$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: RHhfOeafl01C4+gc42xcRdB9MNjsggAglNiVU8UJXCw= Subject key identifier: A1:38:78:DE:EB:40:DB:80:DA:05:DA:0E:AF:32:7C:B4:71:64:5D:14 Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 2BBD0FC39148B37ADC56DD60421CD8E477233DC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: BF Signing time: Mon 21 Sep 2026 07:36:09 +0000 Manifest this update: Mon 21 Sep 2026 07:31:09 +0000 Manifest next update: Tue 22 Sep 2026 10:45:09 +0000 Files and hashes: 1: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) 2: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: Jxr5Jj+l4rVcQTvSsrDS5oWykuOTDSLeEcmgwfZhzc4=) 3: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bd:0f:c3:91:48:b3:7a:dc:56:dd:60:42:1c:d8:e4:77:23:3d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: Sep 21 07:31:09 2026 GMT Not After : Sep 22 10:45:09 2026 GMT Subject: CN=A13878DEEB40DB80DA05DA0EAF327CB471645D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:87:0d:9d:5d:88:e5:92:02:d0:12:b3:cd: d0:45:f1:a1:4b:dc:0b:12:4a:05:c2:0a:96:47:d4: a2:e9:fe:c1:e5:6a:2d:11:8d:cf:c6:c2:ac:3d:78: c2:8e:34:c7:c6:0b:45:f9:1c:bd:07:d7:a3:c7:ea: bc:f6:eb:9f:0e:42:d0:ad:dc:12:18:71:d8:77:37: 7e:b3:61:81:f4:61:19:9c:08:b4:69:45:06:2b:35: 18:2b:e8:15:be:67:d4:9e:ce:55:e4:c6:5e:3a:cc: 1f:4d:21:6b:49:c2:2f:60:76:31:9c:83:5f:aa:3f: 7b:a6:f4:66:2e:00:5e:78:8f:75:cf:6d:c2:20:80: 06:7d:ea:d9:70:71:06:3e:a0:46:e2:bf:d2:aa:8f: 80:8d:bc:a1:ee:bc:24:c1:03:c5:82:f9:c5:89:0d: bb:11:a8:a4:ef:af:da:19:a7:b9:8c:35:b9:ab:54: 14:4e:c4:c2:4c:25:03:36:55:73:17:0f:2b:24:96: 53:7b:7a:d0:52:18:92:9e:e8:58:8c:d9:86:2c:c7: b0:47:77:e1:c8:81:60:ed:48:52:67:55:b8:6b:c3: ae:a4:f1:cf:dd:0f:00:b6:2e:19:5b:95:3b:2d:90: 0f:92:a3:56:51:6c:9b:1c:f0:d3:69:f6:f4:e6:77: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:38:78:DE:EB:40:DB:80:DA:05:DA:0E:AF:32:7C:B4:71:64:5D:14 X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fa:ae:04:5b:39:04:3e:67:e5:d4:3a:cf:75:0b:8a:ea:31: b2:91:f6:78:9f:4e:74:9b:16:a4:16:e6:a7:eb:19:15:15:74: 09:e9:73:93:05:8a:93:ef:ff:ed:9c:85:c1:40:39:93:0b:ef: 62:19:cc:d6:ac:b6:0c:a0:e7:b8:94:3b:e8:d1:0a:92:e6:32: c1:9e:f3:01:60:cc:1f:8a:dd:f7:a0:01:07:98:80:d6:b2:4f: 38:40:60:e6:fc:12:96:0e:2c:15:57:a5:4e:c9:7d:08:fe:32: c0:97:86:73:87:37:c8:b5:0f:b2:23:5b:d8:fd:9e:24:68:72: 5d:ef:dc:3a:52:01:7a:37:c4:18:c7:c4:47:60:63:10:e2:c1: cd:6f:19:90:69:02:b9:50:f9:92:6a:85:5f:10:30:68:41:4c: 9c:3d:b0:6b:af:d7:06:7e:ab:ad:ff:d5:b8:32:b8:40:48:96: 16:85:0d:b6:df:26:52:dc:ad:33:cc:a7:c7:25:25:ad:29:c7: 79:9a:38:ac:88:f3:a6:ce:e5:f1:2d:1b:9d:62:87:5c:93:1b: da:a4:19:48:1c:83:35:78:0a:a2:e7:bd:cd:ed:56:40:88:ea: 30:87:8e:00:90:87:57:d7:de:93:99:4e:02:43:84:4f:1e:5d: b1:2f:98:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK70Pw5FIs3rcVt1gQhzY5HcjPcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjA5MjEwNzMxMDlaFw0yNjA5MjIxMDQ1MDlaMDMxMTAvBgNV BAMTKEExMzg3OERFRUI0MERCODBEQTA1REEwRUFGMzI3Q0I0NzE2NDVEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBS4cNnV2I5ZIC0BKzzdBF8aFL 3AsSSgXCCpZH1KLp/sHlai0Rjc/Gwqw9eMKONMfGC0X5HL0H16PH6rz2658OQtCt 3BIYcdh3N36zYYH0YRmcCLRpRQYrNRgr6BW+Z9SezlXkxl46zB9NIWtJwi9gdjGc g1+qP3um9GYuAF54j3XPbcIggAZ96tlwcQY+oEbiv9Kqj4CNvKHuvCTBA8WC+cWJ DbsRqKTvr9oZp7mMNbmrVBROxMJMJQM2VXMXDyskllN7etBSGJKe6FiM2YYsx7BH d+HIgWDtSFJnVbhrw66k8c/dDwC2LhlblTstkA+So1ZRbJsc8NNp9vTmd9INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTh43utA24DaBdoOrzJ8tHFkXRQwHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT6rgRbOQQ+Z+XUOs91C4rqMbKR9nifTnSb FqQW5qfrGRUVdAnpc5MFipPv/+2chcFAOZML72IZzNastgyg57iUO+jRCpLmMsGe 8wFgzB+K3fegAQeYgNayTzhAYOb8EpYOLBVXpU7JfQj+MsCXhnOHN8i1D7IjW9j9 niRocl3v3DpSAXo3xBjHxEdgYxDiwc1vGZBpArlQ+ZJqhV8QMGhBTJw9sGuv1wZ+ q63/1bgyuEBIlhaFDbbfJlLcrTPMp8clJa0px3maOKyI86bO5fEtG51ih1yTG9qk GUgcgzV4CqLnvc3tVkCI6jCHjgCQh1fX3pOZTgJDhE8eXbEvmE8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:40 2026 by rpki-client