$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json) Hash identifier: EU7FKGfKCmQYrmw7Xn2BNVqk9dj1PLeiRhHNFQnwBf0= Subject key identifier: 0F:8A:E9:85:57:BE:DB:D1:4D:B3:F1:6F:B5:BF:74:82:01:25:FB:23 Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC Certificate serial: 414A853B02070CA6BD66B1BAA3CB8B28B11BB205 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:05:20 +0000 Manifest this update: Mon 21 Sep 2026 07:00:20 +0000 Manifest next update: Tue 22 Sep 2026 10:41:20 +0000 Files and hashes: 1: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: hHxwfjy+rR5I2Diy+5vSIY1S6lhO0FKs0dRPJWydR6U=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 10:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4a:85:3b:02:07:0c:a6:bd:66:b1:ba:a3:cb:8b:28:b1:1b:b2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC Validity Not Before: Sep 21 07:00:20 2026 GMT Not After : Sep 22 10:41:20 2026 GMT Subject: CN=0F8AE98557BEDBD14DB3F16FB5BF74820125FB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:f4:7e:df:a8:28:62:b4:ff:59:d8:3c:b5: 2d:1c:11:1f:ab:5d:6a:4e:23:e2:33:82:3b:1d:d7: 5a:f3:98:22:f7:31:34:f1:1f:94:f2:8a:72:dd:49: c5:d2:53:fa:e7:0f:b3:e7:08:71:16:ff:5a:74:aa: fd:97:d1:bc:e3:f1:a5:c8:51:d6:f6:14:42:e3:fa: 0c:96:0e:8a:47:a1:d3:7d:58:ea:d4:9a:15:b6:7f: 56:45:cb:b8:ac:de:9e:ab:75:66:23:be:b0:d0:df: 56:0d:7f:b5:94:be:72:71:b5:d1:74:73:44:6f:2b: c2:7e:4e:08:0e:8a:19:46:4f:45:ab:7b:7f:9b:9f: ac:ff:04:fd:ea:43:e1:df:8e:3f:f2:70:60:60:88: 3b:a4:26:38:5f:42:08:c4:c3:31:49:c4:2b:fe:27: ef:81:d7:57:78:37:1d:86:f6:9e:08:94:55:25:80: 0c:5c:ff:6b:a1:3a:62:f7:71:76:5f:89:a1:69:ce: 2d:4a:42:b4:fc:27:8b:f1:7b:4a:97:f0:ad:c5:98: e1:d4:04:4d:1f:50:4d:c4:84:a8:1e:74:e9:79:b4: 49:ae:33:6f:03:3a:19:bc:28:66:b7:52:8f:bb:c3: 4b:96:d7:0e:a5:5d:ed:32:f5:8f:0f:92:8a:cc:b4: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8A:E9:85:57:BE:DB:D1:4D:B3:F1:6F:B5:BF:74:82:01:25:FB:23 X509v3 Authority Key Identifier: keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6a:71:3f:f8:c2:97:ae:59:28:4f:dd:17:09:83:b4:0f:4f: 3e:97:c0:a1:6a:8e:55:4e:f3:b5:d7:80:ba:20:f7:8c:36:61: d2:4d:64:31:33:47:8d:b1:4d:d6:da:46:72:d5:58:0f:e9:3d: 43:aa:d5:fa:7b:15:e6:04:35:54:24:c8:be:54:ba:c6:fb:9e: 6a:57:06:31:cb:16:66:1c:fa:dd:8f:b7:92:9d:02:96:eb:31: 71:45:21:2d:fc:e4:9a:9f:3a:d0:a8:32:cb:cb:da:65:76:86: 8f:f6:36:ce:7e:6d:32:1f:44:f2:7f:55:f0:63:9e:73:dd:6c: 5e:dc:03:f7:2a:d1:22:c7:e2:8b:9f:15:21:87:1f:3d:8d:ca: 27:6c:44:dd:11:d3:f9:5a:cd:ba:01:58:4f:57:f3:f0:5e:fe: 78:de:58:cd:bc:56:98:0f:38:89:fa:da:0a:ff:82:63:13:a9: ab:6d:68:f5:12:11:da:4a:e0:4e:03:c2:6f:5d:de:c9:b3:74: 95:ae:d7:2b:49:c4:64:00:b2:08:7a:bd:2d:a7:15:ec:f1:f9: 68:d0:5f:74:45:22:e9:04:e5:76:ec:2c:9b:b4:59:13:8f:66: 2e:b8:b0:02:94:df:99:92:d0:0d:58:7e:56:10:0d:02:88:44: 11:a7:1b:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUqFOwIHDKa9ZrG6o8uLKLEbsgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5 NEM2NzBBQzAeFw0yNjA5MjEwNzAwMjBaFw0yNjA5MjIxMDQxMjBaMDMxMTAvBgNV BAMTKDBGOEFFOTg1NTdCRURCRDE0REIzRjE2RkI1QkY3NDgyMDEyNUZCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUf/R+36goYrT/Wdg8tS0cER+r XWpOI+Izgjsd11rzmCL3MTTxH5TyinLdScXSU/rnD7PnCHEW/1p0qv2X0bzj8aXI Udb2FELj+gyWDopHodN9WOrUmhW2f1ZFy7is3p6rdWYjvrDQ31YNf7WUvnJxtdF0 c0RvK8J+TggOihlGT0Wre3+bn6z/BP3qQ+Hfjj/ycGBgiDukJjhfQgjEwzFJxCv+ J++B11d4Nx2G9p4IlFUlgAxc/2uhOmL3cXZfiaFpzi1KQrT8J4vxe0qX8K3FmOHU BE0fUE3EhKgedOl5tEmuM28DOhm8KGa3Uo+7w0uW1w6lXe0y9Y8PkorMtISLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4rphVe+29FNs/Fvtb90ggEl+yMwHwYDVR0j BBgwFoAUS+83O8U3ENE2tA2fkoxIXJTGcKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNhZGU5YzAtY2RlMS00N2YwLTljZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JD NTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5NEM2NzBBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkVGMzczQkM1MzcxMEQxMzZCNDBEOUY5MjhDNDg1Qzk0QzY3 MEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4 NUM5NEM2NzBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxqcT/4wpeuWShP3RcJg7QPTz6XwKFqjlVO 87XXgLog94w2YdJNZDEzR42xTdbaRnLVWA/pPUOq1fp7FeYENVQkyL5Uusb7nmpX BjHLFmYc+t2Pt5KdApbrMXFFIS385JqfOtCoMsvL2mV2ho/2Ns5+bTIfRPJ/VfBj nnPdbF7cA/cq0SLH4oufFSGHHz2NyidsRN0R0/lazboBWE9X8/Be/njeWM28VpgP OIn62gr/gmMTqattaPUSEdpK4E4Dwm9d3smzdJWu1ytJxGQAsgh6vS2nFezx+WjQ X3RFIukE5XbsLJu0WROPZi64sAKU35mS0A1YflYQDQKIRBGnG98= -----END CERTIFICATE-----Generated at Mon Sep 21 23:43:10 2026 by rpki-client