$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft File: 488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json) Hash identifier: vCYXDjvf2R9L5n+DzRs/GbjgD0PmUwKfeNBCgOdimGs= Subject key identifier: 85:E5:FA:54:0D:36:2B:3C:BC:CF:F8:3A:18:41:BE:D0:89:DA:0E:9D Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 141A9049560BFEE51FC21805396E1167330599C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft Manifest number: B3 Signing time: Fri 11 Sep 2026 02:03:31 +0000 Manifest this update: Fri 11 Sep 2026 01:58:31 +0000 Manifest next update: Sat 12 Sep 2026 03:24:31 +0000 Files and hashes: 1: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=) 2: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=) 3: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=) 4: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=) 5: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=) 6: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=) 7: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=) 8: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=) 9: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=) 10: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=) 11: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=) 12: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=) 13: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=) 14: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=) 15: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=) 16: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=) 17: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=) 18: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=) 19: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=) 20: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=) 21: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=) 22: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=) 23: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: c7R7tOho3AYR0SMlWX1noTIVb9TJ9SHOC/WR+kQb6Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1a:90:49:56:0b:fe:e5:1f:c2:18:05:39:6e:11:67:33:05:99:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: Sep 11 01:58:31 2026 GMT Not After : Sep 12 03:24:31 2026 GMT Subject: CN=85E5FA540D362B3CBCCFF83A1841BED089DA0E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:5c:5b:3e:e1:bb:0d:91:88:b8:db:3d:36: 21:92:65:68:04:0b:4c:1b:35:a4:52:79:c9:fa:0e: 3f:58:9f:a6:b5:39:a1:93:96:06:48:fd:47:99:f5: 3b:2b:54:f7:fa:7e:61:4e:fe:cd:1e:7d:bc:27:8c: 29:50:e5:1d:79:36:e0:57:be:6d:80:1d:ca:f2:ac: 62:68:18:29:92:c6:3d:59:ff:b5:36:23:4f:ca:34: 5a:65:ce:e7:8a:e2:f1:86:18:de:ac:d0:73:12:6e: 7a:6b:16:89:df:e9:34:88:04:6d:f4:60:92:06:cc: 96:df:93:26:25:3f:c6:96:6b:e7:80:6e:39:fb:85: 97:ce:12:c6:12:77:a3:57:b4:a4:3f:1d:1c:92:7c: a8:38:1f:3a:df:71:02:4e:a7:d8:ee:99:7f:f8:92: 13:86:bb:79:86:b0:66:3e:ca:9a:43:37:31:bb:14: f5:59:bf:a3:42:4c:20:6c:e4:02:b5:d1:0f:72:a3: 6a:41:c9:be:50:2e:d9:4e:bb:ae:c2:f9:94:d9:c0: 9e:6d:bd:1c:64:ac:ac:41:ac:ed:a1:aa:b3:9d:dd: 70:89:dd:06:a4:44:1e:a5:0c:29:47:1a:96:71:04: d5:69:6c:9e:6f:80:52:aa:ae:d2:34:e1:19:7b:55: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E5:FA:54:0D:36:2B:3C:BC:CF:F8:3A:18:41:BE:D0:89:DA:0E:9D X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:59:ac:df:73:28:91:3e:7a:09:b1:a6:de:fc:4e:7f:d0:39: a1:48:37:54:ad:a9:6c:e5:43:dd:a4:28:ea:93:48:25:7d:92: 71:1d:cd:12:38:b0:02:07:9f:f4:84:e8:bc:d4:ce:f7:0a:9a: f7:b1:94:47:6a:e7:22:ee:05:c8:c1:4a:62:f9:6c:53:e2:87: c7:11:07:85:2b:3c:b3:d4:a4:dd:68:24:1c:55:e8:54:6e:df: e6:f3:8c:c7:fb:1a:9e:d2:a1:24:38:51:d7:94:2c:22:fa:cf: fd:8b:d1:d2:29:75:49:35:8c:36:0d:31:18:2a:88:0a:54:fe: 8a:27:e4:5b:2f:49:39:5f:5c:d3:ad:ec:29:cc:46:89:06:22: 28:ab:58:07:57:a2:46:c0:d4:17:ad:2a:87:ce:e2:ee:13:d0: 7f:b8:3c:b5:5e:34:03:d1:8b:46:91:66:34:c7:48:b0:ec:be: 21:57:7d:e9:6f:49:9e:14:10:56:64:29:42:08:21:f8:24:4c: bd:f0:ec:9e:f2:c6:01:0e:9a:94:d7:ce:2a:26:bc:bc:07:be: 89:9f:5e:8f:3a:9e:4e:32:36:8f:a1:e4:40:f1:22:57:64:1e: 0e:03:8c:4f:7c:32:ad:1b:04:56:6c:24:ea:5e:f0:39:78:21: 9b:e9:33:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBqQSVYL/uUfwhgFOW4RZzMFmcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA5MTEwMTU4MzFaFw0yNjA5MTIwMzI0MzFaMDMxMTAvBgNV BAMTKDg1RTVGQTU0MEQzNjJCM0NCQ0NGRjgzQTE4NDFCRUQwODlEQTBFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9lxbPuG7DZGIuNs9NiGSZWgE C0wbNaRSecn6Dj9Yn6a1OaGTlgZI/UeZ9TsrVPf6fmFO/s0efbwnjClQ5R15NuBX vm2AHcryrGJoGCmSxj1Z/7U2I0/KNFplzueK4vGGGN6s0HMSbnprFonf6TSIBG30 YJIGzJbfkyYlP8aWa+eAbjn7hZfOEsYSd6NXtKQ/HRySfKg4HzrfcQJOp9jumX/4 khOGu3mGsGY+yppDNzG7FPVZv6NCTCBs5AK10Q9yo2pByb5QLtlOu67C+ZTZwJ5t vRxkrKxBrO2hqrOd3XCJ3QakRB6lDClHGpZxBNVpbJ5vgFKqrtI04Rl7VdcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUheX6VA02Kzy8z/g6GEG+0InaDp0wHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3MDI3MjYtYjJjNi00NmZjLTgy OTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2 NEY1ODRGODU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNZrN9zKJE+egmxpt78Tn/QOaFIN1StqWzl Q92kKOqTSCV9knEdzRI4sAIHn/SE6LzUzvcKmvexlEdq5yLuBcjBSmL5bFPih8cR B4UrPLPUpN1oJBxV6FRu3+bzjMf7Gp7SoSQ4UdeULCL6z/2L0dIpdUk1jDYNMRgq iApU/oon5FsvSTlfXNOt7CnMRokGIiirWAdXokbA1BetKofO4u4T0H+4PLVeNAPR i0aRZjTHSLDsviFXfelvSZ4UEFZkKUIIIfgkTL3w7J7yxgEOmpTXziomvLwHvomf Xo86nk4yNo+h5EDxIldkHg4DjE98Mq0bBFZsJOpe8Dl4IZvpM+g= -----END CERTIFICATE-----Generated at Fri Sep 11 05:56:49 2026 by rpki-client