$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: yW4rp94QbewbkhEVcnCsCVT6TK3B8xW1cuV80yF7nLg= Subject key identifier: 1C:F1:A8:4B:38:A8:45:AF:75:BC:EF:90:D8:84:A6:5E:D7:02:84:57 Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 3342B328B713A78A939430372393D1B4A7E954F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: BD Signing time: Sun 20 Sep 2026 14:35:06 +0000 Manifest this update: Sun 20 Sep 2026 14:30:06 +0000 Manifest next update: Mon 21 Sep 2026 17:50:06 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) 3: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: lcMiaj2LKuMIJXkqnlAFTIyxy6qGnzqcX7TZfl0bWFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:42:b3:28:b7:13:a7:8a:93:94:30:37:23:93:d1:b4:a7:e9:54:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Sep 20 14:30:06 2026 GMT Not After : Sep 21 17:50:06 2026 GMT Subject: CN=1CF1A84B38A845AF75BCEF90D884A65ED7028457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:0f:41:b2:c0:0e:62:0c:23:58:4b:4f:28: e9:b5:08:7e:e3:42:88:6b:72:ec:32:a1:c1:54:ee: 1f:1c:6a:c1:0b:34:b2:4c:eb:f8:09:f4:c2:d3:7f: 5c:e1:15:9d:4d:3c:f5:6e:2b:9c:83:d7:c3:b6:63: 8a:a5:93:87:af:d8:df:6d:34:b8:7e:cb:13:5c:ac: c4:74:f2:40:18:1d:b6:77:74:7e:27:2d:c8:5e:84: ae:8b:0e:60:32:fc:88:41:56:5f:64:88:6b:a0:3b: 2d:89:7f:90:4f:d3:0a:5d:7b:2d:06:02:dd:56:0d: 0b:c1:17:c7:fc:6b:3a:53:f4:89:42:ac:25:18:5b: 32:9a:7c:30:0a:a6:fd:69:15:6f:0b:04:e9:43:5b: 63:ad:06:a8:fd:82:22:81:1b:05:e9:55:14:36:75: 57:94:86:3a:1b:50:72:26:8e:18:66:1e:8f:71:43: b5:7c:44:e2:be:82:ef:19:65:55:fb:89:2f:67:d6: 14:a1:fa:5b:43:1b:76:91:9c:b4:c7:72:23:7f:c0: 3c:54:dd:e9:d4:19:72:94:48:a1:9e:40:28:7b:65: 4e:03:b5:89:de:14:34:8d:ff:a8:20:c0:71:15:d5: 69:5b:55:d4:0f:74:41:cb:5c:22:cd:c3:4e:a8:c0: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:A8:4B:38:A8:45:AF:75:BC:EF:90:D8:84:A6:5E:D7:02:84:57 X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:74:ce:bf:d4:a4:0c:54:16:26:a5:28:81:0b:d7:df:e0:35: b4:2e:39:3b:d4:5c:35:99:c1:36:62:c1:e6:dd:34:b0:72:fa: 01:ed:14:4d:d2:45:91:02:50:12:da:a5:66:f6:c7:fc:a6:c5: db:20:45:2e:88:2d:5e:89:94:b3:8e:92:81:5f:39:00:b4:56: 00:ff:6e:0b:32:1d:d2:36:f2:40:82:33:6a:ff:e2:ae:32:ab: 3a:39:9b:4e:41:0d:42:4c:90:d9:93:b8:d7:68:6d:9a:d6:ab: 5d:0d:e8:f9:e9:ca:dc:ef:f1:da:49:eb:fd:fb:b8:f7:34:7a: b3:5f:de:82:e6:c5:1c:cc:e3:2d:fa:fe:9e:cf:a6:39:61:2f: 24:82:5c:49:9d:f6:8c:7a:0b:2c:62:47:f3:19:40:42:6b:82: a5:6c:4c:b3:24:4d:8a:b2:63:1d:3e:54:39:0f:96:6f:3d:8b: a3:05:ec:f5:a2:f5:b8:5a:62:5e:cb:c9:4a:1e:da:a7:44:b1: 92:54:e9:13:f9:94:06:3f:af:55:9f:98:c4:df:20:0a:9b:3d: 53:07:05:ce:83:87:90:df:72:07:43:3c:39:7d:49:d8:da:04: 22:0a:a5:2d:35:80:c7:8a:67:82:11:da:b1:d1:1b:fb:37:e8: 98:83:b4:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0KzKLcTp4qTlDA3I5PRtKfpVPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA5MjAxNDMwMDZaFw0yNjA5MjExNzUwMDZaMDMxMTAvBgNV BAMTKDFDRjFBODRCMzhBODQ1QUY3NUJDRUY5MEQ4ODRBNjVFRDcwMjg0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48w9BssAOYgwjWEtPKOm1CH7j QohrcuwyocFU7h8casELNLJM6/gJ9MLTf1zhFZ1NPPVuK5yD18O2Y4qlk4ev2N9t NLh+yxNcrMR08kAYHbZ3dH4nLchehK6LDmAy/IhBVl9kiGugOy2Jf5BP0wpdey0G At1WDQvBF8f8azpT9IlCrCUYWzKafDAKpv1pFW8LBOlDW2OtBqj9giKBGwXpVRQ2 dVeUhjobUHImjhhmHo9xQ7V8ROK+gu8ZZVX7iS9n1hSh+ltDG3aRnLTHciN/wDxU 3enUGXKUSKGeQCh7ZU4DtYneFDSN/6ggwHEV1WlbVdQPdEHLXCLNw06owOrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHPGoSzioRa91vO+Q2ISmXtcChFcwHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx0zr/UpAxUFialKIEL19/gNbQuOTvUXDWZ wTZiwebdNLBy+gHtFE3SRZECUBLapWb2x/ymxdsgRS6ILV6JlLOOkoFfOQC0VgD/ bgsyHdI28kCCM2r/4q4yqzo5m05BDUJMkNmTuNdobZrWq10N6Pnpytzv8dpJ6/37 uPc0erNf3oLmxRzM4y36/p7PpjlhLySCXEmd9ox6CyxiR/MZQEJrgqVsTLMkTYqy Yx0+VDkPlm89i6MF7PWi9bhaYl7LyUoe2qdEsZJU6RP5lAY/r1WfmMTfIAqbPVMH Bc6Dh5DfcgdDPDl9SdjaBCIKpS01gMeKZ4IR2rHRG/s36JiDtNA= -----END CERTIFICATE-----Generated at Mon Sep 21 10:10:50 2026 by rpki-client