$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: A+JyedavgFFfRtQ3IY9Kzs9GnVzts01QuWKpcewMvuk= Subject key identifier: D8:3A:7A:49:FB:2D:31:07:F0:4B:0D:40:0D:7F:C3:13:7A:C9:91:44 Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 57B20B2E71FE24C2C9A3E23FC1E41CDA64A8F516 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 23:55:08 +0000 Manifest this update: Thu 24 Sep 2026 23:50:08 +0000 Manifest next update: Sat 26 Sep 2026 01:27:08 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) 2: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: Cae+cR3K1D30vYgCNMh+ldvhai994r3spUEA80PCXto=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b2:0b:2e:71:fe:24:c2:c9:a3:e2:3f:c1:e4:1c:da:64:a8:f5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: Sep 24 23:50:08 2026 GMT Not After : Sep 26 01:27:08 2026 GMT Subject: CN=D83A7A49FB2D3107F04B0D400D7FC3137AC99144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:ca:2b:0b:27:ab:c4:3a:f5:1c:d4:9d:76: 29:9b:7a:92:e6:81:ca:d1:21:d3:56:59:f6:5f:53: 83:95:d6:0d:77:fe:5c:48:28:09:27:69:a6:53:35: e7:37:de:b7:df:8b:77:94:52:f2:ff:c1:02:06:c2: 82:9e:1a:ae:8a:b0:b4:23:5a:97:10:9c:6f:7e:be: 3d:87:cb:54:92:8a:35:59:c9:01:60:77:9d:9e:38: 7d:d7:30:c3:bd:78:21:e6:bc:5b:5f:0e:66:1c:ca: 58:31:7b:c3:5b:4e:17:80:b2:4f:e0:d6:f8:e7:d7: 7a:0c:65:15:4e:23:b1:a9:7a:92:61:d0:49:d7:36: f2:61:81:3a:69:b1:91:2b:ac:20:6a:49:4d:03:0c: 3a:4f:fa:fb:ef:22:7f:64:9e:c3:fd:2a:02:8f:77: 08:be:e5:0f:9f:dd:ba:6a:7c:32:96:27:f3:5a:11: 8f:27:4e:5b:e6:26:b5:bf:dd:70:73:2c:31:2f:f3: 1b:80:27:86:38:c7:f3:29:f3:db:77:83:4c:cc:71: 39:62:c4:85:4e:83:65:7e:ea:0c:11:68:94:2e:f2: 2f:af:af:74:da:98:f6:20:a3:a1:a6:d3:cf:8c:17: 59:8c:41:9d:7f:38:04:66:1f:b5:ef:22:8e:34:d3: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:7A:49:FB:2D:31:07:F0:4B:0D:40:0D:7F:C3:13:7A:C9:91:44 X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e9:8f:1c:b2:f4:a1:bb:c9:5b:11:1d:b5:6f:d4:ee:12:74: b0:20:4a:87:7c:00:ab:9c:04:f3:30:64:c8:cd:fd:ea:d9:b1: 84:96:4c:75:94:ee:69:32:15:fa:5c:09:5a:93:27:ad:c1:5a: d7:20:2e:f0:3e:c2:b1:8e:8d:e3:73:7b:6a:8e:0c:2e:ef:13: 9b:20:b4:fa:fb:66:50:65:4c:cb:e8:f2:85:f7:cb:3e:b7:ec: ca:10:5e:f5:8d:90:2b:f9:6a:0f:61:e3:b8:13:13:1f:d4:b2: 03:10:0a:02:04:d1:46:90:e9:03:07:f6:d8:e9:41:d1:28:02: f0:13:d9:2a:ae:35:d7:4f:0f:46:77:0a:63:22:99:7c:a1:55: 11:32:48:dd:48:dc:7f:02:c5:16:32:be:9e:33:8c:f1:95:1a: 4b:58:78:e4:25:89:fc:f6:a5:2f:45:9b:a8:1b:d4:71:9c:6a: 4f:8f:fa:80:89:67:d5:f1:e2:64:91:10:5f:51:b2:02:19:41: 40:0d:b6:aa:f9:d3:d1:79:e4:1f:84:4e:33:fc:ec:be:2d:7e: 0e:34:8d:c1:83:d3:00:9e:3f:2a:87:26:c9:ac:28:a6:6e:3f: 75:28:86:06:31:6e:2f:86:36:85:19:d9:a5:94:d5:08:39:f7: 10:4f:16:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7ILLnH+JMLJo+I/weQc2mSo9RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA5MjQyMzUwMDhaFw0yNjA5MjYwMTI3MDhaMDMxMTAvBgNV BAMTKEQ4M0E3QTQ5RkIyRDMxMDdGMDRCMEQ0MDBEN0ZDMzEzN0FDOTkxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8corCyerxDr1HNSddimbepLm gcrRIdNWWfZfU4OV1g13/lxIKAknaaZTNec33rffi3eUUvL/wQIGwoKeGq6KsLQj WpcQnG9+vj2Hy1SSijVZyQFgd52eOH3XMMO9eCHmvFtfDmYcylgxe8NbTheAsk/g 1vjn13oMZRVOI7GpepJh0EnXNvJhgTppsZErrCBqSU0DDDpP+vvvIn9knsP9KgKP dwi+5Q+f3bpqfDKWJ/NaEY8nTlvmJrW/3XBzLDEv8xuAJ4Y4x/Mp89t3g0zMcTli xIVOg2V+6gwRaJQu8i+vr3TamPYgo6Gm08+MF1mMQZ1/OARmH7XvIo4005FpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Dp6SfstMQfwSw1ADX/DE3rJkUQwHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLpjxyy9KG7yVsRHbVv1O4SdLAgSod8AKuc BPMwZMjN/erZsYSWTHWU7mkyFfpcCVqTJ63BWtcgLvA+wrGOjeNze2qODC7vE5sg tPr7ZlBlTMvo8oX3yz637MoQXvWNkCv5ag9h47gTEx/UsgMQCgIE0UaQ6QMH9tjp QdEoAvAT2SquNddPD0Z3CmMimXyhVREySN1I3H8CxRYyvp4zjPGVGktYeOQlifz2 pS9Fm6gb1HGcak+P+oCJZ9Xx4mSREF9RsgIZQUANtqr509F55B+ETjP87L4tfg40 jcGD0wCePyqHJsmsKKZuP3UohgYxbi+GNoUZ2aWU1Qg59xBPFg0= -----END CERTIFICATE-----Generated at Fri Sep 25 04:45:36 2026 by rpki-client