$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: enLx+xEtSw2Ssxn2mA/vEUKvD9c+NmnfA/WhkD980KA= Subject key identifier: B4:82:9B:D4:70:51:6F:44:3E:4D:96:8C:B8:0F:EA:E2:4C:11:98:EE Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 0E8E40A4DF0BB48CAA8A0474F54D3AC083F46123 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:50:34 +0000 Manifest this update: Wed 23 Sep 2026 23:45:34 +0000 Manifest next update: Fri 25 Sep 2026 00:48:34 +0000 Files and hashes: 1: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 2: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 3: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 4: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: Kvar/ozSlbqLFcFoCWa8qEQZJwsr1wOxS/itkUmjg54=) 5: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 6: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 7: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8e:40:a4:df:0b:b4:8c:aa:8a:04:74:f5:4d:3a:c0:83:f4:61:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Sep 23 23:45:34 2026 GMT Not After : Sep 25 00:48:34 2026 GMT Subject: CN=B4829BD470516F443E4D968CB80FEAE24C1198EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:59:7f:04:6c:97:91:3f:e9:9b:d7:7c:4d: 4b:d1:fb:6e:0c:a0:75:1c:e7:fb:06:a1:b8:e0:a2: da:fc:67:f1:be:93:20:31:7f:3c:86:68:ac:39:97: 27:32:21:3a:d9:79:00:d5:8d:f6:58:bf:2c:25:c8: 50:70:47:79:ca:fc:ab:69:53:26:03:96:4c:cd:29: 13:47:09:32:e9:3c:ff:6c:72:0e:3b:65:b1:a9:72: ce:5d:9a:f7:c3:81:1d:58:d5:51:50:fd:d4:c2:e8: 64:1c:5a:ae:f6:e4:42:e5:5a:4a:e7:9c:f1:e9:8b: 7f:b4:fb:0f:1d:cd:21:1f:07:9e:b8:a3:75:d4:0c: 0f:fa:ed:33:08:39:48:f8:fc:95:5d:4c:6f:e3:dc: 1f:95:ac:c5:0f:b5:0f:71:15:96:b8:64:2b:ee:a7: bd:49:bf:56:ad:7b:c6:bc:d3:64:69:dc:0c:ca:08: da:f2:83:23:1f:df:0b:6c:e3:87:70:56:5c:bf:18: 83:09:b4:df:28:0f:a1:c9:55:66:83:00:3d:82:a3: 6b:20:50:5d:6d:d7:e6:6f:12:d8:a9:f6:92:8d:f9: 65:e4:b2:c2:9a:18:2f:25:b1:b4:e0:b7:e6:b3:8b: c7:c9:f4:f5:ff:e9:b9:a6:41:30:13:1d:d3:66:80: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:82:9B:D4:70:51:6F:44:3E:4D:96:8C:B8:0F:EA:E2:4C:11:98:EE X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:5d:e7:8b:d6:2e:53:ee:b9:58:46:99:8a:34:a4:6a:44: 3d:b1:c4:28:ee:29:23:23:bb:9c:77:77:79:ee:98:41:76:39: bf:3d:36:77:4d:57:30:4c:2b:25:97:32:06:37:9e:a2:4b:c4: 07:c4:50:43:df:fa:97:12:25:b3:2f:9f:4d:ef:6f:56:4c:ee: a8:66:0f:fe:a6:dc:90:ba:90:55:56:43:7b:2a:ff:a8:00:52: 16:48:54:bd:87:2d:43:89:4f:58:5e:b9:cf:59:45:27:13:d7: 7b:cc:8b:76:49:22:74:ec:25:51:6c:ba:2a:a6:42:db:0e:b7: fe:c6:22:3a:01:5f:5d:10:57:0e:eb:84:8e:e2:dd:d7:db:72: 97:5a:ab:e2:53:ee:90:19:1d:87:e4:a4:65:f1:07:2c:5a:eb: c8:fa:20:d2:bf:43:e7:d3:64:22:e9:b9:d4:da:01:2d:2b:f1: 91:2d:ce:ac:f6:f2:93:57:86:26:36:ad:aa:a7:fd:bd:c8:51: f5:6f:dc:6c:8f:4e:2b:49:90:9a:74:30:ee:f0:a6:64:22:d7: da:8f:51:38:d0:1d:a8:58:20:b8:0b:de:25:05:b3:f1:c7:67: 33:93:3e:11:09:45:df:4f:6a:95:47:fc:a5:27:1c:e6:cb:4c: 52:5f:da:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDo5ApN8LtIyqigR09U06wIP0YSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA5MjMyMzQ1MzRaFw0yNjA5MjUwMDQ4MzRaMDMxMTAvBgNV BAMTKEI0ODI5QkQ0NzA1MTZGNDQzRTREOTY4Q0I4MEZFQUUyNEMxMTk4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEVl/BGyXkT/pm9d8TUvR+24M oHUc5/sGobjgotr8Z/G+kyAxfzyGaKw5lycyITrZeQDVjfZYvywlyFBwR3nK/Ktp UyYDlkzNKRNHCTLpPP9scg47ZbGpcs5dmvfDgR1Y1VFQ/dTC6GQcWq725ELlWkrn nPHpi3+0+w8dzSEfB564o3XUDA/67TMIOUj4/JVdTG/j3B+VrMUPtQ9xFZa4ZCvu p71Jv1ate8a802Rp3AzKCNrygyMf3wts44dwVly/GIMJtN8oD6HJVWaDAD2Co2sg UF1t1+ZvEtip9pKN+WXkssKaGC8lsbTgt+azi8fJ9PX/6bmmQTATHdNmgO6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtIKb1HBRb0Q+TZaMuA/q4kwRmO4wHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS2XeeL1i5T7rlYRpmKNKRqRD2xxCjuKSMj u5x3d3numEF2Ob89NndNVzBMKyWXMgY3nqJLxAfEUEPf+pcSJbMvn03vb1ZM7qhm D/6m3JC6kFVWQ3sq/6gAUhZIVL2HLUOJT1heuc9ZRScT13vMi3ZJInTsJVFsuiqm QtsOt/7GIjoBX10QVw7rhI7i3dfbcpdaq+JT7pAZHYfkpGXxByxa68j6INK/Q+fT ZCLpudTaAS0r8ZEtzqz28pNXhiY2raqn/b3IUfVv3GyPTitJkJp0MO7wpmQi19qP UTjQHahYILgL3iUFs/HHZzOTPhEJRd9PapVH/KUnHObLTFJf2oQ= -----END CERTIFICATE-----Generated at Thu Sep 24 18:26:54 2026 by rpki-client