$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json) Hash identifier: 4ldA+SfS+zoP2olre124U5vNBngl57+zzz7cKKEJy8c= Subject key identifier: C3:3C:97:02:9A:DD:AD:B1:7A:5C:8F:E9:91:8F:FB:2E:6E:0D:6C:E1 Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669 Certificate serial: 7038B44AD5E7995CCF7BDD0421C3804C30974AB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:49:12 +0000 Manifest this update: Wed 23 Sep 2026 22:44:12 +0000 Manifest next update: Thu 24 Sep 2026 22:59:12 +0000 Files and hashes: 1: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=) 2: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=) 4: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=) 5: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=) 6: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: XmsBVYQT75cHYiML4ZuSmxrnad0zN3W7q/0pJrHFOXc=) 7: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:38:b4:4a:d5:e7:99:5c:cf:7b:dd:04:21:c3:80:4c:30:97:4a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669 Validity Not Before: Sep 23 22:44:12 2026 GMT Not After : Sep 24 22:59:12 2026 GMT Subject: CN=C33C97029ADDADB17A5C8FE9918FFB2E6E0D6CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:b7:02:6c:ce:16:a5:d0:82:4d:37:28:e8: 8f:59:b6:78:d3:a6:7c:f0:42:58:1c:de:26:cd:38: 8c:19:b2:48:96:fb:2a:6b:83:45:ae:75:29:ef:48: b3:c7:15:e8:ab:bb:8c:45:c3:5e:57:50:69:42:2b: 59:c6:4e:26:5a:b4:44:90:7a:dc:c3:5b:7a:8f:3e: 0c:59:a1:b1:71:3e:e7:6c:a1:e6:b4:f1:f6:a3:cb: ae:d6:98:99:6f:4c:97:44:72:08:9a:26:57:c7:df: 3e:f4:d6:84:53:6a:6e:9d:73:2f:08:cc:6d:9e:d1: 4d:f1:7b:2c:fd:26:00:f5:0a:aa:98:6d:e1:83:6a: 59:ee:f0:77:21:38:f5:41:0d:39:7e:56:d1:28:0b: 40:c7:14:ae:f5:8e:38:67:59:64:3f:8f:c3:bb:9e: 76:25:a1:77:6d:d8:23:2c:d6:f2:98:c9:f7:56:cf: 12:6b:8b:42:56:95:80:d2:fe:e8:37:62:d3:b7:e5: 73:a8:11:12:8e:be:da:0a:78:70:5d:3c:92:18:72: 84:82:d0:0e:e9:ba:ea:96:c9:cd:96:38:3f:e6:46: 65:48:d8:f0:ef:98:c1:f4:12:00:95:b6:8f:ac:cc: 34:3f:bf:5e:c4:d8:39:21:f9:77:aa:60:44:83:a7: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3C:97:02:9A:DD:AD:B1:7A:5C:8F:E9:91:8F:FB:2E:6E:0D:6C:E1 X509v3 Authority Key Identifier: keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0e:26:1a:4a:eb:b8:c5:03:9b:2f:32:07:7c:78:7d:29:9a: 64:ce:61:46:3b:c5:ac:8e:e8:38:07:a3:9b:81:19:a1:74:fe: f8:ac:12:10:5a:31:73:f1:42:c1:e4:af:d4:23:0d:ae:c4:47: 3a:14:a2:49:8a:3a:ac:cc:d2:4f:d1:ad:50:e8:4a:e1:ec:b6: 88:0a:b8:fe:37:b0:98:18:7e:4a:68:9c:40:56:2d:61:ac:94: 5e:c4:7f:a1:1e:64:ad:1c:c3:0d:4a:3e:35:95:0d:ef:a5:3d: 62:a6:02:a5:26:c6:03:3f:9d:12:91:17:47:26:b3:93:b9:17: b0:0c:91:be:2f:5e:67:c8:88:a9:d6:9d:4e:da:5b:85:73:cb: 10:ec:fe:0d:1a:b2:7a:03:72:65:9a:a9:d5:55:b8:33:8e:fb: eb:87:aa:d0:62:4c:66:ae:c7:a5:cb:34:84:71:f6:ba:6d:61: ca:f1:2a:3b:89:8d:f1:fa:3f:53:12:31:57:42:81:e1:09:fc: 54:f9:92:ee:88:d3:9c:22:31:91:f7:9b:d4:dc:f3:22:0b:b5: d9:12:7a:b2:50:c8:dd:c6:3d:d2:32:5b:34:af:ba:d6:2e:10: 7a:28:51:74:36:f6:24:15:54:b2:57:cc:b3:14:77:bb:9d:3b: 2f:f7:89:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDi0StXnmVzPe90EIcOATDCXSrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0 MTMxRjY2OTAeFw0yNjA5MjMyMjQ0MTJaFw0yNjA5MjQyMjU5MTJaMDMxMTAvBgNV BAMTKEMzM0M5NzAyOUFEREFEQjE3QTVDOEZFOTkxOEZGQjJFNkUwRDZDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBLcCbM4WpdCCTTco6I9ZtnjT pnzwQlgc3ibNOIwZskiW+yprg0WudSnvSLPHFeiru4xFw15XUGlCK1nGTiZatESQ etzDW3qPPgxZobFxPudsoea08fajy67WmJlvTJdEcgiaJlfH3z701oRTam6dcy8I zG2e0U3xeyz9JgD1CqqYbeGDalnu8HchOPVBDTl+VtEoC0DHFK71jjhnWWQ/j8O7 nnYloXdt2CMs1vKYyfdWzxJri0JWlYDS/ug3YtO35XOoERKOvtoKeHBdPJIYcoSC 0A7puuqWyc2WOD/mRmVI2PDvmMH0EgCVto+szDQ/v17E2Dkh+XeqYESDp3MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwzyXAprdrbF6XI/pkY/7Lm4NbOEwHwYDVR0j BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1 MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG NjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0 Njc0MTMxRjY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEOJhpK67jFA5svMgd8eH0pmmTOYUY7xayO 6DgHo5uBGaF0/visEhBaMXPxQsHkr9QjDa7ERzoUokmKOqzM0k/RrVDoSuHstogK uP43sJgYfkponEBWLWGslF7Ef6EeZK0cww1KPjWVDe+lPWKmAqUmxgM/nRKRF0cm s5O5F7AMkb4vXmfIiKnWnU7aW4VzyxDs/g0asnoDcmWaqdVVuDOO++uHqtBiTGau x6XLNIRx9rptYcrxKjuJjfH6P1MSMVdCgeEJ/FT5ku6I05wiMZH3m9Tc8yILtdkS erJQyN3GPdIyWzSvutYuEHooUXQ29iQVVLJXzLMUd7udOy/3iQA= -----END CERTIFICATE-----Generated at Thu Sep 24 08:16:41 2026 by rpki-client