$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json) Hash identifier: ntnEIMcaEdFLkxAlm/GyHCpX71uf5hwug/5hsflh6yE= Subject key identifier: 65:22:AD:D7:EF:3C:F1:04:EC:B6:B0:E6:6E:62:02:00:96:FC:13:7E Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669 Certificate serial: 5B206D6E416A4BFB5CBBFBDF69DC86CF5A8303C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 00:25:42 +0000 Manifest this update: Sat 26 Sep 2026 00:20:42 +0000 Manifest next update: Sun 27 Sep 2026 00:36:42 +0000 Files and hashes: 1: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: rwz7nTxiSSDawvGKPVxPJbAjVhyGuuOiGfR8lOtPQUk=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=) 4: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=) 5: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=) 6: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=) 7: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 00:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:20:6d:6e:41:6a:4b:fb:5c:bb:fb:df:69:dc:86:cf:5a:83:03:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669 Validity Not Before: Sep 26 00:20:42 2026 GMT Not After : Sep 27 00:36:42 2026 GMT Subject: CN=6522ADD7EF3CF104ECB6B0E66E62020096FC137E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:df:fc:72:e9:99:30:d1:db:d4:3d:9a:9e: 42:69:7c:5b:39:08:64:48:e1:6d:67:f2:f2:e1:79: b2:c5:d3:12:4f:4d:bd:4d:3c:e5:a5:96:33:fe:b2: 22:a9:17:b4:26:26:27:81:75:f9:c3:4a:81:69:42: b1:63:58:5d:e1:aa:1a:b9:9f:da:3e:e4:7c:70:6b: 1e:56:6a:97:e4:73:17:b8:c0:4a:67:f1:88:52:15: 8e:17:99:fa:8a:ac:19:6b:8e:6a:36:15:22:70:a0: 10:d4:ab:70:40:cb:4a:ac:35:90:f9:3c:43:54:72: 57:cf:cc:50:42:8e:08:d0:f4:53:e0:3b:03:c0:e2: d5:75:35:0e:ac:f0:7f:77:10:9f:21:29:ca:5d:85: 9f:67:e9:a6:c0:bb:f8:87:b8:08:bc:08:33:d8:60: b0:6e:db:76:6f:58:98:44:6a:69:f4:17:b8:76:33: 1d:e9:36:be:41:dc:49:31:21:cc:5e:88:cf:96:f6: 41:4b:cb:09:96:86:df:c2:90:2c:de:93:7b:c0:dc: ac:f1:e6:22:b5:6b:2b:d7:67:fc:c7:be:be:20:c4: a7:05:c9:3e:d3:6e:30:de:c8:69:dc:b2:91:76:f1: 0a:06:69:29:4f:a7:50:02:43:2d:1d:b3:4d:48:1b: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:AD:D7:EF:3C:F1:04:EC:B6:B0:E6:6E:62:02:00:96:FC:13:7E X509v3 Authority Key Identifier: keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:06:e1:4d:b1:fe:df:44:e8:14:d8:23:8e:18:97:15:ad:0d: 54:c6:f7:d2:d5:10:78:47:e7:14:95:6f:b4:b0:a8:10:95:b1: c0:03:03:b2:c5:70:49:db:3d:d8:74:8b:ea:b8:34:e1:e8:b1: 2e:5d:4a:a7:1d:cb:a9:29:d1:c5:b7:63:f6:16:d0:59:44:2c: e4:5c:ea:dd:3c:af:1c:1a:bd:7d:db:cb:0a:b5:fe:8b:63:1b: 59:56:e9:91:c1:7d:70:be:36:8f:13:36:67:12:1f:82:24:c7: 02:dd:ba:c0:88:e7:67:78:79:69:6f:7a:a9:d6:ff:30:fa:da: a1:70:b5:b5:0d:e3:6d:de:9d:4b:2f:b0:96:b3:98:ce:53:d5: 3d:f5:fd:61:55:1f:f5:1e:e6:62:6f:2b:e2:d7:b6:c8:ea:03: 59:11:34:45:d7:7f:81:91:5d:29:fd:e9:1b:7f:5a:9e:09:5d: 56:e7:58:ea:a0:7e:f4:b0:3f:b7:e5:0f:a8:c1:88:6e:42:9a: 5a:e3:7f:54:56:ba:5e:49:2a:b6:46:a8:e9:c0:0c:f3:56:39: 8a:32:b0:20:86:77:b3:83:5f:54:5b:0a:7b:7a:e6:ae:e9:2f: ee:2e:01:68:a1:83:8f:5d:d5:9f:19:e6:95:7b:7c:6f:df:2a: 98:f3:e3:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyBtbkFqS/tcu/vfadyGz1qDA8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0 MTMxRjY2OTAeFw0yNjA5MjYwMDIwNDJaFw0yNjA5MjcwMDM2NDJaMDMxMTAvBgNV BAMTKDY1MjJBREQ3RUYzQ0YxMDRFQ0I2QjBFNjZFNjIwMjAwOTZGQzEzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCr9/8cumZMNHb1D2ankJpfFs5 CGRI4W1n8vLhebLF0xJPTb1NPOWlljP+siKpF7QmJieBdfnDSoFpQrFjWF3hqhq5 n9o+5Hxwax5Wapfkcxe4wEpn8YhSFY4XmfqKrBlrjmo2FSJwoBDUq3BAy0qsNZD5 PENUclfPzFBCjgjQ9FPgOwPA4tV1NQ6s8H93EJ8hKcpdhZ9n6abAu/iHuAi8CDPY YLBu23ZvWJhEamn0F7h2Mx3pNr5B3EkxIcxeiM+W9kFLywmWht/CkCzek3vA3Kzx 5iK1ayvXZ/zHvr4gxKcFyT7TbjDeyGncspF28QoGaSlPp1ACQy0ds01IG+VrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSKt1+888QTstrDmbmICAJb8E34wHwYDVR0j BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1 MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG NjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0 Njc0MTMxRjY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcG4U2x/t9E6BTYI44YlxWtDVTG99LVEHhH 5xSVb7SwqBCVscADA7LFcEnbPdh0i+q4NOHosS5dSqcdy6kp0cW3Y/YW0FlELORc 6t08rxwavX3bywq1/otjG1lW6ZHBfXC+No8TNmcSH4IkxwLdusCI52d4eWlveqnW /zD62qFwtbUN423enUsvsJazmM5T1T31/WFVH/Ue5mJvK+LXtsjqA1kRNEXXf4GR XSn96Rt/Wp4JXVbnWOqgfvSwP7flD6jBiG5Cmlrjf1RWul5JKrZGqOnADPNWOYoy sCCGd7ODX1RbCnt65q7pL+4uAWihg49d1Z8Z5pV7fG/fKpjz44o= -----END CERTIFICATE-----Generated at Sat Sep 26 20:51:55 2026 by rpki-client