$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft File: 4DD279AECD518B9CE764AE03708B711A40048A1E.mft (raw, json) Hash identifier: vKJfx5KBnURCC06Bey+Ijdz4QwCrbZnXt2KwONx/uWg= Subject key identifier: B7:9C:0F:BB:96:EE:A3:6C:04:9A:C0:A3:45:70:D7:B4:E1:EB:F5:68 Authority key identifier: 4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E Certificate issuer: /CN=4DD279AECD518B9CE764AE03708B711A40048A1E Certificate serial: 1F3062FFA402AAA931A0021722B470C14F512924 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:42:28 +0000 Manifest this update: Thu 24 Sep 2026 21:37:28 +0000 Manifest next update: Fri 25 Sep 2026 22:58:28 +0000 Files and hashes: 1: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: 6Laf+3GLGNpNAkhIsFH3maUJ3BnydIt6ABswzC07SLU=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: mxXusZGfsr98abkNgqk3JfvCjZTqoXMC9/o99feBr+E=) 3: 4DD279AECD518B9CE764AE03708B711A40048A1E.crl (hash: sLhTNl5Mo8ePJFTLZNMqm7tKzGv07bloFy+qwvWxrDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:30:62:ff:a4:02:aa:a9:31:a0:02:17:22:b4:70:c1:4f:51:29:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD279AECD518B9CE764AE03708B711A40048A1E Validity Not Before: Sep 24 21:37:28 2026 GMT Not After : Sep 25 22:58:28 2026 GMT Subject: CN=B79C0FBB96EEA36C049AC0A34570D7B4E1EBF568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:55:cd:24:3e:6a:dc:e6:3e:11:3f:9d:53: a4:3b:3a:7c:84:95:c7:2a:b9:df:3d:d5:b9:b4:79: 2d:f5:91:17:80:f7:43:5f:7e:39:7e:fb:4d:7b:24: 50:d7:aa:87:71:f3:a7:73:a3:1f:fc:1d:64:da:db: f9:44:78:8a:80:98:90:24:01:d8:77:9c:84:79:6a: a3:ba:bb:ed:60:f6:d0:fc:3f:34:54:70:31:92:b3: a8:d7:da:0b:6f:4a:cc:84:0e:6d:d3:b6:fd:eb:bf: 7e:22:3a:da:0a:77:ca:7f:ea:43:6e:3d:66:b2:57: b2:1f:6b:6b:f9:08:ba:c2:23:ce:dc:5b:c5:05:69: 66:49:e6:05:b1:11:2f:e6:2e:dc:53:08:75:71:cd: 1f:c4:7b:d3:07:3e:41:73:ac:37:ca:ab:4c:1c:c9: 3d:c1:ef:b3:40:5d:c9:b2:75:9a:39:f0:01:d1:7e: 1a:9b:36:25:5a:3c:3d:fe:d3:93:6a:3b:64:80:30: 91:e2:53:58:87:4f:bb:00:25:bc:d4:6b:e5:db:96: d3:8e:fb:02:70:26:a0:7b:b0:e9:56:bb:d5:9e:e2: 78:82:1e:9e:d8:09:cc:bc:c2:e7:64:b0:d5:68:29: be:2f:83:35:84:80:63:8e:e8:09:45:8b:dd:8d:57: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:0F:BB:96:EE:A3:6C:04:9A:C0:A3:45:70:D7:B4:E1:EB:F5:68 X509v3 Authority Key Identifier: keyid:4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:4c:d3:26:b1:2a:03:9b:ed:ec:8f:b8:68:68:5d:0d:6f: bb:4b:e4:25:0a:71:84:11:a9:16:e3:d0:63:34:ec:29:80:71: aa:1f:99:fb:5e:63:47:7a:fd:9e:09:26:a6:60:31:31:2b:90: ec:3e:b6:8f:74:75:3e:f4:97:74:7d:28:fb:eb:73:43:14:61: b0:b2:46:c2:44:96:98:a6:f3:c3:bc:aa:b6:14:60:84:dc:55: a8:00:fb:df:e8:6a:3a:e4:81:6f:df:f5:9e:29:d4:42:b8:71: 48:63:ef:09:9d:3d:52:10:c1:fa:49:01:87:df:8a:79:8c:a1: e3:16:da:ea:02:e0:b6:b6:ff:54:8a:24:61:58:45:d2:c3:06: 7e:6f:1d:f7:e2:95:3e:18:30:00:13:23:35:e9:1a:a6:34:30: ff:9d:51:54:5c:b5:9d:9b:a4:2e:2c:be:d6:4e:34:00:c4:48: 45:33:79:a6:93:bd:e2:b5:b8:e3:c7:70:79:40:c0:dd:a2:06: 16:4c:c7:5d:59:d4:3d:7e:5a:5a:c7:3c:9d:b4:8c:9a:7f:a6: 5d:09:1d:49:53:55:ba:f5:17:2e:51:58:9c:f7:d2:18:4a:a2: 5e:fc:7f:73:ad:f5:d6:e9:48:60:42:34:bc:38:ac:d0:1e:c3: 5e:7a:d3:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzBi/6QCqqkxoAIXIrRwwU9RKSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0 MDA0OEExRTAeFw0yNjA5MjQyMTM3MjhaFw0yNjA5MjUyMjU4MjhaMDMxMTAvBgNV BAMTKEI3OUMwRkJCOTZFRUEzNkMwNDlBQzBBMzQ1NzBEN0I0RTFFQkY1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAFXNJD5q3OY+ET+dU6Q7OnyE lccqud891bm0eS31kReA90Nffjl++017JFDXqodx86dzox/8HWTa2/lEeIqAmJAk Adh3nIR5aqO6u+1g9tD8PzRUcDGSs6jX2gtvSsyEDm3Ttv3rv34iOtoKd8p/6kNu PWayV7Ifa2v5CLrCI87cW8UFaWZJ5gWxES/mLtxTCHVxzR/Ee9MHPkFzrDfKq0wc yT3B77NAXcmydZo58AHRfhqbNiVaPD3+05NqO2SAMJHiU1iHT7sAJbzUa+XbltOO +wJwJqB7sOlWu9We4niCHp7YCcy8wudksNVoKb4vgzWEgGOO6AlFi92NVwpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5wPu5buo2wEmsCjRXDXtOHr9WgwHwYDVR0j BBgwFoAUTdJ5rs1Ri5znZK4DcItxGkAEih4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3MTQ2NjUtYzY3MC00NTFlLWJkY2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVD RDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0MDA0OEExRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQyNzlBRUNENTE4QjlDRTc2NEFFMDM3MDhCNzExQTQwMDQ4 QTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4Qjcx MUE0MDA0OEExRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpvTNMmsSoDm+3sj7hoaF0Nb7tL5CUKcYQR qRbj0GM07CmAcaofmfteY0d6/Z4JJqZgMTErkOw+to90dT70l3R9KPvrc0MUYbCy RsJElpim88O8qrYUYITcVagA+9/oajrkgW/f9Z4p1EK4cUhj7wmdPVIQwfpJAYff inmMoeMW2uoC4La2/1SKJGFYRdLDBn5vHffilT4YMAATIzXpGqY0MP+dUVRctZ2b pC4svtZONADESEUzeaaTveK1uOPHcHlAwN2iBhZMx11Z1D1+WlrHPJ20jJp/pl0J HUlTVbr1Fy5RWJz30hhKol78f3Ot9dbpSGBCNLw4rNAew1560/Y= -----END CERTIFICATE-----Generated at Fri Sep 25 18:14:15 2026 by rpki-client