$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: vuPRaPr8Y6XbZOcL+TppHQGIgdcWNGSBK2etlDk14sY= Subject key identifier: 40:95:7E:0C:58:CC:9A:14:BC:64:16:89:13:3D:28:E3:32:F7:88:FF Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 5BA8441144A0EB7242F1E661343041C4042A7A9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:42:16 +0000 Manifest this update: Mon 21 Sep 2026 20:37:16 +0000 Manifest next update: Tue 22 Sep 2026 22:19:16 +0000 Files and hashes: 1: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 2: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 3: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 4: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 5: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 6: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 7: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: 5qVrddTGkW2hzm7sJX+Icl2IRMEvDfyPb3RktX9Hp2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a8:44:11:44:a0:eb:72:42:f1:e6:61:34:30:41:c4:04:2a:7a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Sep 21 20:37:16 2026 GMT Not After : Sep 22 22:19:16 2026 GMT Subject: CN=40957E0C58CC9A14BC641689133D28E332F788FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:13:ad:e0:2d:39:30:9e:0c:e7:c5:ef:18: 09:40:bd:4b:68:ca:54:b7:ec:4f:be:5a:2f:02:9e: ac:4e:7b:eb:2a:21:19:47:e7:ee:f8:18:25:11:9f: c8:83:c4:95:db:80:24:48:a3:68:75:20:d3:20:d5: 33:c2:98:12:d7:c5:17:33:da:dd:17:15:23:b0:b5: c2:a4:68:19:ca:c6:cc:5a:7d:b8:ac:14:37:f6:4f: 75:b5:c4:31:13:36:5e:1f:5a:e9:b2:eb:4a:dd:23: 99:77:9c:27:5d:b6:78:3d:04:2f:9c:7a:6d:af:a4: 38:23:32:b8:cc:a3:06:9c:a8:87:b8:fd:7f:b5:b5: 1e:c7:43:56:f0:6a:39:34:16:ca:39:8b:c2:53:ab: 74:d0:9a:d6:22:70:9c:b7:b8:13:0c:03:1e:3b:2e: 33:d5:7d:6b:73:eb:84:0c:fa:93:4c:4b:ae:58:2a: be:5e:31:6c:ac:5f:69:29:ee:11:c7:87:9d:eb:74: 95:d7:c3:8b:8a:f8:9c:b2:37:89:d0:7c:03:76:ab: 45:3f:2c:6f:8c:74:f4:79:05:1d:6b:52:ee:02:ae: 75:0e:c2:68:5d:23:ba:92:42:b3:42:e8:7d:03:7e: 2a:67:6c:74:d5:d9:9e:d4:c3:0a:68:cd:fd:8d:c8: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:95:7E:0C:58:CC:9A:14:BC:64:16:89:13:3D:28:E3:32:F7:88:FF X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b5:1b:c9:7a:fe:38:55:2c:f5:29:ca:b8:66:05:39:18:05: 03:f1:46:c1:7d:67:d1:59:f8:1c:4c:62:eb:05:39:4b:6d:da: 7d:e5:c9:90:52:0d:d8:10:fd:cc:ed:08:c4:e4:23:48:5d:88: 80:e8:07:4b:05:c5:0d:9f:82:10:e4:18:52:7b:7d:67:37:26: d5:2e:e5:9c:b3:50:29:a6:1e:64:b5:1f:1f:cd:4c:b8:21:d1: 18:f7:b2:d0:3d:0b:03:f9:b6:a8:c8:80:08:17:2a:1f:77:3d: 1d:ff:17:de:ca:49:df:52:91:b2:48:ee:57:f9:b8:75:6a:89: 91:8c:94:17:d2:f3:e3:76:f8:30:1f:0c:24:91:f7:8b:1e:6e: 0e:e7:77:ce:63:13:2c:cf:9e:f8:d9:39:9e:06:f9:0c:45:42: 9f:4d:0d:66:e9:c1:e2:c4:a0:90:77:30:24:73:8d:5e:82:aa: d6:52:42:6a:7f:be:1f:b4:9f:1c:33:e0:24:bd:95:c9:d5:ad: 6e:4d:bd:53:36:14:c8:8b:87:78:66:9b:de:9d:46:67:17:aa: a5:5a:d2:43:09:00:8d:eb:e2:1c:dc:96:01:1a:17:15:8b:3e: 1c:48:4d:52:79:9b:9f:dc:80:06:8a:cc:ab:91:5c:21:cd:52: 54:37:73:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6hEEUSg63JC8eZhNDBBxAQqepwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA5MjEyMDM3MTZaFw0yNjA5MjIyMjE5MTZaMDMxMTAvBgNV BAMTKDQwOTU3RTBDNThDQzlBMTRCQzY0MTY4OTEzM0QyOEUzMzJGNzg4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8hOt4C05MJ4M58XvGAlAvUto ylS37E++Wi8CnqxOe+sqIRlH5+74GCURn8iDxJXbgCRIo2h1INMg1TPCmBLXxRcz 2t0XFSOwtcKkaBnKxsxafbisFDf2T3W1xDETNl4fWumy60rdI5l3nCddtng9BC+c em2vpDgjMrjMowacqIe4/X+1tR7HQ1bwajk0Fso5i8JTq3TQmtYicJy3uBMMAx47 LjPVfWtz64QM+pNMS65YKr5eMWysX2kp7hHHh53rdJXXw4uK+JyyN4nQfAN2q0U/ LG+MdPR5BR1rUu4CrnUOwmhdI7qSQrNC6H0DfipnbHTV2Z7Uwwpozf2NyA9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJV+DFjMmhS8ZBaJEz0o4zL3iP8wHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi1G8l6/jhVLPUpyrhmBTkYBQPxRsF9Z9FZ +BxMYusFOUtt2n3lyZBSDdgQ/cztCMTkI0hdiIDoB0sFxQ2fghDkGFJ7fWc3JtUu 5ZyzUCmmHmS1Hx/NTLgh0Rj3stA9CwP5tqjIgAgXKh93PR3/F97KSd9SkbJI7lf5 uHVqiZGMlBfS8+N2+DAfDCSR94sebg7nd85jEyzPnvjZOZ4G+QxFQp9NDWbpweLE oJB3MCRzjV6CqtZSQmp/vh+0nxwz4CS9lcnVrW5NvVM2FMiLh3hmm96dRmcXqqVa 0kMJAI3r4hzclgEaFxWLPhxITVJ5m5/cgAaKzKuRXCHNUlQ3c/8= -----END CERTIFICATE-----Generated at Tue Sep 22 05:53:52 2026 by rpki-client