$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: 1yI6gfjRBojqAy1uUdPlFvFp9cLe0PKMyJLeS19m7Pw= Subject key identifier: F9:10:A5:FD:1B:16:E3:00:61:5E:9C:18:EB:1F:3C:9A:86:2B:A9:13 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 3C997DD929D4B5B9C9013A681679A39D9EEE1CD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:52:10 +0000 Manifest this update: Wed 23 Sep 2026 08:47:10 +0000 Manifest next update: Thu 24 Sep 2026 12:34:10 +0000 Files and hashes: 1: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) 2: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: I84WCnLEQpsoUzmaWjrjnEAZ/Lz4z+qFpDL/p/rK/vc=) 3: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 4: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 5: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) 6: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:99:7d:d9:29:d4:b5:b9:c9:01:3a:68:16:79:a3:9d:9e:ee:1c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Sep 23 08:47:10 2026 GMT Not After : Sep 24 12:34:10 2026 GMT Subject: CN=F910A5FD1B16E300615E9C18EB1F3C9A862BA913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:bb:cc:4d:7d:62:8d:77:ca:a4:58:8f:67: a6:a4:7f:c3:53:d6:d5:d3:1d:4e:41:84:0e:e2:12: 69:fb:2a:db:25:2d:7b:ee:ec:10:45:c1:dd:95:17: a8:17:a1:e1:16:86:f1:81:04:e8:ac:ad:a1:78:5e: 93:c6:21:da:be:d0:a0:d7:35:e9:37:79:31:52:31: 07:9c:87:a1:e6:2e:14:8b:04:f2:7c:1a:f8:e2:96: be:28:11:39:35:07:2d:25:ce:b0:ab:e4:d6:42:e9: 61:2b:a6:cb:e0:60:35:5c:c9:94:90:77:3e:d1:9d: b5:56:8b:b2:54:e4:16:73:60:75:82:16:83:ab:dc: e2:01:da:83:40:5f:02:df:de:7b:94:b5:2f:e6:05: 14:14:4b:d8:cd:17:f4:a0:da:e8:f3:44:85:94:78: fe:5d:ae:d9:0a:3a:2d:8f:76:4c:a8:70:9a:44:d1: 05:e6:ab:3b:d1:95:fc:08:bf:f8:72:01:a9:e8:f7: b9:a0:02:55:dc:d3:48:c0:df:b0:b0:49:ff:24:08: 26:03:7d:ea:7c:a4:db:f1:d6:80:1b:be:f1:71:5d: 0d:4d:7a:26:c1:0d:ad:2b:ec:fe:07:cb:3b:65:02: 4a:d3:f3:98:69:9b:41:cc:4d:3b:21:65:7f:54:46: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:10:A5:FD:1B:16:E3:00:61:5E:9C:18:EB:1F:3C:9A:86:2B:A9:13 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d8:6b:73:2d:1d:b5:65:f3:87:7c:4a:6d:72:a2:cc:ab:e8: 73:b3:90:45:ec:53:fe:03:17:a0:77:6f:85:03:61:fc:e9:3f: ed:53:74:9d:79:29:43:c9:b0:b1:c0:96:08:4b:76:21:b0:b1: a0:dc:b6:46:e6:75:5e:a5:68:72:66:aa:c7:1d:b5:c1:07:72: 73:5f:20:2d:04:ba:a0:a1:a5:b9:ee:92:ac:53:35:5e:3f:c3: cb:d9:32:4d:24:7d:b5:04:3f:01:33:ac:eb:b6:99:c7:2e:d5: 20:9d:5d:9e:27:d4:df:e1:88:b9:40:3c:b4:e4:ee:cc:8c:da: d4:5e:f2:b5:f8:c1:e4:23:e8:09:08:d2:a5:1a:56:92:a6:9a: 68:78:7f:77:ea:66:ec:4e:eb:f1:e0:18:84:ce:36:96:ac:f8: 45:bb:37:82:a8:33:89:c1:9c:89:34:ca:42:ad:70:86:c1:95: 67:bd:49:70:cf:9c:3c:92:16:cf:bc:74:b9:3c:44:9a:a8:b8: b0:e3:6e:c4:ae:f3:f8:22:d5:7d:48:2e:47:da:3a:9e:13:cc: fe:c4:50:0b:be:cc:93:9f:50:4a:95:ad:da:c4:ef:15:d8:a0: e0:70:05:e5:ae:d9:53:c5:dc:79:09:b2:b9:9f:04:d8:bb:20: 18:c5:42:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJl92SnUtbnJATpoFnmjnZ7uHNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA5MjMwODQ3MTBaFw0yNjA5MjQxMjM0MTBaMDMxMTAvBgNV BAMTKEY5MTBBNUZEMUIxNkUzMDA2MTVFOUMxOEVCMUYzQzlBODYyQkE5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJALvMTX1ijXfKpFiPZ6akf8NT 1tXTHU5BhA7iEmn7KtslLXvu7BBFwd2VF6gXoeEWhvGBBOisraF4XpPGIdq+0KDX Nek3eTFSMQech6HmLhSLBPJ8Gvjilr4oETk1By0lzrCr5NZC6WErpsvgYDVcyZSQ dz7RnbVWi7JU5BZzYHWCFoOr3OIB2oNAXwLf3nuUtS/mBRQUS9jNF/Sg2ujzRIWU eP5drtkKOi2PdkyocJpE0QXmqzvRlfwIv/hyAano97mgAlXc00jA37CwSf8kCCYD fep8pNvx1oAbvvFxXQ1NeibBDa0r7P4HyztlAkrT85hpm0HMTTshZX9URriXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RCl/RsW4wBhXpwY6x88moYrqRMwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXYa3MtHbVl84d8Sm1yosyr6HOzkEXsU/4D F6B3b4UDYfzpP+1TdJ15KUPJsLHAlghLdiGwsaDctkbmdV6laHJmqscdtcEHcnNf IC0EuqChpbnukqxTNV4/w8vZMk0kfbUEPwEzrOu2mccu1SCdXZ4n1N/hiLlAPLTk 7syM2tRe8rX4weQj6AkI0qUaVpKmmmh4f3fqZuxO6/HgGITONpas+EW7N4KoM4nB nIk0ykKtcIbBlWe9SXDPnDySFs+8dLk8RJqouLDjbsSu8/gi1X1ILkfaOp4TzP7E UAu+zJOfUEqVrdrE7xXYoOBwBeWu2VPF3HkJsrmfBNi7IBjFQsA= -----END CERTIFICATE-----Generated at Thu Sep 24 03:29:30 2026 by rpki-client