$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft File: 4FE0444622A2C111B372D11A38DAFE7648673D36.mft (raw, json) Hash identifier: CRnYOj8ywOfT98iweoOM6/D9vA9vpUFKXorgYWd4kQc= Subject key identifier: AC:D2:67:C8:3C:C7:95:85:B7:AA:3B:CC:FA:F9:E1:54:D6:A3:BC:62 Authority key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 Certificate issuer: /CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Certificate serial: 4FB8F7E46574F9744D1DBD27CAAD755988BE5308 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:33:20 +0000 Manifest this update: Mon 21 Sep 2026 17:28:20 +0000 Manifest next update: Tue 22 Sep 2026 20:27:20 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: jwm0S2hFDX+dZX8vIrEhkY9/01RjPCQuv88vNZDWSb8=) 2: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: gRZjicumGEoblrElHZ58yAQf9cx0JwPN+oerGxN3DUY=) 3: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: KpYQSU+oal444FTCzAQqpO+RSPbHAZ+ta2JoMh51nbo=) 4: 4FE0444622A2C111B372D11A38DAFE7648673D36.crl (hash: iegSmUTIClWpvHlSChlSZSpwY25Bbs50g893JuXPQtI=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: EeoonxSdNuxOduC2I/c7vz+iodDJX+FOusUJ8W+8sks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b8:f7:e4:65:74:f9:74:4d:1d:bd:27:ca:ad:75:59:88:be:53:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE0444622A2C111B372D11A38DAFE7648673D36 Validity Not Before: Sep 21 17:28:20 2026 GMT Not After : Sep 22 20:27:20 2026 GMT Subject: CN=ACD267C83CC79585B7AA3BCCFAF9E154D6A3BC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:89:c7:05:d4:d3:26:ce:da:32:d5:f2:13: ff:38:93:6c:a2:5a:ca:4e:fc:7c:5f:99:42:21:ec: 30:2f:d3:98:30:ce:4e:21:0e:61:a8:5f:ec:eb:03: bc:06:02:69:41:f2:8d:0e:0f:2f:e5:ac:3c:40:26: e8:61:04:3a:63:94:ae:75:67:51:7e:4e:44:b6:1c: 0a:42:fe:16:79:ce:86:1a:ef:c6:f8:ab:ab:e4:7d: a9:2b:1f:ea:5b:a6:c6:d4:ed:f9:da:1c:bb:c0:18: bc:0b:6d:8a:38:13:2c:78:1e:4a:c1:8f:c7:b4:cc: d1:f6:d6:b3:b2:e7:92:3d:31:c9:3c:27:71:dd:50: f3:56:9e:e4:d3:50:e3:b6:4b:0a:55:72:79:f0:85: c2:9c:21:70:74:6e:86:37:57:cb:6d:b2:b3:26:53: c2:87:71:58:0a:84:b6:55:e8:a3:4c:56:ed:f0:95: 41:c5:81:91:35:60:5b:72:a8:5e:0e:0f:96:f8:c4: f4:4d:24:19:dc:cd:eb:98:da:a2:ca:40:ec:4c:07: 92:f2:2f:9e:a5:f0:e1:a4:08:f1:42:15:9c:d3:ae: 29:53:2c:81:90:aa:90:12:4d:1a:df:56:ac:6b:d3: c6:fa:5a:3d:b4:45:1e:eb:cd:a5:96:bd:43:9d:9c: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:67:C8:3C:C7:95:85:B7:AA:3B:CC:FA:F9:E1:54:D6:A3:BC:62 X509v3 Authority Key Identifier: keyid:4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f7:7f:15:50:b7:6d:60:ac:d1:ed:22:06:eb:31:5d:37:1e: 1f:ee:95:de:2e:0a:ad:e1:92:95:37:b2:3d:01:39:82:44:eb: c9:b7:ff:5f:2f:6b:cf:c3:21:64:39:7c:0d:c6:49:eb:2f:cc: 4e:8c:1e:f9:30:66:3b:b2:8f:d2:ec:13:65:cc:33:ff:24:96: df:12:a1:ed:d2:82:fc:79:94:3d:1a:1d:9f:04:0d:a6:8d:af: 6c:d6:30:13:4f:44:fc:82:10:d5:98:9e:80:27:30:52:2f:e5: 6d:f4:95:d7:ec:c1:03:60:50:7e:86:5b:7f:f9:d4:2e:8c:a6: de:39:b2:67:4a:56:25:df:f2:e6:19:39:66:9a:e7:78:02:f9: 74:81:ba:fe:69:02:6c:db:86:66:3b:0a:38:43:99:9c:d5:25: 95:91:4f:24:13:7b:1c:f8:82:30:77:3d:e2:dc:52:30:e0:d6: 62:16:d2:98:f6:a5:be:a2:e7:ae:da:8b:47:c9:b0:6e:ee:f2: 4b:a9:6e:ff:7e:2e:16:54:8c:fa:40:ad:dd:11:9e:ae:8e:74: e5:f1:6e:cc:65:b3:f6:20:6b:d0:b1:42:9e:95:5e:68:09:72: e6:90:e1:b0:6c:bd:ef:b4:24:5f:37:a2:30:1a:36:58:85:65: 2d:48:30:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7j35GV0+XRNHb0nyq11WYi+UwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0 ODY3M0QzNjAeFw0yNjA5MjExNzI4MjBaFw0yNjA5MjIyMDI3MjBaMDMxMTAvBgNV BAMTKEFDRDI2N0M4M0NDNzk1ODVCN0FBM0JDQ0ZBRjlFMTU0RDZBM0JDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUonHBdTTJs7aMtXyE/84k2yi WspO/HxfmUIh7DAv05gwzk4hDmGoX+zrA7wGAmlB8o0ODy/lrDxAJuhhBDpjlK51 Z1F+TkS2HApC/hZ5zoYa78b4q6vkfakrH+pbpsbU7fnaHLvAGLwLbYo4Eyx4HkrB j8e0zNH21rOy55I9Mck8J3HdUPNWnuTTUOO2SwpVcnnwhcKcIXB0boY3V8ttsrMm U8KHcVgKhLZV6KNMVu3wlUHFgZE1YFtyqF4OD5b4xPRNJBnczeuY2qLKQOxMB5Ly L56l8OGkCPFCFZzTrilTLIGQqpASTRrfVqxr08b6Wj20RR7rzaWWvUOdnLjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNJnyDzHlYW3qjvM+vnhVNajvGIwHwYDVR0j BBgwFoAUT+BERiKiwRGzctEaONr+dkhnPTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmZDM1MWUtMmJkNy00MTkxLTkxMDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYy MkEyQzExMUIzNzJEMTFBMzhEQUZFNzY0ODY3M0QzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkUwNDQ0NjIyQTJDMTExQjM3MkQxMUEzOERBRkU3NjQ4Njcz RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvNEZFMDQ0NDYyMkEyQzExMUIzNzJEMTFBMzhEQUZF NzY0ODY3M0QzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD3fxVQt21grNHtIgbrMV03Hh/uld4uCq3h kpU3sj0BOYJE68m3/18va8/DIWQ5fA3GSesvzE6MHvkwZjuyj9LsE2XMM/8klt8S oe3Sgvx5lD0aHZ8EDaaNr2zWMBNPRPyCENWYnoAnMFIv5W30ldfswQNgUH6GW3/5 1C6Mpt45smdKViXf8uYZOWaa53gC+XSBuv5pAmzbhmY7CjhDmZzVJZWRTyQTexz4 gjB3PeLcUjDg1mIW0pj2pb6i567ai0fJsG7u8kupbv9+LhZUjPpArd0Rnq6OdOXx bsxls/Yga9CxQp6VXmgJcuaQ4bBsve+0JF83ojAaNliFZS1IMDM= -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:31 2026 by rpki-client