$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: MflSQU95qn61BYlqo1tbnEDiMffROF2N8IhFD1XuRAw= Subject key identifier: 19:44:FA:35:17:8A:66:45:ED:8D:C2:23:6B:AF:F0:49:EB:DA:61:E3 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 456C1CE4009367E3E23397B5583B36A1EF66C8C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:02:38 +0000 Manifest this update: Mon 21 Sep 2026 20:57:38 +0000 Manifest next update: Wed 23 Sep 2026 00:59:38 +0000 Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) 2: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: FAQ1RFsKta8spun67OuKZN3cOZiIah16eDKxncQRmPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6c:1c:e4:00:93:67:e3:e2:33:97:b5:58:3b:36:a1:ef:66:c8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Sep 21 20:57:38 2026 GMT Not After : Sep 23 00:59:38 2026 GMT Subject: CN=1944FA35178A6645ED8DC2236BAFF049EBDA61E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:04:ab:8a:16:3b:1c:8a:90:ca:f4:10:1e: b7:6e:f7:af:c6:5f:20:b2:a4:40:59:4b:27:76:f6: 27:76:22:f8:f3:77:46:67:ee:1f:e9:7a:79:85:2e: ab:9a:de:76:6e:db:26:e0:48:17:62:87:0a:4c:f8: ca:1c:cf:30:9a:7b:18:23:59:39:e4:3c:da:41:38: 95:81:65:e7:de:b9:a5:4f:2d:91:a2:0a:ec:89:87: 1c:8d:bf:9f:77:3b:c7:48:ab:1d:86:24:02:81:19: 0f:87:7c:53:a2:a9:d4:c2:51:9f:91:d7:2a:0a:df: 63:9e:db:5e:43:e9:e7:c7:28:d0:55:da:d0:07:a4: e4:7d:b3:6d:74:a7:a6:15:36:f9:9d:e0:e0:ee:2e: 6d:59:e7:b4:01:4a:01:13:f4:84:f8:69:00:3f:65: 1a:fd:5d:fd:ff:90:e3:22:5b:08:d1:b3:9f:11:15: d9:64:ec:7c:43:4b:6e:8b:b5:c6:b7:f7:81:99:77: 29:e1:e2:b9:54:4f:7a:3b:36:ed:42:cc:16:66:98: 17:d3:3d:27:4e:b6:3e:62:72:94:3e:4a:2f:55:cc: 8e:05:ce:93:04:42:d7:78:65:19:12:c5:6c:6c:44: 1f:54:7e:a8:d9:0e:ef:62:15:b6:89:c7:2d:9d:67: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:44:FA:35:17:8A:66:45:ED:8D:C2:23:6B:AF:F0:49:EB:DA:61:E3 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:78:9c:30:5a:32:be:3c:0d:13:f1:b4:0e:c0:17:e2:55:66: 9f:03:c1:19:73:83:b2:11:a3:a3:ab:91:15:05:d1:b4:14:e3: ef:86:b0:67:98:ff:97:bc:1a:9f:3f:51:34:c4:de:a9:08:2f: ca:fd:8b:79:20:23:28:dc:af:55:af:aa:17:19:b6:9d:d9:c8: ea:88:ad:ea:48:a4:d7:23:4d:ef:de:60:70:c1:b3:eb:8c:98: 3f:48:82:0d:3c:fd:8b:f1:b1:a9:26:93:ec:0d:3a:29:b4:40: fb:ff:96:6c:e1:24:4e:5a:9a:d3:a0:a2:e5:d9:ad:57:20:70: b6:a1:f7:7b:64:7c:1f:07:ac:53:e3:23:99:ce:27:65:f9:18: d3:87:6a:77:ed:64:b3:9c:85:b3:98:6a:4b:b9:77:05:fc:cd: 35:ee:58:56:91:ac:cc:4f:d3:73:3d:ba:b7:4a:d7:09:8d:50: d0:9b:c8:a7:a0:5a:20:03:0a:46:df:95:14:34:7d:a7:8c:9a: f1:03:0b:be:ae:cf:14:e8:d9:cd:a5:2d:0c:b9:20:fc:d9:38: 5f:58:58:92:69:f5:0e:88:eb:b7:20:88:23:53:15:4e:1f:84: 00:39:d7:c8:99:48:0a:84:80:f7:3c:50:2d:af:42:a0:65:22: 02:73:00:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWwc5ACTZ+PiM5e1WDs2oe9myMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA5MjEyMDU3MzhaFw0yNjA5MjMwMDU5MzhaMDMxMTAvBgNV BAMTKDE5NDRGQTM1MTc4QTY2NDVFRDhEQzIyMzZCQUZGMDQ5RUJEQTYxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7QSrihY7HIqQyvQQHrdu96/G XyCypEBZSyd29id2Ivjzd0Zn7h/penmFLqua3nZu2ybgSBdihwpM+MoczzCaexgj WTnkPNpBOJWBZefeuaVPLZGiCuyJhxyNv593O8dIqx2GJAKBGQ+HfFOiqdTCUZ+R 1yoK32Oe215D6efHKNBV2tAHpOR9s210p6YVNvmd4ODuLm1Z57QBSgET9IT4aQA/ ZRr9Xf3/kOMiWwjRs58RFdlk7HxDS26Ltca394GZdynh4rlUT3o7Nu1CzBZmmBfT PSdOtj5icpQ+Si9VzI4FzpMEQtd4ZRkSxWxsRB9UfqjZDu9iFbaJxy2dZ2SVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUT6NReKZkXtjcIja6/wSevaYeMwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAd4nDBaMr48DRPxtA7AF+JVZp8DwRlzg7IR o6OrkRUF0bQU4++GsGeY/5e8Gp8/UTTE3qkIL8r9i3kgIyjcr1WvqhcZtp3ZyOqI repIpNcjTe/eYHDBs+uMmD9Igg08/Yvxsakmk+wNOim0QPv/lmzhJE5amtOgouXZ rVcgcLah93tkfB8HrFPjI5nOJ2X5GNOHanftZLOchbOYaku5dwX8zTXuWFaRrMxP 03M9urdK1wmNUNCbyKegWiADCkbflRQ0faeMmvEDC76uzxTo2c2lLQy5IPzZOF9Y WJJp9Q6I67cgiCNTFU4fhAA518iZSAqEgPc8UC2vQqBlIgJzAKY= -----END CERTIFICATE-----Generated at Tue Sep 22 03:34:37 2026 by rpki-client