$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft File: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft (raw, json) Hash identifier: GPzON5uLuD1qAOCOALuPsPXQrTUOt48LA6+LwTg/bpA= Subject key identifier: 73:D9:FF:78:8A:06:BA:6B:F3:14:38:D7:41:A6:96:6F:2B:51:E5:F1 Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D Certificate issuer: /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Certificate serial: 26DBFD6AED28206BDC8A70708555F56F52E050 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:18:23 +0000 Manifest this update: Thu 24 Sep 2026 10:13:23 +0000 Manifest next update: Fri 25 Sep 2026 11:19:23 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=) 2: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl (hash: 5i97LHyL/WltD2I6xda/Ess+8EvHrlEwSr0T4EB7cvU=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: 6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=) 4: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:db:fd:6a:ed:28:20:6b:dc:8a:70:70:85:55:f5:6f:52:e0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Validity Not Before: Sep 24 10:13:23 2026 GMT Not After : Sep 25 11:19:23 2026 GMT Subject: CN=73D9FF788A06BA6BF31438D741A6966F2B51E5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:09:46:ae:33:34:da:1c:7c:f6:7a:d1:ca: c2:4d:7d:74:2c:b3:2e:cc:51:42:ec:3d:18:2d:16: c9:ae:67:71:77:b5:6c:88:45:70:30:eb:8d:b8:d8: 4e:23:89:0c:6c:4b:ea:25:df:dc:72:0d:06:2e:ae: d5:da:83:80:7e:c0:39:29:77:14:02:81:60:63:a2: e1:92:9d:4e:dd:7c:5f:a1:ca:44:fc:a9:36:f6:28: ea:b3:c1:39:40:5c:cd:77:fe:b4:30:01:1e:30:6f: 0d:a1:78:a6:2f:9c:6c:8e:20:90:20:25:0f:2e:54: 54:9e:08:4b:40:04:8a:64:1a:43:f2:ac:c2:9c:45: fd:11:9e:89:35:91:7e:f8:82:d3:36:38:ae:ac:58: 05:ee:78:01:26:87:ff:05:37:86:6b:19:62:9a:30: 34:e7:de:43:11:3b:c2:44:ef:c8:ab:d8:d4:21:64: 85:62:ee:69:c3:f8:ec:c0:de:1b:b5:1d:1d:36:bc: 86:b0:bb:06:ed:67:a4:6e:67:48:94:ee:1c:c0:04: 90:13:7d:fb:11:dd:3d:c5:29:3c:96:46:29:49:69: 82:4a:58:29:52:ad:82:7e:b4:8e:4c:53:07:b3:03: d2:71:43:0b:d3:0e:1d:31:e9:18:f1:ed:60:2f:3c: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D9:FF:78:8A:06:BA:6B:F3:14:38:D7:41:A6:96:6F:2B:51:E5:F1 X509v3 Authority Key Identifier: keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ea:b9:bc:59:fe:55:1b:cb:a1:10:7b:e3:4b:dc:89:47:c8: 48:39:20:a9:fe:1e:72:52:af:e6:e9:f3:17:1a:91:53:19:6e: 31:b1:15:39:20:6d:db:c8:9b:68:73:21:e4:59:2e:ca:1a:a1: 3b:4a:1b:54:da:25:16:91:20:fc:2c:eb:10:6b:2f:b2:44:d4: 4c:ab:c0:2c:94:5c:31:e0:a5:2c:18:13:d1:5a:74:13:92:52: 15:60:31:2a:d5:2a:17:21:6b:87:b0:c7:a0:af:54:eb:5b:d8: 2a:a3:d3:12:9a:f0:8a:e5:1d:f8:98:f6:75:0f:63:56:f1:5f: 9d:8f:1e:2a:e9:95:49:20:12:2a:43:20:51:dd:a2:02:ed:8c: 08:06:52:a2:4b:a4:c8:77:be:c7:31:0f:49:62:1f:82:f7:73: 79:41:36:4c:a1:5f:7e:2a:ee:05:a8:af:e0:23:98:43:9e:33: c7:5c:b9:be:6f:9a:3e:fa:8b:19:e1:fd:bc:f6:d1:7e:67:c4: d5:c1:25:26:88:7c:50:16:00:ea:1a:f7:97:b2:43:a3:6a:ec: be:61:9b:90:b5:09:9e:23:ea:be:d9:94:f1:9f:f0:f5:a3:09: c8:dd:53:de:80:88:03:e9:2d:3c:ec:c2:65:80:d5:40:c0:72: 0f:fe:f0:7d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITJtv9au0oIGvcinBwhVX1b1LgUDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAy NzFDQjREMB4XDTI2MDkyNDEwMTMyM1oXDTI2MDkyNTExMTkyM1owMzExMC8GA1UE AxMoNzNEOUZGNzg4QTA2QkE2QkYzMTQzOEQ3NDFBNjk2NkYyQjUxRTVGMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5mCUauMzTaHHz2etHKwk19dCyz LsxRQuw9GC0Wya5ncXe1bIhFcDDrjbjYTiOJDGxL6iXf3HINBi6u1dqDgH7AOSl3 FAKBYGOi4ZKdTt18X6HKRPypNvYo6rPBOUBczXf+tDABHjBvDaF4pi+cbI4gkCAl Dy5UVJ4IS0AEimQaQ/KswpxF/RGeiTWRfviC0zY4rqxYBe54ASaH/wU3hmsZYpow NOfeQxE7wkTvyKvY1CFkhWLuacP47MDeG7UdHTa8hrC7Bu1npG5nSJTuHMAEkBN9 +xHdPcUpPJZGKUlpgkpYKVKtgn60jkxTB7MD0nFDC9MOHTHpGPHtYC88130CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRz2f94iga6a/MUONdBppZvK1Hl8TAfBgNVHSME GDAWgBROdHfavHkw/hgJ/srA6nUeAnHLTTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC80RTc0NzdEQUJD NzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAyNzFDQjRELmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzRFNzQ3N0RBQkM3OTMwRkUxODA5RkVDQUMwRUE3NTFFMDI3MUNC NEQuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmM4Y2RhNS0zNDgzLTQyYjAtYjM4 NS1mYzA3MDcxNmZiY2MvMC80RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUx RTAyNzFDQjRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAV+q5vFn+VRvLoRB740vciUfISDkgqf4eclKv 5unzFxqRUxluMbEVOSBt28ibaHMh5FkuyhqhO0obVNolFpEg/CzrEGsvskTUTKvA LJRcMeClLBgT0Vp0E5JSFWAxKtUqFyFrh7DHoK9U61vYKqPTEprwiuUd+Jj2dQ9j VvFfnY8eKumVSSASKkMgUd2iAu2MCAZSokukyHe+xzEPSWIfgvdzeUE2TKFffiru Baiv4COYQ54zx1y5vm+aPvqLGeH9vPbRfmfE1cElJoh8UBYA6hr3l7JDo2rsvmGb kLUJniPqvtmU8Z/w9aMJyN1T3oCIA+ktPOzCZYDVQMByD/7wfQ== -----END CERTIFICATE-----Generated at Thu Sep 24 12:50:15 2026 by rpki-client