$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json) Hash identifier: UCPiX31PSeqooAFj8O0PXgQJFgbMst1335CMSy9XIVQ= Subject key identifier: 49:20:09:24:E3:98:55:1A:81:54:A1:E8:DD:BF:DD:E9:A2:B9:5D:2E Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Certificate serial: 28ABC21BE9825E3C67BBCF746CED5222EA22DF25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:27:30 +0000 Manifest this update: Thu 24 Sep 2026 13:22:30 +0000 Manifest next update: Fri 25 Sep 2026 17:22:30 +0000 Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=) 2: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: C4LPyw6qsiIdJc4LIOarFdWHBUsu6SQIxIgdQlnRjYQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ab:c2:1b:e9:82:5e:3c:67:bb:cf:74:6c:ed:52:22:ea:22:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Validity Not Before: Sep 24 13:22:30 2026 GMT Not After : Sep 25 17:22:30 2026 GMT Subject: CN=49200924E398551A8154A1E8DDBFDDE9A2B95D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:0f:17:59:97:f7:ee:e3:1a:a6:5c:a6:6b: 0a:ed:82:3a:db:71:01:03:30:f8:3a:9e:03:0a:a4: 6c:bd:12:42:21:8f:33:ba:ce:97:ac:18:e9:dd:e0: 1b:57:1b:63:be:25:db:a2:59:62:4e:0f:20:5e:f0: 65:3e:f5:f3:e7:08:ad:18:b5:8f:bc:3c:6f:a7:10: 4b:26:ed:aa:d8:ba:ab:11:49:a6:e8:73:79:81:fc: e1:8a:4e:ab:45:17:d9:7b:63:d7:20:4e:04:68:fa: 4c:64:59:f8:63:e7:33:b9:d6:4c:bb:ff:43:2b:57: a6:0e:a4:6a:42:65:1e:cc:1f:7f:ae:74:73:55:78: 77:8f:ef:6d:64:1d:da:ef:36:d4:a2:46:dd:e8:03: fd:39:5a:56:25:23:4b:8b:e8:eb:b9:55:2f:e3:5c: 35:41:fa:3f:94:a9:d5:ca:83:81:02:4c:5c:80:31: 4e:23:09:ee:85:7b:04:ad:a9:d0:91:b5:fb:0c:f4: 5e:c2:41:14:e8:58:3f:a4:01:11:98:5b:d1:f4:5f: 37:a0:df:40:77:f1:a5:e6:ed:0f:cd:db:02:a4:f1: 58:f1:08:57:dd:96:5c:a3:2b:ae:d9:8d:0e:f0:b4: c6:84:b9:a4:4f:5e:a3:74:55:a2:27:9a:be:7e:7b: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:20:09:24:E3:98:55:1A:81:54:A1:E8:DD:BF:DD:E9:A2:B9:5D:2E X509v3 Authority Key Identifier: keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:72:98:41:4a:dd:c5:3a:d3:fc:d4:ba:61:92:c1:c6:23:da: dd:7e:2a:64:83:10:17:9b:13:4e:c9:2b:16:5f:08:f1:52:3a: 51:05:a9:74:12:09:ec:41:37:3b:4a:f0:a0:e2:c3:89:11:4d: 56:0c:45:05:13:53:bf:51:86:a8:c3:15:10:09:21:9c:2c:c7: b2:3b:90:28:3d:57:39:e4:12:3b:9b:c5:e8:03:ce:c9:37:46: 41:db:5d:b0:f2:e2:51:b2:f4:cb:be:f0:be:ec:94:90:21:98: 70:e6:6a:20:e3:d8:e1:78:f9:70:25:b4:7a:0f:e2:66:38:30: 40:a2:3a:1e:0b:0e:ab:c8:2b:83:a1:87:8a:7c:ae:a4:4d:01: 34:b0:7c:97:e6:6a:29:c4:23:72:ed:89:c3:a8:fa:4e:ce:ac: 77:25:5f:25:56:57:7b:6e:98:56:8e:87:82:cd:c1:3c:e3:de: 62:a4:70:81:b9:e3:72:27:a9:96:3e:49:28:35:84:5b:c8:22: 82:2f:ce:7f:67:b8:35:cc:bc:4e:47:17:bc:59:e0:40:70:3c: 0a:f9:d0:7a:65:75:5a:13:44:cb:e3:d4:29:7c:e1:b0:3d:66: b9:1e:9d:41:38:c3:7e:71:3d:7c:91:ef:e3:a9:2b:5e:b4:aa: 80:6e:16:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKvCG+mCXjxnu890bO1SIuoi3yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlF M0ZENEZFNDAeFw0yNjA5MjQxMzIyMzBaFw0yNjA5MjUxNzIyMzBaMDMxMTAvBgNV BAMTKDQ5MjAwOTI0RTM5ODU1MUE4MTU0QTFFOEREQkZEREU5QTJCOTVEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWw8XWZf37uMaplymawrtgjrb cQEDMPg6ngMKpGy9EkIhjzO6zpesGOnd4BtXG2O+JduiWWJODyBe8GU+9fPnCK0Y tY+8PG+nEEsm7arYuqsRSaboc3mB/OGKTqtFF9l7Y9cgTgRo+kxkWfhj5zO51ky7 /0MrV6YOpGpCZR7MH3+udHNVeHeP721kHdrvNtSiRt3oA/05WlYlI0uL6Ou5VS/j XDVB+j+UqdXKg4ECTFyAMU4jCe6FewStqdCRtfsM9F7CQRToWD+kARGYW9H0Xzeg 30B38aXm7Q/N2wKk8VjxCFfdllyjK67ZjQ7wtMaEuaRPXqN0VaInmr5+e1WnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSSAJJOOYVRqBVKHo3b/d6aK5XS4wHwYDVR0j BBgwFoAUS7McwMBkOo73X1Syw1C22eP9T+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExYTNkNTYtYWM3NS00OTgxLTk3MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBD MDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlFM0ZENEZFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkIzMUNDMEMwNjQzQThFRjc1RjU0QjJDMzUwQjZEOUUzRkQ0 RkU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2 RDlFM0ZENEZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpymEFK3cU60/zUumGSwcYj2t1+KmSDEBeb E07JKxZfCPFSOlEFqXQSCexBNztK8KDiw4kRTVYMRQUTU79RhqjDFRAJIZwsx7I7 kCg9VznkEjubxegDzsk3RkHbXbDy4lGy9Mu+8L7slJAhmHDmaiDj2OF4+XAltHoP 4mY4MECiOh4LDqvIK4Ohh4p8rqRNATSwfJfmainEI3LticOo+k7OrHclXyVWV3tu mFaOh4LNwTzj3mKkcIG543InqZY+SSg1hFvIIoIvzn9nuDXMvE5HF7xZ4EBwPAr5 0HpldVoTRMvj1Cl84bA9ZrkenUE4w35xPXyR7+OpK160qoBuFpw= -----END CERTIFICATE-----Generated at Thu Sep 24 19:23:07 2026 by rpki-client