$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft File: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json) Hash identifier: H4R1lcnLqKx29QQRuYZC8ZoxY3rYrSEY85mQNLBf1qQ= Subject key identifier: 50:4C:8C:03:58:53:DB:A3:5A:98:16:2B:7D:82:F9:23:E2:14:34:BF Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 Certificate issuer: /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Certificate serial: 0B917B812D06050B76F437470B14CEDE6D53D977 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft Manifest number: C7 Signing time: Sat 26 Sep 2026 18:02:19 +0000 Manifest this update: Sat 26 Sep 2026 17:57:19 +0000 Manifest next update: Sun 27 Sep 2026 20:24:19 +0000 Files and hashes: 1: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: Jj/pfoqCiDqRAxe0dMe2eH3m42uiRWMjL9CNUmJxT8E=) 2: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:91:7b:81:2d:06:05:0b:76:f4:37:47:0b:14:ce:de:6d:53:d9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Validity Not Before: Sep 26 17:57:19 2026 GMT Not After : Sep 27 20:24:19 2026 GMT Subject: CN=504C8C035853DBA35A98162B7D82F923E21434BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:68:e0:3d:1f:cc:32:25:b1:16:5d:3f:5b: f8:89:0a:d0:22:e0:ea:27:f5:9b:e5:b5:75:93:cd: a6:64:1c:80:53:1c:42:be:c5:7c:94:9c:7b:1c:35: 15:73:ec:03:71:96:bb:2b:48:38:52:52:68:e7:3b: df:f8:4f:f8:55:06:5d:60:be:cf:71:07:65:52:b7: eb:97:b2:97:78:9c:d9:47:70:f0:56:bb:5b:21:ed: 61:76:ad:09:dc:80:b0:b6:96:13:0e:ed:88:56:ad: 80:f5:54:97:e9:90:bf:73:95:11:f5:dd:4c:95:78: 27:b6:ce:9b:59:9e:46:88:84:e0:76:5f:ea:08:84: 39:48:f0:42:ba:c8:fb:73:e2:a7:a5:1d:34:b5:ea: 90:9e:9a:da:6e:fa:45:93:e6:11:fe:74:a4:1f:55: 20:ec:31:d3:c8:61:0d:5c:e5:5a:41:f0:87:19:66: ce:72:c4:52:2e:c9:e1:c0:98:ea:82:da:7e:b0:33: d4:c6:6d:78:82:0e:7d:ef:f5:0b:1b:d1:80:0e:12: 1d:f7:3f:85:dc:ab:6c:6e:82:81:b6:7d:fe:d7:9d: 9e:f3:d2:31:25:64:37:9e:93:3d:e6:8c:53:17:9a: 1b:c8:b4:9e:13:29:08:c2:10:03:06:57:98:ba:06: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:8C:03:58:53:DB:A3:5A:98:16:2B:7D:82:F9:23:E2:14:34:BF X509v3 Authority Key Identifier: keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:07:25:0e:d9:bd:56:c2:7a:3a:1d:13:93:37:50:65:ea:76: fc:4d:c7:79:09:d3:9e:a6:5a:a3:dd:c8:8d:91:3b:d0:4b:a6: 6f:15:7a:38:8e:d6:bf:6c:f3:0d:53:f6:a6:32:05:e9:f8:8d: 92:75:84:a6:98:56:68:f2:4f:f9:be:d4:a5:4f:f9:ed:d3:65: b2:70:31:1d:88:d6:9b:1c:ad:77:bd:d3:bb:e8:2a:ec:27:3a: bd:c4:15:18:61:2d:46:bf:6c:1a:62:65:8a:90:c9:74:44:21: c5:a0:19:60:d0:59:c2:d7:17:d8:5c:2e:a2:f1:11:a5:56:50: 8a:3a:48:03:71:12:c6:ce:50:c0:e3:ba:c6:c5:de:0f:10:cc: b9:d4:9d:2d:22:ba:11:57:a4:67:46:c9:64:f2:3b:8c:8f:3d: 24:2f:16:f5:6e:65:67:d5:57:77:ba:fe:d5:c8:db:dc:c8:67: 57:2f:c0:7f:47:41:8e:fc:48:80:6c:f0:d5:59:54:0d:46:5c: b5:b9:63:36:17:78:3b:9c:f6:70:77:d1:cd:d1:11:e2:c3:ad: 02:47:60:04:09:f6:54:34:fb:10:d3:ba:7c:e4:d8:02:81:85: ec:ce:62:56:c8:00:7e:ce:81:cb:95:d0:51:de:7f:e9:61:b4: af:8c:0b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5F7gS0GBQt29DdHCxTO3m1T2XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2 QTJGOTdFMzAeFw0yNjA5MjYxNzU3MTlaFw0yNjA5MjcyMDI0MTlaMDMxMTAvBgNV BAMTKDUwNEM4QzAzNTg1M0RCQTM1QTk4MTYyQjdEODJGOTIzRTIxNDM0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwV2jgPR/MMiWxFl0/W/iJCtAi 4Oon9ZvltXWTzaZkHIBTHEK+xXyUnHscNRVz7ANxlrsrSDhSUmjnO9/4T/hVBl1g vs9xB2VSt+uXspd4nNlHcPBWu1sh7WF2rQncgLC2lhMO7YhWrYD1VJfpkL9zlRH1 3UyVeCe2zptZnkaIhOB2X+oIhDlI8EK6yPtz4qelHTS16pCemtpu+kWT5hH+dKQf VSDsMdPIYQ1c5VpB8IcZZs5yxFIuyeHAmOqC2n6wM9TGbXiCDn3v9Qsb0YAOEh33 P4Xcq2xugoG2ff7XnZ7z0jElZDeekz3mjFMXmhvItJ4TKQjCEAMGV5i6BsR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUEyMA1hT26NamBYrfYL5I+IUNL8wHwYDVR0j BBgwFoAUTXRQwnlOQlWe+/OpD7BD1Wovl+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1ZjE1YzktNTg0My00NzA1LWI2OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3 OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2QTJGOTdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDc0NTBDMjc5NEU0MjU1OUVGQkYzQTkwRkIwNDNENTZBMkY5 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQz RDU2QTJGOTdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQHJQ7ZvVbCejodE5M3UGXqdvxNx3kJ056m WqPdyI2RO9BLpm8VejiO1r9s8w1T9qYyBen4jZJ1hKaYVmjyT/m+1KVP+e3TZbJw MR2I1pscrXe907voKuwnOr3EFRhhLUa/bBpiZYqQyXREIcWgGWDQWcLXF9hcLqLx EaVWUIo6SANxEsbOUMDjusbF3g8QzLnUnS0iuhFXpGdGyWTyO4yPPSQvFvVuZWfV V3e6/tXI29zIZ1cvwH9HQY78SIBs8NVZVA1GXLW5YzYXeDuc9nB30c3REeLDrQJH YAQJ9lQ0+xDTunzk2AKBhezOYlbIAH7OgcuV0FHef+lhtK+MC3Y= -----END CERTIFICATE-----Generated at Sun Sep 27 13:17:03 2026 by rpki-client