c:5a:eb:dd:e5:77:71:86:bd:f9:44: 78:71:c9:1d:70:99:8a:e7:af:de:d9:83:4f:60:64:d9:8a:ec: 83:e7:a4:6f:c9:5d:1a:97:d8:f2:cc:17:a1:65:68:e5:0e:dd: fc:bf:2b:32:56:e1:3d:85:cb:6b:4a:89:f7:bc:bb:aa:70:d7: 9e:6a:d5:ea:c5:54:59:7c:63:35:7f:60:a6:24:57:5e:66:e1: 4e:9c:2b:ac:13:e3:1a:c2:a5:80:2d:d2:11:69:c8:d0:e3:80: bb:fe:91:1c:3b:e0:c8:b8:b8:1c:02:bc:8a:ad:4b:2e:fd:28: fd:7e:c3:88:72:6d:b6:62:3b:a1:5e:cb:13:32:40:c7:2e:ae: b4:58:49:aa:4f:12:f3:48:86:c4:bb:95:bf:03:5d:77:8d:f9: 82:4f:3d:00:18:91:ca:cb:76:79:16:e9:82:0e:d1:25:0c:32: b3:23:57:1c:b7:68:f0:6a:d5:ec:87:12:f6:71:17:d1:02:a8: a5:dd:db:c7:0e:88:80:c9:19:0c:e3:dd:13:92:c9:e6:5f:d1: 6a:27:e1:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgs4KDDMzlylp9Ea1VupvPzuAikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA5MTcwNjIxMjJaFw0yNjA5MTgwNzIxMjJaMDMxMTAvBgNV BAMTKDRCMUI0RTIyNjRGQUZGNjdCMEIyOEEwQTQ5NDkyNkIxM0MyNjVCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyFeB57u6dD78ZpotWlcL/cOy igMd2sTIH7hxpkUyQQQskQpHFXTXDPUnjzRY8rzFqiozL44dW8H5uQGwVfJZJwJB hCqGW1zQpx3tOORzMrH3qRw5C0LmdspKHsbsHSfPl8HW7jY6NCZFIgncl0Ae77D/ NUi7GqF5GDOo01RRpBrE3ElglFeRW9yE7fQWaat3XzYVwBK12FcyjuRdlG9oRIS4 hl92ThI3cleeynHbz4PUse5aNZG9zi0g+PoVGjlQ3TYAxBbWrA8UQJxI42oWSJ65 zCOLuHbh0nzcEYwx54JRw+0aDW2bNB/TWdhAJYuQlkuo6m7EHUCfNIV/s+gPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSxtOImT6/2ewsooKSUkmsTwmWyMwHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLhVZbZVd//HLv6c9nzUbsfPs7vzHjXD9LB vu827uM+3xuE8NGKnjpzWpMsWuvd5Xdxhr35RHhxyR1wmYrnr97Zg09gZNmK7IPn pG/JXRqX2PLMF6FlaOUO3fy/KzJW4T2Fy2tKife8u6pw155q1erFVFl8YzV/YKYk V15m4U6cK6wT4xrCpYAt0hFpyNDjgLv+kRw74Mi4uBwCvIqtSy79KP1+w4hybbZi O6FeyxMyQMcurrRYSapPEvNIhsS7lb8DXXeN+YJPPQAYkcrLdnkW6YIO0SUMMrMj Vxy3aPBq1eyHEvZxF9ECqKXd28cOiIDJGQzj3ROSyeZf0Won4cU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:19:32 2026 by rpki-client