$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: Rg4qz+tS/Wq4FBSADj70zNDfsDm9HN7KdDu5VHXjCFc= Subject key identifier: F0:28:67:A7:5E:EA:F8:C4:04:4E:C3:9F:F3:6E:F4:F0:48:00:D7:56 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 29CB9817D83A3CC9EF97ED3005E5B9E20EC65E09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:50:03 +0000 Manifest this update: Mon 21 Sep 2026 02:45:03 +0000 Manifest next update: Tue 22 Sep 2026 04:41:03 +0000 Files and hashes: 1: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 2: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 3: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 4: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: 4QeW7qGyaGqr0iZzEkDP3x/kyZX5u82jR73IIdQcF7k=) 5: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 6: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 7: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cb:98:17:d8:3a:3c:c9:ef:97:ed:30:05:e5:b9:e2:0e:c6:5e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Sep 21 02:45:03 2026 GMT Not After : Sep 22 04:41:03 2026 GMT Subject: CN=F02867A75EEAF8C4044EC39FF36EF4F04800D756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:85:3a:00:d2:61:c6:be:74:60:25:2a:29: 91:92:30:0a:a4:95:3f:2d:d6:b3:40:17:27:44:65: cf:bd:6d:9d:4d:fd:3f:66:77:59:26:9c:ef:77:fa: fe:3a:ad:c2:b4:e5:71:98:c3:1f:51:22:d2:26:12: 4a:1f:88:0b:a0:89:ee:13:46:f8:44:a8:d9:d7:a5: d0:57:1e:b6:b5:20:9f:b4:cb:56:d0:8e:f4:04:d2: 03:eb:34:3b:2f:de:a6:c8:a5:b4:aa:e8:6c:4b:9a: 7d:74:79:a0:ab:2f:aa:70:3e:b7:12:40:fc:c1:e1: 66:88:5e:b4:17:68:18:3e:71:16:c5:6e:c2:6d:39: 51:2d:ef:57:b6:fc:3b:09:28:b6:05:2b:6c:75:cc: 4c:8a:84:c9:bb:b9:5f:8d:55:65:4d:5c:8d:0a:79: c7:e0:ad:b7:76:db:fb:c3:d9:81:14:03:12:52:4d: 56:e9:42:f8:9a:dd:6f:b5:29:0c:e6:9d:b0:42:ca: 79:65:e1:df:5c:55:4c:be:85:33:81:60:7f:dd:8b: 36:cf:1e:b5:f5:5f:18:00:59:9a:83:3e:0f:35:4a: eb:25:de:8e:a1:8d:eb:0d:1e:a7:2f:ce:70:67:63: 60:aa:90:bd:24:85:35:f6:02:b4:6e:48:96:65:5f: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:28:67:A7:5E:EA:F8:C4:04:4E:C3:9F:F3:6E:F4:F0:48:00:D7:56 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:75:a1:64:ec:3e:a6:0e:b8:7e:1d:2d:39:23:05:d2:45:3f: 3a:67:cf:cd:e1:c0:82:66:55:8a:91:a5:b8:68:3b:2f:b4:20: 0f:09:bd:cc:f1:23:a2:3f:02:70:54:b5:9c:31:b1:2a:02:e9: 06:9a:02:e1:a0:1e:96:3c:a3:17:2e:ef:d9:70:ce:0d:72:68: 00:cc:4a:09:f4:ae:67:7f:05:9d:4d:96:e5:80:b5:40:f9:74: 10:d4:31:e9:97:c8:b7:fb:fd:07:1d:0c:d7:fd:17:35:f6:76: 23:8a:91:bd:4a:b8:cd:a1:07:b2:28:4e:36:82:c0:c4:2f:9e: 04:39:06:a1:c0:1c:33:60:b3:16:20:17:ea:98:76:c6:30:62: 5b:9c:e9:97:c1:43:d6:1e:94:e2:a4:4c:a5:7d:06:b3:15:0d: d6:58:bc:c6:05:a4:b6:0b:8f:a5:54:b0:94:ae:a2:c2:9e:1a: 06:e2:8e:5f:44:a8:c4:b3:03:0f:d1:e9:4c:a3:34:fa:8c:f3: f3:14:a4:c5:0a:39:59:a2:d4:a5:c4:87:e2:93:1d:d2:c1:f1: 76:46:7b:53:8e:81:5f:f2:25:e2:36:26:5f:a6:b9:08:72:cb: 9c:49:9a:27:cb:39:51:c0:19:8a:ac:88:e5:e9:bb:7b:65:30: 6d:34:f9:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcuYF9g6PMnvl+0wBeW54g7GXgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA5MjEwMjQ1MDNaFw0yNjA5MjIwNDQxMDNaMDMxMTAvBgNV BAMTKEYwMjg2N0E3NUVFQUY4QzQwNDRFQzM5RkYzNkVGNEYwNDgwMEQ3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgroU6ANJhxr50YCUqKZGSMAqk lT8t1rNAFydEZc+9bZ1N/T9md1kmnO93+v46rcK05XGYwx9RItImEkofiAugie4T RvhEqNnXpdBXHra1IJ+0y1bQjvQE0gPrNDsv3qbIpbSq6GxLmn10eaCrL6pwPrcS QPzB4WaIXrQXaBg+cRbFbsJtOVEt71e2/DsJKLYFK2x1zEyKhMm7uV+NVWVNXI0K ecfgrbd22/vD2YEUAxJSTVbpQvia3W+1KQzmnbBCynll4d9cVUy+hTOBYH/dizbP HrX1XxgAWZqDPg81Susl3o6hjesNHqcvznBnY2CqkL0khTX2ArRuSJZlX8LxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Chnp17q+MQETsOf82708EgA11YwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV1oWTsPqYOuH4dLTkjBdJFPzpnz83hwIJm VYqRpbhoOy+0IA8JvczxI6I/AnBUtZwxsSoC6QaaAuGgHpY8oxcu79lwzg1yaADM Sgn0rmd/BZ1NluWAtUD5dBDUMemXyLf7/QcdDNf9FzX2diOKkb1KuM2hB7IoTjaC wMQvngQ5BqHAHDNgsxYgF+qYdsYwYluc6ZfBQ9YelOKkTKV9BrMVDdZYvMYFpLYL j6VUsJSuosKeGgbijl9EqMSzAw/R6UyjNPqM8/MUpMUKOVmi1KXEh+KTHdLB8XZG e1OOgV/yJeI2Jl+muQhyy5xJmifLOVHAGYqsiOXpu3tlMG00+Uk= -----END CERTIFICATE-----Generated at Mon Sep 21 16:37:14 2026 by rpki-client