$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft File: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft (raw, json) Hash identifier: cuRFCzyYH6CYseaMr82HU7RoGWbSofcczd/m0tmOdGQ= Subject key identifier: 21:E0:78:57:4E:40:DA:20:48:C1:E5:81:9A:CB:1A:38:69:35:97:C9 Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 Certificate issuer: /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Certificate serial: 1D011FDBD94D8E745535B1802B35CF7AE019C802 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft Manifest number: C5 Signing time: Mon 28 Sep 2026 02:37:29 +0000 Manifest this update: Mon 28 Sep 2026 02:32:29 +0000 Manifest next update: Tue 29 Sep 2026 04:16:29 +0000 Files and hashes: 1: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=) 2: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl (hash: PXwSIrBRuZQbmq3eUBsh9wce8QbjVywljIZ0c0xJ/K8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 04:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:01:1f:db:d9:4d:8e:74:55:35:b1:80:2b:35:cf:7a:e0:19:c8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0 Validity Not Before: Sep 28 02:32:29 2026 GMT Not After : Sep 29 04:16:29 2026 GMT Subject: CN=21E078574E40DA2048C1E5819ACB1A38693597C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:21:a1:6f:c0:6f:60:69:55:ff:a1:64:77: 1f:64:d3:be:c9:40:c3:20:24:da:cf:48:f6:11:9d: 0e:9a:77:23:47:d0:50:e5:e1:d1:b7:3e:92:f1:52: 80:5e:77:4a:9a:64:56:8b:89:35:c8:ee:b5:e3:22: 4e:aa:e1:f5:3c:97:36:ea:d2:da:06:35:bc:11:30: bd:c7:b3:14:ea:17:6a:94:ef:0d:73:e0:e7:92:f8: af:99:0f:bc:6a:b6:f9:ef:ee:1b:18:57:7f:3c:19: b4:e9:8f:3f:dd:1f:ff:e3:c6:7d:14:c5:7b:35:7f: ec:0d:12:54:1d:ae:46:aa:58:67:42:d0:8e:8c:07: 36:3b:20:d7:43:0e:f1:64:1d:de:06:92:55:08:07: 03:e0:48:7e:93:bd:40:34:d6:2a:b1:1a:78:98:81: 26:3b:0f:4f:99:25:be:9f:49:4a:aa:0e:4f:aa:2a: b1:d8:1a:93:73:1f:ea:34:55:71:0c:70:65:ba:1e: b5:62:2c:7c:cd:54:9e:d8:57:7e:83:e8:ff:f2:f2: 91:56:92:da:ac:2e:59:11:df:94:0d:30:2d:e5:33: 39:66:b0:32:2f:4d:5e:d2:8f:c1:93:13:52:f8:c3: e2:8b:18:8a:b1:c2:34:c9:b5:ef:bf:8d:97:01:5a: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:78:57:4E:40:DA:20:48:C1:E5:81:9A:CB:1A:38:69:35:97:C9 X509v3 Authority Key Identifier: keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ae:37:10:17:6b:24:36:92:36:f5:12:01:08:0d:9d:da:8f: 85:c6:16:24:31:cd:b9:e7:00:28:57:48:04:95:e0:72:5d:00: 41:6a:51:89:84:a4:7d:ad:a7:02:45:86:b0:72:93:a3:96:6a: 8a:83:06:69:0e:24:d2:02:34:07:21:20:73:79:8f:19:19:cb: 0b:89:9c:b7:ba:b3:09:3d:eb:fd:b6:96:44:79:55:2e:97:d4: 11:ca:51:fb:2b:d9:f6:18:73:d0:dc:7e:3f:0d:3d:cb:16:7c: bf:1b:e1:f9:b0:32:a1:df:d6:95:cf:85:9f:12:62:2b:15:0e: 77:46:0d:17:33:0a:3f:39:47:45:54:b9:2f:4c:2e:74:4c:dd: 70:3c:5b:86:64:ac:7c:b3:c0:c5:e7:76:5f:42:b1:af:a8:1c: f4:01:1c:96:7c:df:e8:55:a5:ac:1d:a4:bd:cb:93:35:64:88: b9:7d:db:21:ad:15:dd:18:43:cf:a3:fd:29:a4:06:6b:7e:bd: 5b:4d:b3:b5:83:31:6d:89:3c:02:ca:3f:98:e3:e3:f6:9e:2b: 1f:01:aa:1f:e8:bb:05:5d:b3:fa:fb:fc:f2:46:70:69:78:fd: 4c:bb:16:42:a3:e8:5f:2d:ac:c2:dc:86:9c:d5:da:e3:2d:e9: 96:2d:d4:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQEf29lNjnRVNbGAKzXPeuAZyAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0 RkI0RTFCMDAeFw0yNjA5MjgwMjMyMjlaFw0yNjA5MjkwNDE2MjlaMDMxMTAvBgNV BAMTKDIxRTA3ODU3NEU0MERBMjA0OEMxRTU4MTlBQ0IxQTM4NjkzNTk3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nSGhb8BvYGlV/6Fkdx9k077J QMMgJNrPSPYRnQ6adyNH0FDl4dG3PpLxUoBed0qaZFaLiTXI7rXjIk6q4fU8lzbq 0toGNbwRML3HsxTqF2qU7w1z4OeS+K+ZD7xqtvnv7hsYV388GbTpjz/dH//jxn0U xXs1f+wNElQdrkaqWGdC0I6MBzY7INdDDvFkHd4GklUIBwPgSH6TvUA01iqxGniY gSY7D0+ZJb6fSUqqDk+qKrHYGpNzH+o0VXEMcGW6HrViLHzNVJ7YV36D6P/y8pFW ktqsLlkR35QNMC3lMzlmsDIvTV7Sj8GTE1L4w+KLGIqxwjTJte+/jZcBWo9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeB4V05A2iBIweWBmssaOGk1l8kwHwYDVR0j BBgwFoAUS+bBu/Dp9TCXGVVoreoiJk+04bAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQzOGMxOTUtNDk0YS00NmEyLWI5M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJG MEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0RkI0RTFCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkU2QzFCQkYwRTlGNTMwOTcxOTU1NjhBREVBMjIyNjRGQjRF MUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIy MjY0RkI0RTFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABquNxAXayQ2kjb1EgEIDZ3aj4XGFiQxzbnn AChXSASV4HJdAEFqUYmEpH2tpwJFhrByk6OWaoqDBmkOJNICNAchIHN5jxkZywuJ nLe6swk96/22lkR5VS6X1BHKUfsr2fYYc9Dcfj8NPcsWfL8b4fmwMqHf1pXPhZ8S YisVDndGDRczCj85R0VUuS9MLnRM3XA8W4ZkrHyzwMXndl9Csa+oHPQBHJZ83+hV pawdpL3LkzVkiLl92yGtFd0YQ8+j/SmkBmt+vVtNs7WDMW2JPALKP5jj4/aeKx8B qh/ouwVds/r7/PJGcGl4/Uy7FkKj6F8trMLchpzV2uMt6ZYt1JM= -----END CERTIFICATE-----Generated at Mon Sep 28 16:25:52 2026 by rpki-client