$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: /eomqr0cOH9mo7sEjb/myWWvbZ/EliTlRgROvrJfTzY= Subject key identifier: BE:51:3E:48:8C:CB:FE:31:4E:E6:E1:E6:A3:5B:19:0E:16:B4:2A:98 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 30DEB1FCA864685E6253862FB7796D6549B756D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 05:22:18 +0000 Manifest this update: Thu 24 Sep 2026 05:17:18 +0000 Manifest next update: Fri 25 Sep 2026 07:50:18 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) 3: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: GnICCr986OuRceXHnQy+yuC/zgAIKyC6UFAlyxHMprQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:de:b1:fc:a8:64:68:5e:62:53:86:2f:b7:79:6d:65:49:b7:56:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Sep 24 05:17:18 2026 GMT Not After : Sep 25 07:50:18 2026 GMT Subject: CN=BE513E488CCBFE314EE6E1E6A35B190E16B42A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:08:e4:af:c4:71:08:e7:67:01:9f:06:68: 80:b3:c4:60:00:0a:89:5b:0c:75:9d:37:22:82:fc: 10:f5:ce:9f:3f:c1:7a:27:2b:29:c3:7a:3d:3b:c9: 4b:3a:30:6c:01:59:70:45:90:ac:aa:6f:d7:61:0d: 1d:d2:d4:cd:ae:5b:fd:46:fc:fe:60:13:23:69:d3: 3f:15:83:99:b9:7b:43:81:9d:0a:f8:5a:d4:d7:5f: 6a:01:9a:9b:cc:4f:a8:fb:48:38:c9:f2:64:82:b7: e7:db:ad:10:b6:1e:97:0a:40:66:ce:45:ea:92:55: 13:e4:3c:57:f7:39:4d:38:bb:c7:13:2e:b4:0f:ad: 6c:91:bd:4a:13:d3:c2:5e:cb:1f:47:ab:0c:b9:93: 25:91:ed:a5:9b:29:4c:87:85:f8:11:24:fe:36:c6: 2a:59:71:33:36:42:85:d3:47:8a:32:a0:d0:49:f8: c2:ca:93:48:84:eb:8e:1b:75:e8:94:c1:85:f5:3f: f5:c7:81:83:41:f8:41:a1:b3:29:78:62:80:42:34: a6:66:20:16:80:17:9b:91:c5:26:8f:c9:8c:24:d2: d9:c3:47:a8:98:29:a0:e1:0a:99:00:cd:f3:f3:a2: 70:4b:7b:82:d1:53:fb:05:bf:50:81:8e:fb:1e:4c: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:51:3E:48:8C:CB:FE:31:4E:E6:E1:E6:A3:5B:19:0E:16:B4:2A:98 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:98:34:d8:0f:9c:d8:3c:ab:1a:10:a8:dc:b0:10:1b:92:cc: 7c:30:31:d3:c4:6d:5d:bb:06:47:4e:63:f9:ff:06:fe:8b:b3: 6e:fd:5d:ed:48:29:28:05:17:d2:d5:f2:31:24:6f:c0:4a:14: 11:66:3c:c3:ce:12:86:17:d2:91:ba:04:8e:16:a0:8a:8f:c0: e0:bd:da:ef:87:78:86:43:d0:30:ef:1e:6d:48:76:ca:9b:0c: d0:67:b0:6f:ba:92:46:59:be:99:09:e6:21:40:cb:9f:64:6e: a2:ce:dd:c2:3e:39:ba:7e:9e:4c:fb:2e:45:c1:36:09:08:57: 48:d7:c3:0f:1f:40:2a:80:ea:88:6b:ac:5a:5c:1a:c5:52:33: 00:15:8d:17:d5:e0:49:70:23:97:12:d4:2e:dc:84:54:fc:5e: 4d:74:d4:ed:72:09:a5:13:f7:f2:65:25:3a:d5:78:32:75:94: 45:00:ce:93:51:b6:e8:fc:34:b7:60:57:e7:7f:20:07:ef:45: 1b:dc:98:6c:a1:b7:40:4e:b8:d4:aa:e0:cf:18:b5:b8:c4:66: b8:17:8f:96:16:0b:39:2a:3f:ff:7e:49:8c:cb:6c:aa:0e:72: 2d:0a:43:a9:53:ca:0e:75:7e:cc:1c:a5:64:8a:28:93:e4:4b: 5f:39:0d:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMN6x/KhkaF5iU4Yvt3ltZUm3VtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA5MjQwNTE3MThaFw0yNjA5MjUwNzUwMThaMDMxMTAvBgNV BAMTKEJFNTEzRTQ4OENDQkZFMzE0RUU2RTFFNkEzNUIxOTBFMTZCNDJBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZAjkr8RxCOdnAZ8GaICzxGAA ColbDHWdNyKC/BD1zp8/wXonKynDej07yUs6MGwBWXBFkKyqb9dhDR3S1M2uW/1G /P5gEyNp0z8Vg5m5e0OBnQr4WtTXX2oBmpvMT6j7SDjJ8mSCt+fbrRC2HpcKQGbO ReqSVRPkPFf3OU04u8cTLrQPrWyRvUoT08Jeyx9Hqwy5kyWR7aWbKUyHhfgRJP42 xipZcTM2QoXTR4oyoNBJ+MLKk0iE644bdeiUwYX1P/XHgYNB+EGhsyl4YoBCNKZm IBaAF5uRxSaPyYwk0tnDR6iYKaDhCpkAzfPzonBLe4LRU/sFv1CBjvseTPv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvlE+SIzL/jFO5uHmo1sZDha0KpgwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiYNNgPnNg8qxoQqNywEBuSzHwwMdPEbV27 BkdOY/n/Bv6Ls279Xe1IKSgFF9LV8jEkb8BKFBFmPMPOEoYX0pG6BI4WoIqPwOC9 2u+HeIZD0DDvHm1IdsqbDNBnsG+6kkZZvpkJ5iFAy59kbqLO3cI+Obp+nkz7LkXB NgkIV0jXww8fQCqA6ohrrFpcGsVSMwAVjRfV4ElwI5cS1C7chFT8Xk101O1yCaUT 9/JlJTrVeDJ1lEUAzpNRtuj8NLdgV+d/IAfvRRvcmGyht0BOuNSq4M8YtbjEZrgX j5YWCzkqP/9+SYzLbKoOci0KQ6lTyg51fswcpWSKKJPkS185DW4= -----END CERTIFICATE-----Generated at Thu Sep 24 12:59:54 2026 by rpki-client