$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: kQkNJfXv+3K1cCapCTtq1jNSA7PD2HpszRBw1xpQIwY= Subject key identifier: BE:C1:C2:71:BF:9D:9A:1D:08:BA:8D:89:AB:92:45:F4:4C:CF:EF:EF Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 1C538EBF96180E9D766864F8D16408EA5C0CDA87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 15:35:05 +0000 Manifest this update: Thu 24 Sep 2026 15:30:05 +0000 Manifest next update: Fri 25 Sep 2026 17:43:05 +0000 Files and hashes: 1: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 2: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=) 3: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 4: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: 0ivPbDnCqUjeuij1hZtaK8wqPFG0FEu1gRsINSRfD8Q=) 5: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=) 6: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) 7: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 8: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=) 9: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) 10: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) 11: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 12: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=) 13: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:53:8e:bf:96:18:0e:9d:76:68:64:f8:d1:64:08:ea:5c:0c:da:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: Sep 24 15:30:05 2026 GMT Not After : Sep 25 17:43:05 2026 GMT Subject: CN=BEC1C271BF9D9A1D08BA8D89AB9245F44CCFEFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:b6:75:f6:3b:d5:7a:0e:de:26:df:ff:db: 8e:e8:3f:04:7b:52:ae:94:89:84:2d:3c:b7:b9:e2: b7:e1:c5:2f:d5:09:34:2f:e9:9c:4a:f4:17:9c:47: f4:b5:28:91:ee:75:a2:dd:79:cb:e0:38:65:f6:76: fc:55:4b:30:40:ed:f6:8e:be:11:23:b8:c5:28:0d: f1:bc:a3:a2:fc:f7:46:68:f8:2d:7f:7c:52:6a:f4: b4:59:da:a0:20:b4:59:d0:7c:56:d4:51:da:f8:78: 30:23:21:8a:cc:da:f7:4c:5e:fe:4d:18:39:93:5a: 35:91:46:32:c9:cd:10:86:62:56:aa:1c:1a:d2:9b: 67:e2:2a:1e:2c:c0:27:b5:03:f5:dd:8c:29:7a:f3: c2:da:a0:2e:1b:34:32:ab:e1:cc:7c:2f:2e:d9:73: 65:88:27:40:5f:13:a0:18:92:63:3b:25:0b:de:91: 62:52:4e:54:2a:3a:8f:3d:80:86:46:88:21:31:0d: 9c:02:d6:33:1e:7e:a4:88:82:2d:3e:ed:ee:02:df: 0e:40:82:ca:07:f2:84:17:99:7b:9e:de:86:e7:55: 09:ab:6e:94:24:f2:d7:b6:ca:af:e7:0f:d1:c1:00: 2c:6b:6f:24:0c:8a:30:78:00:ac:51:b3:33:26:05: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:C2:71:BF:9D:9A:1D:08:BA:8D:89:AB:92:45:F4:4C:CF:EF:EF X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7c:37:68:dc:f6:47:37:22:fa:93:a5:1e:97:ba:03:3a:6f: 57:38:c8:63:cf:71:a4:fb:af:de:e9:0d:1a:b1:5e:67:1e:a1: 7d:a5:db:01:7f:9e:5f:e7:4c:21:08:79:f5:6e:a4:2c:fd:2a: 56:2f:10:d1:d9:14:00:02:82:c8:c8:6a:6e:87:4c:90:c7:1e: 86:26:34:0d:c8:be:05:41:6f:22:68:bc:24:22:34:70:e9:73: 8d:c3:81:52:ab:a2:6d:48:49:4c:1f:fd:cf:63:03:73:4f:41: 31:06:78:ba:66:d4:ad:24:ec:98:b4:03:38:a3:51:9a:c1:ff: 59:6c:2a:be:f4:64:8c:22:36:6e:8f:0a:6c:bc:51:a1:d9:af: 1a:64:50:4f:7d:b2:dc:e0:80:3b:9f:ef:a5:42:c4:31:b9:54: 57:be:49:12:45:9d:4d:0a:c7:e6:78:2c:0f:2b:c5:1b:51:77: 6c:c2:70:c5:f4:b4:f8:3d:55:5c:2a:14:fb:be:dd:11:ea:ce: 80:48:2c:13:f4:b1:f4:40:3f:d0:bd:a0:64:c0:3c:1b:02:42: 20:c7:47:67:ca:8a:41:3b:f8:f9:ae:05:5f:d8:d3:ec:10:5f: f7:cc:47:2e:4d:72:b9:2e:76:5c:54:89:04:7c:aa:a8:e3:ad: b0:90:1d:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFOOv5YYDp12aGT40WQI6lwM2ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA5MjQxNTMwMDVaFw0yNjA5MjUxNzQzMDVaMDMxMTAvBgNV BAMTKEJFQzFDMjcxQkY5RDlBMUQwOEJBOEQ4OUFCOTI0NUY0NENDRkVGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTLZ19jvVeg7eJt//247oPwR7 Uq6UiYQtPLe54rfhxS/VCTQv6ZxK9BecR/S1KJHudaLdecvgOGX2dvxVSzBA7faO vhEjuMUoDfG8o6L890Zo+C1/fFJq9LRZ2qAgtFnQfFbUUdr4eDAjIYrM2vdMXv5N GDmTWjWRRjLJzRCGYlaqHBrSm2fiKh4swCe1A/XdjCl688LaoC4bNDKr4cx8Ly7Z c2WIJ0BfE6AYkmM7JQvekWJSTlQqOo89gIZGiCExDZwC1jMefqSIgi0+7e4C3w5A gsoH8oQXmXue3obnVQmrbpQk8te2yq/nD9HBACxrbyQMijB4AKxRszMmBQLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsHCcb+dmh0Iuo2Jq5JF9EzP7+8wHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ8N2jc9kc3IvqTpR6XugM6b1c4yGPPcaT7 r97pDRqxXmceoX2l2wF/nl/nTCEIefVupCz9KlYvENHZFAACgsjIam6HTJDHHoYm NA3IvgVBbyJovCQiNHDpc43DgVKrom1ISUwf/c9jA3NPQTEGeLpm1K0k7Ji0Azij UZrB/1lsKr70ZIwiNm6PCmy8UaHZrxpkUE99stzggDuf76VCxDG5VFe+SRJFnU0K x+Z4LA8rxRtRd2zCcMX0tPg9VVwqFPu+3RHqzoBILBP0sfRAP9C9oGTAPBsCQiDH R2fKikE7+PmuBV/Y0+wQX/fMRy5NcrkudlxUiQR8qqjjrbCQHUc= -----END CERTIFICATE-----Generated at Fri Sep 25 04:51:08 2026 by rpki-client