$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: 5c2TREdY+2viZUsljEk07LTo1SLKUUdtwkcz+Zhh718= Subject key identifier: 78:55:86:8E:8F:7A:B9:25:F6:6D:F0:59:CE:10:79:51:85:B3:B0:07 Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 42476EC4308829846586F687C31FF7805B61F6C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:27:41 +0000 Manifest this update: Wed 23 Sep 2026 21:22:41 +0000 Manifest next update: Thu 24 Sep 2026 21:35:41 +0000 Files and hashes: 1: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) 2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) 3: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: YPlTwzkS4fmpsi8vKHqrG0ZfnyrbEghjOXXrxsC1g78=) 4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:47:6e:c4:30:88:29:84:65:86:f6:87:c3:1f:f7:80:5b:61:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Sep 23 21:22:41 2026 GMT Not After : Sep 24 21:35:41 2026 GMT Subject: CN=7855868E8F7AB925F66DF059CE10795185B3B007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cb:83:99:d7:0d:0b:6f:cc:82:46:b1:d2:d7: 07:31:7e:04:62:6c:e2:f6:9f:ed:c7:18:32:03:a1: 7c:0a:21:33:b0:6e:85:b8:8a:62:d9:57:09:13:e4: 93:10:6f:5e:e5:9c:21:fa:9d:9f:ea:62:0e:0c:db: c2:d2:3a:49:70:9d:26:9b:15:28:83:25:1b:4d:5c: 2e:73:b5:00:91:9f:d7:18:4d:9d:3f:77:9b:7a:3a: 66:a9:fd:4d:c8:c1:64:9e:fb:d2:d7:d3:08:6c:67: a8:35:af:d7:de:cb:5d:1f:bd:77:48:60:b8:f4:cb: 1d:b6:8c:d8:44:5e:9e:2a:18:f6:c7:dc:ef:88:51: a5:85:83:84:ff:d8:1d:5c:c3:93:64:3b:cc:42:62: 57:53:5d:5e:a5:99:dc:50:72:46:de:6f:55:16:06: fe:a6:51:40:d0:37:a2:b3:64:57:ce:17:8d:b6:89: 58:68:35:26:1d:e1:26:a9:38:6e:a6:36:e9:57:f8: 7e:9c:89:9c:ab:bd:ef:aa:2e:23:67:92:45:c1:0c: 69:48:dd:54:a9:96:2e:07:a3:99:58:85:40:dd:1c: dc:46:b0:b1:15:8c:13:93:c1:14:c4:72:ba:a6:25: 77:94:a2:c9:1a:d1:37:92:44:65:c5:01:1a:57:34: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:55:86:8E:8F:7A:B9:25:F6:6D:F0:59:CE:10:79:51:85:B3:B0:07 X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:40:65:9e:58:9b:1d:b0:28:2a:1e:7d:59:b6:ae:3a:6c:a1: b0:55:83:8f:db:f1:74:cc:a4:4d:49:c8:ae:5f:fa:cf:5a:aa: 64:19:1f:f7:2a:c2:6c:f9:b6:68:df:22:39:79:12:2e:4c:fd: 64:e4:7e:e2:40:ed:b3:66:46:f2:1f:74:55:4a:88:21:62:19: 66:52:0d:08:1e:84:64:77:31:2b:c1:b7:48:20:92:01:18:18: 00:b2:ac:f8:a2:12:9f:9f:fa:cb:00:3a:af:23:f9:9c:d3:f4: a8:e9:84:a6:79:55:36:77:1f:77:db:eb:a6:25:2c:7d:43:76: a8:9e:d1:d1:7d:5b:ba:27:8c:e3:c4:1c:65:a0:fd:8a:8b:53: 43:04:4d:29:10:87:da:c3:bf:46:aa:55:d0:2a:3d:09:06:1e: aa:80:98:50:18:24:6c:b3:08:fa:0f:ca:09:d2:d1:39:7b:7e: 53:df:6a:78:ed:2d:0c:18:5c:a8:a9:4f:c3:28:0f:b8:59:30: b3:1d:3b:8d:ab:4f:90:3d:7d:2f:c6:53:41:1a:ef:bc:36:66: 29:ea:8e:2b:0a:df:96:aa:77:6d:a4:3e:ea:3d:a4:d6:a1:c2: 66:91:31:2a:49:b0:57:e2:f2:cb:95:d3:9e:a7:e3:51:0d:d9: 61:51:d6:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkduxDCIKYRlhvaHwx/3gFth9sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA5MjMyMTIyNDFaFw0yNjA5MjQyMTM1NDFaMDMxMTAvBgNV BAMTKDc4NTU4NjhFOEY3QUI5MjVGNjZERjA1OUNFMTA3OTUxODVCM0IwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwy4OZ1w0Lb8yCRrHS1wcxfgRi bOL2n+3HGDIDoXwKITOwboW4imLZVwkT5JMQb17lnCH6nZ/qYg4M28LSOklwnSab FSiDJRtNXC5ztQCRn9cYTZ0/d5t6Omap/U3IwWSe+9LX0whsZ6g1r9fey10fvXdI YLj0yx22jNhEXp4qGPbH3O+IUaWFg4T/2B1cw5NkO8xCYldTXV6lmdxQckbeb1UW Bv6mUUDQN6KzZFfOF422iVhoNSYd4SapOG6mNulX+H6ciZyrve+qLiNnkkXBDGlI 3VSpli4Ho5lYhUDdHNxGsLEVjBOTwRTEcrqmJXeUoska0TeSRGXFARpXNPGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeFWGjo96uSX2bfBZzhB5UYWzsAcwHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABAZZ5Ymx2wKCoefVm2rjpsobBVg4/b8XTM pE1JyK5f+s9aqmQZH/cqwmz5tmjfIjl5Ei5M/WTkfuJA7bNmRvIfdFVKiCFiGWZS DQgehGR3MSvBt0ggkgEYGACyrPiiEp+f+ssAOq8j+ZzT9KjphKZ5VTZ3H3fb66Yl LH1Ddqie0dF9W7onjOPEHGWg/YqLU0METSkQh9rDv0aqVdAqPQkGHqqAmFAYJGyz CPoPygnS0Tl7flPfanjtLQwYXKipT8MoD7hZMLMdO42rT5A9fS/GU0Ea77w2Zinq jisK35aqd22kPuo9pNahwmaRMSpJsFfi8suV056n41EN2WFR1lM= -----END CERTIFICATE-----Generated at Thu Sep 24 06:02:54 2026 by rpki-client