$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: Z6dgVYEWd7FB7I7GUHokQ8eAs0eK2qthoswCVAv35lI= Subject key identifier: BB:6A:E9:08:6E:AB:03:2F:89:01:A7:F7:33:9B:BA:5A:F7:D2:77:03 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 646251048E0E9F25D8EB0931406AF000F6D09BBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 13:27:41 +0000 Manifest this update: Wed 23 Sep 2026 13:22:41 +0000 Manifest next update: Thu 24 Sep 2026 17:02:41 +0000 Files and hashes: 1: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 2: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 3: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 4: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: xz+Ku0YvmSUR13wlmTYRnzEfK37yjQ3Pfpyo9cELnj4=) 5: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:62:51:04:8e:0e:9f:25:d8:eb:09:31:40:6a:f0:00:f6:d0:9b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Sep 23 13:22:41 2026 GMT Not After : Sep 24 17:02:41 2026 GMT Subject: CN=BB6AE9086EAB032F8901A7F7339BBA5AF7D27703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:88:c7:e7:25:0d:5f:42:5c:1d:e3:63:3f: 5f:d7:90:96:75:0c:f4:39:91:ac:f8:36:fd:fa:2c: a3:58:0a:7c:33:f0:4e:7d:11:d2:c0:7f:fe:12:2b: a4:42:41:81:1e:99:fd:97:29:d5:62:31:25:6b:c7: 44:6a:e6:7f:dc:fc:58:0f:f2:73:6f:3a:93:8a:d8: dc:e1:68:e0:55:22:62:8c:a3:fb:3d:46:cb:96:fa: 50:18:d5:9d:9b:b8:45:ee:e7:f0:60:70:69:85:90: 56:e5:3a:a8:95:2f:36:28:a6:7d:e5:5b:76:6f:5f: bc:31:c5:c2:90:61:73:f8:35:a4:8a:6e:c2:b6:72: 89:df:26:45:34:6e:bd:07:6c:3f:b6:5e:77:e1:19: 87:75:56:a3:07:e2:75:18:90:81:bd:dc:82:ec:67: 13:f1:69:3f:3f:73:b4:16:a0:22:b1:11:dc:5d:85: 5e:93:ab:e0:3f:1f:3d:b6:1e:18:69:f7:60:41:ee: fd:ee:42:ca:76:f1:ae:84:17:a6:f9:c7:6a:64:9b: 54:93:6f:ba:dd:f5:e0:dc:c7:49:b5:93:18:7b:c1: e9:a7:4f:e4:4c:5e:46:4b:d6:85:34:1a:04:f8:14: 05:90:3c:be:28:90:d8:be:0b:ff:06:9a:32:e8:45: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:E9:08:6E:AB:03:2F:89:01:A7:F7:33:9B:BA:5A:F7:D2:77:03 X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8b:2b:6f:06:ed:df:3d:05:25:f6:fc:bf:e8:74:a5:e0:33: 47:aa:04:33:a3:49:a8:e6:43:3d:22:ef:de:65:ad:71:d9:55: a8:30:b4:e8:dd:f7:51:2e:b3:47:90:f7:ba:9a:b0:02:7c:4f: a9:3d:06:02:f8:60:22:4c:a1:c2:a1:ae:95:a7:71:08:73:6f: 6c:e1:5a:8b:fb:be:3b:53:46:3d:4e:1b:1f:d7:13:c5:85:43: f9:1d:5e:12:16:7f:36:27:64:16:df:8e:a7:01:b9:f7:47:7b: 03:e7:57:87:d8:30:fb:2b:90:d7:f0:eb:01:0a:bf:5a:3c:41: 35:8f:8d:40:6e:3c:5e:f5:54:06:f5:91:8c:c6:b3:53:8a:d2: 11:50:0d:54:ce:74:59:24:8a:13:93:b5:3c:a2:e4:4e:cd:02: 04:d6:be:02:df:1e:c2:25:b5:b3:8d:84:8d:ee:0a:38:48:b0: 1c:d5:38:91:2c:75:e6:de:75:32:5b:cb:77:b4:0f:4d:27:85: 25:46:5e:0c:96:29:df:f7:fb:22:7b:38:3d:6b:c4:e8:d3:c1: e9:c9:50:d9:c4:60:96:f0:4b:5e:9b:6e:f7:a5:d3:a7:fc:c6: 4c:f6:b1:63:bc:7d:18:d6:7c:c5:1c:9b:18:1e:e0:71:8f:16: b1:a5:61:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGJRBI4OnyXY6wkxQGrwAPbQm74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA5MjMxMzIyNDFaFw0yNjA5MjQxNzAyNDFaMDMxMTAvBgNV BAMTKEJCNkFFOTA4NkVBQjAzMkY4OTAxQTdGNzMzOUJCQTVBRjdEMjc3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+YjH5yUNX0JcHeNjP1/XkJZ1 DPQ5kaz4Nv36LKNYCnwz8E59EdLAf/4SK6RCQYEemf2XKdViMSVrx0Rq5n/c/FgP 8nNvOpOK2NzhaOBVImKMo/s9RsuW+lAY1Z2buEXu5/BgcGmFkFblOqiVLzYopn3l W3ZvX7wxxcKQYXP4NaSKbsK2confJkU0br0HbD+2XnfhGYd1VqMH4nUYkIG93ILs ZxPxaT8/c7QWoCKxEdxdhV6Tq+A/Hz22Hhhp92BB7v3uQsp28a6EF6b5x2pkm1ST b7rd9eDcx0m1kxh7wemnT+RMXkZL1oU0GgT4FAWQPL4okNi+C/8GmjLoRZydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2rpCG6rAy+JAaf3M5u6WvfSdwMwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKLK28G7d89BSX2/L/odKXgM0eqBDOjSajm Qz0i795lrXHZVagwtOjd91Eus0eQ97qasAJ8T6k9BgL4YCJMocKhrpWncQhzb2zh Wov7vjtTRj1OGx/XE8WFQ/kdXhIWfzYnZBbfjqcBufdHewPnV4fYMPsrkNfw6wEK v1o8QTWPjUBuPF71VAb1kYzGs1OK0hFQDVTOdFkkihOTtTyi5E7NAgTWvgLfHsIl tbONhI3uCjhIsBzVOJEsdebedTJby3e0D00nhSVGXgyWKd/3+yJ7OD1rxOjTwenJ UNnEYJbwS16bbvel06f8xkz2sWO8fRjWfMUcmxge4HGPFrGlYXI= -----END CERTIFICATE-----Generated at Thu Sep 24 00:31:29 2026 by rpki-client