$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft File: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft (raw, json) Hash identifier: +NBzAJ779DPpfWrMmJblEooMk9E48nKGIiyx0BmevIk= Subject key identifier: 8D:4D:92:8B:1E:69:B9:0A:9A:17:B4:18:94:46:46:06:CA:61:11:64 Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF Certificate issuer: /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Certificate serial: 4AB6B6CD552928D8306A0C639ED93A4E70368CDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:26:52 +0000 Manifest this update: Fri 25 Sep 2026 01:21:52 +0000 Manifest next update: Sat 26 Sep 2026 03:54:52 +0000 Files and hashes: 1: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl (hash: 7J5XP+11L/wowChjtKBl0pM52ZwpApZOKZyCzV5hRmk=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b6:b6:cd:55:29:28:d8:30:6a:0c:63:9e:d9:3a:4e:70:36:8c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Validity Not Before: Sep 25 01:21:52 2026 GMT Not After : Sep 26 03:54:52 2026 GMT Subject: CN=8D4D928B1E69B90A9A17B41894464606CA611164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:40:e3:d9:d4:cc:de:b2:03:9f:f3:0b:2f: 98:8a:ac:39:48:4c:d0:77:39:2e:2a:4c:f2:67:fa: af:00:a0:d0:bf:ac:f0:1f:0f:d7:3e:c2:53:d6:a7: f1:6a:88:aa:ec:bf:7a:1d:7b:f0:d9:67:cb:81:eb: 2e:52:58:2c:98:09:93:d5:2b:15:3c:28:27:18:81: 3c:86:ae:1b:95:03:ea:33:8d:e0:c4:29:ed:a9:14: 5e:3a:50:cf:d6:45:4d:e7:b9:7c:1f:6d:1d:72:41: bf:57:ad:71:5f:c6:cf:2d:c3:fe:02:0a:50:b7:c7: f8:d6:0d:9a:24:79:af:b0:a6:1e:30:7a:0b:64:4f: 9f:b1:b7:8b:ce:b2:c4:71:fc:16:b6:33:3e:c7:e3: f7:01:e1:fb:28:90:77:df:24:f5:41:1a:e6:50:d1: ec:50:ff:79:28:3b:7b:13:d3:97:f7:09:ae:89:25: 87:dd:db:f7:25:fd:c9:66:ee:1d:38:75:19:45:27: 4b:a7:88:d3:0e:62:94:1a:45:61:1d:e5:b4:7e:7e: f7:cb:63:39:99:8f:82:67:d1:23:7a:36:4d:ca:c2: 5a:fa:8f:0e:ab:d4:54:4e:dc:9d:9f:0a:1b:c6:1a: 4b:cf:30:ac:e5:5b:0d:71:29:0e:8b:ed:dd:91:7a: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:92:8B:1E:69:B9:0A:9A:17:B4:18:94:46:46:06:CA:61:11:64 X509v3 Authority Key Identifier: keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1f:09:f8:f6:1e:5b:c7:35:7c:9a:87:88:2d:97:f6:f4:80: 5d:a0:a7:f9:d9:66:96:43:3d:51:de:6b:fb:ef:e0:40:9f:ef: eb:fe:3f:70:3f:9c:63:bc:af:10:ce:1a:e0:75:c8:6e:ce:af: 26:e4:56:61:77:1b:9b:e2:72:c8:68:20:df:42:e0:80:01:54: 8c:d7:b2:8f:dd:55:9d:76:f6:97:53:6d:90:ff:95:7b:01:e9: 75:9d:2f:27:40:d5:b2:c3:29:74:ef:14:cd:76:7f:db:a4:64: 2e:a4:f9:6d:98:8c:e5:6c:a2:e9:c2:92:8c:70:cd:ae:bc:f8: 6d:dd:fb:b6:e7:93:b9:0f:1f:35:39:3c:89:fc:92:04:df:88: a5:f2:23:64:0a:d8:de:78:70:14:9c:7a:5c:94:35:ac:29:2c: af:20:3b:fb:52:3c:de:08:09:e5:87:73:70:e5:f3:4b:ec:3c: 20:22:61:c5:80:fc:1c:66:81:29:3f:0c:ab:6b:b8:05:b4:46: e2:31:f1:9a:1d:32:26:c5:28:c1:89:00:79:f1:dc:bf:db:28: 04:ec:4b:72:c0:65:eb:c3:f0:40:b4:38:17:ac:30:33:a9:fc: 78:9f:de:de:21:18:a7:97:90:ff:32:d1:9c:08:05:d2:16:d7: ce:66:e3:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSra2zVUpKNgwagxjntk6TnA2jN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5MzND MjQ1MUNBRjAeFw0yNjA5MjUwMTIxNTJaFw0yNjA5MjYwMzU0NTJaMDMxMTAvBgNV BAMTKDhENEQ5MjhCMUU2OUI5MEE5QTE3QjQxODk0NDY0NjA2Q0E2MTExNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0U0Dj2dTM3rIDn/MLL5iKrDlI TNB3OS4qTPJn+q8AoNC/rPAfD9c+wlPWp/FqiKrsv3ode/DZZ8uB6y5SWCyYCZPV KxU8KCcYgTyGrhuVA+ozjeDEKe2pFF46UM/WRU3nuXwfbR1yQb9XrXFfxs8tw/4C ClC3x/jWDZokea+wph4wegtkT5+xt4vOssRx/Ba2Mz7H4/cB4fsokHffJPVBGuZQ 0exQ/3koO3sT05f3Ca6JJYfd2/cl/clm7h04dRlFJ0uniNMOYpQaRWEd5bR+fvfL YzmZj4Jn0SN6Nk3Kwlr6jw6r1FRO3J2fChvGGkvPMKzlWw1xKQ6L7d2RejK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjU2Six5puQqaF7QYlEZGBsphEWQwHwYDVR0j BBgwFoAUtBEfwNGDalTP81Ca/6g5M8JFHK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ3NThlOGUtNDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBE MTgzNkE1NENGRjM1MDlBRkZBODM5MzNDMjQ1MUNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDExMUZDMEQxODM2QTU0Q0ZGMzUwOUFGRkE4MzkzM0MyNDUx Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5 MzNDMjQ1MUNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMfCfj2HlvHNXyah4gtl/b0gF2gp/nZZpZD PVHea/vv4ECf7+v+P3A/nGO8rxDOGuB1yG7OrybkVmF3G5vicshoIN9C4IABVIzX so/dVZ129pdTbZD/lXsB6XWdLydA1bLDKXTvFM12f9ukZC6k+W2YjOVsounCkoxw za68+G3d+7bnk7kPHzU5PIn8kgTfiKXyI2QK2N54cBScelyUNawpLK8gO/tSPN4I CeWHc3Dl80vsPCAiYcWA/BxmgSk/DKtruAW0RuIx8ZodMibFKMGJAHnx3L/bKATs S3LAZevD8EC0OBesMDOp/Hif3t4hGKeXkP8y0ZwIBdIW185m43E= -----END CERTIFICATE-----Generated at Fri Sep 25 16:25:06 2026 by rpki-client