$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: tKwMiGKiVPf4W9lFr2Kx55qT9e4DjyHWu/UXBAMxnKQ= Subject key identifier: 10:0F:6C:83:0B:70:09:29:37:F3:09:7B:A4:D7:A5:3F:EA:B7:62:52 Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 3EA46924BC0D8D63761287354D5550826ACB0A0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:16:28 +0000 Manifest this update: Mon 21 Sep 2026 12:11:28 +0000 Manifest next update: Tue 22 Sep 2026 14:07:28 +0000 Files and hashes: 1: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: +PJs4RY1A8xAI8Lwzf9PcUzAkh2i3C4FnNlj8EazwqE=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a4:69:24:bc:0d:8d:63:76:12:87:35:4d:55:50:82:6a:cb:0a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: Sep 21 12:11:28 2026 GMT Not After : Sep 22 14:07:28 2026 GMT Subject: CN=100F6C830B70092937F3097BA4D7A53FEAB76252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:e8:db:db:d6:6f:ed:c9:64:4a:00:de:9b: 49:5e:54:08:63:f8:7a:e5:5c:aa:62:29:1f:6a:f6: d2:76:2b:75:f4:81:b0:11:62:1a:c9:37:92:45:11: bd:d9:8d:97:52:a5:22:f9:52:eb:4e:b2:f9:2d:66: f2:72:2c:88:b9:46:a5:ec:c7:62:4f:d8:39:fd:84: a4:43:18:86:ee:11:42:0d:ef:35:e4:fc:9c:16:2e: 3e:5f:4d:88:cd:78:ad:68:43:1a:18:2b:49:3c:e4: 17:2a:95:a9:4d:2a:1e:e3:14:17:c2:57:9f:54:78: 0a:53:2a:f9:37:47:32:7f:71:7a:3f:fa:a5:97:e2: 74:83:35:60:8f:0e:8c:d2:3d:4f:d8:3c:3d:a9:59: a9:47:c9:a0:4b:fa:6d:12:a7:7c:44:76:0e:ad:fd: d5:27:5e:cb:53:66:b6:70:ed:fb:8f:54:97:28:0b: a8:a8:95:1f:0b:1e:88:a9:ad:d4:50:8c:d0:27:9c: 1c:40:67:25:57:cd:b9:e8:b6:04:b3:7e:bf:a0:72: 65:32:7c:fa:87:7e:a9:bf:a6:99:95:bd:cb:c7:b1: c2:52:2b:18:d0:47:bf:d0:e8:f8:2c:f6:03:2b:b0: 2c:02:b7:6e:b5:b0:2d:42:e2:dd:ac:cc:01:00:c2: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0F:6C:83:0B:70:09:29:37:F3:09:7B:A4:D7:A5:3F:EA:B7:62:52 X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:db:58:cd:a1:53:7e:d9:38:33:da:2f:ad:79:9c:e6:3b:79: 81:98:56:97:b1:3b:16:2c:84:27:e5:f3:93:9a:44:25:91:4a: d3:ad:c5:60:81:82:97:ea:d9:ed:0a:d8:cf:6f:28:32:7c:5b: d4:33:83:02:7d:29:51:4f:de:49:ca:29:11:cb:af:ff:88:5e: e8:25:b5:b2:15:d3:3e:9c:7f:26:71:1c:04:bc:e4:27:53:bf: 05:85:ee:50:46:30:2f:7b:81:2b:ff:0c:f6:53:b7:ec:9f:42: 82:9e:67:22:eb:f2:0f:97:6f:72:4a:82:81:8e:a2:ed:11:81: 78:2a:f4:6d:f4:9c:e4:51:1b:d4:57:ac:e8:bd:53:93:db:4d: 2b:13:e1:7e:29:f6:0b:66:d0:a2:31:1e:71:7e:1c:ce:f8:be: 2c:92:15:4c:37:de:4b:5b:6b:73:9e:55:c6:57:52:40:6c:04: 5c:1c:4c:82:a4:ac:41:26:00:99:9c:9c:c9:30:3f:a3:4c:d8: 57:47:d1:de:6f:a3:67:43:0d:a1:ae:ec:9b:be:9c:90:b3:37: 7a:21:a7:5b:bf:0c:31:98:f4:51:65:c8:53:5d:4f:42:62:df: e5:83:9d:5d:c2:e9:3c:04:d7:2d:25:9b:64:ad:46:bf:fd:54: 73:7c:6e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqRpJLwNjWN2Eoc1TVVQgmrLCg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA5MjExMjExMjhaFw0yNjA5MjIxNDA3MjhaMDMxMTAvBgNV BAMTKDEwMEY2QzgzMEI3MDA5MjkzN0YzMDk3QkE0RDdBNTNGRUFCNzYyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxy+jb29Zv7clkSgDem0leVAhj +HrlXKpiKR9q9tJ2K3X0gbARYhrJN5JFEb3ZjZdSpSL5UutOsvktZvJyLIi5RqXs x2JP2Dn9hKRDGIbuEUIN7zXk/JwWLj5fTYjNeK1oQxoYK0k85BcqlalNKh7jFBfC V59UeApTKvk3RzJ/cXo/+qWX4nSDNWCPDozSPU/YPD2pWalHyaBL+m0Sp3xEdg6t /dUnXstTZrZw7fuPVJcoC6iolR8LHoiprdRQjNAnnBxAZyVXzbnotgSzfr+gcmUy fPqHfqm/ppmVvcvHscJSKxjQR7/Q6Pgs9gMrsCwCt261sC1C4t2szAEAwqAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEA9sgwtwCSk38wl7pNelP+q3YlIwHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHbWM2hU37ZODPaL615nOY7eYGYVpexOxYs hCfl85OaRCWRStOtxWCBgpfq2e0K2M9vKDJ8W9QzgwJ9KVFP3knKKRHLr/+IXugl tbIV0z6cfyZxHAS85CdTvwWF7lBGMC97gSv/DPZTt+yfQoKeZyLr8g+Xb3JKgoGO ou0RgXgq9G30nORRG9RXrOi9U5PbTSsT4X4p9gtm0KIxHnF+HM74viySFUw33ktb a3OeVcZXUkBsBFwcTIKkrEEmAJmcnMkwP6NM2FdH0d5vo2dDDaGu7Ju+nJCzN3oh p1u/DDGY9FFlyFNdT0Ji3+WDnV3C6TwE1y0lm2StRr/9VHN8bv4= -----END CERTIFICATE-----Generated at Mon Sep 21 17:51:18 2026 by rpki-client