$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json) Hash identifier: 3Ea2ml0QE+gJnHoPbLHK02Udpq5kFFuVdRdDrJ9DCSE= Subject key identifier: 0A:BA:78:AD:A3:03:BA:29:A4:C8:91:D2:02:32:D8:7A:33:7F:D1:50 Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26 Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526 Certificate serial: 24D1FFAB23FE64D6C8284039118B2046EE7F50AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:39:15 +0000 Manifest this update: Wed 23 Sep 2026 06:34:15 +0000 Manifest next update: Thu 24 Sep 2026 08:53:15 +0000 Files and hashes: 1: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: FEGe4VAF22A8pUiS9cQBCCIExt/wmATSUZmYRkwQVBQ=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d1:ff:ab:23:fe:64:d6:c8:28:40:39:11:8b:20:46:ee:7f:50:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526 Validity Not Before: Sep 23 06:34:15 2026 GMT Not After : Sep 24 08:53:15 2026 GMT Subject: CN=0ABA78ADA303BA29A4C891D20232D87A337FD150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:1f:6a:4e:6b:f7:c1:00:00:64:70:4b:40: c1:7d:fd:9c:c3:3f:5c:50:fa:1a:0e:9a:fa:ee:b1: bc:9d:23:46:0a:31:05:f6:92:83:13:5f:3b:d7:a4: 3f:8e:d9:fd:d4:ce:20:4e:d9:bf:c0:07:eb:c7:1b: e7:dc:02:00:da:be:35:f9:2d:46:3b:e1:a5:e7:16: 57:05:d2:d7:ea:56:37:36:aa:c2:f4:96:31:ea:49: 21:6d:45:2f:8b:dd:c0:b3:fd:7d:e2:96:39:2e:94: b1:45:ae:25:75:d7:78:8f:34:db:d8:a5:06:fa:fc: 2c:6a:eb:5e:c6:28:f0:08:ba:7d:41:ae:14:e4:ec: da:6e:a7:c2:43:a9:ef:01:f5:fe:26:de:be:16:29: f8:35:30:41:59:52:8a:83:8d:15:25:46:09:e2:62: 0e:2e:09:97:7a:0d:ce:4a:f2:3a:2c:bb:aa:e7:29: 4e:6f:aa:90:22:db:d4:8b:89:ce:31:27:04:d8:b5: fc:15:d1:8a:57:75:8b:35:8a:6e:d6:b0:a6:b4:ea: d8:b7:dd:4d:b8:04:20:a9:90:ff:7a:f7:c1:00:60: 8a:8e:3d:fb:c5:fc:a7:a1:27:1e:b5:83:f3:5c:20: db:c4:28:82:fb:37:4e:d8:96:11:2f:7a:63:40:47: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BA:78:AD:A3:03:BA:29:A4:C8:91:D2:02:32:D8:7A:33:7F:D1:50 X509v3 Authority Key Identifier: keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:13:c5:7d:1f:53:ed:f8:1d:9f:2b:8a:d3:6d:c6:3e:c4:98: 8c:23:26:8b:b2:b4:eb:23:fc:b2:06:62:cc:d7:08:d7:c2:ce: 9c:b3:b4:d5:3a:6a:19:2c:24:f5:ac:5e:56:c2:d2:9f:2f:e1: 30:ab:84:f5:c7:41:00:5e:83:4b:31:7c:f3:55:c6:fe:0b:c4: 7e:7e:34:d4:5c:12:26:dc:91:30:7e:cc:36:60:fe:da:8f:ac: 6c:d1:39:39:9a:fe:da:fc:aa:87:f9:d8:21:d7:b7:b6:24:46: d4:4a:57:4a:ae:8e:02:be:7c:b1:4f:5b:e6:0e:b8:f5:86:01: 24:a2:a9:ce:10:e3:f5:97:86:e5:78:81:66:c4:04:71:1b:f6: 01:78:41:52:c6:97:b4:db:a2:38:ab:ab:b5:4b:68:9e:16:ce: b9:47:25:98:75:b4:2f:04:bb:8b:15:0d:0b:56:33:e3:98:c9: 1e:5b:80:b6:a0:9c:b5:be:ce:20:ba:5f:8e:0a:85:99:2b:ca: 60:95:65:39:8d:c8:b0:81:db:74:74:d8:60:d3:c5:1c:ab:59: d6:3b:70:f4:77:d1:17:dc:55:12:9c:2f:18:6c:16:ba:89:de: cf:60:15:28:f7:d8:be:23:30:d2:60:d3:71:ab:bf:0f:e2:8f: c5:57:f9:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNH/qyP+ZNbIKEA5EYsgRu5/UK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRBRDdE MkRENzUyNjAeFw0yNjA5MjMwNjM0MTVaFw0yNjA5MjQwODUzMTVaMDMxMTAvBgNV BAMTKDBBQkE3OEFEQTMwM0JBMjlBNEM4OTFEMjAyMzJEODdBMzM3RkQxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMB9qTmv3wQAAZHBLQMF9/ZzD P1xQ+hoOmvrusbydI0YKMQX2koMTXzvXpD+O2f3UziBO2b/AB+vHG+fcAgDavjX5 LUY74aXnFlcF0tfqVjc2qsL0ljHqSSFtRS+L3cCz/X3iljkulLFFriV113iPNNvY pQb6/Cxq617GKPAIun1BrhTk7Npup8JDqe8B9f4m3r4WKfg1MEFZUoqDjRUlRgni Yg4uCZd6Dc5K8josu6rnKU5vqpAi29SLic4xJwTYtfwV0YpXdYs1im7WsKa06ti3 3U24BCCpkP9698EAYIqOPfvF/KehJx61g/NcINvEKIL7N07YlhEvemNAR0cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCrp4raMDuimkyJHSAjLYejN/0VAwHwYDVR0j BBgwFoAUTTaNYOrityGOnFIkZd/a19LddSYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MDkwNDQtNTcxOC00ZjFkLWE2ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBF QUUyQjcyMThFOUM1MjI0NjVERkRBRDdEMkRENzUyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDM2OEQ2MEVBRTJCNzIxOEU5QzUyMjQ2NURGREFEN0QyREQ3 NTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRB RDdEMkRENzUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4TxX0fU+34HZ8ritNtxj7EmIwjJouytOsj /LIGYszXCNfCzpyztNU6ahksJPWsXlbC0p8v4TCrhPXHQQBeg0sxfPNVxv4LxH5+ NNRcEibckTB+zDZg/tqPrGzROTma/tr8qof52CHXt7YkRtRKV0qujgK+fLFPW+YO uPWGASSiqc4Q4/WXhuV4gWbEBHEb9gF4QVLGl7Tbojirq7VLaJ4WzrlHJZh1tC8E u4sVDQtWM+OYyR5bgLagnLW+ziC6X44KhZkrymCVZTmNyLCB23R02GDTxRyrWdY7 cPR30RfcVRKcLxhsFrqJ3s9gFSj32L4jMNJg03Grvw/ij8VX+eQ= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:19 2026 by rpki-client