$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json) Hash identifier: ZjI1N3yNjv64ZxZm2Ygfk7303tCnqgbNuS4ISxJ1WeQ= Subject key identifier: BA:DC:EA:A1:7E:AC:78:BF:48:74:1C:AD:E3:53:EA:8D:B1:45:CF:22 Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Certificate serial: 5C52EFE51C92C52595683F292E3B711AB368888A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 11:20:05 +0000 Manifest this update: Wed 23 Sep 2026 11:15:05 +0000 Manifest next update: Thu 24 Sep 2026 11:31:05 +0000 Files and hashes: 1: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: lfdsp/Rs9Sy33uis8/vIeGR2veCClEYDuNm6/Ut8vJc=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:52:ef:e5:1c:92:c5:25:95:68:3f:29:2e:3b:71:1a:b3:68:88:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Validity Not Before: Sep 23 11:15:05 2026 GMT Not After : Sep 24 11:31:05 2026 GMT Subject: CN=BADCEAA17EAC78BF48741CADE353EA8DB145CF22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:9d:6b:17:cd:14:08:ce:e6:66:9c:77:2e: 43:f8:28:21:9b:be:1f:fc:8d:32:79:e5:fc:56:0a: 9f:81:f8:d6:58:d2:18:c5:7c:c4:72:4a:6b:2c:d2: b7:b5:a3:98:e9:0e:65:9a:6b:da:9d:ad:38:1f:bf: b5:56:3d:0c:30:60:f9:b7:b4:5b:3e:7d:ed:a2:eb: 6e:ac:6e:d6:66:3b:09:06:50:ad:00:ec:f2:01:a2: 5e:9b:27:bf:00:08:e5:69:f5:31:15:8e:64:80:ad: 18:a9:49:67:2e:bc:00:88:34:20:f2:a0:89:c0:1a: dc:8d:8f:75:db:4a:27:89:0d:3d:cf:4f:02:00:2b: 60:d9:3f:f9:de:b9:6f:f3:b1:6b:47:51:0b:a5:d9: 36:a6:05:0e:6c:b1:6d:5e:96:1e:45:a7:02:ff:99: 60:95:76:e7:08:1b:8a:ef:b5:a0:64:6b:3a:65:1d: 07:62:c4:a0:74:b8:2d:66:cf:00:65:5b:b2:b9:8a: 40:04:6e:f5:9e:c9:18:c9:72:95:7b:d1:e5:20:b3: 81:7e:da:b3:dd:70:46:a5:38:10:ed:81:9a:7a:7c: 1a:f7:a5:e8:85:dc:78:54:58:2a:66:7d:5a:b6:3e: 57:b1:da:0c:79:94:25:d4:2f:32:25:aa:d1:27:6e: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DC:EA:A1:7E:AC:78:BF:48:74:1C:AD:E3:53:EA:8D:B1:45:CF:22 X509v3 Authority Key Identifier: keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d3:80:f7:90:e0:9c:0a:8f:1c:64:f0:a0:36:15:bc:d3:23: d9:8e:50:8a:a7:70:2a:04:08:fa:4c:a5:ab:f6:c9:79:5e:61: 15:33:42:f2:f7:04:ba:b2:14:7a:c8:a0:3c:f8:57:93:ee:95: 0f:05:ed:d8:89:f0:97:1c:c8:46:73:42:b8:48:02:9a:fd:d3: a5:13:89:97:9b:7a:c9:8b:e9:25:2b:e3:ff:00:64:de:8e:7c: 2d:f3:c4:9b:a6:50:d5:76:94:ee:0a:ea:3a:6a:5e:2a:70:c5: aa:a2:0d:e6:05:0b:63:63:de:57:4f:bf:37:68:43:db:74:03: f6:6b:34:a4:21:25:71:cf:9a:c7:bc:34:98:34:09:97:75:6d: 0b:a3:b5:10:39:be:e9:77:b2:f6:0e:a6:70:77:47:3f:33:34: c3:a6:24:a3:36:48:24:67:2b:79:b3:e6:8f:05:bc:79:f5:09: 70:0d:0f:60:53:f2:54:fe:f6:4b:74:11:d0:f8:d0:5a:5a:59: 32:c7:19:0a:7a:a1:df:8b:e4:3f:8b:68:c2:8e:c1:e4:46:2f: a9:63:64:e9:2e:b1:93:7f:02:ee:c6:42:82:12:8b:70:54:fd: 78:50:38:8f:65:a1:c4:69:56:05:12:42:fe:fe:f1:ec:a8:27: 45:98:07:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFLv5RySxSWVaD8pLjtxGrNoiIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3 OEU5NDI1ODAeFw0yNjA5MjMxMTE1MDVaFw0yNjA5MjQxMTMxMDVaMDMxMTAvBgNV BAMTKEJBRENFQUExN0VBQzc4QkY0ODc0MUNBREUzNTNFQThEQjE0NUNGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66Z1rF80UCM7mZpx3LkP4KCGb vh/8jTJ55fxWCp+B+NZY0hjFfMRySmss0re1o5jpDmWaa9qdrTgfv7VWPQwwYPm3 tFs+fe2i626sbtZmOwkGUK0A7PIBol6bJ78ACOVp9TEVjmSArRipSWcuvACINCDy oInAGtyNj3XbSieJDT3PTwIAK2DZP/neuW/zsWtHUQul2TamBQ5ssW1elh5FpwL/ mWCVducIG4rvtaBkazplHQdixKB0uC1mzwBlW7K5ikAEbvWeyRjJcpV70eUgs4F+ 2rPdcEalOBDtgZp6fBr3peiF3HhUWCpmfVq2Plex2gx5lCXULzIlqtEnbhrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutzqoX6seL9IdByt41PqjbFFzyIwHwYDVR0j BBgwFoAUShjlVA+5z+B6le34m6986XjpQlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlmYzk5NmYtNzJjYS00ZDZiLWEwZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQw RkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3OEU5NDI1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTE4RTU1NDBGQjlDRkUwN0E5NUVERjg5QkFGN0NFOTc4RTk0 MjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdD RTk3OEU5NDI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbTgPeQ4JwKjxxk8KA2FbzTI9mOUIqncCoE CPpMpav2yXleYRUzQvL3BLqyFHrIoDz4V5PulQ8F7diJ8JccyEZzQrhIApr906UT iZebesmL6SUr4/8AZN6OfC3zxJumUNV2lO4K6jpqXipwxaqiDeYFC2Nj3ldPvzdo Q9t0A/ZrNKQhJXHPmse8NJg0CZd1bQujtRA5vul3svYOpnB3Rz8zNMOmJKM2SCRn K3mz5o8FvHn1CXAND2BT8lT+9kt0EdD40FpaWTLHGQp6od+L5D+LaMKOweRGL6lj ZOkusZN/Au7GQoISi3BU/XhQOI9locRpVgUSQv7+8eyoJ0WYB2I= -----END CERTIFICATE-----Generated at Wed Sep 23 21:02:04 2026 by rpki-client