$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft File: 4032440C7B463FEA0D28A5D4682DFA954E77451E.mft (raw, json) Hash identifier: d04/tT4f81/NaZsGzQoBn2YZpOPGx8zUQF8bpMuUstE= Subject key identifier: CE:4F:7D:6B:D9:70:F1:1F:D4:72:42:84:36:BE:1B:38:DC:4E:DC:05 Authority key identifier: 40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E Certificate issuer: /CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Certificate serial: 51607D8CBB2D4BA36EB123FE75B5003399451B78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:53:39 +0000 Manifest this update: Mon 21 Sep 2026 17:48:39 +0000 Manifest next update: Tue 22 Sep 2026 21:26:39 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 8b7JHKN9jGh8XEFxRZEHDDGBc52rA0ln90frZNev8wg=) 2: 4032440C7B463FEA0D28A5D4682DFA954E77451E.crl (hash: UUOTAYIJY4Kqdxg90hlKq5CTJoghuu04p2+pan3vah8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:60:7d:8c:bb:2d:4b:a3:6e:b1:23:fe:75:b5:00:33:99:45:1b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Validity Not Before: Sep 21 17:48:39 2026 GMT Not After : Sep 22 21:26:39 2026 GMT Subject: CN=CE4F7D6BD970F11FD472428436BE1B38DC4EDC05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:d0:fc:59:79:3e:a0:ad:e2:fa:1d:df:85: 59:93:ec:bd:9b:4a:71:c6:36:9a:cf:3b:dd:a0:98: 3a:65:f1:04:27:b1:65:af:3b:28:5d:20:00:12:60: 59:37:09:15:e4:7e:bf:26:d7:4e:38:3e:22:d2:46: 2b:15:f4:4c:d8:c9:f1:ac:1d:3c:7b:03:21:af:b9: df:c5:32:ae:d5:85:97:3e:1c:fc:e0:84:e4:71:25: 06:cb:16:ad:0a:17:71:79:3c:bf:cc:46:e0:44:dd: db:97:7c:ce:82:0c:89:3e:87:c3:55:8a:40:b3:3a: e4:5a:8a:43:7a:9d:84:b0:eb:d0:e0:1b:4f:0e:b1: f7:65:8d:9a:07:5d:d2:c9:41:43:2d:0c:47:10:70: 21:7c:1a:36:02:00:69:e9:f6:9c:ac:cc:5a:66:4a: 2b:73:f8:48:5a:53:3b:4f:6b:ff:ce:90:fa:26:11: 76:f6:d6:10:46:dc:ce:c9:75:65:2f:58:be:32:b5: bc:59:d9:51:db:d6:3b:c7:c4:91:d3:f6:91:bb:70: 7a:be:77:1a:cf:76:e3:2d:8e:9b:8a:7e:98:87:fd: d7:4b:46:2a:3e:16:7a:74:61:64:72:e7:4b:59:65: c0:e3:8c:a3:2e:85:9f:74:e1:d1:2f:dd:f4:d7:5f: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:7D:6B:D9:70:F1:1F:D4:72:42:84:36:BE:1B:38:DC:4E:DC:05 X509v3 Authority Key Identifier: keyid:40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e6:b9:19:db:aa:95:0b:c4:8a:e1:f6:83:df:6a:b6:7c:b1: 57:a4:5b:b9:e9:5a:58:8b:0a:b4:f9:e3:58:c6:d3:95:35:10: 9c:27:31:9d:3b:ad:6f:fb:59:35:1f:16:db:08:49:3c:ee:83: 87:d9:e9:b4:be:12:5f:e4:7c:55:3a:7e:4e:c5:67:83:f2:e4: 6a:c1:0c:64:0a:86:17:57:e0:42:ee:a7:fc:d2:aa:36:42:bc: 30:03:57:df:23:e4:53:15:ac:b7:1e:c0:e3:6b:a8:28:26:09: fd:b6:9c:ce:6f:34:2a:34:1a:9c:0d:e9:a7:b2:4c:89:63:3e: 0e:ba:c7:d1:90:49:e2:99:04:19:8f:84:03:21:73:0e:87:69: 3c:af:53:7d:3b:3b:64:11:cd:10:47:77:76:1f:34:75:ff:44: 59:92:18:c9:64:dd:56:69:27:49:ac:00:ec:8e:02:83:74:1d: 6e:33:b8:90:76:1d:96:9b:43:2f:21:96:ff:21:da:06:54:10: 3b:9f:af:4a:a1:21:11:fd:87:bb:36:22:fb:f3:48:59:63:0a: 52:bb:4e:77:c5:92:ca:58:ec:99:fd:be:1e:39:98:d6:12:2f: 1b:44:10:d4:ea:bd:52:32:27:23:a2:0f:94:6f:4b:6f:ef:00: 3b:1a:af:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWB9jLstS6NusSP+dbUAM5lFG3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0 RTc3NDUxRTAeFw0yNjA5MjExNzQ4MzlaFw0yNjA5MjIyMTI2MzlaMDMxMTAvBgNV BAMTKENFNEY3RDZCRDk3MEYxMUZENDcyNDI4NDM2QkUxQjM4REM0RURDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BdD8WXk+oK3i+h3fhVmT7L2b SnHGNprPO92gmDpl8QQnsWWvOyhdIAASYFk3CRXkfr8m1044PiLSRisV9EzYyfGs HTx7AyGvud/FMq7VhZc+HPzghORxJQbLFq0KF3F5PL/MRuBE3duXfM6CDIk+h8NV ikCzOuRaikN6nYSw69DgG08OsfdljZoHXdLJQUMtDEcQcCF8GjYCAGnp9pyszFpm Sitz+EhaUztPa//OkPomEXb21hBG3M7JdWUvWL4ytbxZ2VHb1jvHxJHT9pG7cHq+ dxrPduMtjpuKfpiH/ddLRio+Fnp0YWRy50tZZcDjjKMuhZ904dEv3fTXX3MfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzk99a9lw8R/UckKENr4bONxO3AUwHwYDVR0j BBgwFoAUQDJEDHtGP+oNKKXUaC36lU53RR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMGNlNzYtZGI3NS00NjUxLTg1YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3 QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0RTc3NDUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDMyNDQwQzdCNDYzRkVBMEQyOEE1RDQ2ODJERkE5NTRFNzc0 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZB OTU0RTc3NDUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3muRnbqpULxIrh9oPfarZ8sVekW7npWliL CrT541jG05U1EJwnMZ07rW/7WTUfFtsISTzug4fZ6bS+El/kfFU6fk7FZ4Py5GrB DGQKhhdX4ELup/zSqjZCvDADV98j5FMVrLcewONrqCgmCf22nM5vNCo0GpwN6aey TIljPg66x9GQSeKZBBmPhAMhcw6HaTyvU307O2QRzRBHd3YfNHX/RFmSGMlk3VZp J0msAOyOAoN0HW4zuJB2HZabQy8hlv8h2gZUEDufr0qhIRH9h7s2IvvzSFljClK7 TnfFkspY7Jn9vh45mNYSLxtEENTqvVIyJyOiD5RvS2/vADsar2w= -----END CERTIFICATE-----Generated at Tue Sep 22 12:58:03 2026 by rpki-client