$ rpki-client -vvvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft File: 4758527FF3B22322A18B7C6E96C4B735849522DD.mft (raw, json) Hash identifier: vgUMQ/qva3BAQx9dieZ6EJPGzkA4g5cVGpPV8ECzlhg= Subject key identifier: 72:4F:B0:9B:A9:19:64:42:E9:25:7E:C6:72:23:23:54:3D:1E:41:43 Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD Certificate issuer: /CN=4758527FF3B22322A18B7C6E96C4B735849522DD Certificate serial: 3C2A1B7FD0DD05E0223407D4FB46185FDFE1493B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft Manifest number: CE Signing time: Sat 03 Oct 2026 15:19:16 +0000 Manifest this update: Sat 03 Oct 2026 15:14:16 +0000 Manifest next update: Sun 04 Oct 2026 15:31:16 +0000 Files and hashes: 1: 4758527FF3B22322A18B7C6E96C4B735849522DD.crl (hash: 4xv8mdFNqMiQjiOqyhncYvSsWu4aAWfieY66UTy0nuI=) 2: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=) 3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 15:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2a:1b:7f:d0:dd:05:e0:22:34:07:d4:fb:46:18:5f:df:e1:49:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD Validity Not Before: Oct 3 15:14:16 2026 GMT Not After : Oct 4 15:31:16 2026 GMT Subject: CN=724FB09BA9196442E9257EC6722323543D1E4143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:33:ff:bd:ef:4a:96:9e:52:5a:43:b1:00: b6:75:ce:0e:f9:3c:9f:91:26:f8:40:d8:b5:7d:82: 09:94:ee:e2:a3:68:83:ec:d9:4d:4a:17:be:5f:d1: 1b:6a:ac:38:c6:93:75:07:66:e2:25:ab:45:e3:45: 4c:0d:64:08:46:36:cc:19:ee:5b:6d:ff:e1:38:2c: 40:fd:28:ba:7e:6d:92:99:fb:f6:c4:d6:96:f4:3b: 8b:24:f7:14:92:6e:71:2e:4b:cb:25:b3:94:f5:e8: 1f:d6:15:09:20:37:c7:a8:2d:d4:f1:b4:53:20:bc: f1:1e:3d:da:9d:06:b0:0d:2f:56:e4:43:3a:ea:b6: 6f:2f:0c:47:27:3b:93:13:cd:8f:43:c0:b7:9d:30: 98:ac:4f:1f:9d:fd:45:0c:61:d6:d7:71:76:0a:a9: 84:52:2d:1a:22:50:1e:07:d5:03:41:4c:d2:66:42: 46:27:30:a7:e1:97:ce:22:1f:88:6e:d4:3c:d6:59: ae:e0:dc:1c:d9:9a:d4:7c:f2:88:be:4c:95:b0:62: 32:36:72:62:c4:ad:f8:99:9c:04:1b:97:85:2f:13: 7a:85:aa:f0:48:f0:53:55:fa:df:d7:00:d4:17:d8: 81:27:7d:76:7a:ef:68:06:53:36:d9:1f:f7:63:b0: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:B0:9B:A9:19:64:42:E9:25:7E:C6:72:23:23:54:3D:1E:41:43 X509v3 Authority Key Identifier: keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:33:5d:a2:ba:da:90:51:d7:8b:b5:c7:71:ea:37:d3:2c: 0e:99:28:d2:21:97:80:d1:f7:df:c1:71:ae:d2:5b:a5:49:2b: 6f:de:87:14:57:49:e3:30:b8:e4:83:13:12:65:de:c1:ff:bd: 48:28:15:1d:3c:15:c8:33:0a:b4:ee:39:06:43:b6:46:63:82: 33:3e:b2:c4:de:f7:9e:fc:76:b8:66:43:96:c1:83:e4:1c:fb: 43:48:96:98:46:15:63:e8:99:85:a9:87:39:73:7e:db:44:1c: 96:32:b1:94:8f:5a:ac:3e:1e:51:43:9d:0c:9d:5e:15:67:14: e9:fd:ab:1a:79:54:2e:e7:81:ed:9c:be:4c:04:88:28:ed:1e: 0d:1b:37:6b:a1:38:ab:fc:71:7e:5b:7f:15:6a:f5:35:7f:02: 88:30:c3:63:27:33:28:cb:0e:d5:43:fd:68:76:2c:b8:e3:19: f5:7f:11:a7:81:88:ea:bd:ac:35:f6:d1:bb:e5:16:34:d5:f4: c2:23:95:71:f0:41:6d:aa:1d:87:20:ee:f6:86:08:58:ff:af: a3:24:bd:0c:bc:65:41:df:cf:15:42:fe:10:32:7b:a2:09:d6: 9c:bc:9d:98:45:46:81:f3:8b:cb:a1:ba:5f:59:0d:7a:c0:9d: 21:75:ec:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCobf9DdBeAiNAfU+0YYX9/hSTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4 NDk1MjJERDAeFw0yNjEwMDMxNTE0MTZaFw0yNjEwMDQxNTMxMTZaMDMxMTAvBgNV BAMTKDcyNEZCMDlCQTkxOTY0NDJFOTI1N0VDNjcyMjMyMzU0M0QxRTQxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHDP/ve9Klp5SWkOxALZ1zg75 PJ+RJvhA2LV9ggmU7uKjaIPs2U1KF75f0RtqrDjGk3UHZuIlq0XjRUwNZAhGNswZ 7ltt/+E4LED9KLp+bZKZ+/bE1pb0O4sk9xSSbnEuS8sls5T16B/WFQkgN8eoLdTx tFMgvPEePdqdBrANL1bkQzrqtm8vDEcnO5MTzY9DwLedMJisTx+d/UUMYdbXcXYK qYRSLRoiUB4H1QNBTNJmQkYnMKfhl84iH4hu1DzWWa7g3BzZmtR88oi+TJWwYjI2 cmLErfiZnAQbl4UvE3qFqvBI8FNV+t/XANQX2IEnfXZ672gGUzbZH/djsBevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUck+wm6kZZELpJX7GciMjVD0eQUMwHwYDVR0j BBgwFoAUR1hSf/OyIyKhi3xulsS3NYSVIt0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1ZWU4ZmMtNmVmZS00MTVkLWI2YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZG M0IyMjMyMkExOEI3QzZFOTZDNEI3MzU4NDk1MjJERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzU4NTI3RkYzQjIyMzIyQTE4QjdDNkU5NkM0QjczNTg0OTUy MkRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvNDc1ODUyN0ZGM0IyMjMyMkExOEI3QzZFOTZDNEI3 MzU4NDk1MjJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHjM12iutqQUdeLtcdx6jfTLA6ZKNIhl4DR 99/Bca7SW6VJK2/ehxRXSeMwuOSDExJl3sH/vUgoFR08FcgzCrTuOQZDtkZjgjM+ ssTe9578drhmQ5bBg+Qc+0NIlphGFWPomYWphzlzfttEHJYysZSPWqw+HlFDnQyd XhVnFOn9qxp5VC7nge2cvkwEiCjtHg0bN2uhOKv8cX5bfxVq9TV/Aogww2MnMyjL DtVD/Wh2LLjjGfV/EaeBiOq9rDX20bvlFjTV9MIjlXHwQW2qHYcg7vaGCFj/r6Mk vQy8ZUHfzxVC/hAye6IJ1py8nZhFRoHzi8uhul9ZDXrAnSF17NY= -----END CERTIFICATE-----Generated at Sun Oct 4 11:20:04 2026 by rpki-client