$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json) Hash identifier: Losrl3FAdwYhG19LedFXw4Dt80ggvIpV9NFtxI/6yVc= Subject key identifier: 74:A2:FD:D3:8D:9D:1D:19:70:8B:9A:C9:D0:DD:EB:54:DF:E6:D7:48 Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Certificate serial: 5D6A41FD11BCC8E5FC46F08F8DFF150F9D03B17E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 12:56:25 +0000 Manifest this update: Fri 25 Sep 2026 12:51:25 +0000 Manifest next update: Sat 26 Sep 2026 16:05:25 +0000 Files and hashes: 1: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: u+DueLKGppa6IZWIJUiTovQUQdG3E/qSrUDHniakP+0=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6a:41:fd:11:bc:c8:e5:fc:46:f0:8f:8d:ff:15:0f:9d:03:b1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Validity Not Before: Sep 25 12:51:25 2026 GMT Not After : Sep 26 16:05:25 2026 GMT Subject: CN=74A2FDD38D9D1D19708B9AC9D0DDEB54DFE6D748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:8d:0f:27:83:21:12:06:36:e4:c7:49:be: e3:eb:1a:f4:8a:23:df:a7:10:f6:f1:fc:92:f1:65: a5:e8:ef:a4:22:d2:15:94:e4:8d:4c:4a:9e:17:eb: 63:7b:0a:6d:d9:9d:a2:cd:9e:56:2b:73:57:54:aa: 38:0b:ca:ad:13:2e:a8:13:fe:3c:61:91:4e:69:e0: c1:f8:b3:4e:ff:2c:29:f5:c8:ea:1a:24:45:39:7e: 0b:85:f0:ed:44:fd:1c:b3:d4:70:b1:d2:af:ec:dc: e1:4e:5e:f0:c2:b9:a2:d4:dd:0f:d6:73:a8:c7:91: a5:0b:33:05:5d:aa:0e:c4:92:cd:5c:2a:48:eb:07: 7d:d7:d2:39:aa:5a:05:08:cc:ce:3a:99:9f:2d:fa: dd:d8:7f:0a:41:47:42:5a:f8:88:44:e0:aa:2e:1c: 00:44:63:73:ce:cd:13:fb:96:8e:c8:a6:c4:a6:e8: 0c:f9:d5:20:30:b2:b1:64:b5:49:83:46:1a:4a:d0: 22:98:ac:dc:4e:f0:1a:cc:e4:bc:92:82:8b:e4:99: bc:d9:d3:69:b0:72:9d:e0:41:0c:b0:ad:31:02:56: 66:38:70:c7:74:e8:e7:eb:9e:6d:bb:eb:5e:22:02: b3:60:8d:a4:48:04:a9:0c:29:4c:0a:a8:ec:49:8b: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A2:FD:D3:8D:9D:1D:19:70:8B:9A:C9:D0:DD:EB:54:DF:E6:D7:48 X509v3 Authority Key Identifier: keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:88:34:b8:c2:81:26:49:a5:81:8a:07:f5:d8:59:4a:1d:10: b5:01:04:4a:89:23:b2:8d:22:f2:ce:08:33:4d:37:2f:43:f6: 60:9f:11:8b:56:1e:91:31:3f:eb:87:8f:f2:df:ca:3f:04:e7: 1a:e8:90:6a:df:d8:83:11:98:da:11:8e:96:a8:79:18:a9:66: 70:07:77:c9:5c:19:07:c8:86:fa:42:e8:65:14:25:24:4e:32: e8:10:d1:40:11:f4:14:03:59:51:78:14:d3:fd:09:d2:52:96: 50:89:df:11:e8:5f:42:3d:1f:a4:17:0f:c6:e7:f1:c7:28:55: 51:d8:a1:39:76:87:cd:51:52:f6:77:3d:89:01:de:5d:98:55: 41:5f:a1:cc:7e:3e:c0:4e:bb:da:b8:10:be:8e:2c:2b:0e:d5: ab:dd:9a:e9:54:75:0b:75:00:32:8a:28:b4:36:10:12:04:e3: 54:62:c2:3f:31:4f:6f:b0:8a:18:9d:b6:f9:1f:17:05:f5:73: a4:67:13:e5:b2:51:ee:cf:ca:5d:f9:17:f9:64:69:81:1d:f6: 1f:43:35:c4:88:4d:0a:47:f6:70:13:2e:47:9e:37:e4:b5:14: 4e:a3:7b:7b:f1:04:e5:7f:9f:aa:1b:31:b0:62:9d:7e:19:67: 6d:be:8c:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWpB/RG8yOX8RvCPjf8VD50DsX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2 NjM4MDhEMjAeFw0yNjA5MjUxMjUxMjVaFw0yNjA5MjYxNjA1MjVaMDMxMTAvBgNV BAMTKDc0QTJGREQzOEQ5RDFEMTk3MDhCOUFDOUQwRERFQjU0REZFNkQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm840PJ4MhEgY25MdJvuPrGvSK I9+nEPbx/JLxZaXo76Qi0hWU5I1MSp4X62N7Cm3ZnaLNnlYrc1dUqjgLyq0TLqgT /jxhkU5p4MH4s07/LCn1yOoaJEU5fguF8O1E/Ryz1HCx0q/s3OFOXvDCuaLU3Q/W c6jHkaULMwVdqg7Eks1cKkjrB33X0jmqWgUIzM46mZ8t+t3YfwpBR0Ja+IhE4Kou HABEY3POzRP7lo7IpsSm6Az51SAwsrFktUmDRhpK0CKYrNxO8BrM5LySgovkmbzZ 02mwcp3gQQywrTECVmY4cMd06Ofrnm27614iArNgjaRIBKkMKUwKqOxJiwO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdKL9042dHRlwi5rJ0N3rVN/m10gwHwYDVR0j BBgwFoAUSgFbCwoI0bP36jVJuWjd52Y4CNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRjMWM0OWMtZDQwNC00NWExLTllN2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIw QTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2NjM4MDhEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTAxNUIwQjBBMDhEMUIzRjdFQTM1NDlCOTY4RERFNzY2Mzgw OEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERE RTc2NjM4MDhEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGINLjCgSZJpYGKB/XYWUodELUBBEqJI7KN IvLOCDNNNy9D9mCfEYtWHpExP+uHj/Lfyj8E5xrokGrf2IMRmNoRjpaoeRipZnAH d8lcGQfIhvpC6GUUJSROMugQ0UAR9BQDWVF4FNP9CdJSllCJ3xHoX0I9H6QXD8bn 8ccoVVHYoTl2h81RUvZ3PYkB3l2YVUFfocx+PsBOu9q4EL6OLCsO1avdmulUdQt1 ADKKKLQ2EBIE41Riwj8xT2+wihidtvkfFwX1c6RnE+WyUe7Pyl35F/lkaYEd9h9D NcSITQpH9nATLkeeN+S1FE6je3vxBOV/n6obMbBinX4ZZ22+jAs= -----END CERTIFICATE-----Generated at Sat Sep 26 02:01:29 2026 by rpki-client