$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json) Hash identifier: JJxVdNaslNcgeA8zf5fTbypv71PsDg3YRP9f/qQpgio= Subject key identifier: 3C:C4:37:AC:E1:94:C9:A1:5A:8B:A3:61:3E:BB:6F:EC:DA:56:44:72 Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 01FAE5622FB950B6B7C7075960917C7C071AFCA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:00:47 +0000 Manifest this update: Wed 23 Sep 2026 23:55:47 +0000 Manifest next update: Fri 25 Sep 2026 00:46:47 +0000 Files and hashes: 1: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=) 2: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: Zo5tHmqGT6FCKvGRVlLdQjC2aqEn9qfMjK+RXnV+LQ0=) 3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fa:e5:62:2f:b9:50:b6:b7:c7:07:59:60:91:7c:7c:07:1a:fc:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: Sep 23 23:55:47 2026 GMT Not After : Sep 25 00:46:47 2026 GMT Subject: CN=3CC437ACE194C9A15A8BA3613EBB6FECDA564472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:86:e3:6b:ed:26:55:58:e8:e5:23:58:8b: 5e:69:27:48:06:09:78:bd:2b:1f:70:44:27:e6:20: c0:8a:35:be:24:82:c9:d9:8d:83:3f:70:e9:ba:d7: 14:27:77:7e:f6:15:ae:96:84:e3:19:2d:43:de:f6: a5:fc:4e:17:7f:51:be:42:ad:3f:43:bc:ac:35:03: b5:ac:c5:42:6c:1d:8c:09:56:1a:b6:44:e2:f6:c5: 94:2a:2f:c8:ce:a2:de:ed:7e:dc:69:8d:de:ef:43: 0d:15:31:08:fd:d3:f6:39:d8:c5:c3:4d:c3:ef:61: 68:20:3c:35:ed:eb:ce:9a:7b:65:1f:47:8c:09:d4: 60:df:78:19:eb:a8:04:0e:82:50:de:82:84:76:fe: 00:ec:67:41:f6:1d:72:49:17:4d:f8:99:3f:5d:4d: 99:e4:4f:fb:75:8f:b9:58:69:df:ef:ac:22:af:20: a3:bb:fa:b4:5e:83:45:84:cb:52:56:07:aa:aa:de: 34:a4:05:1f:fa:d2:00:d6:c0:0c:5e:79:6f:aa:0e: 16:7e:8d:b2:99:e1:9a:5c:02:28:ad:e3:a3:55:eb: 62:58:13:f5:7e:94:8c:09:c2:ef:c3:24:46:72:53: c2:09:38:5a:80:f6:d1:b0:92:06:b8:98:14:52:25: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C4:37:AC:E1:94:C9:A1:5A:8B:A3:61:3E:BB:6F:EC:DA:56:44:72 X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:9c:ca:df:43:92:e7:5f:a5:52:9a:e7:1b:b0:50:e2:33: e4:ce:8c:61:03:5c:cc:15:c1:a2:1a:52:30:a8:8b:9a:9e:cf: 20:87:c1:0a:b5:32:4e:cc:5a:97:6a:01:ff:25:fa:ee:09:f5: 92:81:a3:d6:11:2e:13:f5:ca:ea:23:b5:ba:77:5c:64:c2:9e: 60:51:4c:30:46:15:d6:ea:91:0b:79:cb:c9:25:df:42:98:db: 71:95:52:0e:a1:72:24:8a:2a:5d:33:4b:5f:aa:46:af:36:ec: c2:33:a7:78:97:bc:93:37:03:82:5b:44:5b:b2:8a:d8:d9:40: d3:6e:11:3b:2a:d1:98:83:78:4b:22:12:f6:b4:f5:9d:26:14: d5:cc:50:23:4e:96:c7:20:24:6d:a5:d9:27:6e:f6:17:6b:59: 40:02:92:ae:b7:56:41:c1:a3:78:ed:93:62:9b:c1:31:88:22: a8:61:67:85:8c:bd:d4:ec:0b:b1:5d:f5:86:dd:f9:da:b6:44: 9f:eb:65:0b:10:07:9e:00:19:0b:5e:74:1c:44:ae:cb:93:32: d5:d0:26:a9:95:3c:56:49:0d:eb:fe:72:ed:cc:03:19:b9:8d: 6f:11:5b:99:19:34:03:58:f0:69:cc:b4:9d:a5:f2:ff:7d:18: ad:0a:0d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfrlYi+5ULa3xwdZYJF8fAca/KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjA5MjMyMzU1NDdaFw0yNjA5MjUwMDQ2NDdaMDMxMTAvBgNV BAMTKDNDQzQzN0FDRTE5NEM5QTE1QThCQTM2MTNFQkI2RkVDREE1NjQ0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCIbja+0mVVjo5SNYi15pJ0gG CXi9Kx9wRCfmIMCKNb4kgsnZjYM/cOm61xQnd372Fa6WhOMZLUPe9qX8Thd/Ub5C rT9DvKw1A7WsxUJsHYwJVhq2ROL2xZQqL8jOot7tftxpjd7vQw0VMQj90/Y52MXD TcPvYWggPDXt686ae2UfR4wJ1GDfeBnrqAQOglDegoR2/gDsZ0H2HXJJF034mT9d TZnkT/t1j7lYad/vrCKvIKO7+rReg0WEy1JWB6qq3jSkBR/60gDWwAxeeW+qDhZ+ jbKZ4ZpcAiit46NV62JYE/V+lIwJwu/DJEZyU8IJOFqA9tGwkga4mBRSJQJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMQ3rOGUyaFai6NhPrtv7NpWRHIwHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkEnMrfQ5LnX6VSmucbsFDiM+TOjGEDXMwV waIaUjCoi5qezyCHwQq1Mk7MWpdqAf8l+u4J9ZKBo9YRLhP1yuojtbp3XGTCnmBR TDBGFdbqkQt5y8kl30KY23GVUg6hciSKKl0zS1+qRq827MIzp3iXvJM3A4JbRFuy itjZQNNuETsq0ZiDeEsiEva09Z0mFNXMUCNOlscgJG2l2Sdu9hdrWUACkq63VkHB o3jtk2KbwTGIIqhhZ4WMvdTsC7Fd9Ybd+dq2RJ/rZQsQB54AGQtedBxErsuTMtXQ JqmVPFZJDev+cu3MAxm5jW8RW5kZNANY8GnMtJ2l8v99GK0KDW0= -----END CERTIFICATE-----Generated at Thu Sep 24 09:25:27 2026 by rpki-client