$ rpki-client -vvvf rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft File: 4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft (raw, json) Hash identifier: Q4VboeL5ffIwOmWCIUiagHLS5wBo7djYqlG/6QWZZ5U= Subject key identifier: 9F:C6:98:92:1F:62:AE:7B:80:38:4A:3C:71:C9:0A:25:50:2A:A5:5D Authority key identifier: 4A:BC:46:0A:78:ED:A7:8E:D4:17:C2:15:E1:52:89:F1:FC:DD:13:CB Certificate issuer: /CN=4ABC460A78EDA78ED417C215E15289F1FCDD13CB Certificate serial: 7FB804C4B6B737C6474668E859280D06FD011322 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft Manifest number: BE Signing time: Sun 20 Sep 2026 18:50:02 +0000 Manifest this update: Sun 20 Sep 2026 18:45:02 +0000 Manifest next update: Mon 21 Sep 2026 21:20:02 +0000 Files and hashes: 1: 4ABC460A78EDA78ED417C215E15289F1FCDD13CB.crl (hash: EGvpO7u3Yx12gfBmFVismH9cDNv46ScDmyoSTY0/CN0=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: uRzCkmERAHpbeHxBuObTU8ftA4JdncgZgcIleBtINs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.crl rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b8:04:c4:b6:b7:37:c6:47:46:68:e8:59:28:0d:06:fd:01:13:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ABC460A78EDA78ED417C215E15289F1FCDD13CB Validity Not Before: Sep 20 18:45:02 2026 GMT Not After : Sep 21 21:20:02 2026 GMT Subject: CN=9FC698921F62AE7B80384A3C71C90A25502AA55D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:4b:fb:37:25:5c:a3:9d:0b:52:78:ad:b7: 51:79:52:11:13:b1:e1:3f:ab:56:a7:86:52:fb:e3: 3f:d6:07:8a:f7:a5:f7:89:5a:78:13:df:e2:4c:96: 66:47:d8:32:05:70:78:d1:d1:5e:96:2a:1f:98:ff: 85:a3:78:ef:b7:d8:a8:10:ac:dc:c3:5d:f2:82:e4: e0:e1:5d:e4:5c:c4:37:cc:94:c8:b0:43:3d:4e:c5: 83:f7:fb:01:11:0d:32:35:17:18:82:27:22:31:4d: e2:7b:bf:ad:66:aa:dc:29:68:46:f4:08:ca:28:66: 26:e7:4a:6e:ed:e8:e1:2a:4c:b2:45:5b:e3:92:49: 03:eb:31:64:37:c1:b5:72:59:6e:bd:8d:66:d9:c0: a4:71:0f:9c:8e:5a:f0:32:fa:82:a6:bb:7a:df:50: 82:96:ec:f9:55:6c:bc:30:8c:79:82:c6:52:29:45: ba:8b:43:a5:ac:2c:3d:46:35:84:8e:bd:14:a5:79: ed:c9:f3:9a:db:4b:3e:c8:66:61:b1:58:68:2c:18: ad:28:40:cd:d2:68:3c:b2:7d:88:95:5f:fb:59:7a: 74:93:e6:99:f0:f9:fa:39:cb:cc:39:dd:7f:d9:1e: a3:c6:31:16:78:49:8c:40:ea:46:52:26:e9:47:83: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C6:98:92:1F:62:AE:7B:80:38:4A:3C:71:C9:0A:25:50:2A:A5:5D X509v3 Authority Key Identifier: keyid:4A:BC:46:0A:78:ED:A7:8E:D4:17:C2:15:E1:52:89:F1:FC:DD:13:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:75:fe:2d:36:49:07:59:17:f5:39:4f:44:4e:85:99:ef:9e: b7:43:3d:86:1b:df:2f:02:20:b0:05:f1:9d:37:3e:d5:ff:29: 80:34:c2:35:36:7f:d6:d8:00:63:98:1b:da:c2:93:d7:db:a9: 96:ef:c6:b1:e6:69:ec:bf:81:e9:e5:f3:d6:c2:0d:13:8b:3e: d1:4d:c4:f8:4c:fe:da:b5:2c:ce:13:5e:1e:4e:b8:8d:f7:39: 90:81:52:0d:76:11:de:b5:83:49:f5:06:ef:c2:62:d6:be:42: c3:64:1f:bf:39:71:d2:dd:2d:82:86:45:49:a7:57:0e:fe:fb: cf:08:60:eb:b9:4c:8f:e7:ac:5a:cc:6e:82:7c:6b:ed:3d:22: 3f:c0:cd:9f:db:f8:1a:28:ac:0d:c8:5b:ab:5f:44:01:8e:ab: 13:58:1d:27:a3:53:80:71:0f:d3:26:6a:c1:10:35:8f:af:19: 53:84:ec:83:28:2b:e0:84:9a:98:64:61:c9:28:63:a1:2d:68: 8a:ff:dc:54:e7:3d:5b:92:5b:0f:7f:e7:91:1f:76:be:4f:96: 3d:ae:e8:9e:0a:ff:a3:42:1b:df:59:3f:50:b9:34:bc:ea:ee: 1b:eb:84:77:fd:57:cc:5a:de:d6:16:61:fc:15:f3:05:11:3a: 58:38:21:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7gExLa3N8ZHRmjoWSgNBv0BEyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCQzQ2MEE3OEVEQTc4RUQ0MTdDMjE1RTE1Mjg5RjFG Q0REMTNDQjAeFw0yNjA5MjAxODQ1MDJaFw0yNjA5MjEyMTIwMDJaMDMxMTAvBgNV BAMTKDlGQzY5ODkyMUY2MkFFN0I4MDM4NEEzQzcxQzkwQTI1NTAyQUE1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+Uv7NyVco50LUnitt1F5UhET seE/q1anhlL74z/WB4r3pfeJWngT3+JMlmZH2DIFcHjR0V6WKh+Y/4WjeO+32KgQ rNzDXfKC5ODhXeRcxDfMlMiwQz1OxYP3+wERDTI1FxiCJyIxTeJ7v61mqtwpaEb0 CMooZibnSm7t6OEqTLJFW+OSSQPrMWQ3wbVyWW69jWbZwKRxD5yOWvAy+oKmu3rf UIKW7PlVbLwwjHmCxlIpRbqLQ6WsLD1GNYSOvRSlee3J85rbSz7IZmGxWGgsGK0o QM3SaDyyfYiVX/tZenST5pnw+fo5y8w53X/ZHqPGMRZ4SYxA6kZSJulHg5NnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8aYkh9irnuAOEo8cckKJVAqpV0wHwYDVR0j BBgwFoAUSrxGCnjtp47UF8IV4VKJ8fzdE8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg1YmZmNDEtMjQyMC00MmIxLTliODMtZDQxYzE4MDQzZDY1LzAvNEFCQzQ2MEE3 OEVEQTc4RUQ0MTdDMjE1RTE1Mjg5RjFGQ0REMTNDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUJDNDYwQTc4RURBNzhFRDQxN0MyMTVFMTUyODlGMUZDREQx M0NCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvNEFCQzQ2MEE3OEVEQTc4RUQ0MTdDMjE1RTE1Mjg5 RjFGQ0REMTNDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE91/i02SQdZF/U5T0ROhZnvnrdDPYYb3y8C ILAF8Z03PtX/KYA0wjU2f9bYAGOYG9rCk9fbqZbvxrHmaey/genl89bCDROLPtFN xPhM/tq1LM4TXh5OuI33OZCBUg12Ed61g0n1Bu/CYta+QsNkH785cdLdLYKGRUmn Vw7++88IYOu5TI/nrFrMboJ8a+09Ij/AzZ/b+BoorA3IW6tfRAGOqxNYHSejU4Bx D9MmasEQNY+vGVOE7IMoK+CEmphkYckoY6EtaIr/3FTnPVuSWw9/55Efdr5Plj2u 6J4K/6NCG99ZP1C5NLzq7hvrhHf9V8xa3tYWYfwV8wUROlg4IdI= -----END CERTIFICATE-----Generated at Mon Sep 21 14:44:50 2026 by rpki-client