$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: s8BxJ9oI2NVqEDDOy/jqWMzu1NPTbDOaE8gffXAMUf8= Subject key identifier: F1:79:2B:BC:30:C1:B0:9B:F6:B3:B2:A1:FF:E4:15:FB:A8:B5:84:C3 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 7531D0742DCBE95E31ABF51F33657BD11A09FA9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: BF Signing time: Mon 21 Sep 2026 08:37:12 +0000 Manifest this update: Mon 21 Sep 2026 08:32:12 +0000 Manifest next update: Tue 22 Sep 2026 09:24:12 +0000 Files and hashes: 1: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: LhAuHWDR5t+2gTYAc8BhvcqOxzxQnFNDNEzt3dv9w24=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:31:d0:74:2d:cb:e9:5e:31:ab:f5:1f:33:65:7b:d1:1a:09:fa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Sep 21 08:32:12 2026 GMT Not After : Sep 22 09:24:12 2026 GMT Subject: CN=F1792BBC30C1B09BF6B3B2A1FFE415FBA8B584C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dc:a5:12:9b:f8:50:91:c5:ff:1d:9b:7a:f8: f8:5b:27:09:f1:31:f6:b1:27:c2:21:11:84:a2:3b: 74:39:a9:af:7d:ee:c4:6f:f9:a3:06:19:1a:9c:46: 0d:22:a9:23:64:45:49:e1:2b:f6:0f:3d:41:b8:ba: fe:ea:df:86:cb:ce:2f:f6:a8:f4:e5:a6:0f:2d:ab: f4:83:35:e5:37:72:b2:cf:d5:e3:f9:f0:4a:21:8a: 6d:0a:66:03:d8:3e:52:86:b9:65:9b:73:71:3b:bf: 06:87:9f:19:d9:72:2c:d1:ad:97:4e:58:5c:21:e4: 41:d7:ed:f3:a6:e0:7a:b2:28:fd:5b:e1:73:c1:56: e3:c2:da:44:e4:84:0b:5f:4b:83:ef:8a:eb:07:3d: 77:bb:bd:bb:e9:2c:f4:8d:5d:8e:f6:53:ae:a3:7c: 57:f6:e3:33:57:61:27:55:fc:ea:a5:b5:fc:40:9a: 88:6d:a7:33:dd:48:ea:63:4f:d1:c3:ad:a3:c8:c8: cf:55:0e:a1:b5:37:37:09:2f:33:4e:1c:5f:ea:71: 20:f3:2d:9d:18:1a:75:0d:bf:8f:50:70:a9:46:30: ff:db:21:2b:cb:4c:37:28:b7:7a:8d:99:90:c5:f3: 34:54:82:18:da:9a:4b:bb:e2:1f:e1:69:48:ba:f5: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:79:2B:BC:30:C1:B0:9B:F6:B3:B2:A1:FF:E4:15:FB:A8:B5:84:C3 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a6:47:32:85:66:87:65:9d:75:80:5d:8d:92:fe:4f:57:fc: 0e:cf:a7:ee:b4:0b:39:99:8d:18:b2:17:4a:3b:03:38:71:56: f5:a5:a0:27:f8:1f:d4:7c:73:cd:eb:8c:ba:83:59:00:2a:cf: b5:eb:79:13:72:39:4e:99:ad:14:a9:0f:58:c2:50:eb:0e:e6: e1:6c:9b:7c:af:d3:aa:3a:eb:0a:bf:ef:a5:aa:09:4c:b7:9d: ac:80:b0:60:b2:d6:7c:73:12:dd:e2:da:20:12:a6:48:88:b6: a6:1b:9d:c7:bb:37:ae:bb:3b:f1:67:ac:76:8b:3e:82:43:66: a3:09:10:4b:f8:7b:e5:ef:eb:09:6f:c5:79:5b:32:c6:c8:c4: af:9e:a5:8b:d2:40:09:3a:7e:48:8f:95:bb:d4:78:c3:e7:b7: e2:dc:0e:a5:c6:f3:9b:8a:7f:60:94:f8:cb:d5:d3:47:be:02: f2:78:43:e6:37:50:fd:34:e8:e2:05:a2:c4:c4:90:25:30:ff: 07:85:8e:fb:3d:bf:fd:18:f9:45:8e:74:c3:31:56:aa:e7:2f: 86:52:a2:49:6d:82:38:05:c6:c2:94:a6:bb:d7:86:95:98:86: 07:6c:a4:88:27:fa:de:c3:96:80:06:78:df:6f:be:83:a9:4d: 27:c7:5a:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdTHQdC3L6V4xq/UfM2V70RoJ+pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjA5MjEwODMyMTJaFw0yNjA5MjIwOTI0MTJaMDMxMTAvBgNV BAMTKEYxNzkyQkJDMzBDMUIwOUJGNkIzQjJBMUZGRTQxNUZCQThCNTg0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz3KUSm/hQkcX/HZt6+PhbJwnx MfaxJ8IhEYSiO3Q5qa997sRv+aMGGRqcRg0iqSNkRUnhK/YPPUG4uv7q34bLzi/2 qPTlpg8tq/SDNeU3crLP1eP58Eohim0KZgPYPlKGuWWbc3E7vwaHnxnZcizRrZdO WFwh5EHX7fOm4HqyKP1b4XPBVuPC2kTkhAtfS4PviusHPXe7vbvpLPSNXY72U66j fFf24zNXYSdV/OqltfxAmohtpzPdSOpjT9HDraPIyM9VDqG1NzcJLzNOHF/qcSDz LZ0YGnUNv49QcKlGMP/bISvLTDcot3qNmZDF8zRUghjamku74h/haUi69arZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8XkrvDDBsJv2s7Kh/+QV+6i1hMMwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+mRzKFZodlnXWAXY2S/k9X/A7Pp+60CzmZ jRiyF0o7AzhxVvWloCf4H9R8c83rjLqDWQAqz7XreRNyOU6ZrRSpD1jCUOsO5uFs m3yv06o66wq/76WqCUy3nayAsGCy1nxzEt3i2iASpkiItqYbnce7N667O/FnrHaL PoJDZqMJEEv4e+Xv6wlvxXlbMsbIxK+epYvSQAk6fkiPlbvUeMPnt+LcDqXG85uK f2CU+MvV00e+AvJ4Q+Y3UP006OIFosTEkCUw/weFjvs9v/0Y+UWOdMMxVqrnL4ZS okltgjgFxsKUprvXhpWYhgdspIgn+t7DloAGeN9vvoOpTSfHWvU= -----END CERTIFICATE-----Generated at Mon Sep 21 18:54:58 2026 by rpki-client