$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft (raw, json) Hash identifier: ZDmsajx3vC1ayPks0Ry7rh0avm2/U+FpyF26mNhGGgE= Subject key identifier: 41:69:52:AB:92:B3:4D:4B:C1:60:C7:DB:D0:33:71:EA:88:4E:33:3F Authority key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C Certificate issuer: /CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Certificate serial: 74312DCCCFF1E996E6C037C64C463C87F39BD1DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 09:52:10 +0000 Manifest this update: Tue 29 Sep 2026 09:47:10 +0000 Manifest next update: Wed 30 Sep 2026 12:22:10 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: UTTE4RHMUx5iXqdVFLmPyr84/+QQI3n2et5AtGkuCdU=) 2: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl (hash: mPk0PH5rgNZBdLUBBs1+mgHuhP5Wetd+Um4qMfWecR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:31:2d:cc:cf:f1:e9:96:e6:c0:37:c6:4c:46:3c:87:f3:9b:d1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Validity Not Before: Sep 29 09:47:10 2026 GMT Not After : Sep 30 12:22:10 2026 GMT Subject: CN=416952AB92B34D4BC160C7DBD03371EA884E333F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:19:1d:01:9c:34:ab:61:57:7e:d4:62:14: 59:8b:63:7e:82:b0:69:0d:e7:67:b3:7e:bd:eb:46: 53:ab:88:12:c2:cc:5f:1c:ec:76:7c:ea:cd:a0:10: e0:e4:41:18:2a:7c:d7:4a:7f:d2:7d:13:6d:32:ac: 31:2f:8a:35:8f:1b:3e:64:44:d5:4e:af:1f:ec:5e: 55:93:3f:1d:30:2a:a6:c7:20:60:4e:bd:08:0c:5e: 96:7f:66:92:31:4f:d1:1c:45:8f:85:a6:9f:a7:9c: 15:f9:06:d4:c2:e9:9c:1b:02:3e:a5:23:b2:a9:76: 6a:5a:1d:7c:cc:a0:02:ec:79:03:61:86:84:bc:b4: f6:44:d9:d0:96:73:bd:6a:0a:a1:c6:bd:f6:a4:4e: e9:90:86:2f:ef:3f:a2:73:23:44:44:87:b8:15:a7: 7c:c8:34:c8:86:1b:54:9e:43:b0:93:74:29:22:19: fe:13:27:5c:6e:9b:4b:3c:d9:9c:7c:06:86:2e:75: d6:23:94:ac:07:f0:d2:3a:b6:0f:7d:d3:bd:ac:70: af:98:33:cc:b6:98:89:44:ec:e8:10:df:6a:e0:ff: 9e:d6:2e:04:d7:2d:ac:ae:f5:08:96:5c:ef:5c:1c: a6:0a:c3:be:ab:64:a9:f3:23:21:f3:ba:db:2a:17: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:52:AB:92:B3:4D:4B:C1:60:C7:DB:D0:33:71:EA:88:4E:33:3F X509v3 Authority Key Identifier: keyid:4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:05:e5:0c:3c:22:d0:0f:bc:5b:ce:5c:43:9e:7a:16:ae:0e: 3d:57:3c:44:5f:9d:f0:e6:20:23:65:45:60:a6:85:75:05:6f: 6f:95:69:d4:d7:05:6f:8c:d4:2d:e1:4e:63:bb:68:19:2b:3d: a7:64:75:c8:38:81:50:47:11:2c:3d:6f:c8:da:48:6e:79:a5: 56:0d:e5:69:2d:1c:00:77:da:84:dd:ac:cd:3c:04:1e:91:b9: eb:93:61:d8:0f:a9:c8:34:c8:78:b5:39:33:df:0c:fd:18:c7: 74:9b:95:55:2a:21:88:0e:c3:ab:36:bb:a5:22:09:c1:4d:c5: f3:56:ac:1e:7f:8a:70:0b:57:d7:6d:b4:e9:a3:bd:3b:64:99: 06:d8:1a:66:9d:85:f7:78:c6:dd:3a:91:17:4f:7d:1d:0c:a1: d6:79:b6:b2:07:1f:c3:86:ee:ee:72:13:68:3f:d1:07:cd:39: 0b:1e:e2:ea:1c:ee:c5:cb:e3:59:00:a6:68:cf:c3:fb:de:46: 53:51:e5:3a:16:e2:ba:f0:61:43:b5:60:96:07:d9:3a:62:b3: 74:a0:dd:d6:95:51:4f:7d:f7:f1:d6:18:59:af:5a:0b:fe:32: 78:1a:05:7a:10:04:80:9f:98:4b:47:7f:77:1d:d9:0a:79:b3: ef:66:8d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDEtzM/x6ZbmwDfGTEY8h/Ob0dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRF NDFERUEwQzAeFw0yNjA5MjkwOTQ3MTBaFw0yNjA5MzAxMjIyMTBaMDMxMTAvBgNV BAMTKDQxNjk1MkFCOTJCMzRENEJDMTYwQzdEQkQwMzM3MUVBODg0RTMzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MhkdAZw0q2FXftRiFFmLY36C sGkN52ezfr3rRlOriBLCzF8c7HZ86s2gEODkQRgqfNdKf9J9E20yrDEvijWPGz5k RNVOrx/sXlWTPx0wKqbHIGBOvQgMXpZ/ZpIxT9EcRY+Fpp+nnBX5BtTC6ZwbAj6l I7KpdmpaHXzMoALseQNhhoS8tPZE2dCWc71qCqHGvfakTumQhi/vP6JzI0REh7gV p3zINMiGG1SeQ7CTdCkiGf4TJ1xum0s82Zx8BoYuddYjlKwH8NI6tg99072scK+Y M8y2mIlE7OgQ32rg/57WLgTXLayu9QiWXO9cHKYKw76rZKnzIyHzutsqFzqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWlSq5KzTUvBYMfb0DNx6ohOMz8wHwYDVR0j BBgwFoAUTrFgrphYi2DVrkKR79jR1OQd6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1MGYwNzgtYzUzNS00ZjhlLTk2MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5 ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRFNDFERUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RUIxNjBBRTk4NTg4QjYwRDVBRTQyOTFFRkQ4RDFENEU0MURF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQx RDRFNDFERUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMF5Qw8ItAPvFvOXEOeehauDj1XPERfnfDm ICNlRWCmhXUFb2+VadTXBW+M1C3hTmO7aBkrPadkdcg4gVBHESw9b8jaSG55pVYN 5WktHAB32oTdrM08BB6RueuTYdgPqcg0yHi1OTPfDP0Yx3SblVUqIYgOw6s2u6Ui CcFNxfNWrB5/inALV9dttOmjvTtkmQbYGmadhfd4xt06kRdPfR0ModZ5trIHH8OG 7u5yE2g/0QfNOQse4uoc7sXL41kApmjPw/veRlNR5ToW4rrwYUO1YJYH2Tpis3Sg 3daVUU999/HWGFmvWgv+MngaBXoQBICfmEtHf3cd2Qp5s+9mjVI= -----END CERTIFICATE-----Generated at Tue Sep 29 16:51:28 2026 by rpki-client