$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft File: 488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json) Hash identifier: PZae9NmeiMcaZIGo16XbjAqjCaJgsg+N1rIbMm92LR4= Subject key identifier: C0:35:42:CB:3D:E0:55:F5:8A:F2:54:3E:25:72:3E:26:6A:BB:AA:50 Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 07F4EB4B1F565D86C6FB63FEE185F62F827DD83B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 13:33:23 +0000 Manifest this update: Mon 21 Sep 2026 13:28:23 +0000 Manifest next update: Tue 22 Sep 2026 15:13:23 +0000 Files and hashes: 1: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=) 2: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=) 3: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=) 4: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=) 5: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=) 6: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=) 7: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=) 8: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=) 9: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=) 10: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=) 11: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=) 12: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=) 13: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=) 14: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: IPRn9kDuNCb2yD9tvyvjyWyUUxBd3SAWwJIu+DUVOXg=) 15: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=) 16: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=) 17: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=) 18: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=) 19: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=) 20: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=) 21: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=) 22: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=) 23: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f4:eb:4b:1f:56:5d:86:c6:fb:63:fe:e1:85:f6:2f:82:7d:d8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: Sep 21 13:28:23 2026 GMT Not After : Sep 22 15:13:23 2026 GMT Subject: CN=C03542CB3DE055F58AF2543E25723E266ABBAA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:a6:79:11:3c:16:3f:d7:a6:14:ee:79:ef: 2d:95:2d:1b:c4:ed:58:bc:81:5e:d9:d9:d2:4d:a2: fa:fb:26:f1:e2:fa:66:cb:16:df:d5:29:7b:bf:73: 89:95:a2:99:e5:b2:83:65:3b:84:38:45:35:5a:48: 5d:b5:a6:ab:24:5e:1f:ab:c0:48:64:49:70:ee:c0: 94:c7:5b:e6:15:af:0a:c9:4f:76:50:eb:31:2f:ce: f7:e9:83:13:68:b4:b5:36:3c:53:75:6d:62:60:cf: cd:06:f9:d0:a7:60:33:c1:dd:d9:39:b2:c9:ab:30: d4:2e:6d:13:83:c6:11:2f:3e:89:ca:d1:44:75:68: 65:22:be:89:00:6a:1e:6a:53:4e:58:c2:45:27:c8: c4:92:59:42:c0:b4:5b:64:cc:82:b4:d1:4b:71:3a: f9:f5:72:bc:18:01:19:00:51:19:8a:8f:c1:8e:35: 37:b0:68:7c:c5:86:15:53:2d:53:6f:6b:28:de:ed: fa:c9:53:11:e4:bf:ae:a6:1a:cb:fd:54:49:4d:cc: 00:35:80:b1:11:b9:f5:03:e5:c1:d2:7a:c8:f7:77: ee:77:bc:49:c0:18:58:82:f9:2c:d5:94:64:f3:4d: 0c:89:a0:48:9e:24:f7:dd:f0:7d:8a:df:94:c5:18: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:42:CB:3D:E0:55:F5:8A:F2:54:3E:25:72:3E:26:6A:BB:AA:50 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:81:02:8f:e1:47:b6:17:f0:7e:09:92:03:d2:53:0c:52:7b: 5c:f9:59:69:14:30:bf:c3:6f:71:61:bf:e0:3f:e4:25:2d:0c: 2b:43:5c:b8:4d:9f:7f:74:c2:c0:8c:ef:a2:13:c8:24:38:b1: 07:27:8d:b4:00:3b:41:c8:d6:1b:0b:ab:c3:cb:ed:67:22:3e: 0b:00:8d:dc:7c:f3:d8:d9:ed:d4:f5:6c:e1:c3:0c:fd:a9:51: 1c:da:54:ed:b9:26:11:3f:77:36:03:1f:32:67:c0:86:20:3a: 55:82:64:72:c3:02:a6:bd:15:46:56:e7:8b:72:9c:60:af:90: 4e:8e:6d:1b:48:f0:88:2e:3c:17:3c:9b:71:64:8f:a1:2c:3f: 56:f5:39:e8:d1:ca:de:35:8d:ed:e7:4e:d5:32:5e:d2:ce:eb: 29:5c:8f:ea:13:42:a6:d4:a3:93:14:fc:81:19:43:fe:c4:b1: 2f:72:3d:f3:cc:42:12:09:45:6c:fd:ae:09:82:2b:b3:ec:75: 05:60:6e:86:84:85:3e:38:8c:1d:4e:26:bb:4c:ac:44:6f:d2: a8:1c:b2:75:32:71:5a:53:7f:f2:65:b4:00:96:57:bd:ae:ce: 95:67:56:cc:9f:9b:aa:62:91:03:c9:5d:72:7e:0b:5d:d3:72: b3:c9:59:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/TrSx9WXYbG+2P+4YX2L4J92DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA5MjExMzI4MjNaFw0yNjA5MjIxNTEzMjNaMDMxMTAvBgNV BAMTKEMwMzU0MkNCM0RFMDU1RjU4QUYyNTQzRTI1NzIzRTI2NkFCQkFBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVyqZ5ETwWP9emFO557y2VLRvE 7Vi8gV7Z2dJNovr7JvHi+mbLFt/VKXu/c4mVopnlsoNlO4Q4RTVaSF21pqskXh+r wEhkSXDuwJTHW+YVrwrJT3ZQ6zEvzvfpgxNotLU2PFN1bWJgz80G+dCnYDPB3dk5 ssmrMNQubRODxhEvPonK0UR1aGUivokAah5qU05YwkUnyMSSWULAtFtkzIK00Utx Ovn1crwYARkAURmKj8GONTewaHzFhhVTLVNvayje7frJUxHkv66mGsv9VElNzAA1 gLERufUD5cHSesj3d+53vEnAGFiC+SzVlGTzTQyJoEieJPfd8H2K35TFGHOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwDVCyz3gVfWK8lQ+JXI+Jmq7qlAwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3MDI3MjYtYjJjNi00NmZjLTgy OTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2 NEY1ODRGODU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGBAo/hR7YX8H4JkgPSUwxSe1z5WWkUML/D b3Fhv+A/5CUtDCtDXLhNn390wsCM76ITyCQ4sQcnjbQAO0HI1hsLq8PL7WciPgsA jdx889jZ7dT1bOHDDP2pURzaVO25JhE/dzYDHzJnwIYgOlWCZHLDAqa9FUZW54ty nGCvkE6ObRtI8IguPBc8m3Fkj6EsP1b1OejRyt41je3nTtUyXtLO6ylcj+oTQqbU o5MU/IEZQ/7EsS9yPfPMQhIJRWz9rgmCK7PsdQVgboaEhT44jB1OJrtMrERv0qgc snUycVpTf/JltACWV72uzpVnVsyfm6pikQPJXXJ+C13TcrPJWdc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:54:02 2026 by rpki-client