$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: 2Ec7vmYNauldLs8NqgXIJNpVCNNqkv3htTihL6E4MNc= Subject key identifier: 2A:2A:5B:5D:C0:12:71:D7:41:9D:ED:16:B7:65:A9:EB:4D:84:B5:99 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 729C386785A16151A28A8B93EFB4A4FDEFF06471 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 22:44:43 +0000 Manifest this update: Tue 22 Sep 2026 22:39:43 +0000 Manifest next update: Thu 24 Sep 2026 00:06:43 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) 2: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: q5HBCvmhqwM0pwl+h6VYV+ZPvMIGmabOS1Mr94tFebQ=) 3: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) 4: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 5: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9c:38:67:85:a1:61:51:a2:8a:8b:93:ef:b4:a4:fd:ef:f0:64:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Sep 22 22:39:43 2026 GMT Not After : Sep 24 00:06:43 2026 GMT Subject: CN=2A2A5B5DC01271D7419DED16B765A9EB4D84B599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:f0:37:3f:e7:a6:0b:16:48:ad:a9:7a:1c: 19:36:a3:84:92:1c:6d:a6:a1:bf:09:8b:88:51:74: e1:7c:6c:25:31:ad:b6:69:69:c4:75:5b:45:f5:3c: a0:b3:81:88:ab:a4:b0:17:66:b4:1c:2d:f4:1b:8e: 70:17:92:50:8a:9e:0f:72:3c:b5:ab:fb:4e:5a:ea: dd:33:a2:db:a8:3d:31:38:b9:af:99:9e:8f:e4:24: 04:63:fa:86:22:31:78:e9:7b:8a:08:f5:59:48:97: f9:7e:34:e3:41:2c:c2:ae:2a:e6:d4:c9:5b:e5:2b: cf:f2:49:b3:4a:da:56:08:0d:d1:87:0a:18:2a:5a: 87:88:22:86:c6:ed:c1:60:e9:25:42:8f:d3:c8:4c: 1e:f1:02:a5:1c:16:89:76:78:b6:80:f5:19:7b:60: dd:c6:03:34:42:f2:83:1f:48:58:79:b7:eb:e3:2e: 4f:af:71:64:7c:c0:b8:43:c4:0f:3d:ea:37:d8:14: ce:36:7c:44:68:03:e5:1e:b2:c4:48:25:da:e1:8a: 60:85:6f:04:78:07:6f:e0:70:68:67:9b:b9:04:ba: 0e:be:39:3a:f6:1f:62:cd:86:7e:b2:a8:3e:a0:b9: 82:90:f2:eb:18:5b:09:44:86:7b:66:2c:4c:83:22: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:5B:5D:C0:12:71:D7:41:9D:ED:16:B7:65:A9:EB:4D:84:B5:99 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:76:ec:89:63:02:16:84:09:11:df:7a:eb:32:e2:14:bf:72: 51:c5:26:d4:16:7a:56:fe:a6:f3:cb:fd:78:1b:ef:f6:8d:26: e8:8d:01:4a:37:b5:0d:68:b9:23:52:5b:24:55:25:5a:97:7c: 2e:30:7b:b4:41:aa:43:13:a7:4d:e1:b5:0a:d5:19:c3:b9:d1: db:56:4c:58:71:6a:7e:34:0b:41:b6:0b:11:44:aa:d1:4e:b0: 2c:f4:e0:5f:87:33:18:e6:19:08:fd:b6:d7:60:21:d7:fd:4c: 34:ef:3c:c4:d9:96:b5:37:63:dc:39:3e:56:e6:74:47:ee:13: 0a:2f:9a:ad:ac:23:73:fd:b5:6d:2d:c4:25:20:7c:83:7a:86: 98:5d:99:25:aa:c1:17:4b:f7:cb:38:33:be:04:07:be:07:fc: 34:2a:06:b3:77:fc:be:87:7d:ce:36:60:d0:80:62:b2:6d:ac: 32:c8:44:6e:08:f4:e6:62:4f:07:a0:ef:35:6d:7f:e1:c1:44: 8c:51:0d:70:86:da:e2:f5:04:81:6b:92:c2:84:24:81:fa:b1: a8:73:f3:69:7d:66:9f:55:08:7d:c6:31:02:a6:a8:1f:c2:bb: d1:62:fa:49:25:ef:e5:38:cc:52:93:d5:d9:19:d9:c2:12:b4: 9e:82:6c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpw4Z4WhYVGiiouT77Sk/e/wZHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA5MjIyMjM5NDNaFw0yNjA5MjQwMDA2NDNaMDMxMTAvBgNV BAMTKDJBMkE1QjVEQzAxMjcxRDc0MTlERUQxNkI3NjVBOUVCNEQ4NEI1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswPA3P+emCxZIral6HBk2o4SS HG2mob8Ji4hRdOF8bCUxrbZpacR1W0X1PKCzgYirpLAXZrQcLfQbjnAXklCKng9y PLWr+05a6t0zotuoPTE4ua+Zno/kJARj+oYiMXjpe4oI9VlIl/l+NONBLMKuKubU yVvlK8/ySbNK2lYIDdGHChgqWoeIIobG7cFg6SVCj9PITB7xAqUcFol2eLaA9Rl7 YN3GAzRC8oMfSFh5t+vjLk+vcWR8wLhDxA896jfYFM42fERoA+UessRIJdrhimCF bwR4B2/gcGhnm7kEug6+OTr2H2LNhn6yqD6guYKQ8usYWwlEhntmLEyDIubHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKipbXcAScddBne0Wt2Wp602EtZkwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl27IljAhaECRHfeusy4hS/clHFJtQWelb+ pvPL/Xgb7/aNJuiNAUo3tQ1ouSNSWyRVJVqXfC4we7RBqkMTp03htQrVGcO50dtW TFhxan40C0G2CxFEqtFOsCz04F+HMxjmGQj9ttdgIdf9TDTvPMTZlrU3Y9w5Plbm dEfuEwovmq2sI3P9tW0txCUgfIN6hphdmSWqwRdL98s4M74EB74H/DQqBrN3/L6H fc42YNCAYrJtrDLIRG4I9OZiTweg7zVtf+HBRIxRDXCG2uL1BIFrksKEJIH6sahz 82l9Zp9VCH3GMQKmqB/Cu9Fi+kkl7+U4zFKT1dkZ2cIStJ6CbLo= -----END CERTIFICATE-----Generated at Wed Sep 23 13:35:50 2026 by rpki-client