$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft File: 4C020B9A7E561E4B66C4D84205960DF774E08E45.mft (raw, json) Hash identifier: QzCpvos394i2sXgumbhWS9wC40xNqTsgspjnFnV5jIE= Subject key identifier: AD:EF:D0:3B:67:06:F9:B4:83:B6:B9:4F:C3:AA:96:41:D8:1D:6B:96 Authority key identifier: 4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 Certificate issuer: /CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Certificate serial: 572AF1F0E671E0BDBC463FBA6784A4082F4E0762 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft Manifest number: 07 Signing time: Fri 25 Sep 2026 16:46:00 +0000 Manifest this update: Fri 25 Sep 2026 16:41:00 +0000 Manifest next update: Sat 26 Sep 2026 18:09:00 +0000 Files and hashes: 1: 4C020B9A7E561E4B66C4D84205960DF774E08E45.crl (hash: uVSomtn9eG1GvCwufErd1OW0bVo4NJVAiyE2vT72dws=) 2: 3130332e3231302e3230392e302f32342d3234203d3e20313331373732.roa (hash: XNmF0uoNuKq1Ux6VEndyF0UUR7z6WY99ugSnYwqThWk=) 3: 3130332e31362e37382e302f32342d3234203d3e20313331373732.roa (hash: 3WQZvx1XPymzc9soyj43moQO8cyr3834Rj6M7pO3c1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2a:f1:f0:e6:71:e0:bd:bc:46:3f:ba:67:84:a4:08:2f:4e:07:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Validity Not Before: Sep 25 16:41:00 2026 GMT Not After : Sep 26 18:09:00 2026 GMT Subject: CN=ADEFD03B6706F9B483B6B94FC3AA9641D81D6B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:3d:8b:c8:36:60:16:ad:ce:65:58:4a:b5: c9:3a:f7:07:ab:2a:6e:a6:dc:a5:ab:f6:94:96:6b: 27:c4:63:ef:da:e1:7c:db:37:da:89:0b:e2:ab:fe: d4:61:74:00:1e:ba:60:aa:1e:00:8c:62:6a:fd:b5: 51:0e:91:c2:77:6e:48:58:bd:19:78:94:9a:26:a5: 38:4a:10:4f:9c:fb:cb:e4:e4:bf:95:80:71:d1:73: 0c:c4:ca:61:d7:bb:11:2a:7d:53:50:54:c3:f9:fe: 7f:82:5e:ff:35:84:8c:c6:31:50:7e:58:d2:a1:f2: d0:94:f5:05:3f:78:08:fa:5e:28:1e:44:14:11:d5: 0b:22:73:37:70:fa:c6:fd:a5:ee:ba:cf:c3:3d:e0: dd:fe:22:5e:1e:ad:43:dd:70:e2:bd:b4:b7:8c:85: 32:ba:94:c3:cd:f3:e7:08:a7:14:41:bc:0a:b7:34: 2b:51:4b:5e:7c:03:76:97:56:47:62:25:0c:aa:4c: e2:be:93:91:09:c3:93:ec:9d:fc:8a:81:6a:a5:05: ee:e2:be:c7:b5:8d:6e:c8:19:05:bd:66:2b:99:e3: 80:58:ff:bc:35:5b:b8:15:41:6d:60:2e:0a:18:5b: a6:1d:bb:2d:19:c4:c4:4a:44:6b:78:c6:44:8d:00: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EF:D0:3B:67:06:F9:B4:83:B6:B9:4F:C3:AA:96:41:D8:1D:6B:96 X509v3 Authority Key Identifier: keyid:4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:c5:03:de:ed:ba:ee:33:e6:d1:0d:25:80:07:8f:6c:dc: 40:fa:30:18:a9:e9:26:db:7f:04:da:16:eb:9d:ad:9c:48:92: 4f:20:3f:dd:f5:ee:31:7f:aa:6a:3c:14:53:b9:78:0c:83:ac: b7:de:45:5e:e5:d0:36:82:fd:6c:54:e4:21:ff:d0:bd:0e:88: 1a:e6:a1:e2:9a:e5:48:91:97:e2:ef:d5:e0:a9:03:da:9e:3a: d7:c0:38:d8:51:51:c9:c4:1d:a8:49:a5:71:5c:35:21:7b:ae: ba:66:e4:d0:ba:16:a1:74:cb:e4:92:f7:99:3d:ee:37:cf:b7: 07:6e:6d:53:4b:f6:d4:c8:5b:e6:3b:c3:ac:cf:94:a8:bf:f6: a5:5c:3c:1a:b4:c4:15:c7:d8:44:d2:cc:93:3c:5c:29:f7:e1: 8d:0e:52:79:fb:74:85:b6:e0:bd:53:a9:ad:f8:3a:78:34:28: 8c:99:0f:51:58:cf:9e:18:0d:26:bb:43:22:a4:af:b2:73:80: 22:23:bb:dc:24:34:f3:b6:3a:a5:be:a2:be:d0:b1:9a:bb:91: 31:1b:0a:d8:25:9c:54:1d:98:ca:7e:cc:71:c6:49:da:49:f8: 5a:f8:e6:73:7f:3c:8c:c3:a9:7a:3a:8a:03:3a:68:58:a0:c8: 04:ad:fa:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyrx8OZx4L28Rj+6Z4SkCC9OB2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwMjBCOUE3RTU2MUU0QjY2QzREODQyMDU5NjBERjc3 NEUwOEU0NTAeFw0yNjA5MjUxNjQxMDBaFw0yNjA5MjYxODA5MDBaMDMxMTAvBgNV BAMTKEFERUZEMDNCNjcwNkY5QjQ4M0I2Qjk0RkMzQUE5NjQxRDgxRDZCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYj2LyDZgFq3OZVhKtck69wer Km6m3KWr9pSWayfEY+/a4XzbN9qJC+Kr/tRhdAAeumCqHgCMYmr9tVEOkcJ3bkhY vRl4lJompThKEE+c+8vk5L+VgHHRcwzEymHXuxEqfVNQVMP5/n+CXv81hIzGMVB+ WNKh8tCU9QU/eAj6XigeRBQR1Qsiczdw+sb9pe66z8M94N3+Il4erUPdcOK9tLeM hTK6lMPN8+cIpxRBvAq3NCtRS158A3aXVkdiJQyqTOK+k5EJw5PsnfyKgWqlBe7i vse1jW7IGQW9ZiuZ44BY/7w1W7gVQW1gLgoYW6Yduy0ZxMRKRGt4xkSNALr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUre/QO2cG+bSDtrlPw6qWQdgda5YwHwYDVR0j BBgwFoAUTAILmn5WHktmxNhCBZYN93TgjkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcwMWYxNjEtMDgwOC00YWI0LTk2MDgtNjUwMzhmMWVlYjNhLzAvNEMwMjBCOUE3 RTU2MUU0QjY2QzREODQyMDU5NjBERjc3NEUwOEU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzAyMEI5QTdFNTYxRTRCNjZDNEQ4NDIwNTk2MERGNzc0RTA4 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcwMWYxNjEtMDgwOC00YWI0LTk2 MDgtNjUwMzhmMWVlYjNhLzAvNEMwMjBCOUE3RTU2MUU0QjY2QzREODQyMDU5NjBE Rjc3NEUwOEU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaqxQPe7bruM+bRDSWAB49s3ED6MBip6Sbb fwTaFuudrZxIkk8gP9317jF/qmo8FFO5eAyDrLfeRV7l0DaC/WxU5CH/0L0OiBrm oeKa5UiRl+Lv1eCpA9qeOtfAONhRUcnEHahJpXFcNSF7rrpm5NC6FqF0y+SS95k9 7jfPtwdubVNL9tTIW+Y7w6zPlKi/9qVcPBq0xBXH2ETSzJM8XCn34Y0OUnn7dIW2 4L1Tqa34Ong0KIyZD1FYz54YDSa7QyKkr7JzgCIju9wkNPO2OqW+or7QsZq7kTEb CtglnFQdmMp+zHHGSdpJ+Fr45nN/PIzDqXo6igM6aFigyASt+j0= -----END CERTIFICATE-----Generated at Fri Sep 25 23:18:42 2026 by rpki-client