$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft File: 4493CC2E574126EF2608CAE173DD92103E76A98C.mft (raw, json) Hash identifier: ROzl3n8cS1ri064TXvp3ZwnQl76OhqhCh0lng9J/p9U= Subject key identifier: C4:F4:1F:C3:52:99:72:D8:C8:75:38:B3:C8:C0:04:72:30:26:04:FA Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C Certificate issuer: /CN=4493CC2E574126EF2608CAE173DD92103E76A98C Certificate serial: 079AFA64B1D9129F7DB8134E28BEE010A5B8344A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:18:02 +0000 Manifest this update: Mon 21 Sep 2026 13:13:02 +0000 Manifest next update: Tue 22 Sep 2026 16:36:02 +0000 Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=) 2: 4493CC2E574126EF2608CAE173DD92103E76A98C.crl (hash: karZzE5jRBk5hcmQZ1cRBgp5FZKJL6EEwI5yaz+y1RE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9a:fa:64:b1:d9:12:9f:7d:b8:13:4e:28:be:e0:10:a5:b8:34:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C Validity Not Before: Sep 21 13:13:02 2026 GMT Not After : Sep 22 16:36:02 2026 GMT Subject: CN=C4F41FC3529972D8C87538B3C8C00472302604FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:6f:d5:2f:60:64:b2:98:3c:a5:51:6b:00: 6b:23:59:07:7d:bc:a5:88:5b:b2:ff:a7:79:9d:14: 4b:21:48:4f:8d:42:98:73:6c:d5:07:d3:f2:b1:67: d9:30:e6:d2:6a:ba:b7:c3:11:a6:8a:59:b6:7e:5d: 02:08:3d:92:08:3f:15:13:4e:be:5b:63:3a:0f:27: ca:a1:eb:42:60:02:0c:50:03:55:b1:89:6b:e8:f9: fe:b4:06:c8:28:e2:69:32:63:35:06:a8:5a:99:c8: 51:7f:ec:6c:97:a8:27:c9:9d:69:df:8f:3f:fa:21: 2f:05:f2:f1:39:f1:f4:db:1b:65:a9:de:e6:6d:bc: 41:f3:76:d4:3a:28:2d:8d:24:ca:40:7c:2d:db:11: 24:c5:56:be:97:87:ff:a2:9d:c3:85:1b:91:53:bf: 58:b0:6d:a9:66:fd:44:11:9a:68:af:e8:ec:f0:81: d8:6c:fe:ac:74:0d:4d:81:be:7f:a3:0a:2f:f6:c5: 13:d8:f0:9a:9f:a4:89:bd:df:de:f4:b3:6c:fb:14: c3:b1:01:3b:79:40:b2:4d:1c:34:ef:23:a6:25:03: 60:ad:ee:96:23:f3:ba:9d:38:1d:db:0e:7d:2b:d3: 82:94:00:65:39:3c:46:4b:b1:6b:a5:44:03:c7:74: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F4:1F:C3:52:99:72:D8:C8:75:38:B3:C8:C0:04:72:30:26:04:FA X509v3 Authority Key Identifier: keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:00:fd:18:69:1f:b7:ed:61:bf:35:b8:63:ce:28:33:04:99: 82:01:77:48:8b:61:2e:6f:d1:21:cd:41:b9:24:1c:2f:38:fd: 3b:4f:bb:e9:9f:c6:83:11:62:82:a0:69:d5:32:bc:24:b7:27: 29:7b:9c:60:b5:0d:c6:03:34:b8:97:96:b1:e0:a0:81:eb:a8: 15:37:8c:f0:d9:b9:7f:e6:aa:63:d0:a7:94:08:b7:fb:5c:f0: bd:d3:8a:ae:4e:59:ab:eb:bb:30:09:b3:1a:6c:55:3e:01:ec: af:a0:96:dd:c6:a0:04:70:5f:a5:5f:b2:a0:d3:cb:0a:f3:b2: ec:6b:ba:c0:0e:1d:20:a4:18:1d:01:30:3e:aa:79:10:86:e5: cc:a2:7d:e0:9b:88:a0:ef:af:93:12:b7:c8:d7:c9:64:97:bf: df:15:15:c9:e3:92:76:9c:c1:02:c7:07:29:eb:8a:ec:09:aa: 19:b6:e9:37:f9:13:b2:55:08:ed:03:cd:5c:b6:14:d5:84:5e: 93:1f:d2:37:f0:d2:59:73:e1:cc:2f:92:0c:bc:51:cf:46:44: 89:d4:93:dd:0f:de:7a:6d:c9:bc:4b:c5:b9:f3:38:ed:86:3f: b3:6c:c9:32:6f:8f:5a:63:5b:9f:fe:32:6a:9c:0a:de:1c:bf: c2:be:ee:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5r6ZLHZEp99uBNOKL7gEKW4NEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5M0NDMkU1NzQxMjZFRjI2MDhDQUUxNzNERDkyMTAz RTc2QTk4QzAeFw0yNjA5MjExMzEzMDJaFw0yNjA5MjIxNjM2MDJaMDMxMTAvBgNV BAMTKEM0RjQxRkMzNTI5OTcyRDhDODc1MzhCM0M4QzAwNDcyMzAyNjA0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNAW/VL2Bkspg8pVFrAGsjWQd9 vKWIW7L/p3mdFEshSE+NQphzbNUH0/KxZ9kw5tJqurfDEaaKWbZ+XQIIPZIIPxUT Tr5bYzoPJ8qh60JgAgxQA1WxiWvo+f60Bsgo4mkyYzUGqFqZyFF/7GyXqCfJnWnf jz/6IS8F8vE58fTbG2Wp3uZtvEHzdtQ6KC2NJMpAfC3bESTFVr6Xh/+incOFG5FT v1iwbalm/UQRmmiv6Ozwgdhs/qx0DU2Bvn+jCi/2xRPY8JqfpIm93970s2z7FMOx ATt5QLJNHDTvI6YlA2Ct7pYj87qdOB3bDn0r04KUAGU5PEZLsWulRAPHdNE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxPQfw1KZctjIdTizyMAEcjAmBPowHwYDVR0j BBgwFoAURJPMLldBJu8mCMrhc92SED52qYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1YWNiMDctOWQ1Zi00OTdmLTk5MzItMzNhNDM0ZDNhYTMyLzAvNDQ5M0NDMkU1 NzQxMjZFRjI2MDhDQUUxNzNERDkyMTAzRTc2QTk4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80NDkzQ0MyRTU3NDEyNkVGMjYwOENBRTE3M0REOTIxMDNFNzZB OThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvNDQ5M0NDMkU1NzQxMjZFRjI2MDhDQUUxNzNERDky MTAzRTc2QTk4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgA/RhpH7ftYb81uGPOKDMEmYIBd0iLYS5v 0SHNQbkkHC84/TtPu+mfxoMRYoKgadUyvCS3Jyl7nGC1DcYDNLiXlrHgoIHrqBU3 jPDZuX/mqmPQp5QIt/tc8L3Tiq5OWavruzAJsxpsVT4B7K+glt3GoARwX6VfsqDT ywrzsuxrusAOHSCkGB0BMD6qeRCG5cyifeCbiKDvr5MSt8jXyWSXv98VFcnjknac wQLHBynriuwJqhm26Tf5E7JVCO0DzVy2FNWEXpMf0jfw0llz4cwvkgy8Uc9GRInU k90P3nptybxLxbnzOO2GP7NsyTJvj1pjW5/+MmqcCt4cv8K+7r8= -----END CERTIFICATE-----Generated at Mon Sep 21 21:19:10 2026 by rpki-client