$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: b2fI2cyoRjczPUilEVlCHjCBPXJlGdTqEBXCqvcZjLM= Subject key identifier: 06:69:06:22:A7:B8:C7:E0:AA:B8:58:EE:EA:02:6F:D7:71:E1:97:D1 Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 1FCF818D02A6AB0D0F4A2BE0184EB44589218C08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:07:08 +0000 Manifest this update: Wed 23 Sep 2026 17:02:08 +0000 Manifest next update: Thu 24 Sep 2026 21:04:08 +0000 Files and hashes: 1: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: jIviHEEmqwah4AG+uTT9HejD3ifFeTqCl1DUJIjdDGY=) 2: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) 3: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) 4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cf:81:8d:02:a6:ab:0d:0f:4a:2b:e0:18:4e:b4:45:89:21:8c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Sep 23 17:02:08 2026 GMT Not After : Sep 24 21:04:08 2026 GMT Subject: CN=06690622A7B8C7E0AAB858EEEA026FD771E197D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:50:25:a2:f8:6d:b2:82:ce:76:86:f7:30: b0:06:f8:9a:c6:7d:0c:fc:44:33:3c:bd:7e:64:6d: 35:34:db:90:27:5e:9f:eb:e8:89:4b:9d:21:d1:d7: 80:6e:1f:4b:0d:75:84:86:aa:91:8c:53:3d:6d:09: 0f:fe:a9:0d:d7:51:c5:1c:a5:99:d7:2d:ac:96:d1: 07:ff:51:e2:40:e6:e3:40:46:02:91:27:38:28:dd: 89:18:45:ec:20:0f:8e:03:55:03:cb:c7:e0:55:6e: de:96:50:0d:e0:09:ef:62:23:ac:8f:d1:1b:c6:71: 09:3f:9f:04:2a:5f:3c:3f:3b:fc:f3:70:a2:e6:6c: 95:7d:88:6b:9f:49:25:01:83:1c:3f:ae:ed:a6:6a: 50:62:08:be:96:a3:10:ce:8f:8d:d6:00:28:26:a5: 53:9f:59:98:a7:7a:09:6b:33:78:e2:36:ee:fc:5e: 09:33:f4:b8:b3:be:ef:00:ad:5e:e6:6a:71:a4:a6: c7:6d:e2:58:7a:bb:66:ff:ad:63:57:57:b1:0b:fa: 92:6e:50:df:79:f0:4b:30:45:c5:2a:8a:32:92:7d: e2:7f:70:27:11:8a:b9:1c:b5:1a:0e:4c:82:b0:a0: 6f:01:d6:fa:2e:ff:f0:f4:9a:8c:fc:05:03:83:9d: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:69:06:22:A7:B8:C7:E0:AA:B8:58:EE:EA:02:6F:D7:71:E1:97:D1 X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e8:d6:0d:f9:aa:db:44:89:45:d3:1d:ad:8d:a2:a1:b9:05: 39:d9:3c:98:7f:6d:b0:9d:06:a3:f6:f0:9c:0f:e1:ef:68:90: 63:c8:5d:af:12:19:ea:c9:05:f8:04:93:45:f1:9d:a7:5d:2d: c3:7e:8b:09:a1:bf:69:b1:4e:31:07:00:82:75:8e:2d:9d:08: 5a:75:bf:b0:a5:61:fb:97:45:fb:6d:85:08:6d:d8:25:04:c0: 56:b7:7e:69:68:2a:b4:9a:da:3d:ba:c2:68:10:8d:92:de:ee: 9c:15:83:a0:4d:55:ca:ef:42:f9:7d:ab:a5:90:45:56:f3:b3: e2:85:52:d3:4a:86:33:21:48:26:9c:af:85:a9:48:51:ff:7f: 01:8f:98:03:14:df:eb:41:35:21:72:45:5b:b0:73:50:ad:08: ff:f7:c1:31:9c:b8:75:53:e0:41:57:a8:f5:e0:ed:01:c6:27: 9b:7b:03:9c:d9:65:09:c6:9d:1b:2b:3d:ab:d9:09:51:18:c7: cc:c6:8e:d2:3c:8e:10:62:59:c7:80:2f:c8:d0:4b:8c:86:82: d8:87:c7:59:d1:09:8b:11:36:ff:c3:05:aa:88:24:a6:4c:e7: 86:3a:27:e8:f7:66:c0:d9:fc:cb:0d:ea:51:60:c6:ab:54:25: bd:f3:45:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8+BjQKmqw0PSivgGE60RYkhjAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA5MjMxNzAyMDhaFw0yNjA5MjQyMTA0MDhaMDMxMTAvBgNV BAMTKDA2NjkwNjIyQTdCOEM3RTBBQUI4NThFRUVBMDI2RkQ3NzFFMTk3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxelAlovhtsoLOdob3MLAG+JrG fQz8RDM8vX5kbTU025AnXp/r6IlLnSHR14BuH0sNdYSGqpGMUz1tCQ/+qQ3XUcUc pZnXLayW0Qf/UeJA5uNARgKRJzgo3YkYRewgD44DVQPLx+BVbt6WUA3gCe9iI6yP 0RvGcQk/nwQqXzw/O/zzcKLmbJV9iGufSSUBgxw/ru2malBiCL6WoxDOj43WACgm pVOfWZineglrM3jiNu78Xgkz9Lizvu8ArV7manGkpsdt4lh6u2b/rWNXV7EL+pJu UN958EswRcUqijKSfeJ/cCcRirkctRoOTIKwoG8B1vou//D0moz8BQODnUQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBmkGIqe4x+CquFju6gJv13Hhl9EwHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbo1g35qttEiUXTHa2NoqG5BTnZPJh/bbCd BqP28JwP4e9okGPIXa8SGerJBfgEk0XxnaddLcN+iwmhv2mxTjEHAIJ1ji2dCFp1 v7ClYfuXRftthQht2CUEwFa3fmloKrSa2j26wmgQjZLe7pwVg6BNVcrvQvl9q6WQ RVbzs+KFUtNKhjMhSCacr4WpSFH/fwGPmAMU3+tBNSFyRVuwc1CtCP/3wTGcuHVT 4EFXqPXg7QHGJ5t7A5zZZQnGnRsrPavZCVEYx8zGjtI8jhBiWceAL8jQS4yGgtiH x1nRCYsRNv/DBaqIJKZM54Y6J+j3ZsDZ/MsN6lFgxqtUJb3zRU8= -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:57 2026 by rpki-client