$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft File: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft (raw, json) Hash identifier: 26HEQnUEFgwPcCiR+zYmca4p7liCIXTIvJ6DL7lW9H8= Subject key identifier: B8:13:5E:F5:F6:15:44:16:43:60:CC:A5:1A:13:28:40:D2:18:58:AC Authority key identifier: 44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38 Certificate issuer: /CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338 Certificate serial: 3E09F3A9096222CA133BF570471BB21DE7C78B65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:17:56 +0000 Manifest this update: Mon 21 Sep 2026 09:12:56 +0000 Manifest next update: Tue 22 Sep 2026 10:11:56 +0000 Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: d1AieqPDTSFuqQUNZRSOLnDH+s/AlA829gDqC0nNU8o=) 2: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl (hash: k95FZS4Tq1tGjW0EXnc3obk9mUQU4/nc3jX49HIZY6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:09:f3:a9:09:62:22:ca:13:3b:f5:70:47:1b:b2:1d:e7:c7:8b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338 Validity Not Before: Sep 21 09:12:56 2026 GMT Not After : Sep 22 10:11:56 2026 GMT Subject: CN=B8135EF5F61544164360CCA51A132840D21858AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:e7:6b:7a:d3:78:3d:dd:cb:79:62:7d:6d: 86:c9:9b:31:a5:4d:4d:81:4d:2d:b6:82:1f:ba:d2: 32:dd:a1:17:15:94:27:90:65:0e:e8:26:b9:8c:26: fb:ee:5d:9a:ea:21:51:e4:d3:66:81:df:6f:2e:03: 63:c8:d9:59:50:9a:6e:21:03:5d:87:72:a1:49:a4: 4f:25:b7:db:79:4f:00:f2:c7:e5:91:5a:f5:bc:37: 95:c2:49:ef:63:15:31:54:6f:5a:fc:b5:d8:f8:46: 72:4c:0f:c4:92:cd:b6:c9:66:f9:a1:51:6e:38:aa: 84:03:42:67:9b:26:66:3c:bf:31:7f:ea:8f:20:16: 3b:ca:ef:d0:66:97:c2:9a:ff:7e:23:4b:f5:29:86: 2e:a6:c7:05:76:e7:c3:9a:9e:69:bc:7a:c6:81:0e: e8:bd:9a:3f:a8:73:f1:f8:59:db:23:d8:6d:69:d4: b2:57:08:d1:ca:ed:ee:0d:37:79:8f:d3:2b:a4:d4: b6:45:75:5e:82:90:85:21:de:b2:29:8a:f4:2f:36: 21:98:47:e7:01:52:b6:68:3d:6c:13:a0:e9:e8:a3: 1b:8e:b5:61:36:54:f6:f6:0c:cb:59:be:84:cf:fe: 70:c6:31:1d:3e:0c:3c:88:ab:9e:77:16:18:5d:5e: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:13:5E:F5:F6:15:44:16:43:60:CC:A5:1A:13:28:40:D2:18:58:AC X509v3 Authority Key Identifier: keyid:44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:da:20:c9:b5:f7:f7:2d:a3:68:d9:e0:d7:d3:1a:5e:c7:04: 1b:c4:45:04:2d:42:a2:10:25:4d:38:23:87:99:82:58:87:65: 90:56:2a:4f:27:a4:6b:be:22:ca:04:bb:23:e4:60:13:96:dd: 56:f2:27:60:5c:2b:15:77:23:6c:25:a3:a8:03:48:2d:7b:0a: 2e:2f:1a:1c:59:34:44:ad:bd:88:4a:bf:d1:d1:05:b3:0d:00: 2a:fe:15:bb:be:77:62:7d:f3:86:ed:4a:68:e3:c6:10:2a:25: a2:73:e5:21:ad:4d:0f:00:e9:8b:17:5f:b8:d6:30:63:a9:db: 89:1d:48:c7:4a:95:81:e6:e9:17:dc:25:c9:55:8d:26:47:3b: 5e:c2:30:a0:bf:0c:a6:45:7e:50:51:b6:3e:7f:b8:5b:c0:5b: 61:c1:6c:9b:5d:41:7b:fc:9e:b2:c6:62:85:5b:d6:33:34:57: 21:a1:2f:87:8f:19:ca:98:43:c1:54:1b:6a:cb:54:db:df:28: 64:b0:3b:80:32:d0:43:8b:d2:d8:05:5d:62:ec:ed:dd:87:78: b4:05:0a:8a:d0:e3:15:ac:6c:52:b3:e9:01:55:e9:e4:d1:0d: c0:7a:cd:dc:32:b7:76:ca:4c:6c:2e:cd:ff:85:0a:86:b8:9d: 54:d8:a9:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgnzqQliIsoTO/VwRxuyHefHi2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ1RkUwRjM2M0FCMzA2RTUzRjFFMkNEOTM5RUZEOEM4 QTEwMjMzODAeFw0yNjA5MjEwOTEyNTZaFw0yNjA5MjIxMDExNTZaMDMxMTAvBgNV BAMTKEI4MTM1RUY1RjYxNTQ0MTY0MzYwQ0NBNTFBMTMyODQwRDIxODU4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbs+dretN4Pd3LeWJ9bYbJmzGl TU2BTS22gh+60jLdoRcVlCeQZQ7oJrmMJvvuXZrqIVHk02aB328uA2PI2VlQmm4h A12HcqFJpE8lt9t5TwDyx+WRWvW8N5XCSe9jFTFUb1r8tdj4RnJMD8SSzbbJZvmh UW44qoQDQmebJmY8vzF/6o8gFjvK79Bml8Ka/34jS/Uphi6mxwV258Oanmm8esaB Dui9mj+oc/H4Wdsj2G1p1LJXCNHK7e4NN3mP0yuk1LZFdV6CkIUh3rIpivQvNiGY R+cBUrZoPWwToOnooxuOtWE2VPb2DMtZvoTP/nDGMR0+DDyIq553FhhdXiTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBNe9fYVRBZDYMylGhMoQNIYWKwwHwYDVR0j BBgwFoAURF/g82OrMG5T8eLNk579jIoQIzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGViZjYzZWQtZDQ1MC00NzdlLWIzMWItYWY5MmIxNzI2ZDJlLzAvNDQ1RkUwRjM2 M0FCMzA2RTUzRjFFMkNEOTM5RUZEOEM4QTEwMjMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDVGRTBGMzYzQUIzMDZFNTNGMUUyQ0Q5MzlFRkQ4QzhBMTAy MzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvNDQ1RkUwRjM2M0FCMzA2RTUzRjFFMkNEOTM5RUZE OEM4QTEwMjMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXaIMm19/cto2jZ4NfTGl7HBBvERQQtQqIQ JU04I4eZgliHZZBWKk8npGu+IsoEuyPkYBOW3VbyJ2BcKxV3I2wlo6gDSC17Ci4v GhxZNEStvYhKv9HRBbMNACr+Fbu+d2J984btSmjjxhAqJaJz5SGtTQ8A6YsXX7jW MGOp24kdSMdKlYHm6RfcJclVjSZHO17CMKC/DKZFflBRtj5/uFvAW2HBbJtdQXv8 nrLGYoVb1jM0VyGhL4ePGcqYQ8FUG2rLVNvfKGSwO4Ay0EOL0tgFXWLs7d2HeLQF CorQ4xWsbFKz6QFV6eTRDcB6zdwyt3bKTGwuzf+FCoa4nVTYqSY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:53:46 2026 by rpki-client