$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json) Hash identifier: BG9+aI/D92IWJ+B7yV3aR3rjXj9sJhX+5pzgWDL/9tY= Subject key identifier: F8:1C:3A:A4:31:82:07:6A:D6:AE:36:40:91:C9:B8:2E:8B:53:08:26 Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Certificate serial: 35A95F266DC2F9C976F70E463635F170B8873198 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:30:46 +0000 Manifest this update: Fri 25 Sep 2026 00:25:46 +0000 Manifest next update: Sat 26 Sep 2026 02:45:46 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=) 4: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: 3Lv7iO69b/ZSNbhlFihPmse4KG+Y1+cOI2ZiUlPYu48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a9:5f:26:6d:c2:f9:c9:76:f7:0e:46:36:35:f1:70:b8:87:31:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Validity Not Before: Sep 25 00:25:46 2026 GMT Not After : Sep 26 02:45:46 2026 GMT Subject: CN=F81C3AA43182076AD6AE364091C9B82E8B530826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:b1:86:31:f0:68:68:b3:12:86:9e:95:bd: 25:ae:2a:51:4d:55:17:18:b9:d8:e2:2b:58:4e:a9: d7:73:dc:85:c8:45:a0:a5:4d:c4:bd:cc:bd:85:63: 60:93:28:8f:4f:c5:e2:2d:b2:38:f6:23:a8:91:a3: b9:75:ee:1f:53:36:c7:ec:5e:b8:1d:a0:5d:10:c7: fd:08:38:83:93:b0:6e:9c:c2:cc:6f:33:d9:55:22: e3:e1:26:77:ae:3c:10:d3:2a:76:4a:80:a6:08:01: 23:19:51:af:c2:87:07:3e:d8:ff:52:b5:60:c7:26: 24:90:66:46:18:14:0e:7e:9f:de:82:be:5e:1e:77: 1c:19:00:1e:76:4f:b6:f0:95:4a:7b:4e:d0:2b:f8: 75:b2:db:84:82:dc:35:33:59:cc:7a:31:3f:6e:f7: 74:55:9e:e8:88:6f:82:be:7d:da:21:9c:f8:ba:f8: 3b:e4:58:7d:b2:bd:fc:d6:93:be:39:82:6d:33:18: ab:58:f2:08:50:62:0b:3b:83:c5:55:e9:72:f3:0e: f8:d0:5b:ef:78:5c:ca:91:36:32:7e:c5:fe:6e:3e: 28:93:80:56:53:3d:fe:cd:74:37:5b:3d:bf:99:1c: a2:68:5d:56:25:f5:7d:d0:39:38:34:66:c3:e8:00: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1C:3A:A4:31:82:07:6A:D6:AE:36:40:91:C9:B8:2E:8B:53:08:26 X509v3 Authority Key Identifier: keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:94:20:be:52:e7:28:60:17:af:01:ec:de:f2:9e:90:76: 72:9b:1f:37:54:41:c5:a7:38:c4:e6:0c:ab:92:69:b6:24:1b: fa:ce:24:33:07:06:a7:4b:c0:7b:ed:76:9a:50:fe:fb:0d:a0: 2e:43:2a:c7:ec:fa:43:98:00:7c:cf:7b:32:97:e1:4c:14:f4: 55:a6:7e:f9:f4:8b:d8:7b:af:e0:3a:7a:39:c7:24:0c:43:9a: 7a:37:60:ec:e6:c4:73:7c:4b:38:fa:48:4b:2c:41:ab:2c:e9: 43:c0:6f:2b:8c:32:bf:0d:93:06:8e:68:8c:86:33:0f:61:48: 16:a2:fe:9c:06:cd:3f:c1:42:2b:c3:80:ba:5a:ac:93:67:f8: 85:42:52:56:85:65:7b:97:b7:1f:1b:2d:af:ff:fd:c9:5e:89: c0:dc:31:ba:58:5f:70:a6:b1:f0:48:70:cd:7f:13:a7:a5:b7: e2:d1:5f:4c:43:e8:a6:d4:2b:36:0f:17:54:21:06:73:35:2c: 14:d1:cf:92:71:b0:4c:f3:99:a1:4e:76:f2:ed:ee:19:f3:55: f1:03:96:4f:6c:ed:75:d9:66:2c:57:b4:9b:e4:88:3d:49:67: 63:7d:0c:6d:ac:46:45:77:81:88:9e:89:00:dc:a3:91:46:18: 44:33:81:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNalfJm3C+cl29w5GNjXxcLiHMZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2 N0UwN0Y2NTAeFw0yNjA5MjUwMDI1NDZaFw0yNjA5MjYwMjQ1NDZaMDMxMTAvBgNV BAMTKEY4MUMzQUE0MzE4MjA3NkFENkFFMzY0MDkxQzlCODJFOEI1MzA4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4LGGMfBoaLMShp6VvSWuKlFN VRcYudjiK1hOqddz3IXIRaClTcS9zL2FY2CTKI9PxeItsjj2I6iRo7l17h9TNsfs XrgdoF0Qx/0IOIOTsG6cwsxvM9lVIuPhJneuPBDTKnZKgKYIASMZUa/Chwc+2P9S tWDHJiSQZkYYFA5+n96Cvl4edxwZAB52T7bwlUp7TtAr+HWy24SC3DUzWcx6MT9u 93RVnuiIb4K+fdohnPi6+DvkWH2yvfzWk745gm0zGKtY8ghQYgs7g8VV6XLzDvjQ W+94XMqRNjJ+xf5uPiiTgFZTPf7NdDdbPb+ZHKJoXVYl9X3QOTg0ZsPoAO2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Bw6pDGCB2rWrjZAkcm4LotTCCYwHwYDVR0j BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3 RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4 RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJClCC+UucoYBevAeze8p6QdnKbHzdUQcWn OMTmDKuSabYkG/rOJDMHBqdLwHvtdppQ/vsNoC5DKsfs+kOYAHzPezKX4UwU9FWm fvn0i9h7r+A6ejnHJAxDmno3YOzmxHN8Szj6SEssQass6UPAbyuMMr8NkwaOaIyG Mw9hSBai/pwGzT/BQivDgLparJNn+IVCUlaFZXuXtx8bLa///cleicDcMbpYX3Cm sfBIcM1/E6elt+LRX0xD6KbUKzYPF1QhBnM1LBTRz5JxsEzzmaFOdvLt7hnzVfED lk9s7XXZZixXtJvkiD1JZ2N9DG2sRkV3gYieiQDco5FGGEQzgfs= -----END CERTIFICATE-----Generated at Fri Sep 25 17:41:25 2026 by rpki-client