$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft File: D448B410BA4C741968F8C5B34E3156EA5666874D.mft (raw, json) Hash identifier: toBBOPsvlvEXMvr7BTqFXzdvcbqOvfgs23b0dyzW6Aw= Subject key identifier: 8B:C9:E6:70:1D:F7:F8:DD:E0:8E:33:E0:12:4D:A6:AF:14:AE:91:7B Authority key identifier: D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D Certificate issuer: /CN=D448B410BA4C741968F8C5B34E3156EA5666874D Certificate serial: 0A24F3AC716203933DAA2D359E4E9A241CFA4864 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 05:07:51 +0000 Manifest this update: Tue 22 Sep 2026 05:02:51 +0000 Manifest next update: Wed 23 Sep 2026 05:53:51 +0000 Files and hashes: 1: D448B410BA4C741968F8C5B34E3156EA5666874D.crl (hash: Y7aSMmsZKaVIJgWnIvmpuS2GUhZcrbpZBuXpkNLs4PQ=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: cbAdIskM1pEjxRO+NRH9Xmr+LSfrz4v+8kHiTjQjIx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:24:f3:ac:71:62:03:93:3d:aa:2d:35:9e:4e:9a:24:1c:fa:48:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D448B410BA4C741968F8C5B34E3156EA5666874D Validity Not Before: Sep 22 05:02:51 2026 GMT Not After : Sep 23 05:53:51 2026 GMT Subject: CN=8BC9E6701DF7F8DDE08E33E0124DA6AF14AE917B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:69:56:99:df:a0:e7:70:00:8e:98:7b:54: 6f:89:7e:f6:e5:00:6b:25:36:60:b2:2e:f4:62:a9: c5:8a:34:f8:93:c4:7b:5b:5a:e6:9b:9e:5e:fa:03: e8:2c:eb:0a:14:71:a6:50:15:7f:89:68:b9:73:e7: 78:e3:6d:b4:64:23:65:5f:b6:ef:b7:24:67:37:92: f3:95:d4:e4:d7:c3:2c:61:c5:12:5b:1a:be:cf:29: a4:84:f0:81:f0:ec:e6:bf:a3:92:19:86:28:16:fc: 15:06:46:d5:9d:27:99:d6:6c:1b:1d:8b:57:71:e3: 3f:c0:58:73:01:7e:d9:9e:37:d3:a5:f4:5d:d5:6e: b1:f9:e4:19:22:66:a2:6f:04:cb:02:c0:fb:07:d5: 9f:56:0c:69:b8:cc:20:77:f7:a5:0a:6d:7b:a5:fa: f7:9b:7b:91:a4:f2:69:3e:ad:4f:0d:02:d0:ac:60: 66:19:bc:a2:e9:38:18:2b:b5:fc:ad:f9:d3:95:1c: ab:8b:fa:7f:0a:1d:70:eb:a7:0a:4b:f5:12:6c:48: dc:4c:53:78:ca:dc:c4:1b:4a:b7:f0:02:83:90:cf: d1:9f:ba:80:31:f8:a6:3c:ef:f5:e6:87:2b:bf:80: 1a:38:a4:d6:18:dd:58:0a:74:77:60:64:a1:9b:c6: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C9:E6:70:1D:F7:F8:DD:E0:8E:33:E0:12:4D:A6:AF:14:AE:91:7B X509v3 Authority Key Identifier: keyid:D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:17:13:70:ef:84:4d:64:b4:5a:93:dd:31:2c:f0:af:25:b4: a3:68:a9:91:52:29:10:6d:62:8c:f3:8d:28:07:81:a5:fe:82: 76:fe:ac:ac:ab:c3:59:43:b1:04:e6:59:31:36:de:eb:92:6f: 4b:39:2b:8e:16:56:44:e3:f3:3a:0b:81:98:b3:0b:b8:bc:5f: 23:69:58:52:e6:4b:c3:09:80:eb:8e:f2:e7:cb:f6:c8:91:91: d3:8a:84:99:31:55:3a:2b:2d:75:7b:b9:2a:71:a1:11:e5:c1: 4d:e6:25:1e:5e:d0:d8:6d:f2:14:29:b0:a1:20:f0:15:f3:6d: f8:9b:8d:bc:7f:bc:ab:07:27:fa:0d:87:ef:90:d9:d4:2c:8e: 0e:7a:78:20:16:75:24:aa:de:e4:9e:78:03:95:33:0f:2f:3d: c8:60:61:47:3f:fe:06:4d:81:83:40:d7:ac:a6:d2:2e:35:28: ad:30:2a:0b:23:24:b5:d6:30:b1:8c:f9:e7:4e:bb:40:e1:5b: 80:d9:89:a4:aa:d0:6a:35:da:ab:91:1a:f7:63:e9:5a:98:c3: a5:7f:b5:69:ea:60:80:0b:be:c3:e0:15:26:c9:0c:36:f9:03: 5e:07:1b:de:08:27:79:7c:31:11:71:94:55:6f:3c:0a:8f:c8: ec:c6:c2:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiTzrHFiA5M9qi01nk6aJBz6SGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ0OEI0MTBCQTRDNzQxOTY4RjhDNUIzNEUzMTU2RUE1 NjY2ODc0RDAeFw0yNjA5MjIwNTAyNTFaFw0yNjA5MjMwNTUzNTFaMDMxMTAvBgNV BAMTKDhCQzlFNjcwMURGN0Y4RERFMDhFMzNFMDEyNERBNkFGMTRBRTkxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cWlWmd+g53AAjph7VG+Jfvbl AGslNmCyLvRiqcWKNPiTxHtbWuabnl76A+gs6woUcaZQFX+JaLlz53jjbbRkI2Vf tu+3JGc3kvOV1OTXwyxhxRJbGr7PKaSE8IHw7Oa/o5IZhigW/BUGRtWdJ5nWbBsd i1dx4z/AWHMBftmeN9Ol9F3VbrH55BkiZqJvBMsCwPsH1Z9WDGm4zCB396UKbXul +vebe5Gk8mk+rU8NAtCsYGYZvKLpOBgrtfyt+dOVHKuL+n8KHXDrpwpL9RJsSNxM U3jK3MQbSrfwAoOQz9GfuoAx+KY87/Xmhyu/gBo4pNYY3VgKdHdgZKGbxgvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8nmcB33+N3gjjPgEk2mrxSukXswHwYDVR0j BBgwFoAU1Ei0ELpMdBlo+MWzTjFW6lZmh00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI1YTQ3YjYtNTUxMy00NjEwLTk0Y2YtMWZlZWM0ZWVlY2YzLzAvRDQ0OEI0MTBC QTRDNzQxOTY4RjhDNUIzNEUzMTU2RUE1NjY2ODc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDQ4QjQxMEJBNEM3NDE5NjhGOEM1QjM0RTMxNTZFQTU2NjY4 NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvRDQ0OEI0MTBCQTRDNzQxOTY4RjhDNUIzNEUzMTU2 RUE1NjY2ODc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0XE3DvhE1ktFqT3TEs8K8ltKNoqZFSKRBt YozzjSgHgaX+gnb+rKyrw1lDsQTmWTE23uuSb0s5K44WVkTj8zoLgZizC7i8XyNp WFLmS8MJgOuO8ufL9siRkdOKhJkxVTorLXV7uSpxoRHlwU3mJR5e0Nht8hQpsKEg 8BXzbfibjbx/vKsHJ/oNh++Q2dQsjg56eCAWdSSq3uSeeAOVMw8vPchgYUc//gZN gYNA16ym0i41KK0wKgsjJLXWMLGM+edOu0DhW4DZiaSq0Go12quRGvdj6VqYw6V/ tWnqYIALvsPgFSbJDDb5A14HG94IJ3l8MRFxlFVvPAqPyOzGwm8= -----END CERTIFICATE-----Generated at Tue Sep 22 09:10:29 2026 by rpki-client