$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: c2ngRv4UypC+vuW3ZenIUR8lhv01FzIAFOR307ct0Nc= Subject key identifier: AE:68:92:84:92:8B:C4:14:60:0E:16:05:32:12:73:30:3C:A3:48:D3 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 4A6080A2034874CF7BE961E7D28387946922A955 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:42:42 +0000 Manifest this update: Thu 24 Sep 2026 09:37:42 +0000 Manifest next update: Fri 25 Sep 2026 12:30:42 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) 2: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: w4VqPHi2rz3j2iuDcnRabZT1Tw6zNfr6YEjQyD/T8B8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:60:80:a2:03:48:74:cf:7b:e9:61:e7:d2:83:87:94:69:22:a9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Sep 24 09:37:42 2026 GMT Not After : Sep 25 12:30:42 2026 GMT Subject: CN=AE689284928BC414600E1605321273303CA348D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:65:7e:8c:d3:fb:7d:6f:25:8b:00:e4:56: 88:d3:f0:e7:6c:97:7c:2b:b6:d1:c3:99:da:92:29: 99:c5:14:f1:67:cb:af:d0:10:b5:b7:2e:cd:ab:b4: ed:a8:b9:f0:9a:ed:95:3e:7f:cc:b7:a1:e1:6a:36: c6:c6:17:ab:7e:ef:79:17:9b:cd:90:b8:db:8c:80: ae:b9:85:c4:11:01:4f:25:05:76:5c:9a:44:a3:39: 6c:b8:00:99:6b:c2:9d:1d:73:02:d5:52:8f:66:74: fb:1d:19:3d:6b:8c:bd:65:5b:d1:10:bb:8d:fa:60: 5f:69:fb:fc:bd:c2:9b:20:32:33:77:79:7d:14:bb: 33:a5:3a:d3:b7:6f:50:72:50:9d:e4:94:d7:d1:78: 63:92:20:92:d5:a0:cd:d3:94:81:30:8a:18:bd:5a: 98:1b:70:6a:ae:d7:b5:22:30:22:93:6e:ef:73:bd: b7:92:42:82:c8:92:cf:c9:ed:4b:24:26:48:a5:fc: 56:5b:94:44:b1:75:c0:73:95:db:1c:7e:4e:2c:1f: 89:10:2f:92:62:83:9a:57:c9:04:7d:a4:f2:6d:86: 65:8f:38:b4:95:af:87:30:f8:f3:6e:34:ef:ea:e0: a8:df:35:c0:80:51:58:e2:4a:52:36:75:e7:82:74: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:68:92:84:92:8B:C4:14:60:0E:16:05:32:12:73:30:3C:A3:48:D3 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c6:7e:25:fb:84:7b:9f:80:fb:aa:45:5f:10:2c:f3:ee:75: 4b:e4:89:02:dc:64:ee:35:36:e3:71:cf:9f:70:3e:5e:c3:24: 01:a2:7f:d6:a1:3e:74:9e:3b:16:a2:2e:f8:43:34:cc:f4:e5: 8e:43:7b:2d:aa:ca:9f:c6:d7:79:72:76:01:57:57:f1:dd:3a: d0:fb:d6:86:7c:de:07:23:b5:95:c3:de:c0:5f:e3:78:c4:a3: cb:27:6c:d3:9f:75:2c:86:46:43:d9:e4:e0:5b:17:6a:ec:32: a6:8c:1e:88:e7:eb:74:d5:5f:dd:e8:ac:a5:b1:30:29:be:c6: 93:1f:ce:83:91:10:c6:e5:6c:3d:ee:9c:71:04:cb:dc:d9:71: 4c:29:e7:66:a1:f4:04:eb:ec:51:f9:53:38:06:a6:e5:b6:48: bc:30:0b:b7:34:f5:7c:9b:22:9f:cc:70:f0:f2:da:73:60:6c: 10:e7:c5:52:88:2f:78:dd:d6:5a:64:c7:dc:13:67:6a:d9:f4: 04:46:54:82:aa:61:c9:42:e9:d4:fb:5e:b9:79:c3:06:2f:8f: c1:e8:d8:9e:82:80:ee:56:af:be:4e:cd:81:41:07:76:37:dc: e2:19:e0:38:87:41:78:18:b4:a0:8d:b6:35:f4:9d:ab:b5:3f: 48:ce:31:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSmCAogNIdM976WHn0oOHlGkiqVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjA5MjQwOTM3NDJaFw0yNjA5MjUxMjMwNDJaMDMxMTAvBgNV BAMTKEFFNjg5Mjg0OTI4QkM0MTQ2MDBFMTYwNTMyMTI3MzMwM0NBMzQ4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZFGV+jNP7fW8liwDkVojT8Ods l3wrttHDmdqSKZnFFPFny6/QELW3Ls2rtO2oufCa7ZU+f8y3oeFqNsbGF6t+73kX m82QuNuMgK65hcQRAU8lBXZcmkSjOWy4AJlrwp0dcwLVUo9mdPsdGT1rjL1lW9EQ u436YF9p+/y9wpsgMjN3eX0UuzOlOtO3b1ByUJ3klNfReGOSIJLVoM3TlIEwihi9 WpgbcGqu17UiMCKTbu9zvbeSQoLIks/J7UskJkil/FZblESxdcBzldscfk4sH4kQ L5Jig5pXyQR9pPJthmWPOLSVr4cw+PNuNO/q4KjfNcCAUVjiSlI2deeCdOW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmiShJKLxBRgDhYFMhJzMDyjSNMwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbGfiX7hHufgPuqRV8QLPPudUvkiQLcZO41 NuNxz59wPl7DJAGif9ahPnSeOxaiLvhDNMz05Y5Dey2qyp/G13lydgFXV/HdOtD7 1oZ83gcjtZXD3sBf43jEo8snbNOfdSyGRkPZ5OBbF2rsMqaMHojn63TVX93orKWx MCm+xpMfzoOREMblbD3unHEEy9zZcUwp52ah9ATr7FH5UzgGpuW2SLwwC7c09Xyb Ip/McPDy2nNgbBDnxVKIL3jd1lpkx9wTZ2rZ9ARGVIKqYclC6dT7Xrl5wwYvj8Ho 2J6CgO5Wr75OzYFBB3Y33OIZ4DiHQXgYtKCNtjX0nau1P0jOMdg= -----END CERTIFICATE-----Generated at Fri Sep 25 02:48:26 2026 by rpki-client