$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json) Hash identifier: wYghcCPiiOzbRk6NlbesQBYtLMdDEEqO3bJT6MTqnNA= Subject key identifier: BF:6E:A5:08:CF:7E:E0:E3:5C:18:CF:33:4B:D0:21:C9:35:2F:B5:7A Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 3A7228A9B9EA21982D29EDF64D67A1CA2CF839BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft Manifest number: BD Signing time: Mon 21 Sep 2026 08:21:55 +0000 Manifest this update: Mon 21 Sep 2026 08:16:55 +0000 Manifest next update: Tue 22 Sep 2026 08:24:55 +0000 Files and hashes: 1: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=) 2: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=) 3: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=) 4: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: UqHZEOrlJ4ZDKHWC8x06y8IR4hno9nqJ8qKgI5PJMdg=) 5: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=) 6: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=) 7: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:72:28:a9:b9:ea:21:98:2d:29:ed:f6:4d:67:a1:ca:2c:f8:39:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: Sep 21 08:16:55 2026 GMT Not After : Sep 22 08:24:55 2026 GMT Subject: CN=BF6EA508CF7EE0E35C18CF334BD021C9352FB57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:51:3b:37:a1:51:8c:3e:fc:06:94:fa:df: 71:d0:19:3d:64:9a:ed:31:db:ca:ee:9a:42:c8:1c: e9:8e:27:d2:50:d1:0b:26:67:cf:78:37:4d:1d:9b: 7c:38:f9:6f:cf:65:c2:2c:01:8b:5f:94:60:ec:4a: f2:14:4f:20:5e:7e:52:ba:02:55:10:b6:33:08:7c: c2:2f:02:6c:c1:15:55:7b:fe:2a:9e:c3:07:1a:7b: da:35:34:8f:f6:42:67:30:a9:e1:19:00:84:70:82: 54:80:ce:dc:37:e5:5b:cd:e7:6c:9c:e4:90:17:08: ad:2c:84:9f:ec:60:55:09:22:d7:db:3e:40:4a:de: 49:8c:5d:93:a7:fe:ca:7d:a2:2d:af:14:f8:67:30: b7:a5:df:a5:54:01:e3:7d:00:b2:eb:7c:50:12:30: 2b:2f:78:86:1d:20:25:cf:eb:99:80:80:fc:e1:01: a6:64:ce:0a:e3:c3:24:09:86:dc:d4:25:96:d3:31: ce:6e:09:07:63:64:91:3e:d3:00:24:72:2f:95:7c: 82:f5:6f:4e:d5:10:2d:59:d0:d7:21:da:ef:30:bc: c2:84:0f:4f:cb:b4:b5:81:6c:2e:a3:aa:b3:e9:72: 00:4f:67:08:95:1e:91:de:2c:a2:5a:48:33:19:5a: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:A5:08:CF:7E:E0:E3:5C:18:CF:33:4B:D0:21:C9:35:2F:B5:7A X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a0:a5:c7:bd:45:13:fd:d0:07:9c:52:8f:ed:de:a7:e4:5e: 55:58:0e:de:a9:29:97:69:9c:19:54:f1:c3:7f:1f:be:00:61: c7:94:7b:ee:6c:78:6b:1d:38:35:5d:92:19:09:0b:09:f7:44: ef:a0:4b:20:df:dd:f7:6c:1c:3d:60:0d:1d:04:5b:e5:84:c6: 8f:ce:24:ec:1f:fc:15:91:a2:3d:17:c2:2b:11:d4:6f:6b:68: c4:25:fd:95:0f:25:ec:7d:1a:0d:81:f9:6c:b0:7a:fe:78:11: 7c:c3:f3:f0:95:1d:67:f4:df:c1:59:be:ae:d9:a7:06:24:dd: 57:2b:2a:5a:bb:80:ad:16:1c:c4:6a:2e:31:28:05:00:00:12: 62:9d:36:f7:dd:9b:c8:9a:df:9c:a7:5d:6a:ea:e3:35:88:67: 1a:4e:fd:5c:00:37:54:14:4a:69:d9:df:d4:98:ff:e6:87:a9: 55:43:7f:4c:b1:db:ae:a1:f1:45:ee:72:8d:96:f5:77:4e:ae: 36:1a:ac:e2:0d:84:3f:12:34:a4:65:cb:69:e8:97:10:6b:df: c8:ea:4c:0a:d0:b2:c9:6c:5b:4b:d4:7d:e5:b3:78:c7:d0:a9: 0f:4e:36:1e:30:0f:9b:58:34:65:14:3c:fd:42:8a:f7:66:50: 9a:b4:14:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnIoqbnqIZgtKe32TWehyiz4ObwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA5MjEwODE2NTVaFw0yNjA5MjIwODI0NTVaMDMxMTAvBgNV BAMTKEJGNkVBNTA4Q0Y3RUUwRTM1QzE4Q0YzMzRCRDAyMUM5MzUyRkI1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCalVE7N6FRjD78BpT633HQGT1k mu0x28rumkLIHOmOJ9JQ0QsmZ894N00dm3w4+W/PZcIsAYtflGDsSvIUTyBeflK6 AlUQtjMIfMIvAmzBFVV7/iqewwcae9o1NI/2QmcwqeEZAIRwglSAztw35VvN52yc 5JAXCK0shJ/sYFUJItfbPkBK3kmMXZOn/sp9oi2vFPhnMLel36VUAeN9ALLrfFAS MCsveIYdICXP65mAgPzhAaZkzgrjwyQJhtzUJZbTMc5uCQdjZJE+0wAkci+VfIL1 b07VEC1Z0Nch2u8wvMKED0/LtLWBbC6jqrPpcgBPZwiVHpHeLKJaSDMZWnq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv26lCM9+4ONcGM8zS9AhyTUvtXowHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0 RTFFRDJERjJENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGgpce9RRP90AecUo/t3qfkXlVYDt6pKZdp nBlU8cN/H74AYceUe+5seGsdODVdkhkJCwn3RO+gSyDf3fdsHD1gDR0EW+WExo/O JOwf/BWRoj0XwisR1G9raMQl/ZUPJex9Gg2B+Wywev54EXzD8/CVHWf038FZvq7Z pwYk3VcrKlq7gK0WHMRqLjEoBQAAEmKdNvfdm8ia35ynXWrq4zWIZxpO/VwAN1QU SmnZ39SY/+aHqVVDf0yx266h8UXuco2W9XdOrjYarOINhD8SNKRly2nolxBr38jq TArQsslsW0vUfeWzeMfQqQ9ONh4wD5tYNGUUPP1CivdmUJq0FOg= -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:19 2026 by rpki-client