$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft File: 44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json) Hash identifier: MFkG5s/oebVFwpen/EcfwPdR8s50vZLZeEaGgY/fYOw= Subject key identifier: 96:3B:5A:98:0B:F8:35:0C:1A:93:71:6F:3F:80:7F:1E:25:4C:EF:51 Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B Certificate issuer: /CN=44428DF327C8FF800708E2196181BCB000E14F9B Certificate serial: 29DDB4D74E23183F20F6CBBD1E5D578556A3AA0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:39:50 +0000 Manifest this update: Mon 21 Sep 2026 06:34:50 +0000 Manifest next update: Tue 22 Sep 2026 08:55:50 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=) 2: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: jTvdZpV2KOhXltrrbNNCPF6WBBIRu6fhb3nKCNe/qcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:dd:b4:d7:4e:23:18:3f:20:f6:cb:bd:1e:5d:57:85:56:a3:aa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B Validity Not Before: Sep 21 06:34:50 2026 GMT Not After : Sep 22 08:55:50 2026 GMT Subject: CN=963B5A980BF8350C1A93716F3F807F1E254CEF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:02:84:6f:a4:55:89:a4:62:31:f0:91:ef: 2c:9b:31:d9:be:66:c7:01:72:69:0b:f7:1d:78:83: 05:3c:ad:b0:69:ed:64:59:01:9a:c9:8a:51:e0:97: 14:d1:0d:56:6a:b5:8a:23:56:a1:0b:13:60:48:0f: 4b:55:5e:fb:26:b9:91:31:da:b0:e6:43:3c:c8:6c: 84:b6:0c:49:4f:f5:a6:9a:f7:8b:ee:35:c4:d8:60: 1d:bf:ff:49:45:d3:e0:2b:d3:0f:54:de:34:74:d0: c8:7b:19:8a:8c:5b:83:54:d2:a0:4a:07:ac:f1:82: 96:0f:64:7c:bd:09:d3:65:3e:b6:ab:c9:24:bb:ce: 03:58:8d:e4:ed:30:8d:48:29:7a:b4:3a:73:cc:a4: e8:14:c5:a4:00:dc:fb:64:3f:7d:b8:10:6b:f0:3d: 75:bf:77:24:0f:d6:1d:be:4e:4d:3d:6c:14:52:97: ad:01:6c:9e:50:08:0f:f3:d2:95:44:97:77:37:0c: 37:ae:8d:d1:0a:ba:cf:4c:76:45:44:09:a6:b6:b8: 70:86:47:f6:90:9c:2c:82:07:1a:8d:ec:27:df:3d: b1:19:3d:d7:19:43:e4:79:4a:d6:56:ed:dc:ae:e3: 2b:ea:06:74:49:24:90:ca:43:78:9b:71:3b:74:6b: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:5A:98:0B:F8:35:0C:1A:93:71:6F:3F:80:7F:1E:25:4C:EF:51 X509v3 Authority Key Identifier: keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9d:d4:bd:80:87:d1:ab:07:ce:a5:d2:93:60:db:73:a7:1d: 6f:c3:bc:a1:c6:29:52:b9:02:46:dc:cc:3b:bb:6f:7a:cf:a0: bd:03:9f:e5:bd:37:74:64:62:ca:89:5d:dd:29:3c:41:4f:30: d5:ff:61:cf:07:e3:d8:f2:17:81:8a:e7:74:0d:ff:3e:12:df: 7c:88:95:22:58:ba:d5:4d:df:60:de:ac:12:44:78:00:1e:27: b0:6b:d2:35:00:15:8a:b5:35:3d:7d:18:80:c5:7b:e0:e2:34: 1b:76:1b:d4:4a:97:92:d8:bd:71:19:48:af:71:7c:13:26:ca: 4d:50:c4:ea:12:b8:4f:73:ba:c7:53:ac:34:69:72:f4:ab:0d: 88:43:f0:64:d4:82:a8:b3:a6:99:f2:f1:7a:86:e7:9b:23:f8: aa:0c:e8:d3:8a:64:90:b2:0b:f8:5c:08:d2:a8:37:02:0e:5c: 3d:bc:aa:e5:62:58:a0:08:49:50:0c:9b:97:7c:c8:0c:10:71: 0d:4f:5f:cc:3d:a9:b5:d0:15:02:67:08:10:f8:cf:86:ca:d7: ad:08:9d:af:4c:63:d4:20:49:b6:ac:d0:ed:10:08:95:94:3c: d2:94:1c:b5:02:fc:1c:3d:5e:08:4f:cc:f8:71:37:27:fd:96: fd:4d:46:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKd20104jGD8g9su9Hl1XhVajqgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAw MEUxNEY5QjAeFw0yNjA5MjEwNjM0NTBaFw0yNjA5MjIwODU1NTBaMDMxMTAvBgNV BAMTKDk2M0I1QTk4MEJGODM1MEMxQTkzNzE2RjNGODA3RjFFMjU0Q0VGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHwKEb6RViaRiMfCR7yybMdm+ ZscBcmkL9x14gwU8rbBp7WRZAZrJilHglxTRDVZqtYojVqELE2BID0tVXvsmuZEx 2rDmQzzIbIS2DElP9aaa94vuNcTYYB2//0lF0+Ar0w9U3jR00Mh7GYqMW4NU0qBK B6zxgpYPZHy9CdNlPrarySS7zgNYjeTtMI1IKXq0OnPMpOgUxaQA3PtkP324EGvw PXW/dyQP1h2+Tk09bBRSl60BbJ5QCA/z0pVEl3c3DDeujdEKus9MdkVECaa2uHCG R/aQnCyCBxqN7CffPbEZPdcZQ+R5StZW7dyu4yvqBnRJJJDKQ3ibcTt0a0LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljtamAv4NQwak3FvP4B/HiVM71EwHwYDVR0j BBgwFoAUREKN8yfI/4AHCOIZYYG8sADhT5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMy N0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAwMEUxNEY5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDQyOERGMzI3QzhGRjgwMDcwOEUyMTk2MTgxQkNCMDAwRTE0 RjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJD QjAwMEUxNEY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGd1L2Ah9GrB86l0pNg23OnHW/DvKHGKVK5 AkbczDu7b3rPoL0Dn+W9N3RkYsqJXd0pPEFPMNX/Yc8H49jyF4GK53QN/z4S33yI lSJYutVN32DerBJEeAAeJ7Br0jUAFYq1NT19GIDFe+DiNBt2G9RKl5LYvXEZSK9x fBMmyk1QxOoSuE9zusdTrDRpcvSrDYhD8GTUgqizppny8XqG55sj+KoM6NOKZJCy C/hcCNKoNwIOXD28quViWKAISVAMm5d8yAwQcQ1PX8w9qbXQFQJnCBD4z4bK160I na9MY9QgSbas0O0QCJWUPNKUHLUC/Bw9XghPzPhxNyf9lv1NRiY= -----END CERTIFICATE-----Generated at Mon Sep 21 16:04:29 2026 by rpki-client