$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: J0FFuCZ3lzJgHwY+eShSE4wqhJVM65X01tFzgFANtOo= Subject key identifier: 58:00:64:B4:70:DC:AB:F2:EA:AB:2C:60:98:40:6C:C4:0E:4C:E9:7D Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 7B0E8C177BF4E9C611B02250794B679F8B2EEF47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:41:42 +0000 Manifest this update: Wed 23 Sep 2026 16:36:42 +0000 Manifest next update: Thu 24 Sep 2026 17:11:42 +0000 Files and hashes: 1: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: 7pn8mOZYXRIic41a9gBKEJJ+9xfnjgVrGd5u0EVnoTU=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0e:8c:17:7b:f4:e9:c6:11:b0:22:50:79:4b:67:9f:8b:2e:ef:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: Sep 23 16:36:42 2026 GMT Not After : Sep 24 17:11:42 2026 GMT Subject: CN=580064B470DCABF2EAAB2C6098406CC40E4CE97D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:7c:28:d6:16:24:57:a5:97:06:3e:e2:07: 9b:1d:5f:3f:24:e2:7b:cb:e3:11:b5:30:eb:1e:dd: 53:2e:ca:fd:4c:58:08:95:df:f1:9c:aa:dc:52:da: cd:d5:ce:f2:ff:a0:11:3a:4d:24:cb:8c:61:01:a4: c6:49:1e:6a:b3:3d:1c:66:3e:25:91:08:9f:a9:ae: 41:38:a9:26:fd:16:19:51:3a:eb:7b:8d:42:cf:e2: 0e:d3:e7:ce:ef:fa:13:cc:95:26:e6:52:fa:ee:68: cb:d9:18:eb:59:7d:cb:f5:8f:0a:55:14:54:fe:29: db:6d:c6:8f:a1:e7:e9:dc:19:18:fc:59:32:d9:4d: d2:e1:65:d3:96:cd:9e:79:96:31:c6:41:97:df:e7: c9:51:dc:c2:99:6d:05:f9:58:8b:7b:5d:ac:dd:04: 3e:97:89:10:a9:8d:b4:07:cf:3a:23:e8:33:92:0d: fd:b8:6b:32:ef:19:21:81:3f:1f:3a:70:35:26:28: c6:18:b5:5d:58:63:6d:08:b0:21:c5:4b:4b:cc:3c: ab:c1:ff:aa:06:7a:58:db:40:a7:f7:a7:b1:89:27: 9f:74:f4:28:10:ee:51:d5:27:ef:0c:8e:a3:1b:61: 06:15:5d:e5:da:c2:2c:cd:aa:e3:d5:23:3a:b8:e2: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:00:64:B4:70:DC:AB:F2:EA:AB:2C:60:98:40:6C:C4:0E:4C:E9:7D X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b7:3d:c8:4a:94:a4:3d:eb:16:9f:b4:56:76:1c:eb:00:14: 60:b0:51:f1:dd:81:4c:ba:cf:b6:6d:74:06:39:6f:d0:c4:ba: 89:4c:a8:0d:fa:81:18:76:f6:59:4a:97:d6:1d:a8:31:5e:0a: f1:e9:c8:6e:80:23:1d:aa:d4:69:ac:59:6e:c2:f3:a6:0a:63: f0:b9:2f:04:2e:52:42:d6:3b:3c:a3:70:e2:2c:03:89:0a:67: 8b:ba:6b:cb:44:05:8a:7b:75:c8:c2:28:2c:70:4b:cc:7d:ce: 4f:6c:c0:30:32:9b:0c:ed:0d:eb:c6:67:38:38:99:dc:30:ec: b5:cb:bd:f1:b1:0f:61:02:21:5b:75:c6:30:f6:54:ee:36:eb: 66:83:e9:4f:20:34:97:bf:1f:11:65:19:07:43:2d:de:da:76: 08:6c:7c:72:16:5f:7c:bd:95:8e:94:d4:7a:7e:e2:7f:d0:c7: b3:64:3b:c0:d9:7d:e1:2e:b9:f7:d5:ab:29:1d:34:32:28:72: 9f:bb:5e:aa:1a:c9:5c:dd:c4:63:3b:15:f7:96:96:20:a6:26: 2d:6c:8a:a8:a3:b5:ca:3e:2a:6a:2e:e0:15:7a:d9:84:a6:1f: 26:6d:3b:dc:0a:a5:ae:85:6d:87:3c:97:c2:ca:09:8c:2b:fd: 05:26:be:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUew6MF3v06cYRsCJQeUtnn4su70cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA5MjMxNjM2NDJaFw0yNjA5MjQxNzExNDJaMDMxMTAvBgNV BAMTKDU4MDA2NEI0NzBEQ0FCRjJFQUFCMkM2MDk4NDA2Q0M0MEU0Q0U5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsA3wo1hYkV6WXBj7iB5sdXz8k 4nvL4xG1MOse3VMuyv1MWAiV3/GcqtxS2s3VzvL/oBE6TSTLjGEBpMZJHmqzPRxm PiWRCJ+prkE4qSb9FhlROut7jULP4g7T587v+hPMlSbmUvruaMvZGOtZfcv1jwpV FFT+Kdttxo+h5+ncGRj8WTLZTdLhZdOWzZ55ljHGQZff58lR3MKZbQX5WIt7Xazd BD6XiRCpjbQHzzoj6DOSDf24azLvGSGBPx86cDUmKMYYtV1YY20IsCHFS0vMPKvB /6oGeljbQKf3p7GJJ5909CgQ7lHVJ+8MjqMbYQYVXeXawizNquPVIzq44paTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWABktHDcq/LqqyxgmEBsxA5M6X0wHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu3PchKlKQ96xaftFZ2HOsAFGCwUfHdgUy6 z7ZtdAY5b9DEuolMqA36gRh29llKl9YdqDFeCvHpyG6AIx2q1GmsWW7C86YKY/C5 LwQuUkLWOzyjcOIsA4kKZ4u6a8tEBYp7dcjCKCxwS8x9zk9swDAymwztDevGZzg4 mdww7LXLvfGxD2ECIVt1xjD2VO4262aD6U8gNJe/HxFlGQdDLd7adghsfHIWX3y9 lY6U1Hp+4n/Qx7NkO8DZfeEuuffVqykdNDIocp+7XqoayVzdxGM7FfeWliCmJi1s iqijtco+Kmou4BV62YSmHyZtO9wKpa6FbYc8l8LKCYwr/QUmvnU= -----END CERTIFICATE-----Generated at Wed Sep 23 20:21:24 2026 by rpki-client