$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: iPmFKF7jAQ6X+R7uGCZ/ElOL+tVLKR0d5DgItI23hWc= Subject key identifier: 6D:C2:23:DE:43:F7:6A:F8:FE:C2:F5:A0:CC:9B:19:C6:AB:8E:D3:87 Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 43EF272631B1244CDC4886069FD16B4FD76402D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:25:12 +0000 Manifest this update: Wed 23 Sep 2026 15:20:12 +0000 Manifest next update: Thu 24 Sep 2026 18:49:12 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) 2: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: M1DMvcfXhy0/sq/O1xIZOlPgOCa596lssCpo3qNQoKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ef:27:26:31:b1:24:4c:dc:48:86:06:9f:d1:6b:4f:d7:64:02:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: Sep 23 15:20:12 2026 GMT Not After : Sep 24 18:49:12 2026 GMT Subject: CN=6DC223DE43F76AF8FEC2F5A0CC9B19C6AB8ED387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b9:41:b8:d2:99:fb:6f:c4:55:a6:ff:04:b1: 26:14:68:5b:3a:3a:5e:fc:80:70:74:e7:8b:9f:75: 45:b2:55:5f:04:af:fe:0f:15:ec:24:52:63:9d:f7: b9:7d:6f:67:28:4e:2a:91:c5:3d:2d:f7:49:94:84: 59:47:5c:94:38:d1:1e:3a:fe:27:f6:6e:89:12:28: 79:6f:6b:cc:77:1d:18:4f:7d:67:35:ff:94:6f:bd: 83:6e:6b:23:8f:1d:34:9c:2e:df:46:90:bf:e1:4c: 46:e1:a0:58:fc:f0:c7:cc:23:f3:71:ba:c9:38:64: 8a:7c:fc:32:5f:85:32:9e:08:da:64:93:a5:f7:01: 94:5a:2f:28:d3:c8:8f:1c:17:fd:98:bc:a6:0c:ce: f6:3c:9e:8b:f5:44:e2:14:7f:4b:72:00:24:7b:a0: 00:83:8b:4d:99:76:f1:2e:68:89:0d:6a:ba:a2:68: a0:02:2b:6e:7f:c6:d6:b1:17:40:a7:dc:78:37:c5: 44:ed:25:1b:2d:1a:dd:e6:3b:84:fc:42:5a:1e:c8: ea:c2:c7:24:a1:71:83:3b:ee:a1:ba:17:c8:76:bf: 2d:ae:9f:36:d7:99:82:f1:90:d4:4f:9a:ec:f6:dc: fc:5a:6b:8a:4a:b6:dc:78:0b:ff:9a:48:bd:e1:a2: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C2:23:DE:43:F7:6A:F8:FE:C2:F5:A0:CC:9B:19:C6:AB:8E:D3:87 X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:58:e0:29:8e:f2:a5:ce:58:fe:f1:a5:e2:e8:a7:de:aa:ae: d1:53:4d:6f:d0:84:a5:b2:4b:7e:79:16:a1:d6:7c:20:4e:ff: 45:e0:d0:32:41:e1:fb:26:d2:fa:d1:54:c8:62:46:85:f1:c3: d3:92:79:38:dc:df:71:34:02:e7:9a:e4:db:ac:c1:db:fb:4e: 64:ba:8c:32:a9:4b:df:ae:95:58:36:81:e4:5b:7c:d3:14:e5: 12:5a:40:c8:c0:1b:24:15:f3:db:6b:0a:c9:a7:27:c8:ee:a3: b7:b8:ad:f4:d1:a2:ff:71:3e:48:00:b8:ed:52:fa:a4:29:56: 75:ba:aa:30:50:fc:37:a1:c4:72:a2:e3:a9:c0:3e:16:9b:a0: ff:64:d3:80:50:85:76:86:2c:9d:7a:08:b9:97:a2:0d:14:cb: 08:52:16:84:21:f1:21:7b:05:dc:6b:96:b7:7f:2e:30:35:10: 76:79:04:21:a8:31:ed:71:5f:83:dd:cb:91:a8:31:f0:88:1b: d0:02:de:be:ee:54:47:e3:0a:ca:f2:e0:ec:ac:0c:63:20:db: da:c3:9c:c3:f6:50:f2:98:c5:28:d2:df:b7:53:f9:d1:a8:1b: 6d:72:bf:b6:53:67:34:f1:10:12:2a:79:ff:67:b7:2d:ef:67: 91:9f:88:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+8nJjGxJEzcSIYGn9FrT9dkAtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjA5MjMxNTIwMTJaFw0yNjA5MjQxODQ5MTJaMDMxMTAvBgNV BAMTKDZEQzIyM0RFNDNGNzZBRjhGRUMyRjVBMENDOUIxOUM2QUI4RUQzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtuUG40pn7b8RVpv8EsSYUaFs6 Ol78gHB054ufdUWyVV8Er/4PFewkUmOd97l9b2coTiqRxT0t90mUhFlHXJQ40R46 /if2bokSKHlva8x3HRhPfWc1/5RvvYNuayOPHTScLt9GkL/hTEbhoFj88MfMI/Nx usk4ZIp8/DJfhTKeCNpkk6X3AZRaLyjTyI8cF/2YvKYMzvY8nov1ROIUf0tyACR7 oACDi02ZdvEuaIkNarqiaKACK25/xtaxF0Cn3Hg3xUTtJRstGt3mO4T8QloeyOrC xyShcYM77qG6F8h2vy2unzbXmYLxkNRPmuz23Pxaa4pKttx4C/+aSL3hoiptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbcIj3kP3avj+wvWgzJsZxquO04cwHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNY4CmO8qXOWP7xpeLop96qrtFTTW/QhKWy S355FqHWfCBO/0Xg0DJB4fsm0vrRVMhiRoXxw9OSeTjc33E0Auea5Nuswdv7TmS6 jDKpS9+ulVg2geRbfNMU5RJaQMjAGyQV89trCsmnJ8juo7e4rfTRov9xPkgAuO1S +qQpVnW6qjBQ/DehxHKi46nAPhaboP9k04BQhXaGLJ16CLmXog0UywhSFoQh8SF7 Bdxrlrd/LjA1EHZ5BCGoMe1xX4Pdy5GoMfCIG9AC3r7uVEfjCsry4OysDGMg29rD nMP2UPKYxSjS37dT+dGoG21yv7ZTZzTxEBIqef9nty3vZ5GfiBg= -----END CERTIFICATE-----Generated at Thu Sep 24 10:23:49 2026 by rpki-client