$ rpki-client -vvvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json) Hash identifier: dH/BXdwv2JJDeqmedLMbpAMJ4iiLN65SOmu0vs2GXdw= Subject key identifier: 3C:53:E4:6E:D5:20:D3:E8:13:92:86:49:A3:71:9D:E4:B7:35:A8:57 Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B Certificate serial: 67A57BEB462CA1AB0C4A907A539D5B670A44CAC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:16:51 +0000 Manifest this update: Mon 21 Sep 2026 00:11:51 +0000 Manifest next update: Tue 22 Sep 2026 01:08:51 +0000 Files and hashes: 1: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: PvQhmxzVJLp5Wj4e2lO+8d2pES6Mf41sKr+o8xFigdk=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a5:7b:eb:46:2c:a1:ab:0c:4a:90:7a:53:9d:5b:67:0a:44:ca:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B Validity Not Before: Sep 21 00:11:51 2026 GMT Not After : Sep 22 01:08:51 2026 GMT Subject: CN=3C53E46ED520D3E813928649A3719DE4B735A857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:35:91:7e:c0:a6:92:e0:4d:5a:05:7c:8b: 80:74:11:10:44:b9:31:5b:d1:1a:6a:7a:27:7e:f1: c7:e1:5f:4e:69:7c:2c:14:8e:7d:73:7d:c7:35:40: 9d:9e:ca:58:ef:88:75:8c:3b:ef:85:81:86:b1:81: 87:04:46:a5:ea:44:2c:4a:2f:5a:e0:8b:79:a9:ef: 5f:9b:8b:69:dd:0f:28:fe:27:c3:a0:2a:40:45:f1: 3c:8a:7f:e9:08:6f:a9:65:30:e8:50:20:45:1f:22: cc:61:64:38:cf:c5:63:5c:7f:c3:08:68:d8:52:8d: 89:83:a4:17:23:d6:7c:97:4d:62:e8:bd:61:78:34: 21:df:b8:1d:f2:9b:9e:1c:53:06:04:e2:b3:86:b8: 59:48:2a:fc:db:fa:e3:56:0d:51:0d:a0:49:c6:72: 7c:6e:35:d5:47:41:35:99:64:d1:da:b4:84:a2:f9: 69:a3:93:b0:48:94:f2:f8:18:fc:b1:8a:d2:5b:e8: d4:56:86:6c:87:48:83:f9:02:f4:4f:2d:9f:cd:ee: c4:fb:7c:33:e7:de:f2:c0:02:49:b9:e2:a5:8b:cf: 79:72:67:ff:4c:48:70:40:8b:3f:b3:21:72:07:67: 0a:a2:70:03:3f:f7:92:2f:f5:f8:db:2f:28:62:aa: 6b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:53:E4:6E:D5:20:D3:E8:13:92:86:49:A3:71:9D:E4:B7:35:A8:57 X509v3 Authority Key Identifier: keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ea:a9:85:b7:ca:b9:72:fb:e9:8e:a1:73:ab:1c:ec:50:ec: f1:4b:d1:6a:0b:7b:b7:30:fb:70:99:5d:b6:70:42:48:d3:86: 18:b9:67:c6:27:9b:8f:81:a5:fc:69:a3:dd:d8:81:93:29:11: b4:c2:19:14:99:9b:95:94:3b:17:18:3b:76:07:dd:ed:6d:ee: cf:ed:92:94:e9:a9:e5:c5:06:eb:6b:a6:3c:f6:e2:4c:48:83: 83:26:c6:04:5d:02:e1:14:47:64:16:c3:e6:45:47:00:d7:89: 84:41:95:3e:e5:da:fe:1f:c8:cd:de:9e:ab:6c:10:57:32:2e: 9e:55:22:a4:87:f9:05:30:c3:90:4f:94:65:ab:96:bc:c3:c5: ab:90:83:10:e3:5a:22:14:4d:6e:98:06:fe:41:0a:bd:fd:fd: cf:79:cc:07:1f:3f:3e:60:23:cb:92:38:dc:c3:14:bc:ce:ab: 16:13:b6:5b:3e:30:23:d9:24:04:59:a8:f3:60:32:0a:16:85: c8:48:18:72:26:4e:4d:aa:cf:9c:75:7c:27:81:13:9a:cc:2b: 23:63:e2:7e:d5:fe:4e:d2:4c:b3:2c:16:b5:7f:da:61:09:9e: 7e:24:14:fc:68:6d:f3:65:ab:2d:83:c4:e1:03:51:ef:1f:2a: a6:5f:94:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6V760YsoasMSpB6U51bZwpEysgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5ODU4QzZDMzVGOEY5QzhDQUE3NUEwNjU2ODZGNzMy RjZGNEYzQjAeFw0yNjA5MjEwMDExNTFaFw0yNjA5MjIwMTA4NTFaMDMxMTAvBgNV BAMTKDNDNTNFNDZFRDUyMEQzRTgxMzkyODY0OUEzNzE5REU0QjczNUE4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRMTWRfsCmkuBNWgV8i4B0ERBE uTFb0Rpqeid+8cfhX05pfCwUjn1zfcc1QJ2eyljviHWMO++FgYaxgYcERqXqRCxK L1rgi3mp71+bi2ndDyj+J8OgKkBF8TyKf+kIb6llMOhQIEUfIsxhZDjPxWNcf8MI aNhSjYmDpBcj1nyXTWLovWF4NCHfuB3ym54cUwYE4rOGuFlIKvzb+uNWDVENoEnG cnxuNdVHQTWZZNHatISi+Wmjk7BIlPL4GPyxitJb6NRWhmyHSIP5AvRPLZ/N7sT7 fDPn3vLAAkm54qWLz3lyZ/9MSHBAiz+zIXIHZwqicAM/95Iv9fjbLyhiqmu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFPkbtUg0+gTkoZJo3Gd5Lc1qFcwHwYDVR0j BBgwFoAURJhYxsNfj5yMqnWgZWhvcy9vTzswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzAvNDQ5ODU4QzZD MzVGOEY5QzhDQUE3NUEwNjU2ODZGNzMyRjZGNEYzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80NDk4NThDNkMzNUY4RjlDOENBQTc1QTA2NTY4NkY3MzJGNkY0 RjNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNDQ5ODU4QzZDMzVGOEY5QzhDQUE3NUEwNjU2ODZG NzMyRjZGNEYzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvqqYW3yrly++mOoXOrHOxQ7PFL0WoLe7cw +3CZXbZwQkjThhi5Z8Ynm4+Bpfxpo93YgZMpEbTCGRSZm5WUOxcYO3YH3e1t7s/t kpTpqeXFButrpjz24kxIg4MmxgRdAuEUR2QWw+ZFRwDXiYRBlT7l2v4fyM3enqts EFcyLp5VIqSH+QUww5BPlGWrlrzDxauQgxDjWiIUTW6YBv5BCr39/c95zAcfPz5g I8uSONzDFLzOqxYTtls+MCPZJARZqPNgMgoWhchIGHImTk2qz5x1fCeBE5rMKyNj 4n7V/k7STLMsFrV/2mEJnn4kFPxobfNlqy2DxOEDUe8fKqZflPc= -----END CERTIFICATE-----Generated at Mon Sep 21 12:34:52 2026 by rpki-client