$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft File: 4E4DE13CED941803F067EA0F530875538E7F1AA8.mft (raw, json) Hash identifier: yJ68kRqsGJI6ZDse+ahTRdZXzo3kHXzNegnECBCiysQ= Subject key identifier: 8E:35:BC:AD:7B:4B:8E:CA:9D:A7:30:4E:F3:98:BD:AB:C4:84:94:57 Authority key identifier: 4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8 Certificate issuer: /CN=4E4DE13CED941803F067EA0F530875538E7F1AA8 Certificate serial: 5D0921AEB4A2D081EAD0B259767F77C5EFE89F86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 01:25:55 +0000 Manifest this update: Sun 27 Sep 2026 01:20:55 +0000 Manifest next update: Mon 28 Sep 2026 03:36:55 +0000 Files and hashes: 1: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: pS17p4MkvrBveGdgex+XwX4S4Wesu7Vq17SWjXP0+w8=) 2: 4E4DE13CED941803F067EA0F530875538E7F1AA8.crl (hash: r06xLrgoGiG59ZvPyNvROktP8mNtJ1G+SWxO0y3+TbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:09:21:ae:b4:a2:d0:81:ea:d0:b2:59:76:7f:77:c5:ef:e8:9f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4DE13CED941803F067EA0F530875538E7F1AA8 Validity Not Before: Sep 27 01:20:55 2026 GMT Not After : Sep 28 03:36:55 2026 GMT Subject: CN=8E35BCAD7B4B8ECA9DA7304EF398BDABC4849457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:0e:74:a5:e5:1a:f5:b3:f1:e0:ea:6c:9b: 84:56:80:0f:04:a0:04:90:ea:ee:d7:e7:76:e0:1c: 90:32:dd:c9:a4:46:a0:37:b7:4a:02:fe:29:70:af: 63:6b:01:ed:b8:65:99:72:98:ba:11:40:93:61:6a: a7:3e:87:e7:32:a9:06:67:ed:17:47:b8:59:96:2c: a9:03:6c:d5:63:d9:17:ec:a6:0d:d7:4a:27:d9:13: b1:ee:98:d0:b7:24:f2:47:3d:25:94:df:17:27:1a: fb:76:09:b3:ee:97:f0:72:33:cc:7a:16:d5:bf:1c: a7:f4:53:0c:32:57:08:eb:b6:b4:35:79:e2:f1:cd: cd:11:ec:12:74:8e:1e:e5:9b:57:21:20:f2:69:f4: e2:4a:6f:a5:8a:79:61:23:d3:ca:e3:04:ea:78:93: be:f5:30:48:b6:91:d3:5d:79:60:7e:92:ed:d4:8c: b6:d5:20:f6:d7:67:6e:42:fe:84:62:86:76:f2:95: 45:90:5b:37:85:ec:7a:a9:d1:5b:a9:ea:c2:8d:8a: d8:cb:8c:b3:92:1a:c0:7d:79:20:19:fc:7a:8d:4b: 0e:36:d1:3f:02:d1:92:5f:22:b1:a7:33:bc:d2:08: e4:4e:7b:19:c0:a6:10:47:c7:8d:21:ad:5f:c6:84: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:35:BC:AD:7B:4B:8E:CA:9D:A7:30:4E:F3:98:BD:AB:C4:84:94:57 X509v3 Authority Key Identifier: keyid:4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:43:20:f4:c3:c1:a2:c1:6b:42:ac:11:85:6e:61:25:5e:f5: 48:43:08:1f:1c:c5:79:30:09:4c:16:8f:d6:66:73:83:a7:3a: 65:a8:cf:0d:c9:97:ef:1e:2e:42:31:c3:a2:5b:12:56:c9:16: 38:dc:15:25:09:7a:72:a9:8d:d2:fe:b2:32:d5:34:cf:e8:0c: a1:c8:19:78:05:fa:94:33:a7:30:59:30:e2:d8:dc:93:47:42: 17:b7:06:d5:94:18:3f:b5:74:bb:6d:e4:cf:dc:5f:dc:7a:74: 49:e7:49:dd:4b:f4:9c:77:45:25:89:51:40:4c:f2:56:a2:68: 14:8a:d3:3b:1e:2a:f1:d5:ac:07:35:6a:f0:ff:47:51:95:e0: e6:31:b6:e9:ed:b2:b9:dd:8f:da:d4:19:0f:e2:4b:9f:d4:88: 18:03:e2:fd:57:45:4d:86:44:3c:e6:22:f3:fd:22:2d:75:aa: 3b:f0:46:f2:02:13:11:1e:f0:d1:b4:ee:35:b9:04:84:b8:fd: 28:d9:b2:4a:8d:6b:b1:9f:2d:77:30:e3:88:e0:89:31:e5:b4: 76:5c:0e:8b:c8:1c:3f:18:f7:87:36:85:a9:30:62:0c:a1:23: 8b:95:99:f5:aa:6d:b1:1e:c6:f6:2c:b5:76:70:d9:43:3e:d7: be:15:2f:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQkhrrSi0IHq0LJZdn93xe/on4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0REUxM0NFRDk0MTgwM0YwNjdFQTBGNTMwODc1NTM4 RTdGMUFBODAeFw0yNjA5MjcwMTIwNTVaFw0yNjA5MjgwMzM2NTVaMDMxMTAvBgNV BAMTKDhFMzVCQ0FEN0I0QjhFQ0E5REE3MzA0RUYzOThCREFCQzQ4NDk0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFQ50peUa9bPx4Opsm4RWgA8E oASQ6u7X53bgHJAy3cmkRqA3t0oC/ilwr2NrAe24ZZlymLoRQJNhaqc+h+cyqQZn 7RdHuFmWLKkDbNVj2Rfspg3XSifZE7HumNC3JPJHPSWU3xcnGvt2CbPul/ByM8x6 FtW/HKf0UwwyVwjrtrQ1eeLxzc0R7BJ0jh7lm1chIPJp9OJKb6WKeWEj08rjBOp4 k771MEi2kdNdeWB+ku3UjLbVIPbXZ25C/oRihnbylUWQWzeF7Hqp0Vup6sKNitjL jLOSGsB9eSAZ/HqNSw420T8C0ZJfIrGnM7zSCOROexnAphBHx40hrV/GhOkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjjW8rXtLjsqdpzBO85i9q8SElFcwHwYDVR0j BBgwFoAUTk3hPO2UGAPwZ+oPUwh1U45/GqgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ0YWE3ZWYtNmQ5NS00ZWJhLWEzNTQtZmQ0MTg1OGMxYmE3LzAvNEU0REUxM0NF RDk0MTgwM0YwNjdFQTBGNTMwODc1NTM4RTdGMUFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTRERTEzQ0VEOTQxODAzRjA2N0VBMEY1MzA4NzU1MzhFN0Yx QUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ0YWE3ZWYtNmQ5NS00ZWJhLWEz NTQtZmQ0MTg1OGMxYmE3LzAvNEU0REUxM0NFRDk0MTgwM0YwNjdFQTBGNTMwODc1 NTM4RTdGMUFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJDIPTDwaLBa0KsEYVuYSVe9UhDCB8cxXkw CUwWj9Zmc4OnOmWozw3Jl+8eLkIxw6JbElbJFjjcFSUJenKpjdL+sjLVNM/oDKHI GXgF+pQzpzBZMOLY3JNHQhe3BtWUGD+1dLtt5M/cX9x6dEnnSd1L9Jx3RSWJUUBM 8laiaBSK0zseKvHVrAc1avD/R1GV4OYxtuntsrndj9rUGQ/iS5/UiBgD4v1XRU2G RDzmIvP9Ii11qjvwRvICExEe8NG07jW5BIS4/SjZskqNa7GfLXcw44jgiTHltHZc DovIHD8Y94c2hakwYgyhI4uVmfWqbbEexvYstXZw2UM+174VL+I= -----END CERTIFICATE-----Generated at Sun Sep 27 11:52:35 2026 by rpki-client