$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: MNGm0XKZ21X02B2c27LiCKeWxBFrZzTtpXN7hcFBpfA= Subject key identifier: BF:75:FF:F9:8A:8B:39:B3:59:66:93:02:4A:E8:C3:78:35:0E:F9:76 Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 316AE737F66FC539E22E2161D1DBD9AF90EA284E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 07:24:57 +0000 Manifest this update: Fri 25 Sep 2026 07:19:57 +0000 Manifest next update: Sat 26 Sep 2026 11:11:57 +0000 Files and hashes: 1: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: ibaK8rnmXttpeSXap5TtaKMXzePwcJyf1KEY2xd0CGQ=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 3: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) 4: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) 5: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) 6: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6a:e7:37:f6:6f:c5:39:e2:2e:21:61:d1:db:d9:af:90:ea:28:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: Sep 25 07:19:57 2026 GMT Not After : Sep 26 11:11:57 2026 GMT Subject: CN=BF75FFF98A8B39B3596693024AE8C378350EF976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:46:72:0c:79:01:28:09:79:b7:07:94:b3: 14:2b:c8:50:0e:cb:60:60:ae:cf:79:5a:98:61:7c: c2:be:af:5b:cf:55:37:ef:71:0c:06:7a:60:c8:eb: 95:d9:ee:b7:b3:b7:89:ce:cc:01:cd:2c:53:2e:d9: 9c:97:c2:e5:6f:6c:5f:1d:d1:f7:f5:34:6d:0a:fa: 66:8e:f1:97:2d:0b:7f:d7:86:34:cb:d7:0d:94:6d: f5:01:42:b6:ce:3f:0a:96:fb:ef:d9:de:88:ea:32: c4:cb:4d:44:11:7f:8a:0c:cd:fe:bc:78:10:d9:f6: ba:80:c3:f3:d1:91:e1:8a:fd:59:5d:0b:b4:17:8d: 65:b1:b4:80:fc:53:93:96:c3:f9:c7:23:79:b1:8f: c4:e3:ed:a3:d9:80:f4:cb:f6:3e:d6:46:3a:65:f8: cb:4f:02:08:2a:1b:ac:4c:91:bf:5b:d7:dd:ce:9e: a9:84:c5:3f:5b:c8:f9:c8:32:3b:df:22:c8:7d:b2: e2:6b:94:b3:8b:02:fb:bb:4d:66:78:f2:41:dd:a1: e9:92:62:ef:4d:ab:14:10:89:ef:94:a3:fb:3e:c8: 37:00:3d:73:e8:7d:45:94:3b:8b:e2:f3:18:35:ed: 29:4a:2d:92:cf:05:92:0a:b9:17:be:6c:26:14:6c: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:FF:F9:8A:8B:39:B3:59:66:93:02:4A:E8:C3:78:35:0E:F9:76 X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:15:78:7e:15:09:e4:a0:25:1c:4d:15:13:15:a2:ba:ee:6f: c3:74:2c:0d:93:43:bb:fd:3a:1e:e6:07:fb:72:03:58:9d:3b: ff:79:9b:b3:50:40:1f:e1:be:ce:2b:4e:f1:32:b7:3e:fe:bb: f4:1f:99:81:4b:5a:ec:9b:1c:50:7e:75:b8:41:ac:a1:b6:4a: 70:70:25:c7:38:20:96:e3:a3:68:92:17:6e:8f:0f:22:69:4b: d5:b4:3d:61:fb:d5:c8:0f:73:36:26:5e:92:70:9f:f9:85:4c: 3d:ca:70:fd:93:1b:9b:7f:75:96:6c:fc:8b:43:a3:4b:f8:ec: 80:c0:95:b7:9f:bb:f3:d0:52:23:b1:ef:ec:f0:7e:a7:e2:8f: 7a:bb:d9:b9:6e:55:36:cd:fe:54:94:ec:1d:58:26:32:d1:c0: 2f:bf:2a:df:0a:71:89:4b:ff:60:95:a2:8b:1b:4d:b1:dd:3b: be:53:b5:0e:f5:1f:61:22:18:ee:de:61:0a:12:a9:df:d0:ee: e7:93:e4:39:c0:31:dd:21:f4:15:02:00:8b:40:15:9d:7a:5b: 64:3c:a6:95:27:dd:35:8d:61:9f:57:de:37:8f:1a:d7:51:2c: 98:6a:4a:fc:d7:06:4e:df:a0:a4:42:1b:9f:49:06:c3:be:4a: 69:27:06:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWrnN/ZvxTniLiFh0dvZr5DqKE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA5MjUwNzE5NTdaFw0yNjA5MjYxMTExNTdaMDMxMTAvBgNV BAMTKEJGNzVGRkY5OEE4QjM5QjM1OTY2OTMwMjRBRThDMzc4MzUwRUY5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+r0ZyDHkBKAl5tweUsxQryFAO y2Bgrs95WphhfMK+r1vPVTfvcQwGemDI65XZ7rezt4nOzAHNLFMu2ZyXwuVvbF8d 0ff1NG0K+maO8ZctC3/XhjTL1w2UbfUBQrbOPwqW++/Z3ojqMsTLTUQRf4oMzf68 eBDZ9rqAw/PRkeGK/VldC7QXjWWxtID8U5OWw/nHI3mxj8Tj7aPZgPTL9j7WRjpl +MtPAggqG6xMkb9b193OnqmExT9byPnIMjvfIsh9suJrlLOLAvu7TWZ48kHdoemS Yu9NqxQQie+Uo/s+yDcAPXPofUWUO4vi8xg17SlKLZLPBZIKuRe+bCYUbKpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3X/+YqLObNZZpMCSujDeDUO+XYwHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgVeH4VCeSgJRxNFRMVorrub8N0LA2TQ7v9 Oh7mB/tyA1idO/95m7NQQB/hvs4rTvEytz7+u/QfmYFLWuybHFB+dbhBrKG2SnBw Jcc4IJbjo2iSF26PDyJpS9W0PWH71cgPczYmXpJwn/mFTD3KcP2TG5t/dZZs/ItD o0v47IDAlbefu/PQUiOx7+zwfqfij3q72bluVTbN/lSU7B1YJjLRwC+/Kt8KcYlL /2CVoosbTbHdO75TtQ71H2EiGO7eYQoSqd/Q7ueT5DnAMd0h9BUCAItAFZ16W2Q8 ppUn3TWNYZ9X3jePGtdRLJhqSvzXBk7foKRCG59JBsO+SmknBq4= -----END CERTIFICATE-----Generated at Fri Sep 25 20:37:40 2026 by rpki-client