$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: A9SA2OrwpJECe493PNuIKqyfKjWjZiIbpVS8fAmqN4U= Subject key identifier: 64:77:C0:64:E1:01:34:F9:1B:78:E4:58:DA:6C:FF:31:11:92:9C:5A Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 05BE36701D0CE19F6FF6CAD0EADE931586155371 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: CB Signing time: Wed 30 Sep 2026 09:27:57 +0000 Manifest this update: Wed 30 Sep 2026 09:22:57 +0000 Manifest next update: Thu 01 Oct 2026 11:41:57 +0000 Files and hashes: 1: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) 2: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: nqNTfIAbSKZA12BbgwLXviaZjZ9DGxfOOQnuOrbDfz8=) 3: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 11:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:be:36:70:1d:0c:e1:9f:6f:f6:ca:d0:ea:de:93:15:86:15:53:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Sep 30 09:22:57 2026 GMT Not After : Oct 1 11:41:57 2026 GMT Subject: CN=6477C064E10134F91B78E458DA6CFF3111929C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:ff:ad:cc:da:1b:c0:85:c3:33:80:9d:d6: 87:0e:6e:83:5b:a8:4a:60:5d:a5:29:0a:d1:b1:1b: 14:57:82:af:a1:b8:d0:45:15:af:8f:0c:71:fb:e9: da:f2:13:e9:be:ce:e1:56:3b:8e:19:ae:1e:ca:0c: 23:dc:da:53:21:00:6a:28:78:cf:bc:af:78:38:2e: d5:48:5b:a0:b2:ce:25:43:7e:a0:74:6e:ea:86:d0: 3c:59:7a:88:c2:c6:b1:fb:63:f7:e6:d9:83:e7:be: ea:98:6e:00:03:f3:85:34:bb:12:e6:3b:d5:56:19: ce:2b:9f:3d:59:83:e3:83:70:cf:74:33:0e:bf:34: 82:c2:49:90:9f:56:5b:80:26:6d:92:e3:bf:11:b7: 36:25:52:91:de:57:a1:40:64:01:3e:56:30:a7:cc: 7c:b4:fa:91:d5:f8:ce:89:96:b4:37:d8:13:ea:b2: f6:2f:a2:e4:78:9b:97:8d:15:95:fc:ae:7f:1d:66: fb:e0:47:6d:1b:5c:d4:f1:7e:dc:0d:ad:95:ac:7b: 23:10:5a:a0:6b:b6:a4:ae:81:49:44:18:e1:9a:cb: a0:86:53:0d:2e:5b:c3:59:37:89:f3:c6:2c:e4:bf: 8e:a1:3e:e2:aa:91:f2:73:81:39:75:6e:f9:be:96: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:77:C0:64:E1:01:34:F9:1B:78:E4:58:DA:6C:FF:31:11:92:9C:5A X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:57:18:c6:8e:bd:bb:a6:24:de:7b:16:14:a0:7b:f6:98:05: 78:5a:51:a0:53:4e:12:86:ff:c3:d0:f6:48:09:79:f7:17:c2: d4:9b:25:e2:0a:f9:4a:b8:19:7b:6d:4e:e3:3e:13:7f:3d:9f: 6a:29:28:4a:d1:35:05:fa:1d:8d:b1:64:5f:0d:3d:e5:a1:b3: f2:60:5e:63:23:2c:65:e8:af:64:2b:30:de:3d:13:8d:cd:01: 04:0c:5f:6b:c5:a9:78:a6:58:5c:5e:45:5f:28:0b:a8:9f:f7: 2d:0d:27:51:01:98:65:e4:67:26:d4:fd:d6:3f:ec:a4:5a:dc: f2:c5:ef:01:44:ac:3a:f9:8a:46:5f:e7:65:aa:ed:4c:84:87: ca:9a:8e:45:fb:c2:d4:b1:a0:fc:af:31:5e:da:0a:50:c8:82: 70:7e:1b:1a:d7:c3:0a:f3:b8:f2:f7:17:67:a2:47:9a:b0:cc: 38:25:8e:80:03:51:d6:d6:b9:5b:68:d7:3e:97:a3:56:92:4e: a9:d8:30:14:34:64:0b:4b:1c:fb:5f:74:fd:40:aa:50:e4:af: 20:32:49:55:36:d4:9d:36:56:8f:67:8d:fb:bd:e6:97:f7:fd: 92:f6:fd:dc:25:e8:7d:32:3c:61:a9:48:ea:b1:e9:2c:95:67: 79:fc:04:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBb42cB0M4Z9v9srQ6t6TFYYVU3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA5MzAwOTIyNTdaFw0yNjEwMDExMTQxNTdaMDMxMTAvBgNV BAMTKDY0NzdDMDY0RTEwMTM0RjkxQjc4RTQ1OERBNkNGRjMxMTE5MjlDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPf/+tzNobwIXDM4Cd1ocOboNb qEpgXaUpCtGxGxRXgq+huNBFFa+PDHH76dryE+m+zuFWO44Zrh7KDCPc2lMhAGoo eM+8r3g4LtVIW6CyziVDfqB0buqG0DxZeojCxrH7Y/fm2YPnvuqYbgAD84U0uxLm O9VWGc4rnz1Zg+ODcM90Mw6/NILCSZCfVluAJm2S478RtzYlUpHeV6FAZAE+VjCn zHy0+pHV+M6JlrQ32BPqsvYvouR4m5eNFZX8rn8dZvvgR20bXNTxftwNrZWseyMQ WqBrtqSugUlEGOGay6CGUw0uW8NZN4nzxizkv46hPuKqkfJzgTl1bvm+lhi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZHfAZOEBNPkbeORY2mz/MRGSnFowHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1XGMaOvbumJN57FhSge/aYBXhaUaBTThKG /8PQ9kgJefcXwtSbJeIK+Uq4GXttTuM+E389n2opKErRNQX6HY2xZF8NPeWhs/Jg XmMjLGXor2QrMN49E43NAQQMX2vFqXimWFxeRV8oC6if9y0NJ1EBmGXkZybU/dY/ 7KRa3PLF7wFErDr5ikZf52Wq7UyEh8qajkX7wtSxoPyvMV7aClDIgnB+GxrXwwrz uPL3F2eiR5qwzDgljoADUdbWuVto1z6Xo1aSTqnYMBQ0ZAtLHPtfdP1AqlDkryAy SVU21J02Vo9njfu95pf3/ZL2/dwl6H0yPGGpSOqx6SyVZ3n8BCM= -----END CERTIFICATE-----Generated at Wed Sep 30 19:44:59 2026 by rpki-client