$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft File: 4C378F3C5E9E84D98D0229475208B1E382584588.mft (raw, json) Hash identifier: S3tWvKdHK6Ww9M9DGabLb4yA3ME1jtdWAlVcR8kPyYU= Subject key identifier: 74:AE:B2:AF:10:3E:6F:C2:CC:FB:C1:27:B8:62:32:2E:5B:ED:05:C5 Authority key identifier: 4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88 Certificate issuer: /CN=4C378F3C5E9E84D98D0229475208B1E382584588 Certificate serial: 6E6F38B11146D8DEF3BAFF62AF96DE1487B4ADC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:09:44 +0000 Manifest this update: Wed 23 Sep 2026 23:04:44 +0000 Manifest next update: Fri 25 Sep 2026 02:54:44 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: ABkgOJWd2fNKHCH6GAwk3bSoWGS8bHMY1ISOxz9j9j0=) 2: 4C378F3C5E9E84D98D0229475208B1E382584588.crl (hash: p1MHP0Lxg1Sa0bKLDImcy7vpxJQag8zfGqdxZN98ths=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6f:38:b1:11:46:d8:de:f3:ba:ff:62:af:96:de:14:87:b4:ad:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C378F3C5E9E84D98D0229475208B1E382584588 Validity Not Before: Sep 23 23:04:44 2026 GMT Not After : Sep 25 02:54:44 2026 GMT Subject: CN=74AEB2AF103E6FC2CCFBC127B862322E5BED05C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:c8:c3:50:5f:06:c5:9b:f8:1c:ae:5f:c6: cc:d6:a9:70:f2:ed:c6:01:55:8b:32:e7:fc:4b:3f: ed:87:9c:49:bd:db:55:15:35:ac:6a:d4:c6:63:a5: 10:6b:47:7f:c6:d1:28:15:b8:6c:68:c4:dc:65:a1: 68:6f:0f:9b:4d:cb:98:4d:c9:73:fe:87:45:9e:67: 9a:1e:6e:71:38:0c:ee:ee:fb:4a:77:81:68:81:91: 66:79:50:c9:4a:bb:67:ef:ac:ab:06:95:ed:02:31: 6b:90:b1:76:cd:45:95:db:dd:31:e3:69:8a:40:e6: bc:c0:fb:e9:1d:01:dd:ca:9a:07:13:17:d0:9b:12: 92:59:bc:46:02:ee:4f:87:b7:e5:a0:d7:30:a7:a1: 74:e0:79:7a:2c:aa:ce:3d:ef:8c:df:18:b2:0c:1b: cf:70:42:ad:8c:88:0f:f7:e5:7a:3e:4c:2f:4f:4c: db:78:50:38:78:4d:23:58:a8:4a:83:e6:ef:40:ce: 03:0b:94:a7:4c:a6:78:7b:e8:d3:de:88:6b:92:35: 0d:63:94:8f:c8:5a:a9:81:b4:4b:3a:61:aa:be:d3: 55:1a:be:9a:31:65:eb:f6:85:81:03:b1:e7:86:c6: 2a:be:36:76:87:83:85:64:f9:89:6e:10:d9:15:fc: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:B2:AF:10:3E:6F:C2:CC:FB:C1:27:B8:62:32:2E:5B:ED:05:C5 X509v3 Authority Key Identifier: keyid:4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:39:bc:f2:31:e7:f8:80:e3:5a:f6:74:d4:0c:01:c5:8c:35: 36:49:ab:18:fb:6c:21:63:97:95:3f:76:4c:82:45:fa:96:1d: 41:fe:e2:33:0a:d4:2c:8d:54:34:2a:ef:21:5a:e5:d5:bd:93: 1a:ba:74:f4:a7:c3:62:88:0f:f8:55:02:9a:96:e8:a2:80:41: c9:6f:93:4d:15:9d:af:44:eb:c7:81:bf:03:d3:34:2d:80:1a: d5:ec:93:74:f4:6a:37:05:29:11:69:7b:43:a9:44:64:54:33: ca:be:9e:6d:d2:8c:94:3b:b5:e4:d7:27:63:4b:92:fd:6f:be: 41:34:ef:8d:e9:9a:72:0c:dc:a3:1c:7e:f8:b0:0c:39:c2:f8: 37:f1:67:4b:63:88:95:2a:e4:90:67:ba:4c:02:e2:ed:b8:a8: 98:c9:65:1c:1d:83:f8:a4:a3:ac:f1:41:4e:f2:fc:43:26:55: 09:ef:e8:99:56:4a:84:df:d0:30:23:d4:b0:f8:34:9b:43:bd: 01:a3:9b:48:bf:4e:4b:31:95:0c:56:3d:e2:42:9f:ab:be:63: 9b:84:b0:cc:5e:bb:ff:bb:97:f4:88:eb:27:fc:9a:d4:83:12: f9:80:0d:25:b8:9c:10:e1:e9:d0:95:b4:4e:d1:03:82:8e:e7: 5f:a3:9d:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbm84sRFG2N7zuv9ir5beFIe0rcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNzhGM0M1RTlFODREOThEMDIyOTQ3NTIwOEIxRTM4 MjU4NDU4ODAeFw0yNjA5MjMyMzA0NDRaFw0yNjA5MjUwMjU0NDRaMDMxMTAvBgNV BAMTKDc0QUVCMkFGMTAzRTZGQzJDQ0ZCQzEyN0I4NjIzMjJFNUJFRDA1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+r8jDUF8GxZv4HK5fxszWqXDy 7cYBVYsy5/xLP+2HnEm921UVNaxq1MZjpRBrR3/G0SgVuGxoxNxloWhvD5tNy5hN yXP+h0WeZ5oebnE4DO7u+0p3gWiBkWZ5UMlKu2fvrKsGle0CMWuQsXbNRZXb3THj aYpA5rzA++kdAd3KmgcTF9CbEpJZvEYC7k+Ht+Wg1zCnoXTgeXosqs4974zfGLIM G89wQq2MiA/35Xo+TC9PTNt4UDh4TSNYqEqD5u9AzgMLlKdMpnh76NPeiGuSNQ1j lI/IWqmBtEs6Yaq+01UavpoxZev2hYEDseeGxiq+NnaHg4Vk+YluENkV/P+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdK6yrxA+b8LM+8EnuGIyLlvtBcUwHwYDVR0j BBgwFoAUTDePPF6ehNmNAilHUgix44JYRYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU5YjBiYWQtNjZiOS00ZjI4LWE3YzUtZTlhOWZlMTIwYWQ3LzAvNEMzNzhGM0M1 RTlFODREOThEMDIyOTQ3NTIwOEIxRTM4MjU4NDU4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzM3OEYzQzVFOUU4NEQ5OEQwMjI5NDc1MjA4QjFFMzgyNTg0 NTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvNEMzNzhGM0M1RTlFODREOThEMDIyOTQ3NTIwOEIx RTM4MjU4NDU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo5vPIx5/iA41r2dNQMAcWMNTZJqxj7bCFj l5U/dkyCRfqWHUH+4jMK1CyNVDQq7yFa5dW9kxq6dPSnw2KID/hVApqW6KKAQclv k00Vna9E68eBvwPTNC2AGtXsk3T0ajcFKRFpe0OpRGRUM8q+nm3SjJQ7teTXJ2NL kv1vvkE0743pmnIM3KMcfviwDDnC+DfxZ0tjiJUq5JBnukwC4u24qJjJZRwdg/ik o6zxQU7y/EMmVQnv6JlWSoTf0DAj1LD4NJtDvQGjm0i/TksxlQxWPeJCn6u+Y5uE sMxeu/+7l/SI6yf8mtSDEvmADSW4nBDh6dCVtE7RA4KO51+jnZk= -----END CERTIFICATE-----Generated at Thu Sep 24 21:42:38 2026 by rpki-client