$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: QukMAx820z+ez7cqF/8dTbXku1cveBy7bZPJWWHo+bM= Subject key identifier: D2:69:64:39:FD:30:2C:97:5B:49:5A:E6:79:F0:F7:60:20:10:67:09 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 556AE3A583AC274B6F590CFB4573AE29F5783BC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 19:09:08 +0000 Manifest this update: Fri 25 Sep 2026 19:04:08 +0000 Manifest next update: Sat 26 Sep 2026 21:57:08 +0000 Files and hashes: 1: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) 2: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 3: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: +SKufaTaxmQQCjxmCovkhbsUrjVkW0mTSUhhvUc1tx8=) 4: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) 5: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6a:e3:a5:83:ac:27:4b:6f:59:0c:fb:45:73:ae:29:f5:78:3b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Sep 25 19:04:08 2026 GMT Not After : Sep 26 21:57:08 2026 GMT Subject: CN=D2696439FD302C975B495AE679F0F76020106709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:e9:d8:97:75:83:87:38:88:20:30:68:a2: e7:d7:a2:6f:80:23:42:ff:c3:8c:27:8d:25:17:bd: 0e:d4:d9:4f:96:00:2a:89:0b:71:74:4d:be:4c:46: 16:fa:75:f2:f1:8f:dc:5e:c9:54:12:a7:8c:35:cb: 3b:68:3e:85:c1:68:5f:8d:b7:08:7d:0c:c2:43:1b: f3:ad:61:37:a6:70:e4:88:4b:4b:75:fe:6e:a3:d5: 54:3a:bf:3a:16:88:01:91:a4:22:a8:71:b1:f2:7b: a8:97:f2:d4:dd:65:32:41:15:c3:06:4b:b1:22:55: 5e:86:51:17:db:0d:e8:3a:b9:8f:b7:53:03:6f:d5: bc:1c:1f:dd:f5:3b:34:b0:b6:77:c4:05:1e:64:43: 5a:9c:bc:fc:dd:d8:5d:7b:34:93:fd:47:4c:ca:83: 57:70:c0:d8:a0:bf:a5:98:8d:94:ff:19:ba:20:53: 4b:21:bf:55:dc:dd:b8:f8:8d:ed:94:b0:9e:b3:7d: 15:58:51:8b:29:8d:00:53:c9:d5:bc:75:c3:a6:40: 40:27:b6:02:0f:ed:88:4d:f4:f6:bd:ef:f7:58:09: 72:27:0c:36:f0:68:cd:0a:d7:fc:f5:5e:9e:dc:b8: 2f:7f:93:b8:0a:58:73:ae:56:d3:f1:41:e9:3a:6e: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:69:64:39:FD:30:2C:97:5B:49:5A:E6:79:F0:F7:60:20:10:67:09 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:df:1b:72:42:5f:83:c4:cd:a6:e1:75:93:87:6a:f6:43:22: 2b:ab:8d:00:5f:18:c5:93:f9:94:bb:af:78:7b:02:86:bf:1d: 40:9f:b7:50:34:24:f0:30:e5:9b:71:cd:30:9e:fe:1d:2a:cd: 8c:b4:14:3b:3d:8c:8c:6f:21:b1:47:76:4b:85:54:f9:6d:00: c2:f4:6a:94:61:50:18:02:bf:34:16:9d:34:5c:00:a1:36:06: 96:36:2f:89:51:0d:92:6c:84:55:34:ef:c1:ca:cd:20:74:d3: 03:1b:67:16:86:a1:7d:8d:de:64:8b:b8:f4:5e:bc:c2:c9:3b: 54:ed:b6:98:14:3a:ce:4a:b0:64:ce:53:8d:1b:99:73:b9:ab: 7f:26:24:75:d2:dc:89:1a:e2:e3:40:b4:f4:3c:11:7e:21:55: b3:4a:e3:3d:5c:04:79:b3:0b:b0:40:73:d3:5b:e5:c1:ae:d5: b7:8b:4f:cb:9d:5c:6a:b9:e6:d0:f6:fe:10:6e:d5:8b:b4:31: be:47:b6:8c:bd:8e:01:32:dd:57:30:7f:56:fc:c6:99:96:f0: bb:3b:c6:25:5e:63:7b:a1:55:29:1d:8f:22:20:78:d3:dd:04: 73:6a:4f:57:d3:a6:09:b9:79:8b:7b:61:1d:62:36:26:d0:a3: 18:64:55:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWrjpYOsJ0tvWQz7RXOuKfV4O8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA5MjUxOTA0MDhaFw0yNjA5MjYyMTU3MDhaMDMxMTAvBgNV BAMTKEQyNjk2NDM5RkQzMDJDOTc1QjQ5NUFFNjc5RjBGNzYwMjAxMDY3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEOnYl3WDhziIIDBooufXom+A I0L/w4wnjSUXvQ7U2U+WACqJC3F0Tb5MRhb6dfLxj9xeyVQSp4w1yztoPoXBaF+N twh9DMJDG/OtYTemcOSIS0t1/m6j1VQ6vzoWiAGRpCKocbHye6iX8tTdZTJBFcMG S7EiVV6GURfbDeg6uY+3UwNv1bwcH931OzSwtnfEBR5kQ1qcvPzd2F17NJP9R0zK g1dwwNigv6WYjZT/GbogU0shv1Xc3bj4je2UsJ6zfRVYUYspjQBTydW8dcOmQEAn tgIP7YhN9Pa97/dYCXInDDbwaM0K1/z1Xp7cuC9/k7gKWHOuVtPxQek6bqPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0mlkOf0wLJdbSVrmefD3YCAQZwkwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3fG3JCX4PEzabhdZOHavZDIiurjQBfGMWT +ZS7r3h7Aoa/HUCft1A0JPAw5ZtxzTCe/h0qzYy0FDs9jIxvIbFHdkuFVPltAML0 apRhUBgCvzQWnTRcAKE2BpY2L4lRDZJshFU078HKzSB00wMbZxaGoX2N3mSLuPRe vMLJO1TttpgUOs5KsGTOU40bmXO5q38mJHXS3Ika4uNAtPQ8EX4hVbNK4z1cBHmz C7BAc9Nb5cGu1beLT8udXGq55tD2/hBu1Yu0Mb5Htoy9jgEy3Vcwf1b8xpmW8Ls7 xiVeY3uhVSkdjyIgeNPdBHNqT1fTpgm5eYt7YR1iNibQoxhkVVc= -----END CERTIFICATE-----Generated at Fri Sep 25 23:02:43 2026 by rpki-client