$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft File: 4C87F894274B3B0E1928C39974942F14C8A8B54C.mft (raw, json) Hash identifier: Vbre8CngQO2rB6tg51n9wJxSSn129B8jx2I7XcVbXsA= Subject key identifier: BB:5E:F3:94:01:8E:A1:FB:D0:24:BA:83:E4:93:4A:CA:52:28:D7:75 Authority key identifier: 4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C Certificate issuer: /CN=4C87F894274B3B0E1928C39974942F14C8A8B54C Certificate serial: 24D1982104DBED855D78BCA59281E5CE38CB01B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 12:56:51 +0000 Manifest this update: Thu 24 Sep 2026 12:51:51 +0000 Manifest next update: Fri 25 Sep 2026 14:11:51 +0000 Files and hashes: 1: 4C87F894274B3B0E1928C39974942F14C8A8B54C.crl (hash: gdtoCCz7XJH1NQ976cUaFLd5wOELqX0pp3rMrTsI2+U=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 77vqSQ2vYJSpRPJK+Drkv/GhwqBRFPysUVhKsIiSCoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d1:98:21:04:db:ed:85:5d:78:bc:a5:92:81:e5:ce:38:cb:01:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C87F894274B3B0E1928C39974942F14C8A8B54C Validity Not Before: Sep 24 12:51:51 2026 GMT Not After : Sep 25 14:11:51 2026 GMT Subject: CN=BB5EF394018EA1FBD024BA83E4934ACA5228D775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:d6:2f:66:6a:a9:ed:70:1c:cb:a2:1d:71: 4d:44:00:0e:bb:84:00:bb:9a:de:61:c2:57:85:6d: ec:de:39:f5:0d:3a:14:a3:0c:e3:12:d9:5e:86:5d: ca:cb:ef:e2:3a:ea:d8:95:35:55:6c:95:9f:aa:a2: ed:ef:11:90:07:48:6e:39:4e:71:ab:31:6e:89:eb: 40:31:a0:30:1a:e0:2a:aa:b7:c8:cc:4a:9f:cd:5d: 2c:c4:fd:58:79:cc:dc:64:81:d5:c5:02:63:0e:42: dd:ca:76:e0:6b:0d:b7:c8:cc:23:8f:b8:55:db:5b: 58:c0:5b:4c:bf:b0:79:6a:04:1c:07:97:b6:f1:a3: a6:9c:32:4c:15:95:67:12:9e:6b:2d:46:3f:94:02: d6:9c:6d:d3:4e:d2:0a:0d:75:39:9b:a5:1c:d1:3f: ca:87:70:0d:d8:69:a2:86:b6:13:a5:a0:d3:93:a0: 53:e7:46:7e:d4:f7:36:b5:30:c7:f7:e5:cb:ac:b5: fe:36:32:1c:c5:66:49:5f:5f:5b:9f:4f:b0:6a:b2: af:59:15:85:30:8a:39:fd:d4:e0:2c:16:d2:5b:ad: 2a:3e:ab:07:22:0e:d8:96:bc:c9:19:6f:9a:71:3e: 00:7e:b4:12:6c:7d:7c:39:01:cc:57:6d:05:55:0c: af:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5E:F3:94:01:8E:A1:FB:D0:24:BA:83:E4:93:4A:CA:52:28:D7:75 X509v3 Authority Key Identifier: keyid:4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:ac:26:fd:85:80:f8:33:29:40:a5:82:70:2c:81:2a:c7: 24:4c:f3:66:b6:70:29:12:a9:8a:73:82:2c:77:d1:a5:39:46: e0:5e:4f:81:84:27:e9:4f:28:f2:08:cc:09:e3:90:10:5a:2c: 1f:c4:cc:39:ea:33:32:fa:32:e2:8c:e8:7e:c3:0b:3b:8b:eb: c5:4e:a5:03:34:95:48:a0:a2:a0:03:8a:bf:60:99:39:a7:fa: f9:cd:3e:bd:93:79:b8:97:39:f2:c1:5a:5c:d9:78:2c:eb:e7: 80:fc:96:c0:0c:7d:a9:fa:61:ac:78:28:3d:14:9f:9d:53:c2: 40:f4:00:f9:de:3c:d4:a8:9d:b4:1f:c1:30:08:d3:da:db:b7: 0c:60:a8:3b:8d:e2:78:50:24:21:d2:6a:2b:28:2d:cb:b4:c4: 96:0a:87:74:a0:c0:5a:28:31:64:5a:f7:3a:0e:ab:16:7e:9a: 52:ac:26:24:32:6d:1c:4c:94:1f:08:3d:24:48:8f:ea:78:0c: 13:25:41:ef:cb:be:71:7b:8c:f5:14:20:80:4b:bf:41:29:1b: 5e:66:3c:18:a0:de:f8:6b:57:ca:7d:1a:b3:ac:e4:f3:d2:c2: f5:ff:1e:83:bb:7b:1e:79:4b:5d:0a:ba:98:ae:9e:92:39:32: bf:e6:7e:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNGYIQTb7YVdeLylkoHlzjjLAbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4N0Y4OTQyNzRCM0IwRTE5MjhDMzk5NzQ5NDJGMTRD OEE4QjU0QzAeFw0yNjA5MjQxMjUxNTFaFw0yNjA5MjUxNDExNTFaMDMxMTAvBgNV BAMTKEJCNUVGMzk0MDE4RUExRkJEMDI0QkE4M0U0OTM0QUNBNTIyOEQ3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxtYvZmqp7XAcy6IdcU1EAA67 hAC7mt5hwleFbezeOfUNOhSjDOMS2V6GXcrL7+I66tiVNVVslZ+qou3vEZAHSG45 TnGrMW6J60AxoDAa4Cqqt8jMSp/NXSzE/Vh5zNxkgdXFAmMOQt3KduBrDbfIzCOP uFXbW1jAW0y/sHlqBBwHl7bxo6acMkwVlWcSnmstRj+UAtacbdNO0goNdTmbpRzR P8qHcA3YaaKGthOloNOToFPnRn7U9za1MMf35custf42MhzFZklfX1ufT7Bqsq9Z FYUwijn91OAsFtJbrSo+qwciDtiWvMkZb5pxPgB+tBJsfXw5AcxXbQVVDK9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu17zlAGOofvQJLqD5JNKylIo13UwHwYDVR0j BBgwFoAUTIf4lCdLOw4ZKMOZdJQvFMiotUwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlMjZhYTMtMzA3My00Mjc2LWJkNzQtYWQ4NmYwOTljMjUzLzAvNEM4N0Y4OTQy NzRCM0IwRTE5MjhDMzk5NzQ5NDJGMTRDOEE4QjU0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Qzg3Rjg5NDI3NEIzQjBFMTkyOEMzOTk3NDk0MkYxNEM4QThC NTRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvNEM4N0Y4OTQyNzRCM0IwRTE5MjhDMzk5NzQ5NDJG MTRDOEE4QjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+WrCb9hYD4MylApYJwLIEqxyRM82a2cCkS qYpzgix30aU5RuBeT4GEJ+lPKPIIzAnjkBBaLB/EzDnqMzL6MuKM6H7DCzuL68VO pQM0lUigoqADir9gmTmn+vnNPr2TebiXOfLBWlzZeCzr54D8lsAMfan6Yax4KD0U n51TwkD0APnePNSonbQfwTAI09rbtwxgqDuN4nhQJCHSaisoLcu0xJYKh3SgwFoo MWRa9zoOqxZ+mlKsJiQybRxMlB8IPSRIj+p4DBMlQe/LvnF7jPUUIIBLv0EpG15m PBig3vhrV8p9GrOs5PPSwvX/HoO7ex55S10KupiunpI5Mr/mfkU= -----END CERTIFICATE-----Generated at Thu Sep 24 20:24:20 2026 by rpki-client