$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: yFQLgsu6OR9rVU5afQ7L7GE/3V84GOzyOJWhKPElqfw= Subject key identifier: C8:49:0B:99:D7:E6:2A:45:2D:2C:51:C7:21:6C:43:07:CB:53:FB:E3 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 26F21003F7242D2C6D1FC42AB619A3B5FD272869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 01:02:47 +0000 Manifest this update: Tue 22 Sep 2026 00:57:47 +0000 Manifest next update: Wed 23 Sep 2026 04:06:47 +0000 Files and hashes: 1: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 2: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) 3: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 4: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: 0quo39NDJlEf/wbHWELWJrfo5slOq6FjxbGjwo4kOEk=) 5: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f2:10:03:f7:24:2d:2c:6d:1f:c4:2a:b6:19:a3:b5:fd:27:28:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Sep 22 00:57:47 2026 GMT Not After : Sep 23 04:06:47 2026 GMT Subject: CN=C8490B99D7E62A452D2C51C7216C4307CB53FBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b9:57:ca:af:87:76:88:ab:cb:1a:c5:57:68: 75:d2:e9:8f:91:67:d2:9e:41:49:9b:30:2d:77:d3: 32:e9:3a:4f:e0:aa:78:26:c6:f6:bc:ae:56:42:4a: d0:f0:93:92:fc:48:ae:fe:58:35:9b:6c:b1:ba:64: d2:15:97:c3:bd:74:a7:75:11:9b:5f:3e:5d:00:1b: cf:b5:57:f2:d8:3f:59:f0:ff:0a:50:7d:2e:ed:9e: 4d:0f:36:85:9c:a3:13:07:2c:cd:f3:84:70:14:3b: 88:57:d2:15:f8:b8:d7:65:ae:df:88:0b:7d:61:77: 11:ee:c2:06:be:13:1f:0b:a5:ab:94:1d:b5:b7:af: bf:4d:76:49:a7:30:85:ba:53:d7:c4:27:77:da:22: 5f:80:e5:b6:27:68:02:6d:11:81:31:ff:ce:62:63: 6d:e1:ae:33:56:36:6d:70:dd:6d:b7:34:a1:d8:9e: 47:c6:3a:0e:91:e5:37:53:2a:33:95:87:1c:6c:5f: eb:92:d5:e9:46:86:53:0f:e9:1c:74:f6:aa:e2:52: 83:c3:45:be:c6:69:8e:2f:ca:ef:4b:d6:d9:94:39: b9:b6:46:2c:dd:0f:85:44:be:9f:95:96:26:50:fd: f0:d7:8a:20:bc:12:a0:f2:0d:13:16:e5:16:ca:17: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:0B:99:D7:E6:2A:45:2D:2C:51:C7:21:6C:43:07:CB:53:FB:E3 X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e0:d7:f4:28:ed:20:59:df:7d:4a:40:28:f0:a9:21:d4:c7: d1:68:ea:53:70:f4:72:37:3e:50:a5:71:52:c8:7c:ce:1b:03: 53:41:c4:44:e3:f2:7e:1f:ec:c5:e7:ed:6f:c2:c7:1d:c7:22: b5:a7:cd:81:fb:0d:3e:d2:d3:45:2d:52:d4:83:12:93:ce:ab: 84:7c:a1:a9:8c:01:89:5f:70:0b:70:a1:70:f1:29:c2:cb:ba: 65:51:b4:eb:a9:5f:2a:4c:0e:02:b5:0c:82:3d:5c:24:23:67: 86:eb:c3:1b:0c:b8:43:90:fa:a7:79:47:b8:30:06:6b:41:d1: c1:53:dc:80:a4:62:e4:50:45:14:1a:36:0d:4e:fe:e9:06:67: 5a:10:06:e2:ac:7d:28:0a:a5:b3:28:6b:48:82:d1:12:a3:aa: ce:6a:c3:03:8f:7c:c4:80:66:5f:b5:33:90:10:fc:3b:bf:af: b7:65:3b:21:df:68:a6:28:7b:9c:54:d3:a3:a8:55:c7:57:14: fb:bb:97:00:8c:41:ac:31:90:27:96:8a:10:1b:e1:ed:5f:26: 68:47:fa:95:b3:3b:c6:9f:7b:15:78:67:7c:9d:07:50:8c:53: 1a:2a:3e:ee:85:b8:23:33:31:83:5c:7d:22:57:24:76:18:66: 15:07:3b:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvIQA/ckLSxtH8Qqthmjtf0nKGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA5MjIwMDU3NDdaFw0yNjA5MjMwNDA2NDdaMDMxMTAvBgNV BAMTKEM4NDkwQjk5RDdFNjJBNDUyRDJDNTFDNzIxNkM0MzA3Q0I1M0ZCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSuVfKr4d2iKvLGsVXaHXS6Y+R Z9KeQUmbMC130zLpOk/gqngmxva8rlZCStDwk5L8SK7+WDWbbLG6ZNIVl8O9dKd1 EZtfPl0AG8+1V/LYP1nw/wpQfS7tnk0PNoWcoxMHLM3zhHAUO4hX0hX4uNdlrt+I C31hdxHuwga+Ex8LpauUHbW3r79NdkmnMIW6U9fEJ3faIl+A5bYnaAJtEYEx/85i Y23hrjNWNm1w3W23NKHYnkfGOg6R5TdTKjOVhxxsX+uS1elGhlMP6Rx09qriUoPD Rb7GaY4vyu9L1tmUObm2RizdD4VEvp+VliZQ/fDXiiC8EqDyDRMW5RbKF1Z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEkLmdfmKkUtLFHHIWxDB8tT++MwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPg1/Qo7SBZ331KQCjwqSHUx9Fo6lNw9HI3 PlClcVLIfM4bA1NBxETj8n4f7MXn7W/Cxx3HIrWnzYH7DT7S00UtUtSDEpPOq4R8 oamMAYlfcAtwoXDxKcLLumVRtOupXypMDgK1DII9XCQjZ4brwxsMuEOQ+qd5R7gw BmtB0cFT3ICkYuRQRRQaNg1O/ukGZ1oQBuKsfSgKpbMoa0iC0RKjqs5qwwOPfMSA Zl+1M5AQ/Du/r7dlOyHfaKYoe5xU06OoVcdXFPu7lwCMQawxkCeWihAb4e1fJmhH +pWzO8afexV4Z3ydB1CMUxoqPu6FuCMzMYNcfSJXJHYYZhUHOxM= -----END CERTIFICATE-----Generated at Tue Sep 22 03:41:52 2026 by rpki-client