$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json) Hash identifier: po8/0p/NliQj/MY04DGqEjA0w16Uo0xZ0dQ/Iwl2Fyk= Subject key identifier: D9:1A:BC:B0:3C:C6:57:EB:1C:8F:87:B3:74:EE:A3:13:E9:04:30:16 Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A Certificate serial: 15BE5180FBE26417226737EF4B442C8A190BDA31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 21:32:16 +0000 Manifest this update: Thu 24 Sep 2026 21:27:16 +0000 Manifest next update: Fri 25 Sep 2026 22:11:16 +0000 Files and hashes: 1: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: 2YQUBp9rrw84WQ27WWUDRRUSvPqwLz/oj82sRCDuikQ=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=) 3: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:51:80:fb:e2:64:17:22:67:37:ef:4b:44:2c:8a:19:0b:da:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A Validity Not Before: Sep 24 21:27:16 2026 GMT Not After : Sep 25 22:11:16 2026 GMT Subject: CN=D91ABCB03CC657EB1C8F87B374EEA313E9043016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:95:0f:cc:35:f8:d3:b8:22:b4:27:5f:d0: f9:7b:87:31:8d:bf:57:bd:08:6c:7b:e5:f1:6b:b3: bd:da:9e:67:85:98:5f:7b:16:58:5c:2d:20:00:a3: 30:ef:30:76:b9:81:99:2d:75:08:af:94:1b:31:a2: 06:82:5e:e2:48:fb:2d:99:67:5c:42:9c:5e:28:a0: 47:67:98:66:6a:28:50:a0:bd:4a:be:d9:dc:9a:22: af:ac:d7:95:fe:91:a8:75:fa:75:f6:45:df:43:57: e3:cd:15:41:c0:42:61:1e:44:96:3f:78:07:0b:8d: d2:de:07:61:75:d9:76:b1:ec:d8:f7:1d:62:73:b4: 73:3e:99:c7:38:76:de:33:06:b7:d2:04:59:2b:e6: 84:a6:2c:74:f0:d1:67:7a:30:de:8a:a8:e2:06:63: a6:12:cb:e8:98:63:b2:6a:60:24:e8:9e:b2:d3:b4: a6:a6:ea:84:26:c9:6e:3d:a7:ec:60:dc:d9:d9:82: 63:37:06:ba:a0:d6:81:4f:4b:b2:ef:b8:0a:52:92: cf:a9:34:25:98:a4:62:f5:cb:29:53:ff:4c:42:9b: 5c:c9:80:98:14:c9:1b:f1:f9:0e:ef:34:45:0e:32: 38:81:af:a8:fc:b9:fd:c2:f7:b4:a7:24:1d:73:69: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:BC:B0:3C:C6:57:EB:1C:8F:87:B3:74:EE:A3:13:E9:04:30:16 X509v3 Authority Key Identifier: keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:dd:df:22:39:b9:be:69:4b:5f:30:07:f2:fa:f7:fd:b4:20: 52:98:83:a0:36:19:dd:46:8d:90:38:05:6a:8b:d8:3f:49:3f: ff:5b:54:ba:5f:9d:b7:bf:17:7b:35:71:c7:c2:1c:f4:89:4b: 36:99:a4:aa:43:06:f1:af:c0:2e:1a:78:ab:9e:f6:78:56:f7: 69:ff:ed:25:00:85:7d:b6:8a:d2:aa:bd:55:ac:5d:fc:7d:13: fa:9c:81:6f:a5:be:90:32:ac:b4:72:fa:9e:d1:a8:a7:17:19: e4:51:42:de:12:58:b1:50:ad:02:f8:ed:fd:17:82:df:fd:47: 61:cd:35:ef:a2:ee:8a:04:19:36:12:e5:bd:62:d3:37:d9:9c: da:0d:7b:e2:60:d8:fc:7a:42:59:c6:36:fe:2f:3c:c1:6f:b9: ae:05:28:38:da:38:0b:fa:d3:f6:c3:80:d4:2a:83:79:c9:b3: a8:7e:8f:22:df:99:47:55:25:c1:16:98:94:d7:32:c7:ae:5f: 61:7d:a9:15:a3:99:9b:ad:43:f1:ef:52:2d:76:ce:7b:38:ec: 44:38:82:da:c2:ee:9a:29:15:5e:3b:a2:4a:46:17:f4:4c:9f: 48:0d:49:66:a7:ea:82:e9:dd:6f:89:72:e7:a0:38:ee:8f:93: b7:a0:5a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFb5RgPviZBciZzfvS0QsihkL2jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIw MTRGMjA1QTAeFw0yNjA5MjQyMTI3MTZaFw0yNjA5MjUyMjExMTZaMDMxMTAvBgNV BAMTKEQ5MUFCQ0IwM0NDNjU3RUIxQzhGODdCMzc0RUVBMzEzRTkwNDMwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtZUPzDX407gitCdf0Pl7hzGN v1e9CGx75fFrs73anmeFmF97FlhcLSAAozDvMHa5gZktdQivlBsxogaCXuJI+y2Z Z1xCnF4ooEdnmGZqKFCgvUq+2dyaIq+s15X+kah1+nX2Rd9DV+PNFUHAQmEeRJY/ eAcLjdLeB2F12Xax7Nj3HWJztHM+mcc4dt4zBrfSBFkr5oSmLHTw0Wd6MN6KqOIG Y6YSy+iYY7JqYCTonrLTtKam6oQmyW49p+xg3NnZgmM3Brqg1oFPS7LvuApSks+p NCWYpGL1yylT/0xCm1zJgJgUyRvx+Q7vNEUOMjiBr6j8uf3C97SnJB1zac4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Rq8sDzGV+scj4ezdO6jE+kEMBYwHwYDVR0j BBgwFoAUxOnURpgockk2yuY6QXwN4gFPIFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU4MmZjYTktMzIyMi00NWI2LWI0MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5 ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIwMTRGMjA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNEU5RDQ0Njk4Mjg3MjQ5MzZDQUU2M0E0MTdDMERFMjAxNEYy MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBE RTIwMTRGMjA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjd3yI5ub5pS18wB/L69/20IFKYg6A2Gd1G jZA4BWqL2D9JP/9bVLpfnbe/F3s1ccfCHPSJSzaZpKpDBvGvwC4aeKue9nhW92n/ 7SUAhX22itKqvVWsXfx9E/qcgW+lvpAyrLRy+p7RqKcXGeRRQt4SWLFQrQL47f0X gt/9R2HNNe+i7ooEGTYS5b1i0zfZnNoNe+Jg2Px6QlnGNv4vPMFvua4FKDjaOAv6 0/bDgNQqg3nJs6h+jyLfmUdVJcEWmJTXMseuX2F9qRWjmZutQ/HvUi12zns47EQ4 gtrC7popFV47okpGF/RMn0gNSWan6oLp3W+JcuegOO6Pk7egWs0= -----END CERTIFICATE-----Generated at Fri Sep 25 05:17:01 2026 by rpki-client