$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json) Hash identifier: WG+bx9+1TrtO2ilzoiOKTMBdqbC050jffSOVHAiQ3SA= Subject key identifier: E6:BD:C7:1F:85:7A:7B:0D:15:0A:1C:02:E2:72:11:D7:96:41:56:FE Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0 Certificate serial: 5089BE18DBE6436D17E1C9D58576FBC03606EA33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:36:14 +0000 Manifest this update: Sun 20 Sep 2026 15:31:14 +0000 Manifest next update: Mon 21 Sep 2026 16:55:14 +0000 Files and hashes: 1: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=) 2: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=) 3: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=) 4: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: 9QOLiI9nc9pXDFwFjW5qbhyle18W3tYpyRq64y7EtoY=) 5: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:89:be:18:db:e6:43:6d:17:e1:c9:d5:85:76:fb:c0:36:06:ea:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0 Validity Not Before: Sep 20 15:31:14 2026 GMT Not After : Sep 21 16:55:14 2026 GMT Subject: CN=E6BDC71F857A7B0D150A1C02E27211D7964156FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:90:d5:4b:9d:d3:68:c4:2d:80:0b:e7:aa: 78:4f:34:a8:0f:02:3a:63:34:ba:90:fa:0f:01:68: 12:5a:b2:70:64:67:99:0b:22:87:9d:e0:05:cf:8d: 0f:7a:10:9a:6d:3d:bf:fc:ae:3d:69:90:f6:e0:ec: 9b:c5:ee:3b:3b:9f:84:47:36:bd:aa:4a:6c:af:18: 0a:b8:95:9e:71:59:94:35:90:c4:ec:79:0b:d3:d6: 41:e3:82:4e:ff:8c:0a:43:72:43:75:8f:9d:b7:d7: 29:7a:f4:c6:6d:b2:75:5f:8c:dd:b8:52:0c:c2:a4: f4:03:62:73:92:23:3c:bc:a8:1c:25:0a:da:db:f6: 48:50:8b:9e:c7:f2:b3:47:fb:76:2c:07:57:79:f9: 9a:29:c8:1a:32:37:85:f0:cd:4c:83:e0:0e:fd:08: 16:a2:93:c5:e8:c8:9c:76:8a:6c:78:e6:4c:0e:9c: 22:09:b2:4a:be:7a:ca:23:3f:f5:db:82:c3:04:33: 4a:85:8e:8c:13:65:27:51:d9:f4:4c:56:72:9d:42: aa:58:b5:38:62:57:56:a8:b2:f6:20:09:bd:24:95: a0:08:b4:bb:2e:4a:84:98:51:36:1d:ec:29:6f:8f: fe:f0:f9:d1:c7:c9:7a:9b:90:63:1c:a1:c9:5d:b4: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BD:C7:1F:85:7A:7B:0D:15:0A:1C:02:E2:72:11:D7:96:41:56:FE X509v3 Authority Key Identifier: keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:47:f3:27:dd:f4:d9:82:38:7b:bb:b0:99:89:88:02:a1:5a: be:df:48:a5:80:ff:0d:4d:a9:3a:d7:d2:48:15:7c:78:d3:6a: 2f:27:b4:15:f3:4d:e1:0c:77:9d:f3:67:f6:78:ff:34:c9:6c: fd:60:df:03:ac:94:51:73:94:6d:03:26:00:4f:58:6c:68:1a: 99:8a:17:d0:86:12:c0:fe:45:48:a7:34:5f:7d:4b:1e:d1:21: 63:36:fa:cf:ef:a6:b3:26:f7:7e:9e:88:10:53:01:b5:80:42: 53:aa:08:83:e2:33:99:b5:c0:69:3f:63:2c:58:1c:27:08:dc: b8:ab:37:81:f0:ee:1c:c5:ca:8a:a7:f4:00:11:89:8a:93:11: ee:74:1a:14:cd:0a:ba:cb:e6:2a:dc:45:9d:d7:d0:5a:5d:f2: 7a:55:51:a8:ab:74:21:df:f5:7e:4b:43:39:f6:cb:42:c3:3a: c0:3f:b4:37:0b:f9:b3:ee:b2:b2:ad:50:1a:fb:99:d3:fa:5f: a7:e8:2b:e4:57:1e:fb:64:07:7a:41:9d:a2:42:89:00:c3:06: 17:06:39:38:33:75:57:8e:80:18:56:35:0b:be:2a:e5:23:f4: ff:6c:5e:c5:bd:7b:ed:10:65:b9:32:99:86:64:d9:fa:33:dc: 40:65:6d:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIm+GNvmQ20X4cnVhXb7wDYG6jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3 MTc2NjZFMDAeFw0yNjA5MjAxNTMxMTRaFw0yNjA5MjExNjU1MTRaMDMxMTAvBgNV BAMTKEU2QkRDNzFGODU3QTdCMEQxNTBBMUMwMkUyNzIxMUQ3OTY0MTU2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPZDVS53TaMQtgAvnqnhPNKgP AjpjNLqQ+g8BaBJasnBkZ5kLIoed4AXPjQ96EJptPb/8rj1pkPbg7JvF7js7n4RH Nr2qSmyvGAq4lZ5xWZQ1kMTseQvT1kHjgk7/jApDckN1j5231yl69MZtsnVfjN24 UgzCpPQDYnOSIzy8qBwlCtrb9khQi57H8rNH+3YsB1d5+ZopyBoyN4XwzUyD4A79 CBaik8XoyJx2imx45kwOnCIJskq+esojP/XbgsMEM0qFjowTZSdR2fRMVnKdQqpY tThiV1aosvYgCb0klaAItLsuSoSYUTYd7Clvj/7w+dHHyXqbkGMcocldtIKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5r3HH4V6ew0VChwC4nIR15ZBVv4wHwYDVR0j BBgwFoAUSfRhFTZevfWIbn8s8TnmBnF2ZuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE0MTkzYzQtNGFiZC00ZTJjLWExZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUz NjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3MTc2NjZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OUY0NjExNTM2NUVCREY1ODg2RTdGMkNGMTM5RTYwNjcxNzY2 NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2 MDY3MTc2NjZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhH8yfd9NmCOHu7sJmJiAKhWr7fSKWA/w1N qTrX0kgVfHjTai8ntBXzTeEMd53zZ/Z4/zTJbP1g3wOslFFzlG0DJgBPWGxoGpmK F9CGEsD+RUinNF99Sx7RIWM2+s/vprMm936eiBBTAbWAQlOqCIPiM5m1wGk/YyxY HCcI3LirN4Hw7hzFyoqn9AARiYqTEe50GhTNCrrL5ircRZ3X0Fpd8npVUairdCHf 9X5LQzn2y0LDOsA/tDcL+bPusrKtUBr7mdP6X6foK+RXHvtkB3pBnaJCiQDDBhcG OTgzdVeOgBhWNQu+KuUj9P9sXsW9e+0QZbkymYZk2foz3EBlbWo= -----END CERTIFICATE-----Generated at Sun Sep 20 21:27:51 2026 by rpki-client