$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft File: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft (raw, json) Hash identifier: tGY5nEoz2bLEwW2bjr+nBkLaJfJtQ21c/uFjpKLqqQ0= Subject key identifier: 4E:54:35:96:AE:E3:E8:DC:09:7E:16:0E:D7:41:E5:96:E6:73:F1:EA Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D Certificate issuer: /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Certificate serial: 041C9272214289DCB4C549679ED6F755F198BD13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 12:29:48 +0000 Manifest this update: Tue 29 Sep 2026 12:24:48 +0000 Manifest next update: Wed 30 Sep 2026 16:20:48 +0000 Files and hashes: 1: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl (hash: bI12j6gi4yPkeqBy+cf9xOMJ1S0pNZV0+8MT367gix4=) 2: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=) 4: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: 6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1c:92:72:21:42:89:dc:b4:c5:49:67:9e:d6:f7:55:f1:98:bd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Validity Not Before: Sep 29 12:24:48 2026 GMT Not After : Sep 30 16:20:48 2026 GMT Subject: CN=4E543596AEE3E8DC097E160ED741E596E673F1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:0b:12:d0:16:ed:63:95:19:55:62:6d:14: 02:47:08:f2:db:df:00:9e:93:02:4a:b1:74:09:62: 7b:d3:b8:18:65:04:68:13:51:e2:c9:af:57:99:7d: e9:52:58:d9:5e:bb:2e:f4:65:8c:f5:56:7e:be:ca: d7:fe:ea:64:c5:8f:e1:e8:ec:5b:4f:26:e7:54:59: d1:c8:e7:e4:08:87:04:b2:0c:f9:be:fd:7d:31:39: ce:1e:a2:1a:23:ef:48:af:d1:a9:b8:21:ed:f0:5b: 30:0a:e5:f8:d1:0c:95:a8:a0:e7:03:aa:fa:9a:32: 1e:b3:18:91:00:43:cc:01:ba:ed:28:65:4b:de:36: cc:2b:83:e3:c0:c7:0e:84:4e:05:f0:cc:3a:24:86: b4:51:6d:c5:b9:30:5b:bc:1b:87:ea:9c:22:28:e4: 0a:13:dd:66:78:e2:09:a9:36:3c:7e:2a:30:71:fe: 77:43:a2:46:28:62:ec:3d:7c:10:52:89:c7:10:22: 1b:96:5b:29:79:c9:65:df:6b:29:cc:1e:a0:71:9a: a8:33:3a:b0:75:b4:80:1a:03:b8:a5:f9:3d:29:4b: 46:40:66:59:71:71:ce:a7:d0:dd:2f:be:08:59:f8: b2:78:ea:18:93:69:19:3e:d1:e7:d0:c5:cb:52:44: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:35:96:AE:E3:E8:DC:09:7E:16:0E:D7:41:E5:96:E6:73:F1:EA X509v3 Authority Key Identifier: keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:59:da:ad:fc:a0:5e:5e:27:fe:fa:91:d5:8b:d6:37:94: 8d:58:a3:b3:dc:a7:68:84:7b:d6:be:90:25:22:bc:5b:fd:b2: 93:85:6e:fa:94:b1:cf:50:4d:ff:86:9b:e9:93:d5:ab:fe:01: 89:45:04:c7:17:62:7a:80:cd:83:a8:5f:18:c0:ea:6b:d8:39: 38:b0:2c:47:39:ae:82:ed:05:03:d2:f0:e6:5c:43:5d:63:5e: ea:6a:02:af:11:30:07:65:4f:13:ab:12:e5:93:bc:2d:fb:79: c5:0b:bd:2e:63:23:af:5b:66:d9:88:b1:5f:01:57:f4:47:57: 43:df:89:27:71:d5:54:59:92:c7:b9:05:b7:66:5b:6a:58:fd: af:3e:dd:d9:12:e3:02:c5:4e:99:09:53:d7:d8:18:4e:78:d3: 77:ea:29:7f:ed:4e:21:51:b9:42:24:77:ea:62:de:6b:28:83: d8:46:3c:f9:d1:8c:70:ea:65:df:51:35:c8:10:1c:91:59:8a: 41:c7:d4:77:a0:2d:62:71:3b:bd:39:b1:11:d0:b3:fd:06:f1: 48:c3:e1:93:d4:e8:a4:14:10:e5:54:eb:43:95:f2:78:c5:b8: 26:5b:68:d8:e9:df:b6:e8:b3:04:ac:6f:33:84:af:7f:c5:5f: 6e:73:ef:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBySciFCidy0xUlnntb3VfGYvRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUw MjcxQ0I0RDAeFw0yNjA5MjkxMjI0NDhaFw0yNjA5MzAxNjIwNDhaMDMxMTAvBgNV BAMTKDRFNTQzNTk2QUVFM0U4REMwOTdFMTYwRUQ3NDFFNTk2RTY3M0YxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBwsS0BbtY5UZVWJtFAJHCPLb 3wCekwJKsXQJYnvTuBhlBGgTUeLJr1eZfelSWNleuy70ZYz1Vn6+ytf+6mTFj+Ho 7FtPJudUWdHI5+QIhwSyDPm+/X0xOc4eohoj70iv0am4Ie3wWzAK5fjRDJWooOcD qvqaMh6zGJEAQ8wBuu0oZUveNswrg+PAxw6ETgXwzDokhrRRbcW5MFu8G4fqnCIo 5AoT3WZ44gmpNjx+KjBx/ndDokYoYuw9fBBSiccQIhuWWyl5yWXfaynMHqBxmqgz OrB1tIAaA7il+T0pS0ZAZllxcc6n0N0vvghZ+LJ46hiTaRk+0efQxctSREldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTlQ1lq7j6NwJfhYO10HlluZz8eowHwYDVR0j BBgwFoAUTnR32rx5MP4YCf7KwOp1HgJxy00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjOGNkYTUtMzQ4My00MmIwLWIzODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFC Qzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUwMjcxQ0I0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAyNzFD QjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1 MUUwMjcxQ0I0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuxWdqt/KBeXif++pHVi9Y3lI1Yo7Pcp2iE e9a+kCUivFv9spOFbvqUsc9QTf+Gm+mT1av+AYlFBMcXYnqAzYOoXxjA6mvYOTiw LEc5roLtBQPS8OZcQ11jXupqAq8RMAdlTxOrEuWTvC37ecULvS5jI69bZtmIsV8B V/RHV0PfiSdx1VRZkse5BbdmW2pY/a8+3dkS4wLFTpkJU9fYGE5403fqKX/tTiFR uUIkd+pi3msog9hGPPnRjHDqZd9RNcgQHJFZikHH1HegLWJxO705sRHQs/0G8UjD 4ZPU6KQUEOVU60OV8njFuCZbaNjp37boswSsbzOEr3/FX25z7+g= -----END CERTIFICATE-----Generated at Tue Sep 29 19:58:28 2026 by rpki-client