$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json) Hash identifier: MnF+mIito6ZEfYAKH5xPJ9te/taukuX0Tjc1pV4eCqY= Subject key identifier: B4:B0:2F:A1:E8:D0:44:49:EE:52:33:13:3F:8D:E1:8C:95:2E:3E:8B Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147 Certificate serial: 46B68750B8D6F34408B486331786F48A3A5EF2A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 01:28:07 +0000 Manifest this update: Thu 08 Oct 2026 01:23:07 +0000 Manifest next update: Fri 09 Oct 2026 02:58:07 +0000 Files and hashes: 1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=) 2: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: ouvjMXQ0+TNkXhX/r4ngn/eSz7RmbrUlq/bu37KdmGU=) 3: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 02:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b6:87:50:b8:d6:f3:44:08:b4:86:33:17:86:f4:8a:3a:5e:f2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147 Validity Not Before: Oct 8 01:23:07 2026 GMT Not After : Oct 9 02:58:07 2026 GMT Subject: CN=B4B02FA1E8D04449EE5233133F8DE18C952E3E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:2f:3d:76:5d:c5:27:d9:b2:38:d1:13:6b: b7:2f:86:98:35:15:b8:20:7f:36:59:ba:6d:5b:85: 34:e0:c9:2b:2c:f9:d5:b9:55:5b:44:76:53:e9:73: 76:94:d4:42:7d:1e:18:05:69:6c:50:22:52:6a:ca: 00:09:8a:66:78:cc:26:ed:3c:2b:f4:29:b0:e0:90: 90:b0:5a:43:4c:3c:0a:4c:8f:1d:2b:fd:1d:0d:ce: ce:5e:bc:57:1e:07:e1:85:ca:e8:7f:0d:05:d2:d4: 53:ab:10:04:87:62:4e:af:be:3e:9f:a0:49:45:9b: 80:1d:dc:23:08:6f:cc:c2:9e:8d:99:68:4d:13:c6: 48:c2:cd:11:91:15:34:0c:9e:18:44:15:4d:38:55: b4:5e:cd:9f:dd:e5:c9:5f:fc:31:f7:01:cc:aa:0a: 73:a6:39:14:c5:2b:4e:8c:9f:ab:2b:17:d2:9c:f3: de:1f:90:15:9e:80:62:e6:11:9d:1c:da:ba:29:d4: 83:96:76:76:59:d0:23:93:67:4f:1a:3c:f0:22:9c: 5e:1b:d5:17:4c:d7:53:f4:c7:f5:e1:5f:a3:6b:48: 1a:8f:67:bb:4b:95:6a:66:28:62:b1:ca:a3:c6:96: ba:ae:5a:7d:43:6e:ce:d6:ab:aa:25:b0:f1:e7:99: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B0:2F:A1:E8:D0:44:49:EE:52:33:13:3F:8D:E1:8C:95:2E:3E:8B X509v3 Authority Key Identifier: keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3b:17:b8:4b:50:8e:34:52:88:3a:bd:21:30:30:88:ba:83: 0b:2a:15:d8:01:47:88:59:bb:44:86:fd:35:5f:d9:87:1e:f6: 8e:97:bb:9e:24:2e:74:7e:38:b9:f9:d1:25:95:a9:df:aa:63: 99:31:d2:5a:85:35:c6:d2:21:b9:31:45:21:43:6d:d3:87:90: 75:75:ff:59:3c:a6:76:7c:3d:4b:d0:b6:91:16:3c:37:2d:ff: c3:e4:93:a4:6e:f2:b9:44:37:63:67:a2:6e:13:c2:1e:57:39: 67:d5:56:77:6b:b3:66:d0:c9:a8:28:27:79:2e:b0:89:64:d6: 1f:95:b9:0d:51:1e:9b:ed:da:f3:87:c5:2b:9a:54:3b:17:ed: 45:9d:b5:a0:af:86:44:b8:67:50:01:0e:d7:70:ad:ad:ef:12: c9:69:b1:35:d7:94:55:b5:60:57:38:4c:34:b1:3f:0e:b5:02: 1b:05:73:fe:31:84:6b:1b:b2:1e:e9:e0:21:60:5c:1f:02:ce: c9:08:46:67:dd:c1:6c:e3:30:3c:80:29:2f:cb:57:f5:eb:65: b7:58:08:96:d9:6a:a3:5a:a3:66:27:cc:bd:b5:26:0b:a9:9d: 8a:b7:e6:ae:ab:c8:a3:bd:1d:a6:cd:87:af:c9:cb:c0:ad:3c: cf:3c:bb:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURraHULjW80QItIYzF4b0ijpe8qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZFMjky QjAwMTE0NzAeFw0yNjEwMDgwMTIzMDdaFw0yNjEwMDkwMjU4MDdaMDMxMTAvBgNV BAMTKEI0QjAyRkExRThEMDQ0NDlFRTUyMzMxMzNGOERFMThDOTUyRTNFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8S89dl3FJ9myONETa7cvhpg1 FbggfzZZum1bhTTgySss+dW5VVtEdlPpc3aU1EJ9HhgFaWxQIlJqygAJimZ4zCbt PCv0KbDgkJCwWkNMPApMjx0r/R0Nzs5evFceB+GFyuh/DQXS1FOrEASHYk6vvj6f oElFm4Ad3CMIb8zCno2ZaE0TxkjCzRGRFTQMnhhEFU04VbRezZ/d5clf/DH3Acyq CnOmORTFK06Mn6srF9Kc894fkBWegGLmEZ0c2rop1IOWdnZZ0COTZ08aPPAinF4b 1RdM11P0x/XhX6NrSBqPZ7tLlWpmKGKxyqPGlrquWn1Dbs7Wq6olsPHnmdEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtLAvoejQREnuUjMTP43hjJUuPoswHwYDVR0j BBgwFoAUS84YjeQrU567hgo3bRP+KSsAEUcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjZDYwYjItMGY1Ny00ZmM1LWJjNjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERF NDJCNTM5RUJCODYwQTM3NkQxM0ZFMjkyQjAwMTE0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkNFMTg4REU0MkI1MzlFQkI4NjBBMzc2RDEzRkUyOTJCMDAx MTQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvNEJDRTE4OERFNDJCNTM5RUJCODYwQTM3NkQxM0ZF MjkyQjAwMTE0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII7F7hLUI40Uog6vSEwMIi6gwsqFdgBR4hZ u0SG/TVf2Yce9o6Xu54kLnR+OLn50SWVqd+qY5kx0lqFNcbSIbkxRSFDbdOHkHV1 /1k8pnZ8PUvQtpEWPDct/8Pkk6Ru8rlEN2Nnom4Twh5XOWfVVndrs2bQyagoJ3ku sIlk1h+VuQ1RHpvt2vOHxSuaVDsX7UWdtaCvhkS4Z1ABDtdwra3vEslpsTXXlFW1 YFc4TDSxPw61AhsFc/4xhGsbsh7p4CFgXB8CzskIRmfdwWzjMDyAKS/LV/XrZbdY CJbZaqNao2YnzL21JgupnYq35q6ryKO9HabNh6/Jy8CtPM88u/8= -----END CERTIFICATE-----Generated at Thu Oct 8 16:50:45 2026 by rpki-client