$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: hJNcQkAtto6D+G7bnDbtvOc/mzQOjXlkjecCvfDEZIk= Subject key identifier: 8A:6C:D7:8E:8F:77:27:8F:A7:5A:33:4F:9B:32:2F:31:B2:37:50:C5 Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 4BBF7D042DB7BE7BA27AB6BDAFD34FEF2C5BE7DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:57:01 +0000 Manifest this update: Wed 23 Sep 2026 16:52:01 +0000 Manifest next update: Thu 24 Sep 2026 17:04:01 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) 3: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: MOlJckJdOhDUy0o7EcxamiOTg1hQ2vbqrSrtJ5CuHqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bf:7d:04:2d:b7:be:7b:a2:7a:b6:bd:af:d3:4f:ef:2c:5b:e7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Sep 23 16:52:01 2026 GMT Not After : Sep 24 17:04:01 2026 GMT Subject: CN=8A6CD78E8F77278FA75A334F9B322F31B23750C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:d8:d1:d1:0c:c8:e1:b7:e6:91:86:a1:ca: 3c:24:20:89:24:ea:b2:37:f7:e7:9a:5b:bb:ac:3a: 1d:53:83:3d:93:9c:72:7e:78:1c:89:20:3a:6d:2c: 0c:e8:4b:d8:68:91:09:a7:7c:1c:bb:0d:57:9b:e8: e4:f7:5a:63:bd:81:77:57:3b:d0:f9:92:4a:5e:65: 8f:28:57:e5:71:e9:75:da:fb:87:c6:47:5a:ad:97: f4:6c:f0:39:d9:9f:6a:a0:95:71:9d:84:af:a8:c8: ea:1c:48:27:c5:d9:4c:c0:04:b6:72:00:04:66:c8: d8:46:76:e5:56:08:1e:fb:04:1a:fa:81:85:8e:f0: 77:48:80:9a:f6:93:13:53:94:4b:67:7a:3d:b5:a0: 7d:0f:0f:8e:b4:f7:eb:e8:e4:94:92:41:af:06:51: cc:57:3d:5f:a5:f8:6b:7c:18:6d:f8:96:d7:20:f6: 8c:fb:59:47:72:9f:72:ae:1b:d2:39:f9:17:cd:ea: 1e:81:f5:68:d7:ab:7c:ac:24:cf:1d:61:6d:93:c8: 20:2a:27:0d:45:5a:51:25:89:74:93:e4:1c:f6:61: aa:29:99:91:27:d6:36:a0:1f:f1:82:36:6e:a5:69: 38:64:f8:a8:d5:3d:20:db:cf:5f:9a:89:54:21:f4: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6C:D7:8E:8F:77:27:8F:A7:5A:33:4F:9B:32:2F:31:B2:37:50:C5 X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:be:3c:c4:f4:7e:03:71:51:b7:9b:e5:4f:de:89:b6:4c:c0: 28:2e:24:4c:a5:58:66:22:20:2b:9f:e6:f9:43:be:bf:a7:6b: 0c:ad:9c:8a:7d:b6:17:a1:ab:3f:41:70:6d:4d:ae:85:21:f6: 76:21:c9:9d:9e:d3:53:c8:a7:ef:cf:6e:fe:f0:3a:32:73:bb: 1f:dd:22:e5:7b:0d:48:47:96:88:a6:97:5e:2a:7a:68:96:29: c2:73:6c:c9:6b:14:11:e5:8d:9e:c7:59:3e:7e:0f:05:8d:6f: 5c:c5:fe:d1:83:9e:b4:16:f3:75:8d:e9:ba:67:2d:55:17:d6: da:a7:bf:9c:d2:46:c8:01:08:75:f4:2e:fc:41:e9:00:8a:0d: 77:7f:66:db:03:ec:4c:12:88:d2:18:c2:3e:a9:ea:12:fa:b8: d2:43:76:65:1e:0b:e8:0c:79:20:ff:cd:93:36:70:48:4f:5e: 08:49:03:71:5d:22:97:41:26:d4:a8:42:19:b3:de:98:cc:46: 3e:2d:8a:87:98:65:76:f8:d0:53:b7:78:f9:2c:50:ac:31:21: 64:98:9b:65:53:a9:6d:1a:5d:33:0a:37:ea:84:cb:59:ea:e6: 1b:37:9d:3e:25:39:34:5e:2c:86:d1:c5:47:31:bb:d3:e7:cc: 95:a3:c6:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS799BC23vnuiera9r9NP7yxb59owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA5MjMxNjUyMDFaFw0yNjA5MjQxNzA0MDFaMDMxMTAvBgNV BAMTKDhBNkNENzhFOEY3NzI3OEZBNzVBMzM0RjlCMzIyRjMxQjIzNzUwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMtjR0QzI4bfmkYahyjwkIIkk 6rI39+eaW7usOh1Tgz2TnHJ+eByJIDptLAzoS9hokQmnfBy7DVeb6OT3WmO9gXdX O9D5kkpeZY8oV+Vx6XXa+4fGR1qtl/Rs8DnZn2qglXGdhK+oyOocSCfF2UzABLZy AARmyNhGduVWCB77BBr6gYWO8HdIgJr2kxNTlEtnej21oH0PD4609+vo5JSSQa8G UcxXPV+l+Gt8GG34ltcg9oz7WUdyn3KuG9I5+RfN6h6B9WjXq3ysJM8dYW2TyCAq Jw1FWlEliXST5Bz2YaopmZEn1jagH/GCNm6laThk+KjVPSDbz1+aiVQh9AK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUimzXjo93J4+nWjNPmzIvMbI3UMUwHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGO+PMT0fgNxUbeb5U/eibZMwCguJEylWGYi ICuf5vlDvr+nawytnIp9thehqz9BcG1NroUh9nYhyZ2e01PIp+/Pbv7wOjJzux/d IuV7DUhHloiml14qemiWKcJzbMlrFBHljZ7HWT5+DwWNb1zF/tGDnrQW83WN6bpn LVUX1tqnv5zSRsgBCHX0LvxB6QCKDXd/ZtsD7EwSiNIYwj6p6hL6uNJDdmUeC+gM eSD/zZM2cEhPXghJA3FdIpdBJtSoQhmz3pjMRj4tioeYZXb40FO3ePksUKwxIWSY m2VTqW0aXTMKN+qEy1nq5hs3nT4lOTReLIbRxUcxu9PnzJWjxl4= -----END CERTIFICATE-----Generated at Thu Sep 24 00:10:33 2026 by rpki-client