$ rpki-client -vvvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: a7dAo/lhn+9mwC9CEdBRgH8fSNhimfPUzyiHFnm6U4A= Subject key identifier: 49:D6:55:24:B3:34:07:C0:88:6B:3D:B7:46:47:00:43:D2:30:8F:87 Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 0AA71565C2CBE0EDA14BCC49973165A5F5B8D709 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:54:01 +0000 Manifest this update: Mon 21 Sep 2026 05:49:01 +0000 Manifest next update: Tue 22 Sep 2026 08:40:01 +0000 Files and hashes: 1: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: lDdj56ldhDFmdw3cPbDirTKD9e59bZzSP4XJjPi0z1s=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a7:15:65:c2:cb:e0:ed:a1:4b:cc:49:97:31:65:a5:f5:b8:d7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Sep 21 05:49:01 2026 GMT Not After : Sep 22 08:40:01 2026 GMT Subject: CN=49D65524B33407C0886B3DB746470043D2308F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:d8:c2:6a:d8:08:f3:ab:a4:8b:06:ac:fb: d5:c8:ed:05:a3:94:8d:44:fe:bc:94:58:b7:2c:27: 3e:8b:c1:84:49:0f:ac:51:b0:f0:ff:d3:06:fd:5f: 0d:08:8c:41:1b:e9:1f:12:e6:41:70:93:ef:72:50: 89:5c:85:6f:1c:f3:67:11:4a:91:e5:22:ff:96:64: ac:20:e2:1d:ca:1e:3d:0e:a1:34:f8:07:29:cf:d9: 48:34:68:ee:bd:bb:e0:31:66:46:8c:da:31:1d:53: 5e:21:67:80:26:48:dc:c4:36:b4:6b:48:e5:0f:df: 2e:5c:ec:4f:4d:3b:a1:cf:24:e0:bc:7b:6c:56:15: 64:57:64:4e:5d:4e:a1:cc:24:ec:ea:0d:85:e9:d6: 51:cb:f6:46:fa:cb:2b:b3:66:98:7c:bd:c7:7f:67: 69:53:7d:4b:76:0e:b3:29:3e:53:55:a1:42:47:02: 1d:e4:15:24:bd:6e:d1:32:c1:10:3f:49:40:dd:b6: 08:ad:9e:47:7f:69:c3:e9:52:b2:60:50:6a:c3:47: e5:b3:bd:f7:d1:e2:0d:20:13:9f:f9:9e:49:1b:56: 46:c0:49:b9:e4:e6:3c:2b:57:1d:63:0c:57:f1:a1: e9:1d:ab:7d:7f:34:25:3a:20:cd:b7:94:67:bf:fe: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D6:55:24:B3:34:07:C0:88:6B:3D:B7:46:47:00:43:D2:30:8F:87 X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:56:1e:99:67:50:f0:0f:3d:61:f3:64:67:c0:66:f8:bc:be: 82:c3:e7:b8:d7:80:eb:3b:0d:8c:ac:35:01:bb:25:67:22:37: 6c:a8:55:22:da:7a:0a:19:6c:67:88:be:6d:67:58:af:78:6b: 62:ec:6a:d4:ab:62:b6:e1:b5:a8:7b:58:e4:28:c9:4f:76:e7: 0d:d4:da:8b:88:d0:10:65:76:f5:1e:0d:bc:ee:c7:9e:d1:3a: 7c:db:e3:d6:e5:d4:63:a5:fe:f7:37:56:8f:26:b1:d6:93:3f: 46:92:bb:66:2f:5f:59:b0:a9:34:b4:50:e5:3a:1d:0f:62:41: 90:a4:4b:5f:f0:45:43:bf:32:58:8b:86:83:61:72:ff:eb:ba: a1:e7:b0:95:8f:76:de:35:8a:c4:aa:c0:77:00:0f:b4:2f:b8: 65:97:96:4c:88:33:b4:73:09:c2:aa:1f:7a:e6:bc:e3:0a:af: 9f:40:4e:22:ee:28:74:1c:f0:49:48:27:63:8c:f7:57:c7:81: 7c:48:2c:36:4c:89:22:cd:13:cc:68:cf:74:ab:ef:7c:58:47: d3:b1:39:30:6c:c0:98:7f:87:ad:43:18:85:cd:45:50:b2:e9: cd:b3:14:6e:42:87:1a:ff:d6:a6:4d:14:32:2e:85:e3:be:4b: 31:ab:a4:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqcVZcLL4O2hS8xJlzFlpfW41wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA5MjEwNTQ5MDFaFw0yNjA5MjIwODQwMDFaMDMxMTAvBgNV BAMTKDQ5RDY1NTI0QjMzNDA3QzA4ODZCM0RCNzQ2NDcwMDQzRDIzMDhGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVzNjCatgI86ukiwas+9XI7QWj lI1E/ryUWLcsJz6LwYRJD6xRsPD/0wb9Xw0IjEEb6R8S5kFwk+9yUIlchW8c82cR SpHlIv+WZKwg4h3KHj0OoTT4BynP2Ug0aO69u+AxZkaM2jEdU14hZ4AmSNzENrRr SOUP3y5c7E9NO6HPJOC8e2xWFWRXZE5dTqHMJOzqDYXp1lHL9kb6yyuzZph8vcd/ Z2lTfUt2DrMpPlNVoUJHAh3kFSS9btEywRA/SUDdtgitnkd/acPpUrJgUGrDR+Wz vffR4g0gE5/5nkkbVkbASbnk5jwrVx1jDFfxoekdq31/NCU6IM23lGe//u/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdZVJLM0B8CIaz23RkcAQ9Iwj4cwHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1WHplnUPAPPWHzZGfAZvi8voLD57jXgOs7 DYysNQG7JWciN2yoVSLaegoZbGeIvm1nWK94a2LsatSrYrbhtah7WOQoyU925w3U 2ouI0BBldvUeDbzux57ROnzb49bl1GOl/vc3Vo8msdaTP0aSu2YvX1mwqTS0UOU6 HQ9iQZCkS1/wRUO/MliLhoNhcv/ruqHnsJWPdt41isSqwHcAD7QvuGWXlkyIM7Rz CcKqH3rmvOMKr59ATiLuKHQc8ElIJ2OM91fHgXxILDZMiSLNE8xoz3Sr73xYR9Ox OTBswJh/h61DGIXNRVCy6c2zFG5Chxr/1qZNFDIuheO+SzGrpDQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:38:56 2026 by rpki-client