$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: yVlIbMV7hD6ONSY/RId9Wmsxa2L+qUFj79we33K5g24= Subject key identifier: 4A:05:11:2A:A7:1D:2A:BD:26:10:39:03:D1:78:57:0A:46:AE:24:3D Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 5CEC2610F97EE9CD037FE27197973E44F029FD7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:35:55 +0000 Manifest this update: Tue 22 Sep 2026 07:30:55 +0000 Manifest next update: Wed 23 Sep 2026 11:20:55 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 3: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: W8Le2OurcE0Bttg5iHkejIcLzwfNsA3SQp+k6ngC9D0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ec:26:10:f9:7e:e9:cd:03:7f:e2:71:97:97:3e:44:f0:29:fd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Sep 22 07:30:55 2026 GMT Not After : Sep 23 11:20:55 2026 GMT Subject: CN=4A05112AA71D2ABD26103903D178570A46AE243D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:a0:74:0d:08:e7:a3:72:80:b0:c5:2a:8f: bd:7b:5c:c1:e1:a8:96:4a:55:cf:0d:db:56:74:7d: 1d:a7:c3:ea:df:45:66:05:a9:ec:08:70:1e:df:ca: 48:92:9c:2f:73:92:74:b8:a1:36:56:df:a7:d5:82: b5:cc:c7:e3:65:f3:54:8e:38:6b:b0:3f:e2:f1:77: ef:9e:b9:4a:ba:23:c9:ee:ca:f3:d9:82:d8:07:c7: 8f:71:42:1c:de:d1:03:ca:d8:99:09:6f:32:10:9a: 82:a6:6b:32:53:49:14:7a:48:c8:53:4b:e2:d4:a4: 42:b0:94:e3:48:bf:97:6a:42:ec:cb:76:2b:48:61: e6:e9:25:bc:02:ae:1d:22:ef:e7:da:d8:9e:31:46: 6e:bb:ce:06:4f:5f:ea:23:e1:5a:6d:92:5e:b5:9b: 7d:be:2c:ae:72:83:7a:43:32:58:e0:f7:3b:bd:d5: 3f:31:76:9a:c2:0c:66:e4:31:34:f9:84:41:08:a2: 94:bb:e2:78:42:86:e7:80:ce:cb:aa:d0:9c:aa:a2: 55:d5:fd:36:8c:bf:6b:77:a2:2c:37:31:9f:f6:b1: 9e:62:b8:f7:d9:f8:85:94:40:c6:e6:26:51:a4:c7: 48:ec:a7:e4:5a:9c:1f:85:18:61:4b:74:c6:97:1b: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:05:11:2A:A7:1D:2A:BD:26:10:39:03:D1:78:57:0A:46:AE:24:3D X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e8:6e:05:02:7e:bb:00:69:2c:c9:bf:d7:98:29:7f:b6:9a: bf:e3:87:e8:8a:f2:6a:a8:a3:3c:9d:06:0d:58:38:5b:09:e4: ee:8c:d0:f2:ee:71:98:f3:be:3f:4f:81:f9:0f:fc:ac:94:36: 2a:54:e5:9c:af:68:44:a3:8c:cf:04:2c:b2:a5:4d:a4:54:e0: 6d:f7:29:db:01:12:73:2b:72:9c:7d:16:ac:f7:77:11:7c:b3: 35:00:7d:b7:36:d0:d9:bf:e4:cf:ef:91:5d:5b:71:1b:5e:6c: 24:ae:58:75:67:22:97:9f:d1:51:ea:a0:73:fd:c3:2a:b7:91: 1d:a3:69:fd:79:ba:73:b2:7f:73:c1:d1:20:74:7e:4a:3e:2b: 2e:35:43:3c:ee:e3:bd:bc:a8:2e:41:08:93:28:f9:55:f0:a1: 11:18:f1:15:ff:9c:6b:63:44:61:7e:c4:9b:0f:eb:4a:0f:7a: 68:06:08:96:ac:75:a4:b1:01:f0:23:c3:39:7d:98:8c:df:84: 78:e7:dc:14:53:75:53:d9:d9:9f:18:26:32:41:89:8c:12:92: 29:68:d2:b4:2b:e0:0e:45:91:0e:73:3a:5d:8b:9c:25:f8:d4: 8b:f8:e3:e3:05:8c:83:5b:ec:2f:d3:46:7b:57:d5:04:16:b2: a5:b7:ee:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOwmEPl+6c0Df+Jxl5c+RPAp/X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA5MjIwNzMwNTVaFw0yNjA5MjMxMTIwNTVaMDMxMTAvBgNV BAMTKDRBMDUxMTJBQTcxRDJBQkQyNjEwMzkwM0QxNzg1NzBBNDZBRTI0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloaB0DQjno3KAsMUqj717XMHh qJZKVc8N21Z0fR2nw+rfRWYFqewIcB7fykiSnC9zknS4oTZW36fVgrXMx+Nl81SO OGuwP+Lxd++euUq6I8nuyvPZgtgHx49xQhze0QPK2JkJbzIQmoKmazJTSRR6SMhT S+LUpEKwlONIv5dqQuzLditIYebpJbwCrh0i7+fa2J4xRm67zgZPX+oj4Vptkl61 m32+LK5yg3pDMljg9zu91T8xdprCDGbkMTT5hEEIopS74nhChueAzsuq0JyqolXV /TaMv2t3oiw3MZ/2sZ5iuPfZ+IWUQMbmJlGkx0jsp+RanB+FGGFLdMaXG8BhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgURKqcdKr0mEDkD0XhXCkauJD0wHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrobgUCfrsAaSzJv9eYKX+2mr/jh+iK8mqo ozydBg1YOFsJ5O6M0PLucZjzvj9PgfkP/KyUNipU5ZyvaESjjM8ELLKlTaRU4G33 KdsBEnMrcpx9Fqz3dxF8szUAfbc20Nm/5M/vkV1bcRtebCSuWHVnIpef0VHqoHP9 wyq3kR2jaf15unOyf3PB0SB0fko+Ky41Qzzu4728qC5BCJMo+VXwoREY8RX/nGtj RGF+xJsP60oPemgGCJasdaSxAfAjwzl9mIzfhHjn3BRTdVPZ2Z8YJjJBiYwSkilo 0rQr4A5FkQ5zOl2LnCX41Iv44+MFjINb7C/TRntX1QQWsqW37qU= -----END CERTIFICATE-----Generated at Tue Sep 22 14:59:53 2026 by rpki-client