$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: LlFtH/88+dBputsBABhAtrNoLrHLUybCP251PZP7U38= Subject key identifier: E6:DC:44:09:22:B7:7C:5F:7F:79:B0:D1:8F:CB:2A:E6:C1:48:8E:D6 Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 2BC80E423DC5D21426AD5A6A20C580DEBFC8AAFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: CF Signing time: Sat 03 Oct 2026 08:31:29 +0000 Manifest this update: Sat 03 Oct 2026 08:26:29 +0000 Manifest next update: Sun 04 Oct 2026 11:01:29 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 2: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) 3: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: 1lEQ1B9L+nTtWt38p+ZfSVd3T9XXJ9h1lDa28lYz6z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 21:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c8:0e:42:3d:c5:d2:14:26:ad:5a:6a:20:c5:80:de:bf:c8:aa:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Oct 3 08:26:29 2026 GMT Not After : Oct 4 11:01:29 2026 GMT Subject: CN=E6DC440922B77C5F7F79B0D18FCB2AE6C1488ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:17:b2:fb:e4:f4:98:7f:65:8c:68:08:12: 0a:00:97:c3:74:9a:c2:94:12:50:da:10:d1:a0:8b: 6b:e4:fd:8a:b4:a1:a8:ea:7f:39:82:b2:0d:97:e3: 69:f0:66:d1:2b:c5:de:46:34:c5:b4:71:ec:0a:e7: 7f:ac:35:ec:82:ee:03:38:99:33:46:95:88:f0:8a: ef:42:b5:8a:ce:d6:55:87:de:7b:51:85:d3:e7:97: aa:f9:76:fb:93:a3:e6:43:00:b1:aa:c2:64:51:0f: 3b:f1:54:a3:15:21:b2:32:b3:cf:b0:65:6e:b7:c7: 34:62:6f:0a:29:66:a6:f2:bc:66:4c:0c:48:0e:58: e2:38:74:ee:28:4b:ea:ce:8e:02:c0:59:e1:15:a9: 00:5e:c3:1c:8b:eb:9c:4c:b3:5f:82:9d:9f:d8:70: 1e:cf:b8:0a:8a:58:60:eb:f3:c0:01:1a:dd:91:e9: 0e:34:2b:7c:17:a4:1f:97:be:83:4b:e0:b9:d8:93: b8:36:e8:d3:d5:dd:f3:44:3a:c5:ff:43:72:ae:a7: 23:ea:5b:94:a1:b3:fa:85:cf:6a:7b:fd:ad:b5:3c: 25:0f:14:fa:11:e6:28:36:1c:c7:9d:8d:54:68:40: 92:e3:7d:b9:1c:ef:af:ea:5e:8a:cf:bd:27:86:5c: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DC:44:09:22:B7:7C:5F:7F:79:B0:D1:8F:CB:2A:E6:C1:48:8E:D6 X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c1:84:75:4e:ad:de:4e:91:68:85:dc:b8:09:29:ce:b0:06: fe:97:a7:3c:9a:c9:4c:86:ae:f4:ab:44:1f:ab:05:fb:cb:64: 75:6f:15:d2:67:75:41:36:0c:4e:18:f8:e0:09:8e:48:39:01: 77:76:d0:41:00:10:f9:a4:f8:57:46:8a:ef:21:dd:2e:ca:86: 0e:22:98:90:fb:5b:19:3b:8c:e1:53:17:8f:63:26:f3:ad:0f: 83:83:e3:c8:a4:03:42:91:63:d9:e0:03:38:e5:9e:e8:26:c7: ab:f1:25:41:82:33:21:f1:88:d0:fa:6a:37:be:48:ad:99:c1: 84:94:24:cc:b5:4b:3a:a9:e3:cf:41:46:a7:f7:10:f8:04:03: 9b:56:f9:ba:27:2c:c9:5b:79:78:c8:ef:e4:d2:3a:b2:6e:36: ef:4b:f4:7e:e7:29:e1:b9:09:e9:c8:d8:7c:57:65:3e:af:54: 93:89:26:42:55:33:bd:71:0c:87:02:97:90:96:ec:f6:fb:87: dc:b2:d1:f1:03:fb:f1:db:30:41:15:7a:cb:80:71:c8:f0:9e: 8c:3d:75:39:f2:f2:9c:6f:19:b3:af:6c:47:b9:ad:1b:07:76: 57:e4:3f:ee:56:a6:e1:d7:b4:37:be:3e:f7:5e:f9:bf:de:c7: 2e:41:bb:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8gOQj3F0hQmrVpqIMWA3r/IqvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjEwMDMwODI2MjlaFw0yNjEwMDQxMTAxMjlaMDMxMTAvBgNV BAMTKEU2REM0NDA5MjJCNzdDNUY3Rjc5QjBEMThGQ0IyQUU2QzE0ODhFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIBey++T0mH9ljGgIEgoAl8N0 msKUElDaENGgi2vk/Yq0oajqfzmCsg2X42nwZtErxd5GNMW0cewK53+sNeyC7gM4 mTNGlYjwiu9CtYrO1lWH3ntRhdPnl6r5dvuTo+ZDALGqwmRRDzvxVKMVIbIys8+w ZW63xzRibwopZqbyvGZMDEgOWOI4dO4oS+rOjgLAWeEVqQBewxyL65xMs1+CnZ/Y cB7PuAqKWGDr88ABGt2R6Q40K3wXpB+XvoNL4LnYk7g26NPV3fNEOsX/Q3KupyPq W5Shs/qFz2p7/a21PCUPFPoR5ig2HMedjVRoQJLjfbkc76/qXorPvSeGXHinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5txECSK3fF9/ebDRj8sq5sFIjtYwHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDBhHVOrd5OkWiF3LgJKc6wBv6XpzyayUyG rvSrRB+rBfvLZHVvFdJndUE2DE4Y+OAJjkg5AXd20EEAEPmk+FdGiu8h3S7Khg4i mJD7Wxk7jOFTF49jJvOtD4OD48ikA0KRY9ngAzjlnugmx6vxJUGCMyHxiND6aje+ SK2ZwYSUJMy1Szqp489BRqf3EPgEA5tW+bonLMlbeXjI7+TSOrJuNu9L9H7nKeG5 CenI2HxXZT6vVJOJJkJVM71xDIcCl5CW7Pb7h9yy0fED+/HbMEEVesuAccjwnow9 dTny8pxvGbOvbEe5rRsHdlfkP+5WpuHXtDe+Pvde+b/exy5Bu2A= -----END CERTIFICATE-----Generated at Sat Oct 3 13:18:48 2026 by rpki-client