$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json) Hash identifier: 27Wn3bv+DxlGccCc7GuCxOoKzIgg9KozGgROiqgRJQE= Subject key identifier: 33:EA:3C:7F:FD:5F:3E:5A:CD:EA:29:72:88:90:43:A8:18:1D:0F:2E Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 02B812F63C8D1AC9D39704905BDFF829F28ED07C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:21:03 +0000 Manifest this update: Thu 24 Sep 2026 04:16:03 +0000 Manifest next update: Fri 25 Sep 2026 06:39:03 +0000 Files and hashes: 1: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=) 2: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=) 3: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=) 4: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=) 5: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: 51ILwr/o8afSHLcJoIe99J7Ha+wOQ/x/vy46RvGTci0=) 6: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=) 7: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=) 8: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b8:12:f6:3c:8d:1a:c9:d3:97:04:90:5b:df:f8:29:f2:8e:d0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: Sep 24 04:16:03 2026 GMT Not After : Sep 25 06:39:03 2026 GMT Subject: CN=33EA3C7FFD5F3E5ACDEA2972889043A8181D0F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:d7:c1:f9:41:62:70:37:20:c3:50:7d:5c: 8b:a4:82:6e:b8:0d:b0:f4:ab:13:c9:76:d1:46:c7: 5e:1a:9d:70:ad:bf:76:d5:54:99:83:9d:41:03:56: 29:26:d3:7c:ba:98:dd:73:bc:0e:5d:2b:05:3e:03: 0f:08:70:96:b2:94:1d:6f:e8:8f:a7:5f:6b:82:bb: 12:2b:c4:e2:f2:05:52:a3:c6:25:6a:dd:de:0a:e9: 23:c8:e1:fe:0b:8c:61:fa:b5:1d:71:0a:29:65:ea: 5d:27:2a:1f:4f:83:a7:69:99:b2:fb:ca:58:18:dc: cd:f7:de:04:00:f9:48:bd:35:30:75:94:a3:47:68: f7:5b:93:3f:0e:4e:c2:43:1a:90:c3:59:63:73:1d: d3:c3:65:e2:0b:83:c1:d1:99:e0:d0:a5:7a:3f:ef: 01:0c:26:19:aa:b3:6f:12:6a:32:5d:03:30:f0:c1: 9f:b8:c8:d4:6b:36:a2:d9:6b:cf:95:17:53:91:89: 62:3b:05:ee:e4:e5:bf:8f:cd:bd:ae:5d:42:ac:a4: 16:99:6c:25:d2:93:c8:2e:bd:b5:79:85:49:64:3d: d1:ed:ba:c4:b3:35:ee:90:d1:fe:5d:ad:78:c1:bf: 5e:fc:01:37:84:7e:cb:28:65:79:53:f6:af:1d:1e: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:3C:7F:FD:5F:3E:5A:CD:EA:29:72:88:90:43:A8:18:1D:0F:2E X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0e:f9:f0:d0:d3:78:06:f2:a9:07:27:9d:3e:cc:e9:18:af: 80:92:87:c2:4f:49:8b:a5:06:44:f6:95:e1:2d:0f:3e:ae:59: 61:52:6d:a4:c0:ef:10:9b:db:ea:a5:ba:ac:24:3a:3a:52:c2: 40:f5:21:c8:51:ac:c3:5e:f7:a8:d0:eb:da:27:98:29:50:5f: f9:dc:ce:3f:6e:6f:96:15:1d:55:62:9c:41:c6:de:79:a4:48: 74:4f:ac:8a:8e:60:e6:71:6d:3c:90:07:72:e3:f2:09:6e:0d: 4e:80:d1:7d:09:de:31:cb:1b:34:bf:6e:1d:e9:b5:55:4e:c3: 1d:60:18:8f:35:23:b2:a2:95:a0:58:07:15:4f:52:e1:7c:6d: bb:b8:fb:57:62:9d:6a:94:98:68:46:c1:7d:92:6d:23:2d:31: 8a:a6:24:79:d8:d5:2c:ad:06:33:69:e3:a7:44:fa:a4:f2:46: a8:29:a2:e5:70:7d:1f:31:cb:cd:ee:81:79:55:4f:5f:73:3c: e8:db:45:ef:b8:a2:00:90:29:11:87:8f:26:84:ff:c8:1e:d1: 88:fc:a3:81:f7:84:1b:09:cf:9e:bc:cf:f2:94:14:f4:cd:17: eb:fd:d8:01:ac:d1:b2:a9:f9:a8:54:03:d3:80:a9:e6:ba:ff: b0:79:dd:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArgS9jyNGsnTlwSQW9/4KfKO0HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA5MjQwNDE2MDNaFw0yNjA5MjUwNjM5MDNaMDMxMTAvBgNV BAMTKDMzRUEzQzdGRkQ1RjNFNUFDREVBMjk3Mjg4OTA0M0E4MTgxRDBGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1itfB+UFicDcgw1B9XIukgm64 DbD0qxPJdtFGx14anXCtv3bVVJmDnUEDVikm03y6mN1zvA5dKwU+Aw8IcJaylB1v 6I+nX2uCuxIrxOLyBVKjxiVq3d4K6SPI4f4LjGH6tR1xCill6l0nKh9Pg6dpmbL7 ylgY3M333gQA+Ui9NTB1lKNHaPdbkz8OTsJDGpDDWWNzHdPDZeILg8HRmeDQpXo/ 7wEMJhmqs28SajJdAzDwwZ+4yNRrNqLZa8+VF1ORiWI7Be7k5b+Pzb2uXUKspBaZ bCXSk8guvbV5hUlkPdHtusSzNe6Q0f5drXjBv178ATeEfssoZXlT9q8dHnx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+o8f/1fPlrN6ilyiJBDqBgdDy4wHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoO+fDQ03gG8qkHJ50+zOkYr4CSh8JPSYul BkT2leEtDz6uWWFSbaTA7xCb2+qluqwkOjpSwkD1IchRrMNe96jQ69onmClQX/nc zj9ub5YVHVVinEHG3nmkSHRPrIqOYOZxbTyQB3Lj8gluDU6A0X0J3jHLGzS/bh3p tVVOwx1gGI81I7KilaBYBxVPUuF8bbu4+1dinWqUmGhGwX2SbSMtMYqmJHnY1Syt BjNp46dE+qTyRqgpouVwfR8xy83ugXlVT19zPOjbRe+4ogCQKRGHjyaE/8ge0Yj8 o4H3hBsJz568z/KUFPTNF+v92AGs0bKp+ahUA9OAqea6/7B53Y8= -----END CERTIFICATE-----Generated at Thu Sep 24 09:38:29 2026 by rpki-client