$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: rG1CVAehrSiQTRp5c4jQEMMncHVJWV+3Pq3M1uB9mSc= Subject key identifier: FB:34:2C:13:DC:4F:B9:B3:C0:8F:86:EA:8D:98:17:8E:62:24:5C:41 Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 4A57E8CBA346AD5753797667C39C8F88AFC1A294 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:28:39 +0000 Manifest this update: Thu 24 Sep 2026 10:23:39 +0000 Manifest next update: Fri 25 Sep 2026 13:43:39 +0000 Files and hashes: 1: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: 27z5o1YiRtk9Xkp9r5HbxOML9RI3+8fn/fGaqf8XUXg=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:57:e8:cb:a3:46:ad:57:53:79:76:67:c3:9c:8f:88:af:c1:a2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: Sep 24 10:23:39 2026 GMT Not After : Sep 25 13:43:39 2026 GMT Subject: CN=FB342C13DC4FB9B3C08F86EA8D98178E62245C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:13:fe:63:27:2f:10:5a:0a:4e:3d:51:56: f9:31:fb:45:d5:37:d0:42:bd:a7:e3:be:dc:2f:1d: f5:94:35:34:36:14:bc:cc:96:1e:77:9e:94:85:38: 15:c9:48:bf:55:54:0a:4e:d4:ca:01:7e:8c:de:ea: f2:44:e2:1f:10:92:ff:a5:26:01:06:88:f1:19:9c: af:9f:aa:4d:90:8a:6c:d1:67:c8:a7:ad:09:23:2c: f4:18:9a:a3:d7:5f:6e:53:3d:b8:f6:26:9b:08:b5: e2:8b:a5:9e:2b:aa:ca:48:4c:4e:86:ea:34:f2:99: b4:bc:b5:f8:89:b0:ae:08:e2:dc:4b:5f:59:d9:b9: 07:4a:fc:1b:b6:b8:42:58:8d:f0:18:6c:d9:15:dd: e1:57:f8:8d:3c:f8:3b:ec:82:ee:cc:fa:f9:db:8e: ba:55:19:a1:6c:91:4a:55:18:cc:21:f9:10:8d:4b: d8:af:dd:bc:7b:f3:c8:85:a8:f9:07:2a:0b:35:01: 34:53:0f:7a:32:d6:b6:4f:54:68:b1:1e:7d:40:24: 7f:83:59:2d:90:2a:ba:71:f3:73:4c:8a:d8:8c:fd: c5:df:23:a3:23:aa:65:0d:91:9f:e3:ff:c6:08:2a: 6d:b9:44:bd:8b:4e:e2:d0:53:28:4d:f1:3f:fc:34: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:34:2C:13:DC:4F:B9:B3:C0:8F:86:EA:8D:98:17:8E:62:24:5C:41 X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f9:24:64:8a:12:0b:2f:94:d5:c0:d2:79:08:02:15:13:72: f6:d9:fd:a7:a2:76:ae:7a:e8:62:8c:d9:05:fa:92:d9:38:63: ce:b0:6c:a2:c4:f0:e5:3f:73:87:58:44:00:ba:4f:e7:a6:03: 33:cb:cf:bc:98:14:51:47:3e:6c:e9:65:aa:e2:05:d6:14:c5: 1c:4d:6f:7e:71:c7:27:73:2f:16:0e:fe:40:69:62:fd:73:9e: 3d:04:bc:3e:eb:b1:55:f1:fe:83:b4:49:64:fd:3a:3d:5c:41: 56:38:ff:13:27:15:eb:05:2b:e8:f6:c2:b1:ac:db:eb:35:e5: 12:9a:fb:bc:f4:b6:60:d6:33:b3:16:77:46:57:a3:6a:24:56: b1:72:a1:7e:f0:7f:4c:ec:bd:69:ce:78:12:2f:40:5d:df:3e: 15:ce:e9:44:d0:7c:81:ee:82:6f:a8:eb:8c:3b:01:65:05:32: 72:18:bb:11:ae:c9:db:09:25:31:7b:cc:07:65:a4:88:0c:92: 3f:a8:00:49:a2:fb:2d:d5:db:81:5c:45:b7:3e:33:df:1d:22: 5a:30:08:33:f8:6d:55:d7:ea:b4:b5:55:15:2a:e3:8d:98:fa: fd:6e:00:42:c5:63:de:a7:82:09:02:ac:b7:c8:a6:c9:67:af: 30:9d:4d:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlfoy6NGrVdTeXZnw5yPiK/BopQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjA5MjQxMDIzMzlaFw0yNjA5MjUxMzQzMzlaMDMxMTAvBgNV BAMTKEZCMzQyQzEzREM0RkI5QjNDMDhGODZFQThEOTgxNzhFNjIyNDVDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zRP+YycvEFoKTj1RVvkx+0XV N9BCvafjvtwvHfWUNTQ2FLzMlh53npSFOBXJSL9VVApO1MoBfoze6vJE4h8Qkv+l JgEGiPEZnK+fqk2QimzRZ8inrQkjLPQYmqPXX25TPbj2JpsIteKLpZ4rqspITE6G 6jTymbS8tfiJsK4I4txLX1nZuQdK/Bu2uEJYjfAYbNkV3eFX+I08+Dvsgu7M+vnb jrpVGaFskUpVGMwh+RCNS9iv3bx788iFqPkHKgs1ATRTD3oy1rZPVGixHn1AJH+D WS2QKrpx83NMitiM/cXfI6MjqmUNkZ/j/8YIKm25RL2LTuLQUyhN8T/8NBqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+zQsE9xPubPAj4bqjZgXjmIkXEEwHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX5JGSKEgsvlNXA0nkIAhUTcvbZ/aeidq56 6GKM2QX6ktk4Y86wbKLE8OU/c4dYRAC6T+emAzPLz7yYFFFHPmzpZariBdYUxRxN b35xxydzLxYO/kBpYv1znj0EvD7rsVXx/oO0SWT9Oj1cQVY4/xMnFesFK+j2wrGs 2+s15RKa+7z0tmDWM7MWd0ZXo2okVrFyoX7wf0zsvWnOeBIvQF3fPhXO6UTQfIHu gm+o64w7AWUFMnIYuxGuydsJJTF7zAdlpIgMkj+oAEmi+y3V24FcRbc+M98dIlow CDP4bVXX6rS1VRUq442Y+v1uAELFY96nggkCrLfIpslnrzCdTQI= -----END CERTIFICATE-----Generated at Fri Sep 25 04:49:43 2026 by rpki-client