$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json) Hash identifier: JduH6nifSWJrxbdVVWw82+gREjyk3NAux9jYbzM15Mg= Subject key identifier: 39:60:61:B7:DF:EF:BB:E6:45:23:F0:2A:9C:41:1C:50:17:25:D3:42 Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Certificate serial: 67B03A4413F48676D900E9F43C0AF6F6867CECF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 20:00:15 +0000 Manifest this update: Thu 24 Sep 2026 19:55:15 +0000 Manifest next update: Fri 25 Sep 2026 23:20:15 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=) 2: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: m95F/UQRc7CVB3SSr21n8HhfS7PQtXk3A1xTxexn+wA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b0:3a:44:13:f4:86:76:d9:00:e9:f4:3c:0a:f6:f6:86:7c:ec:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Validity Not Before: Sep 24 19:55:15 2026 GMT Not After : Sep 25 23:20:15 2026 GMT Subject: CN=396061B7DFEFBBE64523F02A9C411C501725D342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:e6:23:a0:63:2e:37:34:7e:e3:a4:55:50: 32:35:cd:5a:75:25:ee:22:26:70:1a:dd:4d:c5:3d: 98:f3:5f:4f:6b:e8:e4:bb:5d:af:b7:a0:f4:20:27: c1:fd:42:79:25:49:1c:38:56:b4:7e:7e:1e:60:89: 05:bd:8c:de:a6:3e:b8:49:ac:6b:8a:d4:2a:95:74: df:36:af:43:53:ef:af:c5:52:22:0d:eb:52:53:7e: 33:a9:bb:d7:01:d7:3d:16:f4:a5:a4:53:7c:e2:01: 0f:3a:78:53:b1:8e:76:ea:4e:34:6a:e1:f6:2a:cb: d2:4f:8f:19:c0:75:6f:2a:e6:27:e8:8f:51:d9:04: d6:fc:b7:0d:3e:94:77:05:73:04:72:8e:d1:16:b8: 5b:0a:b9:a5:8d:62:27:b0:9c:dd:ed:0e:8b:42:73: ec:d4:88:0e:21:e6:0d:42:da:10:1c:1e:e9:82:f8: 0c:c2:4b:03:b2:f3:5c:53:81:88:b4:67:4e:c7:3b: d5:a9:39:62:80:67:f7:70:bf:d5:5c:d4:84:97:c8: b1:af:92:78:72:07:c2:f2:29:a6:09:73:32:7a:b2: 15:db:45:86:20:97:a2:8b:6c:f3:aa:b6:4f:2c:52: b5:38:c7:97:16:d2:b1:2a:01:cd:ea:21:7d:38:14: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:61:B7:DF:EF:BB:E6:45:23:F0:2A:9C:41:1C:50:17:25:D3:42 X509v3 Authority Key Identifier: keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ad:51:03:88:b5:d0:ed:2f:50:b8:4d:75:dd:7b:39:c2:54: 81:cf:a9:1e:96:53:8a:df:b2:8f:20:e1:7b:04:a9:b9:11:02: 89:f3:a6:eb:df:7b:90:c5:d9:58:83:fe:d3:ee:a5:e7:0f:f6: 44:0b:75:67:d1:9f:5b:3b:8b:d9:4c:a9:e4:a2:95:b7:d9:51: 64:bd:65:3c:81:32:57:c1:50:df:aa:ec:92:83:bb:a1:bd:78: c0:5d:c7:06:5e:f4:54:4b:7e:9a:9c:22:2f:e4:7c:c0:d7:c2: 84:20:dc:7f:e8:73:a6:1b:b1:5e:7e:0d:8a:61:3c:8e:ea:15: a6:3c:18:71:be:99:e5:17:52:52:18:a3:f5:b5:9b:48:ea:9d: a2:0e:bc:e0:12:92:f5:fc:c5:4b:c7:b1:df:f5:d6:31:3e:47: fe:4f:b6:d0:d5:6b:30:5e:3d:f1:13:28:5f:66:df:2e:7c:d9: d0:76:1a:0d:77:ab:03:95:73:e4:81:c5:b4:50:bc:a9:cb:f3: a7:c9:db:6c:d6:2c:80:c9:0b:b3:af:32:7a:32:e3:6b:af:ca: b9:b7:49:14:e4:c8:48:12:20:69:a8:56:69:47:3e:fc:ca:c4: 61:10:38:0b:90:45:33:92:70:43:41:64:a2:86:30:4f:bb:5d: 63:d9:ac:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7A6RBP0hnbZAOn0PAr29oZ87PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3 MDQ0Q0VCNTAeFw0yNjA5MjQxOTU1MTVaFw0yNjA5MjUyMzIwMTVaMDMxMTAvBgNV BAMTKDM5NjA2MUI3REZFRkJCRTY0NTIzRjAyQTlDNDExQzUwMTcyNUQzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPuYjoGMuNzR+46RVUDI1zVp1 Je4iJnAa3U3FPZjzX09r6OS7Xa+3oPQgJ8H9QnklSRw4VrR+fh5giQW9jN6mPrhJ rGuK1CqVdN82r0NT76/FUiIN61JTfjOpu9cB1z0W9KWkU3ziAQ86eFOxjnbqTjRq 4fYqy9JPjxnAdW8q5ifoj1HZBNb8tw0+lHcFcwRyjtEWuFsKuaWNYiewnN3tDotC c+zUiA4h5g1C2hAcHumC+AzCSwOy81xTgYi0Z07HO9WpOWKAZ/dwv9Vc1ISXyLGv knhyB8LyKaYJczJ6shXbRYYgl6KLbPOqtk8sUrU4x5cW0rEqAc3qIX04FLrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWBht9/vu+ZFI/AqnEEcUBcl00IwHwYDVR0j BBgwFoAUTZjDauQU3ir6umJcYBGIM3BEzrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNmQ4NmItZTNkZi00ZTJmLTkzNmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFF NDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3MDQ0Q0VCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDk4QzM2QUU0MTRERTJBRkFCQTYyNUM2MDExODgzMzcwNDRD RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4 MzM3MDQ0Q0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOtUQOItdDtL1C4TXXdeznCVIHPqR6WU4rf so8g4XsEqbkRAonzpuvfe5DF2ViD/tPupecP9kQLdWfRn1s7i9lMqeSilbfZUWS9 ZTyBMlfBUN+q7JKDu6G9eMBdxwZe9FRLfpqcIi/kfMDXwoQg3H/oc6YbsV5+DYph PI7qFaY8GHG+meUXUlIYo/W1m0jqnaIOvOASkvX8xUvHsd/11jE+R/5PttDVazBe PfETKF9m3y582dB2Gg13qwOVc+SBxbRQvKnL86fJ22zWLIDJC7OvMnoy42uvyrm3 SRTkyEgSIGmoVmlHPvzKxGEQOAuQRTOScENBZKKGME+7XWPZrA0= -----END CERTIFICATE-----Generated at Fri Sep 25 01:01:42 2026 by rpki-client