$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json) Hash identifier: WAUv664XKOrCad16Oo8PohQ0BfVXmLb3KOJZh0mB93U= Subject key identifier: 33:F4:26:D9:D8:38:96:1F:0D:FF:B0:08:55:D9:58:35:14:8D:5A:43 Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Certificate serial: 1E00AF888E72A41DE1B5A93D65B3BFBE0F7EB1B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 13:16:55 +0000 Manifest this update: Fri 25 Sep 2026 13:11:55 +0000 Manifest next update: Sat 26 Sep 2026 16:34:55 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=) 2: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=) 3: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: dDHbhjQHcakPpm+/3mruOrhVos1wlKXJLS+xeOZWJqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:00:af:88:8e:72:a4:1d:e1:b5:a9:3d:65:b3:bf:be:0f:7e:b1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Validity Not Before: Sep 25 13:11:55 2026 GMT Not After : Sep 26 16:34:55 2026 GMT Subject: CN=33F426D9D838961F0DFFB00855D95835148D5A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:7b:5e:af:b3:dd:ef:7b:04:42:00:95:4f: f6:ac:e8:f2:a2:58:c6:d7:a6:87:aa:9f:b8:a0:d1: 2c:05:5e:db:96:f8:6d:a9:cc:51:60:1a:f1:30:bb: 97:a7:48:3c:3a:31:a5:20:96:14:05:03:5f:55:e5: 95:bd:32:43:29:b0:23:c3:c0:15:70:23:0c:e9:02: cb:a6:07:6b:4f:b5:51:25:66:64:49:c7:57:7c:7e: f5:7f:1a:3a:30:f4:10:e3:fd:94:a2:52:4c:14:83: 2b:3a:1e:16:99:17:13:15:c9:92:af:11:30:43:f4: e9:f4:85:c2:ea:90:4a:4c:cb:b6:dc:8b:e3:30:ce: b0:6a:ca:7d:38:b0:25:30:bd:75:1a:7d:83:e0:97: 0b:1f:33:03:3f:41:93:62:75:78:2b:c4:bc:c3:4f: 05:9c:b8:e7:e5:52:85:7d:86:ae:b8:09:a3:63:dd: 95:ca:19:cf:22:90:66:7a:58:6d:95:d2:bd:a1:f1: 84:57:30:96:0d:3c:48:af:22:48:d0:71:4d:09:c2: 13:cd:0c:71:2e:4a:f6:33:67:b0:5a:c6:ed:3c:62: e0:93:f2:12:e5:9d:18:e1:3a:c2:d5:4c:77:73:60: 9d:a6:c7:78:39:9c:a0:58:6f:d9:6b:2d:b5:67:e6: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F4:26:D9:D8:38:96:1F:0D:FF:B0:08:55:D9:58:35:14:8D:5A:43 X509v3 Authority Key Identifier: keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a0:f1:96:e9:d7:2c:81:3e:52:73:10:de:f9:b6:4e:60:cb: 7b:81:14:ea:86:f3:5b:22:01:b0:92:40:c1:41:cb:4f:5d:77: db:eb:58:f0:da:8e:94:e2:9d:1d:2a:17:e4:39:27:a7:a0:5e: e3:2f:b9:70:64:a5:a9:c9:69:1e:72:d4:49:17:b2:45:c0:8f: f4:2a:5e:7b:7b:c6:68:1e:6b:9b:44:9f:09:b7:87:48:4c:e9: 61:d1:cc:64:77:c6:51:5f:5d:16:e1:01:18:7b:a2:ae:7b:13: 39:c4:83:22:33:7d:bf:c6:9d:4c:83:46:ab:9d:f9:6a:48:f4: 04:07:0f:0e:bd:c8:90:c8:31:22:bf:40:e7:df:75:2f:db:2b: 5f:8e:ff:41:31:c4:34:54:20:a3:d0:d8:11:80:90:6d:c6:eb: 12:9f:f0:39:06:a0:ec:fc:8c:5e:a9:a3:91:2d:02:71:17:7c: c0:7c:29:0d:2c:f3:a4:ee:68:32:a6:b4:d9:8c:54:a2:23:1d: 93:40:f4:d4:54:7d:06:6a:f9:d2:73:66:87:f4:28:17:38:36: b5:38:8b:7e:c4:69:47:9e:3a:84:f6:45:0d:b2:fc:29:7e:c8: fd:60:16:8b:00:37:61:42:70:64:38:cc:a3:82:f9:73:cb:2e: 78:f3:63:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgCviI5ypB3htak9ZbO/vg9+sbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIx RkYyQzVDNDAeFw0yNjA5MjUxMzExNTVaFw0yNjA5MjYxNjM0NTVaMDMxMTAvBgNV BAMTKDMzRjQyNkQ5RDgzODk2MUYwREZGQjAwODU1RDk1ODM1MTQ4RDVBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaInter7Pd73sEQgCVT/as6PKi WMbXpoeqn7ig0SwFXtuW+G2pzFFgGvEwu5enSDw6MaUglhQFA19V5ZW9MkMpsCPD wBVwIwzpAsumB2tPtVElZmRJx1d8fvV/Gjow9BDj/ZSiUkwUgys6HhaZFxMVyZKv ETBD9On0hcLqkEpMy7bci+MwzrBqyn04sCUwvXUafYPglwsfMwM/QZNidXgrxLzD TwWcuOflUoV9hq64CaNj3ZXKGc8ikGZ6WG2V0r2h8YRXMJYNPEivIkjQcU0JwhPN DHEuSvYzZ7Baxu08YuCT8hLlnRjhOsLVTHdzYJ2mx3g5nKBYb9lrLbVn5vKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/Qm2dg4lh8N/7AIVdlYNRSNWkMwHwYDVR0j BBgwFoAUSztU9KEgPZ316AlCKMkfwh/yxcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWExZTBiZDctMjgxYS00ZWJhLWI5OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRB MTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIxRkYyQzVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QjNCNTRGNEExMjAzRDlERjVFODA5NDIyOEM5MUZDMjFGRjJD NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFG QzIxRkYyQzVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmg8Zbp1yyBPlJzEN75tk5gy3uBFOqG81si AbCSQMFBy09dd9vrWPDajpTinR0qF+Q5J6egXuMvuXBkpanJaR5y1EkXskXAj/Qq Xnt7xmgea5tEnwm3h0hM6WHRzGR3xlFfXRbhARh7oq57EznEgyIzfb/GnUyDRqud +WpI9AQHDw69yJDIMSK/QOffdS/bK1+O/0ExxDRUIKPQ2BGAkG3G6xKf8DkGoOz8 jF6po5EtAnEXfMB8KQ0s86TuaDKmtNmMVKIjHZNA9NRUfQZq+dJzZof0KBc4NrU4 i37EaUeeOoT2RQ2y/Cl+yP1gFosAN2FCcGQ4zKOC+XPLLnjzYws= -----END CERTIFICATE-----Generated at Fri Sep 25 23:31:55 2026 by rpki-client