$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: X6W2RPQWwN+hOnJ39AXESRJa7XM3d9/caxme2pBBDNY= Subject key identifier: 71:76:0C:53:37:D3:42:9E:28:40:45:CB:9D:D8:52:55:C4:48:20:15 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 5769E7DEFFDE9D457ED3707BA7D7831F67386238 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: BD Signing time: Mon 21 Sep 2026 17:12:53 +0000 Manifest this update: Mon 21 Sep 2026 17:07:53 +0000 Manifest next update: Tue 22 Sep 2026 18:50:53 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 2: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: E9nMtrrky8Td7ZgQZ9Rr9iaEcAhEAzgeCwgGaai+Mqk=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:69:e7:de:ff:de:9d:45:7e:d3:70:7b:a7:d7:83:1f:67:38:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Sep 21 17:07:53 2026 GMT Not After : Sep 22 18:50:53 2026 GMT Subject: CN=71760C5337D3429E284045CB9DD85255C4482015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2e:ce:03:2a:fb:2a:54:ae:9e:92:55:f2:5a: bc:6e:8a:eb:a1:e2:6b:cb:4e:a9:42:de:d1:b9:07: 14:70:fd:55:3c:8b:61:c8:b0:e8:d3:f6:df:d8:ec: 1c:8e:75:c0:87:e2:dd:56:52:f1:b1:34:db:a6:b5: f0:de:42:17:3b:86:8b:01:83:a6:18:77:19:3c:4a: a5:a8:84:b2:8e:1c:6d:c4:28:14:7c:01:e7:dd:1f: 62:70:87:7d:94:a5:40:1b:ef:5f:02:a8:12:4e:02: 13:61:71:f1:71:5d:8b:da:87:ad:bb:ae:29:62:72: d2:74:71:fd:75:43:d8:c3:cc:15:74:00:f9:93:c3: 7f:3e:aa:e6:ac:b8:71:e4:0b:e3:44:9d:75:22:11: b1:d6:17:1c:ff:86:95:6b:c8:1e:cb:ec:3b:ef:93: df:dd:5d:34:3c:9b:e7:a2:d5:dd:e3:91:da:0b:91: 0e:95:bd:f9:47:af:da:98:f7:67:45:3b:2f:2c:fb: ef:37:c8:6f:c2:71:60:93:77:1a:b0:78:d0:32:39: 84:a8:d8:c9:83:22:af:13:09:11:5c:77:33:55:43: 6a:29:7a:38:7f:4e:31:9c:0b:2f:ae:79:97:6a:c1: 3b:c2:1e:1d:f5:3e:0b:03:99:91:fd:48:9c:c4:a6: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:0C:53:37:D3:42:9E:28:40:45:CB:9D:D8:52:55:C4:48:20:15 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:da:0f:e2:08:36:ee:79:60:a9:9e:85:f9:e9:5e:02:b6:f1: 97:da:28:a1:42:4e:62:00:ba:e2:bb:be:ac:25:aa:51:3e:c4: 43:18:98:e7:f6:47:bc:a1:16:2c:3b:ed:5c:6c:9f:43:62:3f: ad:e3:fc:a5:2c:ad:e4:69:2f:43:39:fd:43:15:2a:92:1f:6f: a5:5e:1c:cd:ec:0b:bb:a4:cd:d9:42:8c:c2:5a:f4:ac:02:76: d5:a2:62:03:e9:52:6e:7e:0b:82:e9:ed:96:f5:90:b6:ca:7a: 06:ac:96:58:76:42:21:72:ed:44:b7:63:b3:1f:6d:63:f2:53: 34:13:0b:43:aa:08:3a:c1:9d:2f:15:a1:b8:7f:64:e6:d2:df: f3:a9:8b:bd:33:4d:36:74:24:26:c2:47:53:b6:a8:a7:bb:e4: d8:94:38:ee:d8:c6:63:c2:72:aa:19:d0:48:6e:b7:46:89:61: 91:45:77:34:34:fb:c4:29:05:1c:ae:b1:6f:44:88:9e:d0:f2: 0f:e4:07:d1:e9:8e:b1:39:77:ce:71:15:b1:da:94:30:75:0d: ce:1c:57:2e:ea:d2:f9:15:db:0d:0e:d8:da:b9:73:ac:ff:d7: bf:26:57:33:7f:6b:e5:51:28:91:a1:28:3c:ac:a8:41:dd:d0: de:d0:1d:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2nn3v/enUV+03B7p9eDH2c4YjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA5MjExNzA3NTNaFw0yNjA5MjIxODUwNTNaMDMxMTAvBgNV BAMTKDcxNzYwQzUzMzdEMzQyOUUyODQwNDVDQjlERDg1MjU1QzQ0ODIwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtLs4DKvsqVK6eklXyWrxuiuuh 4mvLTqlC3tG5BxRw/VU8i2HIsOjT9t/Y7ByOdcCH4t1WUvGxNNumtfDeQhc7hosB g6YYdxk8SqWohLKOHG3EKBR8AefdH2Jwh32UpUAb718CqBJOAhNhcfFxXYvah627 rilictJ0cf11Q9jDzBV0APmTw38+quasuHHkC+NEnXUiEbHWFxz/hpVryB7L7Dvv k9/dXTQ8m+ei1d3jkdoLkQ6VvflHr9qY92dFOy8s++83yG/CcWCTdxqweNAyOYSo 2MmDIq8TCRFcdzNVQ2opejh/TjGcCy+ueZdqwTvCHh31PgsDmZH9SJzEponVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcXYMUzfTQp4oQEXLndhSVcRIIBUwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOjaD+IINu55YKmehfnpXgK28ZfaKKFCTmIA uuK7vqwlqlE+xEMYmOf2R7yhFiw77Vxsn0NiP63j/KUsreRpL0M5/UMVKpIfb6Ve HM3sC7ukzdlCjMJa9KwCdtWiYgPpUm5+C4Lp7Zb1kLbKegasllh2QiFy7US3Y7Mf bWPyUzQTC0OqCDrBnS8Vobh/ZObS3/Opi70zTTZ0JCbCR1O2qKe75NiUOO7YxmPC cqoZ0Ehut0aJYZFFdzQ0+8QpBRyusW9EiJ7Q8g/kB9HpjrE5d85xFbHalDB1Dc4c Vy7q0vkV2w0O2Nq5c6z/178mVzN/a+VRKJGhKDysqEHd0N7QHfI= -----END CERTIFICATE-----Generated at Tue Sep 22 07:44:48 2026 by rpki-client