$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: OBZrwwfMJpRCQpcTfyUBmfBOa1zhZU3IrgDEOjyPgOg= Subject key identifier: 53:05:8F:E1:B9:67:9D:D8:A0:A4:69:D7:B1:05:2D:8D:3A:92:F3:E5 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 587B781AF32F296B1681E04F0104FAC4D5C65664 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: BF Signing time: Mon 21 Sep 2026 05:53:57 +0000 Manifest this update: Mon 21 Sep 2026 05:48:57 +0000 Manifest next update: Tue 22 Sep 2026 08:44:57 +0000 Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) 2: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: NNcnhJAEW0b4P9wmC0fjwIkPcSW+MxHkoxBS8SU8z2g=) 3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7b:78:1a:f3:2f:29:6b:16:81:e0:4f:01:04:fa:c4:d5:c6:56:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Sep 21 05:48:57 2026 GMT Not After : Sep 22 08:44:57 2026 GMT Subject: CN=53058FE1B9679DD8A0A469D7B1052D8D3A92F3E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:48:35:7b:23:70:cf:a4:eb:bc:e2:91:e7: 37:00:fb:2e:a2:dc:9d:b2:0c:e1:2e:cc:29:a9:5c: e2:4f:c1:37:b3:68:1c:7e:36:34:68:85:54:6b:eb: e1:d8:db:fb:05:07:4f:3d:0b:bd:99:67:ba:8a:c8: a6:11:af:02:30:de:60:f5:23:9f:ac:8f:97:0f:cf: 6f:a0:b3:f8:63:2a:6e:29:c0:5f:fd:ee:38:9f:2c: fb:76:42:34:cb:c8:7c:01:20:81:d3:98:e4:33:7c: f3:a8:53:4b:68:d7:c4:b7:ed:0e:93:ae:b5:f4:85: 6b:ea:f5:e3:de:dd:24:f8:40:35:d7:83:0f:f9:7e: 1b:25:5b:12:40:61:f9:34:2b:73:79:61:42:d3:f4: 6f:04:88:5c:8a:86:ea:cc:c5:62:fb:47:78:c9:17: 11:14:c1:27:a0:60:6a:e0:3d:63:3b:d5:b1:33:42: 01:8c:e4:68:15:47:55:9f:05:06:1c:fa:8f:45:08: 94:86:13:23:19:be:64:69:8f:3c:9c:22:27:c0:19: f0:6a:b7:75:ba:7e:5b:c6:40:c3:9b:fa:50:e1:cf: 0a:a4:3a:06:65:2a:0e:8c:80:b1:8e:49:e2:f7:5d: 22:71:c3:6c:39:05:d6:c3:9a:85:7c:13:2c:68:28: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:8F:E1:B9:67:9D:D8:A0:A4:69:D7:B1:05:2D:8D:3A:92:F3:E5 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:18:f8:ae:1a:24:c8:04:49:93:29:16:d4:52:12:19:b6:93: 4b:4e:a5:6e:40:a9:67:88:13:e5:0f:06:d2:11:b5:5e:61:f7: a7:f8:6b:ee:4c:29:ce:c5:c7:50:e2:4b:59:2f:56:85:4a:5c: 85:44:b2:09:a3:40:83:90:77:80:39:68:1c:8a:9e:ec:91:75: d3:d7:b6:dc:e1:5c:a9:6e:5a:34:1c:cc:08:6e:ca:40:b1:e2: a5:d4:92:1c:48:d3:d9:86:19:6d:ce:6a:5b:ba:be:a7:40:7c: 04:32:59:2b:8f:33:a8:dc:08:be:37:ae:5d:58:c7:96:53:c5: 7d:f5:13:c7:ee:e5:67:20:cb:e0:c7:80:c8:93:c0:eb:c4:c2: 9e:66:57:94:e1:69:98:e2:75:69:62:3a:3e:23:4e:0e:75:52: 47:15:c5:cf:43:4f:5e:53:c0:c6:df:5b:dd:06:d4:3e:88:00: 7c:39:5c:d0:a4:e8:a3:dc:37:bf:30:9a:7d:f8:73:64:dc:51: dd:92:6b:0e:a2:81:d3:9c:17:8c:a2:86:35:71:a2:e5:9c:42: c3:de:4c:c7:37:7a:af:0a:3e:62:c0:5e:4a:7c:98:f3:63:3b: 9a:10:4d:ed:17:3d:26:f2:53:a8:c1:d9:66:59:35:a7:88:b3: b6:51:71:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHt4GvMvKWsWgeBPAQT6xNXGVmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA5MjEwNTQ4NTdaFw0yNjA5MjIwODQ0NTdaMDMxMTAvBgNV BAMTKDUzMDU4RkUxQjk2NzlERDhBMEE0NjlEN0IxMDUyRDhEM0E5MkYzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDw0g1eyNwz6TrvOKR5zcA+y6i 3J2yDOEuzCmpXOJPwTezaBx+NjRohVRr6+HY2/sFB089C72ZZ7qKyKYRrwIw3mD1 I5+sj5cPz2+gs/hjKm4pwF/97jifLPt2QjTLyHwBIIHTmOQzfPOoU0to18S37Q6T rrX0hWvq9ePe3ST4QDXXgw/5fhslWxJAYfk0K3N5YULT9G8EiFyKhurMxWL7R3jJ FxEUwSegYGrgPWM71bEzQgGM5GgVR1WfBQYc+o9FCJSGEyMZvmRpjzycIifAGfBq t3W6flvGQMOb+lDhzwqkOgZlKg6MgLGOSeL3XSJxw2w5BdbDmoV8EyxoKF4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwWP4blnndigpGnXsQUtjTqS8+UwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkY+K4aJMgESZMpFtRSEhm2k0tOpW5AqWeI E+UPBtIRtV5h96f4a+5MKc7Fx1DiS1kvVoVKXIVEsgmjQIOQd4A5aByKnuyRddPX ttzhXKluWjQczAhuykCx4qXUkhxI09mGGW3Oalu6vqdAfAQyWSuPM6jcCL43rl1Y x5ZTxX31E8fu5Wcgy+DHgMiTwOvEwp5mV5ThaZjidWliOj4jTg51UkcVxc9DT15T wMbfW90G1D6IAHw5XNCk6KPcN78wmn34c2TcUd2Saw6igdOcF4yihjVxouWcQsPe TMc3eq8KPmLAXkp8mPNjO5oQTe0XPSbyU6jB2WZZNaeIs7ZRcd0= -----END CERTIFICATE-----Generated at Mon Sep 21 10:56:50 2026 by rpki-client