$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft File: C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft (raw, json) Hash identifier: l4biciWliiY2FCf/45AgPFgsy2F+ptVDjbZX9soZ5L0= Subject key identifier: B3:C0:98:F9:69:0C:9A:4B:47:72:CA:83:46:F5:F2:4A:D1:7F:00:0A Authority key identifier: C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65 Certificate issuer: /CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565 Certificate serial: 1FAC0A1C17B149CC56FDF6166A485766EEC29BFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft Manifest number: BD Signing time: Mon 21 Sep 2026 11:30:38 +0000 Manifest this update: Mon 21 Sep 2026 11:25:38 +0000 Manifest next update: Tue 22 Sep 2026 14:07:38 +0000 Files and hashes: 1: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: p+CL8hwVFzphQY/nfttVe+5YPaPbL2hnFsuYyuP2nzU=) 2: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: ZC4+oqUfm9Dn/bzPBC5/o0iqNV8btw9KufEPtcg/nWs=) 3: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: Xtze3enD88H0jWQr3pzCrNkQCDOxQucFqEYtQB78EWg=) 4: C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl (hash: OpONy1Vutn0qhPc59R+sioQjU1U3FfRd6g3NRWte75o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ac:0a:1c:17:b1:49:cc:56:fd:f6:16:6a:48:57:66:ee:c2:9b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C44E75B2D9630F4622CD4C79A40ECE650A3C8565 Validity Not Before: Sep 21 11:25:38 2026 GMT Not After : Sep 22 14:07:38 2026 GMT Subject: CN=B3C098F9690C9A4B4772CA8346F5F24AD17F000A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:e2:10:bd:67:3e:ee:59:6c:5f:a5:97:38: 36:f8:26:60:81:ef:bd:c1:cd:67:0e:a9:2c:20:88: db:d1:cd:1d:04:43:31:13:9d:64:0e:40:47:87:67: 0d:22:37:5c:12:54:cd:7d:d9:0e:06:93:66:21:5d: ff:bc:15:0a:01:37:cb:77:f2:0f:63:68:b8:3d:83: c3:4b:d1:05:18:16:df:54:8f:c8:48:ab:72:d2:96: af:4e:11:44:55:41:51:63:6f:39:9c:b9:7f:5c:8d: 67:1b:d2:ed:97:2d:b1:fa:56:df:7b:37:b9:4b:58: 6d:4b:dc:27:ac:7a:4c:58:98:3e:16:6e:4e:1f:7b: 7d:14:56:c6:f0:f1:87:70:3b:b4:3a:a2:61:7c:3b: 8b:87:0d:69:58:4f:28:12:51:0d:8b:c6:0f:57:fe: 81:67:da:5c:03:2c:7b:c6:dd:ea:6b:1a:6b:43:ec: ed:61:72:03:f8:06:f7:d1:50:f6:27:47:a0:96:7a: 87:4a:51:92:66:96:2a:7a:02:b3:16:80:80:9d:a0: 90:11:fa:d1:c0:9b:9c:ca:f6:7c:1b:24:0e:80:f5: 8e:d0:19:7b:97:44:07:bb:a0:e5:1f:ab:14:ae:22: 32:07:e1:b5:68:02:1b:09:87:99:db:d4:14:cf:c4: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C0:98:F9:69:0C:9A:4B:47:72:CA:83:46:F5:F2:4A:D1:7F:00:0A X509v3 Authority Key Identifier: keyid:C4:4E:75:B2:D9:63:0F:46:22:CD:4C:79:A4:0E:CE:65:0A:3C:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/C44E75B2D9630F4622CD4C79A40ECE650A3C8565.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:77:aa:fd:42:3c:8e:d4:87:33:ee:cf:55:18:1f:c2:dc:52: 48:5e:78:b2:98:b3:df:2e:c3:f8:1e:ff:79:da:53:55:44:ad: 72:b9:6c:7e:ad:46:03:01:15:af:51:92:e6:80:bd:0a:83:3c: c3:af:6b:55:43:8f:70:66:75:8c:7c:92:5b:96:02:11:5a:69: e5:52:f4:0a:22:ef:02:b3:03:ec:e6:1d:6b:2d:53:fa:96:2e: ae:6f:a1:03:0d:c9:13:12:89:a2:b7:d7:d9:e2:ae:3b:52:a4: cd:6c:d5:53:78:aa:99:c8:ce:10:6e:87:1d:34:69:1e:02:e0: d8:90:4b:e0:c4:10:60:c0:7d:a0:d0:22:53:8e:58:fd:d3:12: 9d:ab:13:2c:aa:25:df:d6:e6:1d:3b:d3:0d:3f:d5:82:f6:b1: 8a:4f:b9:b8:51:68:8d:32:d7:2a:6e:4b:a0:28:ab:15:1b:2c: 56:9c:b0:4a:39:3d:11:48:3a:c4:0d:05:b8:b6:68:67:aa:a3: 10:a0:c4:2d:e2:d7:97:a4:11:7f:4b:77:ca:27:57:2d:f0:94: 29:ae:4b:61:ad:c5:66:3c:36:bf:17:32:09:18:a0:78:be:49: 42:a9:ce:e4:f3:6a:1d:3a:3a:17:6d:57:17:24:fa:f2:36:96: 02:27:5e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6wKHBexScxW/fYWakhXZu7Cm/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0RTc1QjJEOTYzMEY0NjIyQ0Q0Qzc5QTQwRUNFNjUw QTNDODU2NTAeFw0yNjA5MjExMTI1MzhaFw0yNjA5MjIxNDA3MzhaMDMxMTAvBgNV BAMTKEIzQzA5OEY5NjkwQzlBNEI0NzcyQ0E4MzQ2RjVGMjRBRDE3RjAwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91+IQvWc+7llsX6WXODb4JmCB 773BzWcOqSwgiNvRzR0EQzETnWQOQEeHZw0iN1wSVM192Q4Gk2YhXf+8FQoBN8t3 8g9jaLg9g8NL0QUYFt9Uj8hIq3LSlq9OEURVQVFjbzmcuX9cjWcb0u2XLbH6Vt97 N7lLWG1L3CesekxYmD4Wbk4fe30UVsbw8YdwO7Q6omF8O4uHDWlYTygSUQ2Lxg9X /oFn2lwDLHvG3eprGmtD7O1hcgP4BvfRUPYnR6CWeodKUZJmlip6ArMWgICdoJAR +tHAm5zK9nwbJA6A9Y7QGXuXRAe7oOUfqxSuIjIH4bVoAhsJh5nb1BTPxEq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs8CY+WkMmktHcsqDRvXyStF/AAowHwYDVR0j BBgwFoAUxE51stljD0YizUx5pA7OZQo8hWUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFiYjY2ZDAtYTkzMy00MTEwLWEwOTMtMDM4ZGE5ZWM4YjdlLzAvQzQ0RTc1QjJE OTYzMEY0NjIyQ0Q0Qzc5QTQwRUNFNjUwQTNDODU2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDRFNzVCMkQ5NjMwRjQ2MjJDRDRDNzlBNDBFQ0U2NTBBM0M4 NTY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvQzQ0RTc1QjJEOTYzMEY0NjIyQ0Q0Qzc5QTQwRUNF NjUwQTNDODU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAl3qv1CPI7UhzPuz1UYH8LcUkheeLKYs98u w/ge/3naU1VErXK5bH6tRgMBFa9RkuaAvQqDPMOva1VDj3BmdYx8kluWAhFaaeVS 9Aoi7wKzA+zmHWstU/qWLq5voQMNyRMSiaK319nirjtSpM1s1VN4qpnIzhBuhx00 aR4C4NiQS+DEEGDAfaDQIlOOWP3TEp2rEyyqJd/W5h070w0/1YL2sYpPubhRaI0y 1ypuS6AoqxUbLFacsEo5PRFIOsQNBbi2aGeqoxCgxC3i15ekEX9Ld8onVy3wlCmu S2GtxWY8Nr8XMgkYoHi+SUKpzuTzah06OhdtVxck+vI2lgInXtM= -----END CERTIFICATE-----Generated at Mon Sep 21 15:43:03 2026 by rpki-client