$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: s1uM/e/8dIklISMBqbc8q8d/ebQ6KHKMh++FRlckxGk= Subject key identifier: E2:0A:A7:59:67:F4:40:62:40:95:2A:BB:F4:DB:AB:F3:49:A8:A2:0B Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 476AD64492F23108870668D4275A48D4CC1802FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:49:29 +0000 Manifest this update: Wed 23 Sep 2026 06:44:29 +0000 Manifest next update: Thu 24 Sep 2026 07:20:29 +0000 Files and hashes: 1: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 2: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 3: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 4: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 5: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 6: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: 0FOQnrhYEaQwQ5As6Q3tRpzF13NLNl9VGB0OXVQ7Y7M=) 7: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6a:d6:44:92:f2:31:08:87:06:68:d4:27:5a:48:d4:cc:18:02:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Sep 23 06:44:29 2026 GMT Not After : Sep 24 07:20:29 2026 GMT Subject: CN=E20AA75967F4406240952ABBF4DBABF349A8A20B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:fa:c8:97:06:6f:ec:2a:e9:a2:23:d0:18: 1f:80:6d:fa:a2:ec:4a:78:03:6a:4c:24:21:7c:4b: ab:72:22:25:8b:6e:21:9e:74:87:12:ab:e5:62:a2: 32:83:e0:12:4b:89:4b:d4:b1:f9:bd:47:f1:ba:bc: 33:a6:7a:37:e2:29:4e:7c:1b:5c:d1:af:a6:ec:38: 8b:29:73:0d:7f:63:e3:cb:cb:3e:e6:47:71:c5:59: 6f:96:5e:76:32:6e:6c:57:ec:2a:74:8f:f9:75:57: 7a:ae:4d:21:e4:f3:ef:3e:2a:ab:32:6b:ee:ac:dd: 48:7f:f3:6f:a2:16:89:50:f6:8f:29:e6:8c:71:6c: 46:9b:18:94:d8:21:eb:d4:b2:f0:17:62:72:bb:d3: bb:d9:17:67:47:c1:86:9f:5e:59:1b:dd:77:e6:a2: be:f4:ec:dd:f3:47:e7:c0:b8:31:45:ad:93:4a:9b: ca:fa:7a:2b:0f:34:18:ba:2e:bd:64:b8:f5:71:4a: cd:40:27:67:4c:1c:f0:1f:97:20:f2:4f:b7:58:58: d8:60:c4:44:c6:d0:50:f6:4f:b5:9a:7c:66:c0:f9: a1:0f:a6:88:f2:b8:a1:3c:59:1d:9d:fb:e2:99:5b: a7:89:42:d7:15:ef:c7:5a:7b:64:0e:ed:10:13:e8: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0A:A7:59:67:F4:40:62:40:95:2A:BB:F4:DB:AB:F3:49:A8:A2:0B X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c3:f1:7a:94:40:a0:98:ea:6c:97:f2:dc:e4:c2:a1:6e:99: ce:d9:45:06:0b:e1:f5:c3:d5:59:9c:2e:3d:0e:aa:d8:b6:7d: 92:64:c8:d0:19:ff:a9:bf:1b:b4:87:93:14:23:cd:a2:a1:a6: 94:ff:38:aa:cb:ab:79:50:32:8f:9d:34:9b:41:36:f6:a7:55: d2:05:57:24:6d:79:74:fc:ae:58:27:47:dd:cc:94:58:3c:7a: 06:31:8c:9c:90:7a:86:0f:df:55:88:4e:74:da:26:c6:0f:2b: af:72:e7:7f:84:27:e6:35:7b:25:4d:00:a5:d8:06:e8:de:cd: 42:55:cc:21:32:04:48:be:6d:d2:22:8b:1c:43:fb:96:13:95: a2:35:37:c9:b2:ee:47:d7:9a:8b:48:2c:7e:fe:d9:b3:a6:cd: 99:74:85:44:e3:96:5d:87:e4:9b:73:3b:38:60:1c:a7:cf:6d: e1:26:20:21:7e:06:e8:c9:a9:1c:3b:8a:9b:5f:2f:50:96:82: 8a:f1:ac:5c:fb:52:73:63:b0:e2:80:eb:a0:c4:de:ba:3c:ce: d1:14:4e:c7:2c:a8:33:5a:89:66:7b:90:14:8d:7b:69:55:fe: 52:78:f2:13:9d:51:78:ab:b4:96:4d:09:e9:98:c1:08:96:63: 6b:32:62:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2rWRJLyMQiHBmjUJ1pI1MwYAvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA5MjMwNjQ0MjlaFw0yNjA5MjQwNzIwMjlaMDMxMTAvBgNV BAMTKEUyMEFBNzU5NjdGNDQwNjI0MDk1MkFCQkY0REJBQkYzNDlBOEEyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJPrIlwZv7CrpoiPQGB+Abfqi 7Ep4A2pMJCF8S6tyIiWLbiGedIcSq+ViojKD4BJLiUvUsfm9R/G6vDOmejfiKU58 G1zRr6bsOIspcw1/Y+PLyz7mR3HFWW+WXnYybmxX7Cp0j/l1V3quTSHk8+8+Kqsy a+6s3Uh/82+iFolQ9o8p5oxxbEabGJTYIevUsvAXYnK707vZF2dHwYafXlkb3Xfm or707N3zR+fAuDFFrZNKm8r6eisPNBi6Lr1kuPVxSs1AJ2dMHPAflyDyT7dYWNhg xETG0FD2T7WafGbA+aEPpojyuKE8WR2d++KZW6eJQtcV78dae2QO7RAT6P5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4gqnWWf0QGJAlSq79Nur80moogswHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHD8XqUQKCY6myX8tzkwqFumc7ZRQYL4fXD 1VmcLj0Oqti2fZJkyNAZ/6m/G7SHkxQjzaKhppT/OKrLq3lQMo+dNJtBNvanVdIF VyRteXT8rlgnR93MlFg8egYxjJyQeoYP31WITnTaJsYPK69y53+EJ+Y1eyVNAKXY BujezUJVzCEyBEi+bdIiixxD+5YTlaI1N8my7kfXmotILH7+2bOmzZl0hUTjll2H 5JtzOzhgHKfPbeEmICF+BujJqRw7iptfL1CWgorxrFz7UnNjsOKA66DE3ro8ztEU TscsqDNaiWZ7kBSNe2lV/lJ48hOdUXirtJZNCemYwQiWY2syYo4= -----END CERTIFICATE-----Generated at Wed Sep 23 23:57:33 2026 by rpki-client