$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft File: 4D81747956B88002B7CA79329A458E7D5CC04FC7.mft (raw, json) Hash identifier: mCRMqP/h8dYi2DttwbouPdfJZcBdZGkSKY9C4EVr/Dg= Subject key identifier: 8C:4C:C0:D8:46:0A:84:FF:BC:9F:E7:AC:02:CA:92:D6:6B:AE:E8:DA Authority key identifier: 4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 Certificate issuer: /CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Certificate serial: 2B07FED79E74149BA9019EBC39F9A2356FFC1C64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 19:24:04 +0000 Manifest this update: Sat 26 Sep 2026 19:19:04 +0000 Manifest next update: Sun 27 Sep 2026 21:41:04 +0000 Files and hashes: 1: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: pJiC24QIjxd6JDAGc4IBUzAveppgmfr21Asl7pAU+wU=) 2: 4D81747956B88002B7CA79329A458E7D5CC04FC7.crl (hash: l3cQpUs4cSNJ70rIiWn9vqFK/zYRDCac+pwxqYD36P8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:07:fe:d7:9e:74:14:9b:a9:01:9e:bc:39:f9:a2:35:6f:fc:1c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D81747956B88002B7CA79329A458E7D5CC04FC7 Validity Not Before: Sep 26 19:19:04 2026 GMT Not After : Sep 27 21:41:04 2026 GMT Subject: CN=8C4CC0D8460A84FFBC9FE7AC02CA92D66BAEE8DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:61:44:fe:0e:f1:34:00:c9:77:1a:03:e4: 79:35:62:2d:76:6b:31:84:46:72:64:fa:aa:10:d4: 09:cb:80:f9:4a:9e:23:c8:3d:74:b1:26:c5:a3:64: 0e:af:59:f0:14:ae:19:31:e5:cd:39:be:a9:85:ee: a8:2f:3c:27:ef:dd:3f:68:6c:8c:4f:0d:a5:43:7b: 1d:d2:7e:87:c2:95:32:45:13:60:a3:1c:fd:98:4f: fc:ba:96:27:00:3f:d2:37:88:fc:83:77:e5:a9:df: 73:3e:33:5c:af:d7:83:4b:3d:57:dd:72:66:84:8e: a1:dd:6a:a3:0a:c0:63:18:42:73:b7:bf:17:92:1d: e1:f7:3a:36:f9:f8:26:1f:6a:da:c5:7f:f1:46:c4: ce:bd:1f:fb:3d:f1:34:bb:c8:ba:4f:83:6c:52:cc: e4:8c:e4:0a:3e:d0:e6:78:83:e0:29:03:26:8c:21: 52:e7:95:f0:18:92:f4:af:c1:22:fc:c3:cb:e2:13: c4:2b:20:08:40:ee:43:3b:91:90:98:33:92:bd:f9: a2:3e:cf:42:56:47:42:3d:be:7a:fb:86:9b:20:6a: 33:8b:5a:a2:c5:2a:e4:9f:3d:ec:a4:26:58:2e:d9: 29:fc:49:a7:99:d6:40:f9:75:76:41:58:8e:08:d1: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:C0:D8:46:0A:84:FF:BC:9F:E7:AC:02:CA:92:D6:6B:AE:E8:DA X509v3 Authority Key Identifier: keyid:4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b2:b2:e5:68:c9:fb:eb:90:5c:11:58:da:24:32:2a:d8:e6: f2:1b:9b:60:57:56:0c:ab:a9:d9:f8:aa:76:ca:92:4a:ba:59: 6e:31:23:1d:8a:96:b6:d5:26:7f:ff:45:91:6e:c7:bc:1d:84: 37:e0:92:2e:e9:7a:d4:8e:76:10:aa:da:d6:56:c3:6a:74:7b: d9:36:34:b3:e3:74:b0:09:a3:b8:91:e1:f3:70:05:21:6b:1d: 17:d5:99:44:62:56:eb:2e:cf:05:82:3c:3c:22:7c:24:df:fa: 52:13:fd:c5:81:e1:34:c6:3d:2f:14:60:83:0b:e8:fe:91:74: 21:21:32:4e:aa:d5:32:15:3f:5e:c7:83:46:2f:d0:56:29:1c: 5a:ba:f3:f9:8c:4d:b2:39:80:65:31:f6:7b:31:b3:5e:a5:a6: 66:f6:ab:c4:44:2f:f2:ec:d6:99:8b:63:90:6f:f1:28:f4:b6: fa:f5:2a:06:3e:0e:25:f7:ac:c2:de:15:68:2c:69:53:bf:1d: 22:b9:58:34:0c:96:87:86:34:78:56:9e:05:ee:6c:63:e2:90: 3c:04:d1:91:8a:0d:e9:44:b5:06:a0:76:7d:4b:dc:31:11:2c: 0d:10:86:0c:aa:c5:15:27:c3:31:2b:89:3f:79:71:44:62:58: 1c:88:05:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwf+1550FJupAZ68OfmiNW/8HGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1 Q0MwNEZDNzAeFw0yNjA5MjYxOTE5MDRaFw0yNjA5MjcyMTQxMDRaMDMxMTAvBgNV BAMTKDhDNENDMEQ4NDYwQTg0RkZCQzlGRTdBQzAyQ0E5MkQ2NkJBRUU4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/mFE/g7xNADJdxoD5Hk1Yi12 azGERnJk+qoQ1AnLgPlKniPIPXSxJsWjZA6vWfAUrhkx5c05vqmF7qgvPCfv3T9o bIxPDaVDex3SfofClTJFE2CjHP2YT/y6licAP9I3iPyDd+Wp33M+M1yv14NLPVfd cmaEjqHdaqMKwGMYQnO3vxeSHeH3Ojb5+CYfatrFf/FGxM69H/s98TS7yLpPg2xS zOSM5Ao+0OZ4g+ApAyaMIVLnlfAYkvSvwSL8w8viE8QrIAhA7kM7kZCYM5K9+aI+ z0JWR0I9vnr7hpsgajOLWqLFKuSfPeykJlgu2Sn8SaeZ1kD5dXZBWI4I0b0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjEzA2EYKhP+8n+esAsqS1muu6NowHwYDVR0j BBgwFoAUTYF0eVa4gAK3ynkymkWOfVzAT8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWYwYTJiZWMtZjgxYS00YTNiLWExNDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1 NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1Q0MwNEZDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDgxNzQ3OTU2Qjg4MDAyQjdDQTc5MzI5QTQ1OEU3RDVDQzA0 RkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThF N0Q1Q0MwNEZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+ysuVoyfvrkFwRWNokMirY5vIbm2BXVgyr qdn4qnbKkkq6WW4xIx2KlrbVJn//RZFux7wdhDfgki7petSOdhCq2tZWw2p0e9k2 NLPjdLAJo7iR4fNwBSFrHRfVmURiVusuzwWCPDwifCTf+lIT/cWB4TTGPS8UYIML 6P6RdCEhMk6q1TIVP17Hg0Yv0FYpHFq68/mMTbI5gGUx9nsxs16lpmb2q8REL/Ls 1pmLY5Bv8Sj0tvr1KgY+DiX3rMLeFWgsaVO/HSK5WDQMloeGNHhWngXubGPikDwE 0ZGKDelEtQagdn1L3DERLA0QhgyqxRUnwzEriT95cURiWByIBX0= -----END CERTIFICATE-----Generated at Sun Sep 27 01:26:13 2026 by rpki-client