$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: Fzq5SnOUjiQ4qoBWbhd5XkWGS4AKG3fxyzA3q93en/0= Subject key identifier: 87:C8:44:24:60:F9:00:D8:45:15:F1:94:02:A5:F7:E8:0B:06:77:A6 Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 27602D70631810B2DAB5184ED8821076A7E712F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:54:20 +0000 Manifest this update: Wed 23 Sep 2026 22:49:20 +0000 Manifest next update: Fri 25 Sep 2026 01:46:20 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 2: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: 37NQyxZ4YNd4BXCqG1yfOU7gst2cASDo+uFj7z353Jg=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:60:2d:70:63:18:10:b2:da:b5:18:4e:d8:82:10:76:a7:e7:12:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Sep 23 22:49:20 2026 GMT Not After : Sep 25 01:46:20 2026 GMT Subject: CN=87C8442460F900D84515F19402A5F7E80B0677A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:dd:81:2b:be:e9:b8:f8:0c:af:fa:cd:f6: c4:7e:ac:e3:7b:2a:83:b8:15:26:43:01:10:8f:3c: d9:58:e2:79:ee:1c:39:20:37:7b:1e:46:6b:cd:81: e7:cc:b2:3e:8a:a5:41:bb:62:d8:28:52:ae:ad:cf: 96:b8:7b:8d:5b:79:08:2e:cf:dd:6d:c1:8a:28:31: 25:44:83:5a:d9:ce:c4:f4:ec:53:b3:12:23:be:e6: d5:d6:6b:be:56:94:6f:71:d5:f4:78:b3:87:3f:2f: 6a:15:97:2a:ee:8d:29:65:3d:b5:9a:ae:2f:98:27: 64:c5:ca:3c:81:58:eb:70:de:c8:3f:02:af:6d:5a: 5e:54:f3:8c:1c:c3:e6:eb:a0:4f:21:99:69:c6:0b: d0:ac:47:5f:76:70:02:86:fc:04:93:40:fe:2f:70: 9b:ec:ad:78:65:61:5a:fe:80:dc:72:d9:28:53:89: 84:4f:f1:72:6d:03:d6:6e:0b:28:e1:d9:a4:a9:df: ed:36:70:a0:de:39:66:43:b9:0b:4a:d4:48:8f:8a: 91:88:7a:43:89:a7:21:d3:48:33:ec:ed:10:2e:c3: 41:2f:b2:1c:99:62:64:81:81:c3:ea:f3:24:d8:95: 67:3c:1f:ac:e3:48:2f:b7:0e:1d:61:32:13:b5:e1: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C8:44:24:60:F9:00:D8:45:15:F1:94:02:A5:F7:E8:0B:06:77:A6 X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:6d:00:9e:f2:1a:c2:8a:2f:37:a4:fd:4c:9c:a6:78:90: eb:e7:d0:c7:7a:d9:24:5c:0f:02:c8:5d:54:18:7b:30:a3:2f: fa:c8:4b:6d:77:c0:b3:c3:e2:7f:6e:10:64:13:01:85:a8:c5: 36:de:c7:cb:56:5d:e5:a7:1e:e3:17:33:bc:d1:04:96:4e:15: 2b:23:6e:85:f9:92:6e:87:30:21:f0:6e:cf:56:29:a7:05:a3: 14:5a:07:e4:22:93:94:49:9e:f9:ec:3b:29:cd:23:77:e8:70: c7:44:f7:cb:5e:df:3f:70:c1:10:37:d6:0f:a2:74:ed:01:72: 21:d7:14:9c:88:9b:67:8b:91:a1:dd:d6:fa:b9:42:09:02:7d: d7:eb:d2:28:26:06:e0:2a:1c:28:99:5f:f0:2e:7e:ae:f8:8e: 3e:16:8d:46:06:9e:c6:55:52:08:42:8b:1d:1b:d6:84:15:14: a3:24:42:a5:d2:63:0d:4d:56:52:2c:df:4e:44:6b:45:10:ac: 97:22:2e:02:0a:19:c8:1f:70:e8:16:d5:82:e0:f8:09:95:3b: c6:f7:1e:89:d9:88:79:ef:33:37:c8:f0:66:04:e8:a8:15:9c: 77:d9:e6:1d:44:e8:99:bd:8e:d9:69:ef:72:f0:04:65:78:a7: c9:c9:2e:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2AtcGMYELLatRhO2IIQdqfnEvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA5MjMyMjQ5MjBaFw0yNjA5MjUwMTQ2MjBaMDMxMTAvBgNV BAMTKDg3Qzg0NDI0NjBGOTAwRDg0NTE1RjE5NDAyQTVGN0U4MEIwNjc3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKt2BK77puPgMr/rN9sR+rON7 KoO4FSZDARCPPNlY4nnuHDkgN3seRmvNgefMsj6KpUG7YtgoUq6tz5a4e41beQgu z91twYooMSVEg1rZzsT07FOzEiO+5tXWa75WlG9x1fR4s4c/L2oVlyrujSllPbWa ri+YJ2TFyjyBWOtw3sg/Aq9tWl5U84wcw+broE8hmWnGC9CsR192cAKG/ASTQP4v cJvsrXhlYVr+gNxy2ShTiYRP8XJtA9ZuCyjh2aSp3+02cKDeOWZDuQtK1EiPipGI ekOJpyHTSDPs7RAuw0EvshyZYmSBgcPq8yTYlWc8H6zjSC+3Dh1hMhO14ZnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8hEJGD5ANhFFfGUAqX36AsGd6YwHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBKbQCe8hrCii83pP1MnKZ4kOvn0Md62SRc DwLIXVQYezCjL/rIS213wLPD4n9uEGQTAYWoxTbex8tWXeWnHuMXM7zRBJZOFSsj boX5km6HMCHwbs9WKacFoxRaB+Qik5RJnvnsOynNI3focMdE98te3z9wwRA31g+i dO0BciHXFJyIm2eLkaHd1vq5QgkCfdfr0igmBuAqHCiZX/Aufq74jj4WjUYGnsZV UghCix0b1oQVFKMkQqXSYw1NVlIs305Ea0UQrJciLgIKGcgfcOgW1YLg+AmVO8b3 HonZiHnvMzfI8GYE6KgVnHfZ5h1E6Jm9jtlp73LwBGV4p8nJLhg= -----END CERTIFICATE-----Generated at Thu Sep 24 12:24:44 2026 by rpki-client