$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: D3LAUbQxro4N8pXiuaFP3JxG/d0so8bLgcvqgTEvpsc= Subject key identifier: 76:78:FB:9B:4B:58:AA:99:24:4E:F6:4E:B3:1D:64:4E:6B:FA:B7:25 Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 6B0810D6E475EFB6EE3B989B8B1BFC9C9CE04EF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:15:04 +0000 Manifest this update: Wed 23 Sep 2026 11:10:04 +0000 Manifest next update: Thu 24 Sep 2026 12:23:04 +0000 Files and hashes: 1: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: RwuT1intogAUj0J+kv4zhsHnJL5K2zcxfVwz36O3Nno=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:08:10:d6:e4:75:ef:b6:ee:3b:98:9b:8b:1b:fc:9c:9c:e0:4e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Sep 23 11:10:04 2026 GMT Not After : Sep 24 12:23:04 2026 GMT Subject: CN=7678FB9B4B58AA99244EF64EB31D644E6BFAB725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:fe:f5:97:3b:1f:6b:60:77:ac:55:6f:85: 93:16:e5:99:93:06:a9:ad:43:4e:93:c2:4f:f2:b7: a6:de:7b:52:82:ee:55:3f:76:54:25:ff:9a:0b:6f: 1f:25:2c:2d:a4:08:b5:a9:84:9b:04:2f:84:88:74: 56:80:8e:56:7b:fd:3e:ff:20:43:fd:2d:41:d9:62: 1b:ca:49:7b:c8:d9:f5:e9:f1:66:e2:8c:0e:58:49: 79:9a:95:c5:50:6f:48:1a:68:e5:20:12:f8:ae:63: 6c:23:ba:fe:ba:90:c7:fb:c1:19:93:ff:3d:19:8f: b0:c6:8d:5f:0e:9e:df:ca:e0:cf:0d:1e:b3:07:6f: fa:38:e7:c2:05:dc:7f:c3:1b:dc:aa:55:6f:0b:b6: e7:32:c1:af:c8:2f:68:54:2c:96:aa:2a:a5:6a:62: ef:2b:0a:43:c5:19:cb:7a:b5:71:76:5a:2e:9b:2c: 43:f3:56:69:47:47:d1:11:3c:26:9f:fe:ea:10:b2: 87:8b:09:4d:c0:9c:a4:88:82:9f:3b:a0:26:3d:9b: 80:d9:41:39:a9:c4:13:19:b8:78:c6:9f:1b:d0:89: a2:2d:48:c2:63:50:0c:ab:7a:88:68:3b:f0:9c:41: ac:ce:61:2a:14:94:20:4b:b5:c6:2a:89:21:db:dd: 71:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:FB:9B:4B:58:AA:99:24:4E:F6:4E:B3:1D:64:4E:6B:FA:B7:25 X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1b:21:3c:26:bd:ee:fe:a2:9c:e9:f3:68:30:2b:bf:2a:a3: bf:37:67:ef:cc:bc:5f:71:21:ff:53:b7:96:02:8c:87:bb:41: 80:c0:9c:05:bf:cc:78:ee:21:e8:65:01:0f:4e:ed:9b:b7:fb: 50:0b:a1:a7:47:4f:c9:bf:8e:c3:53:d4:85:fd:71:4b:0d:53: b9:6f:31:43:bd:dc:ca:e2:45:97:90:a5:41:d1:dd:74:64:b6: 42:39:51:2f:10:76:2a:c5:d0:b9:7d:ed:1d:9c:b3:6d:5d:3e: 44:5e:6a:25:69:85:27:e9:98:f2:9c:26:06:9b:5b:b9:4d:e2: d4:90:8d:b0:73:f8:42:04:4e:2d:17:30:14:41:0b:c3:52:da: bb:be:ad:1e:d4:7f:ec:4b:9f:b3:ff:38:31:0a:b6:80:42:3b: 5b:ce:7c:39:9e:da:92:15:bc:17:f6:f0:ce:b1:f7:b9:cd:b6: d0:54:d8:c1:dc:5a:05:c6:a5:1f:14:2f:c8:6b:6a:f0:45:17: 8a:b4:20:87:1c:6b:1f:15:52:33:60:ca:a6:0e:28:e8:49:e6: f2:b8:34:1e:a3:d3:fe:01:62:c0:38:bf:94:0f:b6:b3:52:b1: d4:46:10:ba:ce:28:88:0e:49:a4:81:65:c3:59:36:df:21:e3: a0:76:95:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawgQ1uR177buO5ibixv8nJzgTvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA5MjMxMTEwMDRaFw0yNjA5MjQxMjIzMDRaMDMxMTAvBgNV BAMTKDc2NzhGQjlCNEI1OEFBOTkyNDRFRjY0RUIzMUQ2NDRFNkJGQUI3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFf71lzsfa2B3rFVvhZMW5ZmT BqmtQ06Twk/yt6bee1KC7lU/dlQl/5oLbx8lLC2kCLWphJsEL4SIdFaAjlZ7/T7/ IEP9LUHZYhvKSXvI2fXp8WbijA5YSXmalcVQb0gaaOUgEviuY2wjuv66kMf7wRmT /z0Zj7DGjV8Ont/K4M8NHrMHb/o458IF3H/DG9yqVW8Ltucywa/IL2hULJaqKqVq Yu8rCkPFGct6tXF2Wi6bLEPzVmlHR9ERPCaf/uoQsoeLCU3AnKSIgp87oCY9m4DZ QTmpxBMZuHjGnxvQiaItSMJjUAyreohoO/CcQazOYSoUlCBLtcYqiSHb3XELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdnj7m0tYqpkkTvZOsx1kTmv6tyUwHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkbITwmve7+opzp82gwK78qo783Z+/MvF9x If9Tt5YCjIe7QYDAnAW/zHjuIehlAQ9O7Zu3+1ALoadHT8m/jsNT1IX9cUsNU7lv MUO93MriRZeQpUHR3XRktkI5US8QdirF0Ll97R2cs21dPkReaiVphSfpmPKcJgab W7lN4tSQjbBz+EIETi0XMBRBC8NS2ru+rR7Uf+xLn7P/ODEKtoBCO1vOfDme2pIV vBf28M6x97nNttBU2MHcWgXGpR8UL8hravBFF4q0IIccax8VUjNgyqYOKOhJ5vK4 NB6j0/4BYsA4v5QPtrNSsdRGELrOKIgOSaSBZcNZNt8h46B2lZY= -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:23 2026 by rpki-client