$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: hHAzi3E9UBPcCd+uGPZpfR7poesNOKS0cJ5Ib53B06E= Subject key identifier: 5C:FA:39:E5:70:EA:86:DE:9C:A6:DB:90:61:DE:08:2C:41:5D:9E:31 Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 1208BB463DFF952E4E77061C1100B4643E366B48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:18:23 +0000 Manifest this update: Sun 20 Sep 2026 17:13:23 +0000 Manifest next update: Mon 21 Sep 2026 18:00:23 +0000 Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) 2: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: njV4O5Xfz7xQiHTIWzvpx+0RkZaZgU1dsfIFzw3j+3U=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:08:bb:46:3d:ff:95:2e:4e:77:06:1c:11:00:b4:64:3e:36:6b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: Sep 20 17:13:23 2026 GMT Not After : Sep 21 18:00:23 2026 GMT Subject: CN=5CFA39E570EA86DE9CA6DB9061DE082C415D9E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:c6:34:fe:1e:97:3a:12:78:30:06:cd:3e: f2:24:ea:9e:c7:cf:8c:13:0e:c1:1c:76:e9:d0:dd: 03:7f:a9:5d:ef:94:d4:90:8e:35:b7:6c:5c:e6:0a: ce:d9:d4:1b:9a:c0:78:22:ec:57:cd:11:50:49:d3: 28:65:aa:5a:57:b8:c0:0f:fc:6f:10:7d:78:21:b0: ce:a2:86:b5:09:4b:04:9e:45:8f:6a:63:5c:91:00: aa:1b:99:67:ff:a6:dc:2c:c3:ec:a5:6e:10:fc:6d: 2d:34:3a:32:ed:d1:bb:eb:4a:a0:8e:03:6a:1b:45: 30:b9:5b:44:62:78:f9:66:27:65:d3:6b:73:01:c8: 7b:28:8b:3f:b0:40:57:d5:69:ad:f6:20:b2:df:3c: 8a:09:9e:43:b2:48:3a:4b:c9:6a:97:2a:94:c8:1a: ac:7c:d0:b1:8b:a9:9e:61:b8:f7:0d:97:f1:a9:71: 6c:97:cb:9b:ad:55:8c:19:e5:00:64:20:b8:ff:ec: 4a:a1:4c:24:53:cb:36:c2:53:4f:4e:f1:f9:f4:3f: 4b:1f:78:62:8a:9a:82:2a:9a:e6:b6:51:3d:93:28: 98:d6:c0:ab:18:b9:3d:35:14:c9:fa:84:d0:b0:0a: 14:15:04:bd:11:68:b4:75:e3:36:e3:77:05:8a:91: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FA:39:E5:70:EA:86:DE:9C:A6:DB:90:61:DE:08:2C:41:5D:9E:31 X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:10:e4:b5:a8:bd:90:b4:e7:1e:48:78:95:f1:01:b4:1c:97: be:f3:01:cb:01:8b:76:b2:6c:19:77:67:aa:76:2d:e4:85:c7: 51:2c:c1:fd:de:15:05:e0:42:30:15:a4:03:2e:00:1d:99:b0: aa:0c:86:64:32:d2:ce:90:99:18:e7:c1:5f:0c:e1:ad:ba:ec: 22:b6:81:de:92:4a:ca:28:78:bb:46:d5:7d:cb:7b:c8:27:3f: 1a:73:69:0c:c2:b0:4a:4a:84:c0:8c:7c:f2:19:e7:d7:b4:a0: 70:dd:e3:34:1f:0e:68:c9:1e:41:63:b0:f7:82:05:63:cf:fe: 9b:06:f6:3c:ec:45:a4:ee:3c:c6:6b:ea:82:94:f7:51:1a:d8: d9:84:a6:a4:2d:b4:83:ae:a6:15:7b:f5:b4:7c:08:d9:da:86: c1:f2:d1:11:85:6c:e4:fd:62:0b:b8:7a:04:7f:0a:98:fb:a6: b4:17:7e:23:7a:00:b6:46:c7:66:15:d5:16:a5:98:dd:3e:e2: 20:14:da:63:7c:d1:93:6e:90:75:66:d2:94:2a:11:77:13:b2: 45:91:ea:a4:4b:6b:7e:0f:20:71:56:21:c4:1d:91:a3:a6:14: 0c:57:aa:e6:d2:87:73:26:e5:40:70:fb:56:1a:23:69:67:23: d7:d6:82:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgi7Rj3/lS5OdwYcEQC0ZD42a0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA5MjAxNzEzMjNaFw0yNjA5MjExODAwMjNaMDMxMTAvBgNV BAMTKDVDRkEzOUU1NzBFQTg2REU5Q0E2REI5MDYxREUwODJDNDE1RDlFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiMY0/h6XOhJ4MAbNPvIk6p7H z4wTDsEcdunQ3QN/qV3vlNSQjjW3bFzmCs7Z1BuawHgi7FfNEVBJ0yhlqlpXuMAP /G8QfXghsM6ihrUJSwSeRY9qY1yRAKobmWf/ptwsw+ylbhD8bS00OjLt0bvrSqCO A2obRTC5W0RiePlmJ2XTa3MByHsoiz+wQFfVaa32ILLfPIoJnkOySDpLyWqXKpTI Gqx80LGLqZ5huPcNl/GpcWyXy5utVYwZ5QBkILj/7EqhTCRTyzbCU09O8fn0P0sf eGKKmoIqmua2UT2TKJjWwKsYuT01FMn6hNCwChQVBL0RaLR14zbjdwWKkcY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXPo55XDqht6cptuQYd4ILEFdnjEwHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQQ5LWovZC05x5IeJXxAbQcl77zAcsBi3ay bBl3Z6p2LeSFx1Eswf3eFQXgQjAVpAMuAB2ZsKoMhmQy0s6QmRjnwV8M4a267CK2 gd6SSsooeLtG1X3Le8gnPxpzaQzCsEpKhMCMfPIZ59e0oHDd4zQfDmjJHkFjsPeC BWPP/psG9jzsRaTuPMZr6oKU91Ea2NmEpqQttIOuphV79bR8CNnahsHy0RGFbOT9 Ygu4egR/Cpj7prQXfiN6ALZGx2YV1RalmN0+4iAU2mN80ZNukHVm0pQqEXcTskWR 6qRLa34PIHFWIcQdkaOmFAxXqubSh3Mm5UBw+1YaI2lnI9fWghA= -----END CERTIFICATE-----Generated at Mon Sep 21 10:07:11 2026 by rpki-client