$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json) Hash identifier: 3aFwMzGV5TrX3wdmP/qCVk4eRORltF/y89796u7zgYI= Subject key identifier: 7E:1E:80:D8:89:38:CB:B1:DF:6F:6A:4B:57:45:74:C7:40:53:4B:AA Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 5C04D0ADFA02DB85FD7A208D3C16BF802E6A8A34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:35:27 +0000 Manifest this update: Wed 23 Sep 2026 11:30:27 +0000 Manifest next update: Thu 24 Sep 2026 12:16:27 +0000 Files and hashes: 1: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: 2ZWAVbgHhMGYtWemTxrRdGGh6A7iENjG7cEWliCWDjE=) 2: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=) 3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=) 4: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=) 5: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=) 6: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=) 7: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=) 8: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:04:d0:ad:fa:02:db:85:fd:7a:20:8d:3c:16:bf:80:2e:6a:8a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: Sep 23 11:30:27 2026 GMT Not After : Sep 24 12:16:27 2026 GMT Subject: CN=7E1E80D88938CBB1DF6F6A4B574574C740534BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:e8:fd:36:8a:80:25:ee:04:bf:8d:56:c2: 44:ac:a8:98:5e:a7:15:d9:bf:82:b9:e1:e6:e0:60: 6f:aa:38:18:92:b9:9e:1a:73:ee:91:5c:ae:e0:45: e6:29:fd:83:63:b7:0e:ac:05:2d:d1:ea:3e:74:35: b1:58:16:89:53:58:74:66:f3:92:e5:07:e8:2a:70: 11:b0:ad:6c:fd:a4:ab:06:79:7e:0c:7c:2c:1d:ba: 12:c3:d7:c1:44:28:b5:f6:fd:84:f2:80:7a:af:24: d7:67:3a:80:fb:5b:5c:83:01:3b:5a:c6:a9:2c:dc: 95:e2:fa:20:01:3c:76:f6:2d:0d:39:fb:6d:c7:d0: d2:d3:3e:b0:7c:eb:a8:d2:a5:0b:c7:94:b9:a9:f4: 5c:ed:b1:f1:4e:ae:5d:d8:95:ad:80:19:b2:c5:d8: 07:15:c1:23:1f:44:19:e2:e7:e0:62:f9:73:59:bf: e3:d8:07:5c:f0:15:5d:a6:2a:b2:f7:ce:2c:30:ea: 0f:1c:d1:08:15:7d:94:00:ce:c5:3d:69:6c:95:65: bd:c8:b4:b6:cd:0a:bd:87:13:d1:33:9d:7b:22:4f: 20:72:f0:f4:9a:c5:a8:26:fa:32:c1:d4:a1:e9:68: c7:22:f2:73:25:e4:f8:51:a9:a4:0e:c9:07:44:33: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1E:80:D8:89:38:CB:B1:DF:6F:6A:4B:57:45:74:C7:40:53:4B:AA X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:cf:99:75:54:49:2f:89:29:b7:f5:fb:f6:85:93:76:a5: 43:1d:59:5e:81:c5:1b:23:97:a5:7c:47:57:4c:c8:36:d6:2e: 91:42:b3:3d:e2:56:67:51:fb:b6:36:62:6f:cd:42:7d:3a:63: 3d:75:f9:c9:92:12:98:18:79:e2:03:e1:9c:7c:a3:c7:63:5e: 30:00:84:a8:50:bd:60:f8:ed:d9:69:4d:b4:b3:8b:06:6f:e6: fa:65:97:ae:e6:ad:17:f7:66:b3:df:1b:e4:36:67:30:c2:15: 33:f1:fd:5a:d8:35:83:9a:2f:eb:48:3b:c6:a3:a5:65:04:78: e9:94:40:4d:dc:09:ed:63:7b:f7:4f:c4:99:ea:50:96:0e:92: 67:ee:aa:80:83:8e:d8:8f:c5:c5:d8:a0:52:ff:7e:59:b1:6b: 51:0e:ce:1e:dd:02:ef:6b:5b:e0:72:54:db:55:12:e1:64:32: f7:7c:7b:2a:a1:bc:bb:f8:cd:55:24:47:6c:6b:28:3c:99:b8: 5a:28:a8:66:96:8d:08:19:76:02:1e:d5:44:98:e5:56:35:b2: 72:64:e5:28:02:6e:57:89:1d:2a:f3:5a:cf:66:87:69:91:58: 84:73:dc:ef:56:95:a7:1c:c0:84:d2:5b:c7:71:9d:b8:f2:34: 49:b7:7b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXATQrfoC24X9eiCNPBa/gC5qijQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA5MjMxMTMwMjdaFw0yNjA5MjQxMjE2MjdaMDMxMTAvBgNV BAMTKDdFMUU4MEQ4ODkzOENCQjFERjZGNkE0QjU3NDU3NEM3NDA1MzRCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColej9NoqAJe4Ev41WwkSsqJhe pxXZv4K54ebgYG+qOBiSuZ4ac+6RXK7gReYp/YNjtw6sBS3R6j50NbFYFolTWHRm 85LlB+gqcBGwrWz9pKsGeX4MfCwduhLD18FEKLX2/YTygHqvJNdnOoD7W1yDATta xqks3JXi+iABPHb2LQ05+23H0NLTPrB866jSpQvHlLmp9FztsfFOrl3Yla2AGbLF 2AcVwSMfRBni5+Bi+XNZv+PYB1zwFV2mKrL3ziww6g8c0QgVfZQAzsU9aWyVZb3I tLbNCr2HE9EznXsiTyBy8PSaxagm+jLB1KHpaMci8nMl5PhRqaQOyQdEM2ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfh6A2Ik4y7Hfb2pLV0V0x0BTS6owHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtoz5l1VEkviSm39fv2hZN2pUMdWV6BxRsj l6V8R1dMyDbWLpFCsz3iVmdR+7Y2Ym/NQn06Yz11+cmSEpgYeeID4Zx8o8djXjAA hKhQvWD47dlpTbSziwZv5vpll67mrRf3ZrPfG+Q2ZzDCFTPx/VrYNYOaL+tIO8aj pWUEeOmUQE3cCe1je/dPxJnqUJYOkmfuqoCDjtiPxcXYoFL/flmxa1EOzh7dAu9r W+ByVNtVEuFkMvd8eyqhvLv4zVUkR2xrKDyZuFooqGaWjQgZdgIe1USY5VY1snJk 5SgCbleJHSrzWs9mh2mRWIRz3O9WlaccwITSW8dxnbjyNEm3e7M= -----END CERTIFICATE-----Generated at Thu Sep 24 02:07:14 2026 by rpki-client