$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft File: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft (raw, json) Hash identifier: Qvm0jpMfoDUsgWaJmQNrLFiIOYeXbzS6MeDD0H3sSwg= Subject key identifier: A7:EC:2B:ED:D6:D0:4F:98:FB:82:53:42:C9:9A:E7:6A:9B:F4:3F:51 Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80 Certificate issuer: /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80 Certificate serial: 0C977E5D96B33276DB223E2D4171BAC0CC25474F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 16:10:49 +0000 Manifest this update: Thu 24 Sep 2026 16:05:49 +0000 Manifest next update: Fri 25 Sep 2026 17:51:49 +0000 Files and hashes: 1: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl (hash: 6jDogofpcYNyLEzMPEMGewHxzP0dnOzecgTBH0Cz4l8=) 2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:97:7e:5d:96:b3:32:76:db:22:3e:2d:41:71:ba:c0:cc:25:47:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80 Validity Not Before: Sep 24 16:05:49 2026 GMT Not After : Sep 25 17:51:49 2026 GMT Subject: CN=A7EC2BEDD6D04F98FB825342C99AE76A9BF43F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5f:05:03:f4:7f:01:4e:da:86:01:6e:97:b3: 6c:2e:5e:ee:e3:4a:f9:ce:5f:b6:c3:ba:bd:31:2f: 8d:50:64:4d:83:64:b1:f2:b4:cb:60:83:f2:e9:67: c4:b9:15:ae:0d:18:6e:43:89:37:42:49:d0:36:b3: f6:23:fd:21:87:fd:37:0d:af:fa:a0:72:6b:b7:16: c1:e0:1d:0c:54:f9:67:26:4b:d5:dc:81:f8:0a:a1: 61:fc:23:f2:f7:dc:e1:e8:a8:8b:b4:09:d0:25:e3: c5:e0:2c:b9:ff:13:e8:d3:d2:9c:b5:5d:52:89:40: e5:26:83:7c:53:11:10:a0:9f:b9:f8:27:fa:35:3c: 4b:32:e9:a3:9f:f2:0f:1f:08:b8:01:20:07:ab:3d: a7:1f:e9:90:6a:68:73:b4:a4:03:02:60:81:b8:d7: 44:78:0e:85:22:c2:2d:d0:c8:c9:2a:8d:c4:cb:a9: 08:cf:9d:68:ee:cc:b8:7f:7f:46:f7:49:81:1a:25: fb:ca:61:68:76:13:7e:6d:07:c2:96:56:aa:bf:6d: 2b:99:b7:cf:b2:f5:6f:4f:26:cb:eb:f9:cb:28:25: d6:54:31:bb:af:e4:dd:98:1a:0f:d3:3d:d6:63:5b: 04:c0:f1:d1:71:d5:6a:03:66:41:67:9d:a0:39:6e: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:2B:ED:D6:D0:4F:98:FB:82:53:42:C9:9A:E7:6A:9B:F4:3F:51 X509v3 Authority Key Identifier: keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:06:bc:9e:19:20:a4:c7:f2:44:ab:8f:29:3f:61:22:45:6b: 42:ed:dc:60:63:0a:27:44:50:19:89:d8:c6:0d:1f:68:6f:dd: d1:e6:42:8c:7f:fc:95:83:c1:75:22:a7:db:9c:82:02:16:08: a4:a3:b7:ad:b2:00:eb:a5:b3:8a:91:81:e7:05:36:b1:6a:42: 7a:b9:ea:c1:29:ff:47:d4:21:41:c8:44:e5:c5:db:68:55:b4: 90:c4:43:f1:92:28:48:d3:00:7b:80:35:ce:f7:7c:68:d0:f1: cd:61:20:29:7d:9d:7b:f9:90:cc:91:d3:a8:9d:1f:89:8b:75: 16:9b:94:27:11:62:f7:ba:5d:1e:53:1f:37:6b:30:93:d6:0b: 22:fc:f6:0a:6d:69:f4:3b:14:e0:b8:77:c0:85:3c:63:82:df: 1d:db:ab:13:a5:02:41:92:87:01:36:08:0c:5c:c4:9a:da:19: e5:4b:26:e7:79:54:48:03:b2:e0:c7:7a:12:4f:77:65:f3:39: 37:8e:e7:20:7d:10:8f:05:e3:57:07:13:e6:23:22:53:1f:83: 9f:45:6b:19:63:53:5c:1b:b0:68:9b:22:db:59:41:ce:0e:1e: 65:a1:06:68:a0:28:4c:90:b4:83:af:76:82:0c:98:e3:a1:38: 7f:d7:2d:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJd+XZazMnbbIj4tQXG6wMwlR08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAx MjQwMkM4MDAeFw0yNjA5MjQxNjA1NDlaFw0yNjA5MjUxNzUxNDlaMDMxMTAvBgNV BAMTKEE3RUMyQkVERDZEMDRGOThGQjgyNTM0MkM5OUFFNzZBOUJGNDNGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2XwUD9H8BTtqGAW6Xs2wuXu7j SvnOX7bDur0xL41QZE2DZLHytMtgg/LpZ8S5Fa4NGG5DiTdCSdA2s/Yj/SGH/TcN r/qgcmu3FsHgHQxU+WcmS9XcgfgKoWH8I/L33OHoqIu0CdAl48XgLLn/E+jT0py1 XVKJQOUmg3xTERCgn7n4J/o1PEsy6aOf8g8fCLgBIAerPacf6ZBqaHO0pAMCYIG4 10R4DoUiwi3QyMkqjcTLqQjPnWjuzLh/f0b3SYEaJfvKYWh2E35tB8KWVqq/bSuZ t8+y9W9PJsvr+csoJdZUMbuv5N2YGg/TPdZjWwTA8dFx1WoDZkFnnaA5bjWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+wr7dbQT5j7glNCyZrnapv0P1EwHwYDVR0j BBgwFoAUxET7nqXkyk2l+4W6ExxiwBJALIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjcwMDI5MmYtMjg2OC00N2IzLWFjMjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVB NUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAxMjQwMkM4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDQ0RkI5RUE1RTRDQTREQTVGQjg1QkExMzFDNjJDMDEyNDAy QzgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYy QzAxMjQwMkM4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkGvJ4ZIKTH8kSrjyk/YSJFa0Lt3GBjCidE UBmJ2MYNH2hv3dHmQox//JWDwXUip9ucggIWCKSjt62yAOuls4qRgecFNrFqQnq5 6sEp/0fUIUHIROXF22hVtJDEQ/GSKEjTAHuANc73fGjQ8c1hICl9nXv5kMyR06id H4mLdRablCcRYve6XR5THzdrMJPWCyL89gptafQ7FOC4d8CFPGOC3x3bqxOlAkGS hwE2CAxcxJraGeVLJud5VEgDsuDHehJPd2XzOTeO5yB9EI8F41cHE+YjIlMfg59F axljU1wbsGibIttZQc4OHmWhBmigKEyQtIOvdoIMmOOhOH/XLQY= -----END CERTIFICATE-----Generated at Fri Sep 25 05:34:14 2026 by rpki-client