$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: Kh2HjVXbcONfgBoxUjxUq3vQVVV4GwbwcPuXxl28AEQ= Subject key identifier: 5C:CB:20:92:C9:FB:05:EF:1B:2C:B0:13:45:2A:E4:90:93:F7:72:78 Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 6D8B13713F9E7594BB2C123E4BAB0DBE70D2D375 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 17:22:33 +0000 Manifest this update: Wed 23 Sep 2026 17:17:33 +0000 Manifest next update: Thu 24 Sep 2026 20:04:33 +0000 Files and hashes: 1: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) 3: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: vN3e169obY0YT8PwKM6XUbECBZjmodliPV/NPX183mQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8b:13:71:3f:9e:75:94:bb:2c:12:3e:4b:ab:0d:be:70:d2:d3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Sep 23 17:17:33 2026 GMT Not After : Sep 24 20:04:33 2026 GMT Subject: CN=5CCB2092C9FB05EF1B2CB013452AE49093F77278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:b4:0b:78:5a:62:f1:f6:30:fb:b5:75:08: ba:35:02:fd:c7:30:68:2c:19:e5:1a:0d:04:12:41: 9b:81:38:dd:55:26:02:b9:9f:b7:d5:33:75:53:77: 32:fc:8a:ed:7b:e3:c9:be:ca:4a:33:ab:cd:ac:0f: 3d:fb:89:13:3f:8a:39:47:6c:44:e7:75:09:e2:0a: a0:ba:e8:c4:50:94:69:17:78:e4:b1:a5:a2:e8:4d: d0:82:43:d0:f3:93:bd:8f:0b:0a:d8:ea:08:66:55: 2c:bb:c0:5d:7e:c2:02:52:d9:37:53:36:bf:53:e1: 82:75:b0:4b:31:2c:f6:6a:9e:15:00:0d:73:cd:5f: 1b:f5:75:72:59:69:24:15:eb:cd:af:9c:3d:1d:12: 9c:d8:f4:62:5c:0b:0b:8c:94:e3:b6:54:d0:10:ec: 54:90:79:68:36:f9:f7:a6:48:bc:46:aa:2c:c4:b8: 03:4c:da:c8:84:70:1f:bb:df:62:ff:db:eb:b2:22: 5c:ae:7a:18:ca:01:3b:6d:af:7e:e6:32:0c:07:e2: 62:e5:d9:ff:9d:61:de:45:e2:20:d9:ea:12:8c:d3: 50:56:eb:bb:5e:4a:be:d5:3b:60:8a:dd:c3:eb:4d: 47:45:a8:fe:86:d5:92:18:e5:2b:4f:df:7b:67:d7: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CB:20:92:C9:FB:05:EF:1B:2C:B0:13:45:2A:E4:90:93:F7:72:78 X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e8:cd:a1:ae:85:eb:37:9a:9d:b1:d6:70:53:6c:d7:36:ff: 2d:73:0b:dc:a6:68:d5:bd:d1:7f:f4:9e:8e:34:76:48:17:49: d3:5f:8e:1b:e3:0a:5c:8f:6d:57:ef:2d:94:9f:c0:50:21:8e: 55:d3:e6:a1:fe:6e:3e:ef:93:f2:62:b5:1e:d4:6a:50:87:99: 9f:45:9a:10:e7:8b:59:74:30:89:77:c9:f8:28:36:8f:6a:4f: e0:99:32:62:cf:c8:8e:2a:1d:74:b8:96:4e:0b:9d:65:8e:32: d2:ea:fd:a3:9b:2a:6e:77:77:c2:1f:af:93:b8:e5:e3:a8:23: eb:4a:c9:e9:98:e8:72:f2:e3:35:95:f4:8a:50:da:40:ff:87: 8c:61:21:9c:8f:85:96:b9:4f:41:6b:01:63:eb:32:63:4a:43: dc:41:b9:8a:2c:17:b6:f7:35:24:ca:36:77:02:58:d0:8a:00: b6:8d:ef:71:ca:c5:2a:b5:94:fe:f4:f9:d6:98:d8:31:f2:40: d0:ad:cc:e5:98:20:e1:32:e6:9f:22:b4:6a:73:27:ef:40:29: a8:eb:cc:be:10:55:c7:60:b8:0f:38:de:1c:6c:04:f7:17:09: 05:ce:d1:bd:fc:16:2e:97:de:ea:11:2f:ca:b9:8e:af:06:4f: da:4c:e1:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYsTcT+edZS7LBI+S6sNvnDS03UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA5MjMxNzE3MzNaFw0yNjA5MjQyMDA0MzNaMDMxMTAvBgNV BAMTKDVDQ0IyMDkyQzlGQjA1RUYxQjJDQjAxMzQ1MkFFNDkwOTNGNzcyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuebQLeFpi8fYw+7V1CLo1Av3H MGgsGeUaDQQSQZuBON1VJgK5n7fVM3VTdzL8iu1748m+ykozq82sDz37iRM/ijlH bETndQniCqC66MRQlGkXeOSxpaLoTdCCQ9Dzk72PCwrY6ghmVSy7wF1+wgJS2TdT Nr9T4YJ1sEsxLPZqnhUADXPNXxv1dXJZaSQV682vnD0dEpzY9GJcCwuMlOO2VNAQ 7FSQeWg2+femSLxGqizEuANM2siEcB+732L/2+uyIlyuehjKATttr37mMgwH4mLl 2f+dYd5F4iDZ6hKM01BW67teSr7VO2CK3cPrTUdFqP6G1ZIY5StP33tn15iNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXMsgksn7Be8bLLATRSrkkJP3cngwHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnozaGuhes3mp2x1nBTbNc2/y1zC9ymaNW9 0X/0no40dkgXSdNfjhvjClyPbVfvLZSfwFAhjlXT5qH+bj7vk/JitR7UalCHmZ9F mhDni1l0MIl3yfgoNo9qT+CZMmLPyI4qHXS4lk4LnWWOMtLq/aObKm53d8Ifr5O4 5eOoI+tKyemY6HLy4zWV9IpQ2kD/h4xhIZyPhZa5T0FrAWPrMmNKQ9xBuYosF7b3 NSTKNncCWNCKALaN73HKxSq1lP70+daY2DHyQNCtzOWYIOEy5p8itGpzJ+9AKajr zL4QVcdguA843hxsBPcXCQXO0b38Fi6X3uoRL8q5jq8GT9pM4Ro= -----END CERTIFICATE-----Generated at Thu Sep 24 12:14:48 2026 by rpki-client