$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json) Hash identifier: 44ceyxRBQb0R0hmR95xZQ3mfb/tmK/iigfI6JUFGkAQ= Subject key identifier: 8D:E5:5C:95:5C:74:3A:FC:68:B5:A3:E7:86:CE:37:48:10:46:F1:42 Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A Certificate serial: 5723ED3585952710DBDC742F69E84068C1EDC28C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:16:15 +0000 Manifest this update: Wed 23 Sep 2026 12:11:15 +0000 Manifest next update: Thu 24 Sep 2026 13:27:15 +0000 Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=) 3: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: cIUKOde/GbzpC+/Ix9BdZpae703CNOzGwPQaE7kuDAs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:23:ed:35:85:95:27:10:db:dc:74:2f:69:e8:40:68:c1:ed:c2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A Validity Not Before: Sep 23 12:11:15 2026 GMT Not After : Sep 24 13:27:15 2026 GMT Subject: CN=8DE55C955C743AFC68B5A3E786CE37481046F142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:11:fc:75:44:ca:6a:e7:e3:33:3e:fe:dd: 26:fe:e1:62:b0:9b:5f:5a:ae:0e:52:65:db:16:b9: 8a:e8:5e:e0:97:13:bf:49:0c:03:56:bc:ba:0f:d4: 27:74:89:c8:cd:e6:45:7f:66:b1:75:56:99:ff:6e: fc:2c:ed:30:58:eb:21:dd:88:d2:d2:9f:7d:bc:0d: a4:92:2b:47:65:7e:73:98:85:f7:2f:80:90:c6:e9: 15:7c:ed:c1:5b:f1:49:50:f2:b9:0f:72:d2:77:4e: 4e:46:9f:5d:65:bb:aa:4c:da:3d:00:41:01:46:b0: 39:79:9c:1c:fd:c8:bb:32:3b:8c:46:eb:de:77:2f: 19:e0:a7:a1:0c:e3:f7:b4:fd:7e:0f:5c:97:7f:d8: db:96:d2:72:3d:71:34:a5:b1:6c:42:07:1c:e6:84: 25:cf:4e:a1:09:dd:de:1b:8d:92:62:ca:9a:83:e7: f9:f8:e6:ed:93:54:9b:a5:df:4a:d9:74:d7:a0:fe: 01:f6:7a:a9:bd:7e:4a:54:ef:16:bb:e4:c0:be:8e: 08:83:16:46:d3:46:13:9c:75:e7:f3:9b:51:13:c5: 49:34:97:6c:ad:27:5f:4f:d1:5c:12:22:61:36:ab: c1:59:7d:4f:20:57:42:d4:f2:0b:93:34:f1:b7:7f: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E5:5C:95:5C:74:3A:FC:68:B5:A3:E7:86:CE:37:48:10:46:F1:42 X509v3 Authority Key Identifier: keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:36:82:5f:09:a8:e5:de:7a:01:3a:6c:ab:16:f8:6d:c8:2e: 20:4d:b8:69:44:6d:d9:c2:85:b5:1d:51:d6:e4:24:7b:6f:be: 11:76:f3:fb:14:3c:28:37:e6:fb:71:1a:9c:8e:aa:ce:24:57: db:3f:6b:e1:86:94:88:a6:13:a4:62:56:da:74:8b:cf:eb:f3: 1d:72:b6:2b:af:69:a5:fc:ed:16:f8:11:99:1e:a5:b0:ac:41: 04:35:23:b1:12:a5:ee:3b:ca:34:96:cd:75:d1:16:91:8d:3f: 82:ed:9f:a0:8b:74:e6:a0:f9:c8:80:ab:f1:19:e8:41:34:41: 4d:f7:15:40:44:83:98:1f:02:a2:ae:01:13:8c:8c:64:46:89: c5:71:c6:a0:31:48:3b:66:07:1a:de:6f:08:8d:61:9c:ee:e6: 2e:d1:79:40:8d:a9:d5:40:bd:d6:b3:bc:ab:fe:dd:23:3b:e0: 3c:3c:44:41:31:ed:f7:d8:31:72:60:15:e5:8f:b1:8d:a9:3d: 18:b7:e7:37:9c:d0:1e:0c:a1:53:83:9c:1a:24:15:5d:89:27: 0c:81:97:3f:9e:2d:46:8c:1a:6c:2f:7d:e9:a1:a6:7a:2a:46: 98:e4:9a:f2:a2:65:06:3f:1a:33:f1:1e:ce:3d:f4:46:2b:36: f0:e0:4e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyPtNYWVJxDb3HQvaehAaMHtwowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIw MTRGMjA1QTAeFw0yNjA5MjMxMjExMTVaFw0yNjA5MjQxMzI3MTVaMDMxMTAvBgNV BAMTKDhERTU1Qzk1NUM3NDNBRkM2OEI1QTNFNzg2Q0UzNzQ4MTA0NkYxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8xH8dUTKaufjMz7+3Sb+4WKw m19arg5SZdsWuYroXuCXE79JDANWvLoP1Cd0icjN5kV/ZrF1Vpn/bvws7TBY6yHd iNLSn328DaSSK0dlfnOYhfcvgJDG6RV87cFb8UlQ8rkPctJ3Tk5Gn11lu6pM2j0A QQFGsDl5nBz9yLsyO4xG6953Lxngp6EM4/e0/X4PXJd/2NuW0nI9cTSlsWxCBxzm hCXPTqEJ3d4bjZJiypqD5/n45u2TVJul30rZdNeg/gH2eqm9fkpU7xa75MC+jgiD FkbTRhOcdefzm1ETxUk0l2ytJ19P0VwSImE2q8FZfU8gV0LU8guTNPG3f+G1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjeVclVx0OvxotaPnhs43SBBG8UIwHwYDVR0j BBgwFoAUxOnURpgockk2yuY6QXwN4gFPIFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU4MmZjYTktMzIyMi00NWI2LWI0MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5 ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIwMTRGMjA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNEU5RDQ0Njk4Mjg3MjQ5MzZDQUU2M0E0MTdDMERFMjAxNEYy MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBE RTIwMTRGMjA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU2gl8JqOXeegE6bKsW+G3ILiBNuGlEbdnC hbUdUdbkJHtvvhF28/sUPCg35vtxGpyOqs4kV9s/a+GGlIimE6RiVtp0i8/r8x1y tiuvaaX87Rb4EZkepbCsQQQ1I7ESpe47yjSWzXXRFpGNP4Ltn6CLdOag+ciAq/EZ 6EE0QU33FUBEg5gfAqKuAROMjGRGicVxxqAxSDtmBxrebwiNYZzu5i7ReUCNqdVA vdazvKv+3SM74Dw8REEx7ffYMXJgFeWPsY2pPRi35zec0B4MoVODnBokFV2JJwyB lz+eLUaMGmwvfemhpnoqRpjkmvKiZQY/GjPxHs499EYrNvDgTpA= -----END CERTIFICATE-----Generated at Thu Sep 24 04:33:09 2026 by rpki-client