$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json) Hash identifier: NEJAGwBTJwsKfw6I33oooi1vtnmKZUIy0qoX8MLBu+M= Subject key identifier: 11:B9:A6:F6:27:FD:DE:D6:7C:7F:BF:DC:5F:95:FC:A2:AB:DE:B4:B0 Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Certificate serial: 13928FDF9FBAA63ACB6550D20FE97E45726D17F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft Manifest number: BE Signing time: Sun 20 Sep 2026 13:13:20 +0000 Manifest this update: Sun 20 Sep 2026 13:08:20 +0000 Manifest next update: Mon 21 Sep 2026 15:41:20 +0000 Files and hashes: 1: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=) 2: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: D6UzqIAVX4Z1kkfkHN5N/cDBWz9CwxV7ZQ1du/jDK1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:92:8f:df:9f:ba:a6:3a:cb:65:50:d2:0f:e9:7e:45:72:6d:17:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Validity Not Before: Sep 20 13:08:20 2026 GMT Not After : Sep 21 15:41:20 2026 GMT Subject: CN=11B9A6F627FDDED67C7FBFDC5F95FCA2ABDEB4B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:c2:20:5e:3b:97:7e:9c:10:3b:6e:99:29: ec:af:f0:2d:80:bd:aa:f2:94:fa:61:00:ca:be:7b: 2e:e7:c3:1a:7f:e8:80:03:ee:21:10:8d:f1:6e:b2: 42:60:2d:09:0f:f9:c5:42:ae:22:f6:28:4a:35:5b: 1d:04:6c:14:40:4a:16:20:ab:ba:97:6f:88:70:52: 07:7c:46:a3:15:1a:45:51:0e:a4:27:5c:ae:76:47: 27:6b:07:1e:84:95:86:95:a9:78:f3:e5:44:e6:e8: e0:ad:a6:a3:ea:45:83:1c:e9:53:74:f9:ba:10:44: 17:10:dc:36:20:2b:66:98:24:c3:00:84:23:b9:e6: 17:4a:04:31:82:27:97:3c:94:dc:35:c7:fa:23:71: 7e:33:c2:29:5f:bc:9c:36:fc:73:77:85:10:1a:04: f5:0e:04:84:cd:4f:e7:4c:8c:56:4d:48:17:e0:d6: ab:c8:db:60:8c:f4:fe:7f:23:b4:4d:c0:50:fc:62: cf:07:e6:00:08:c2:e9:b5:5f:fc:af:c8:d9:2c:01: 22:93:11:43:11:b2:72:f6:73:f9:fb:4f:9b:7c:89: a0:9b:a3:15:7d:c7:2f:0f:e2:d1:3f:04:ce:e6:a6: d4:96:d5:21:35:b5:04:2d:f7:42:fd:2e:80:58:34: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:A6:F6:27:FD:DE:D6:7C:7F:BF:DC:5F:95:FC:A2:AB:DE:B4:B0 X509v3 Authority Key Identifier: keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e9:e0:fd:96:ad:99:09:2b:1d:41:44:e7:6c:41:a4:c8:e9: cb:88:a6:3d:50:e4:5f:5d:e8:43:9f:d8:7d:1f:e5:ad:8e:56: b3:8a:2f:5e:42:89:0e:c2:d3:0d:56:04:d3:62:b4:6a:98:a0: 00:61:7c:2c:6c:1b:70:ec:9b:44:1e:37:d0:10:a5:62:f9:a0: c2:9e:3b:7e:c2:2c:32:dc:cf:2c:99:fe:2c:0f:5d:b1:3c:37: da:c4:21:4e:7c:d1:48:ea:6b:b7:02:dc:76:bb:0a:2f:3a:48: 4c:c4:25:7c:48:d7:5e:3e:8e:53:31:57:63:d0:9f:01:d6:d7: 80:42:f4:cd:6e:44:ba:a5:31:ce:5c:19:d6:60:46:f4:64:22: 09:fe:b1:ec:c9:19:5f:7b:35:a5:a7:99:98:3a:06:cf:24:38: 02:34:8f:ba:bb:71:89:e5:98:6d:a6:e0:64:41:3c:d4:8f:b8: 5a:dc:87:65:95:76:ab:b2:51:77:1a:29:5b:7f:82:45:4a:17: 23:45:9d:4c:6c:bd:d2:7d:a4:58:57:0f:df:9a:00:82:ce:56: 3d:7c:2b:75:9c:35:e7:87:af:d7:06:18:0a:d8:90:64:04:d7: 8b:e1:39:d8:11:fd:b2:e0:de:c7:9e:e4:0a:de:72:55:fe:b9: 45:a9:3c:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5KP35+6pjrLZVDSD+l+RXJtF/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3 OEU5NDI1ODAeFw0yNjA5MjAxMzA4MjBaFw0yNjA5MjExNTQxMjBaMDMxMTAvBgNV BAMTKDExQjlBNkY2MjdGRERFRDY3QzdGQkZEQzVGOTVGQ0EyQUJERUI0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwsIgXjuXfpwQO26ZKeyv8C2A varylPphAMq+ey7nwxp/6IAD7iEQjfFuskJgLQkP+cVCriL2KEo1Wx0EbBRAShYg q7qXb4hwUgd8RqMVGkVRDqQnXK52RydrBx6ElYaVqXjz5UTm6OCtpqPqRYMc6VN0 +boQRBcQ3DYgK2aYJMMAhCO55hdKBDGCJ5c8lNw1x/ojcX4zwilfvJw2/HN3hRAa BPUOBITNT+dMjFZNSBfg1qvI22CM9P5/I7RNwFD8Ys8H5gAIwum1X/yvyNksASKT EUMRsnL2c/n7T5t8iaCboxV9xy8P4tE/BM7mptSW1SE1tQQt90L9LoBYNLVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbmm9if93tZ8f7/cX5X8oqvetLAwHwYDVR0j BBgwFoAUShjlVA+5z+B6le34m6986XjpQlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlmYzk5NmYtNzJjYS00ZDZiLWEwZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQw RkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3OEU5NDI1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTE4RTU1NDBGQjlDRkUwN0E5NUVERjg5QkFGN0NFOTc4RTk0 MjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdD RTk3OEU5NDI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnp4P2WrZkJKx1BROdsQaTI6cuIpj1Q5F9d 6EOf2H0f5a2OVrOKL15CiQ7C0w1WBNNitGqYoABhfCxsG3Dsm0QeN9AQpWL5oMKe O37CLDLczyyZ/iwPXbE8N9rEIU580Ujqa7cC3Ha7Ci86SEzEJXxI114+jlMxV2PQ nwHW14BC9M1uRLqlMc5cGdZgRvRkIgn+sezJGV97NaWnmZg6Bs8kOAI0j7q7cYnl mG2m4GRBPNSPuFrch2WVdquyUXcaKVt/gkVKFyNFnUxsvdJ9pFhXD9+aAILOVj18 K3WcNeeHr9cGGArYkGQE14vhOdgR/bLg3see5AreclX+uUWpPNM= -----END CERTIFICATE-----Generated at Mon Sep 21 09:02:00 2026 by rpki-client