$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: pWmdNnxSAOnGv4XCWZ+9q+QMPejdLBfnF23Pkqdjhyc= Subject key identifier: E4:D1:44:AE:FA:79:78:5A:51:35:F5:60:44:73:C2:06:4C:7B:53:45 Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 4D490FE8CE96436829964BB6E31433FDE592DE86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:43:35 +0000 Manifest this update: Mon 21 Sep 2026 09:38:35 +0000 Manifest next update: Tue 22 Sep 2026 10:29:35 +0000 Files and hashes: 1: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: BPsJk0yUqJQeSloJmblriugNI7HhOqqZLSGkb+toVzo=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:49:0f:e8:ce:96:43:68:29:96:4b:b6:e3:14:33:fd:e5:92:de:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: Sep 21 09:38:35 2026 GMT Not After : Sep 22 10:29:35 2026 GMT Subject: CN=E4D144AEFA79785A5135F5604473C2064C7B5345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:f8:d6:08:f8:0b:ba:d4:31:18:ce:e4:b5: ac:9e:58:dc:03:4c:25:44:91:a9:21:38:a7:81:1e: bb:58:d0:8d:45:f5:6e:96:aa:0a:9a:d0:5c:52:ad: 66:71:6b:4f:0f:bc:87:42:18:34:bc:67:51:21:3d: 90:68:48:dc:2f:15:c1:22:9e:c0:cd:90:bb:8a:24: 1f:84:be:8f:bb:b5:bb:45:b3:a9:cc:04:6c:12:31: 29:40:6c:bd:bf:31:c9:b2:37:89:c8:66:83:ad:f7: e3:a3:f6:db:56:09:db:09:c1:1b:31:44:6c:84:26: fe:5b:6f:87:d0:3e:66:6a:01:2b:6b:79:c8:64:92: 01:d0:0b:70:0d:cc:00:8f:57:5f:68:b9:03:30:39: d2:55:2b:9b:40:d1:8d:ae:55:6b:aa:99:16:cf:6d: d2:be:e5:7a:aa:d5:8c:54:03:fe:ef:83:5d:fd:9a: a7:a3:10:17:d8:ff:f0:c8:1b:d8:7d:4d:3e:52:47: 8d:f6:36:7a:75:42:4b:37:47:9f:3b:c8:2b:ee:70: 29:b5:a6:84:f2:13:6d:42:7b:5a:ac:ff:a9:a5:49: 60:3c:61:70:d6:b0:0e:71:33:77:47:80:83:9c:77: ab:f3:90:8e:7d:84:f8:d1:35:bc:96:fb:b3:76:bc: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D1:44:AE:FA:79:78:5A:51:35:F5:60:44:73:C2:06:4C:7B:53:45 X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2d:84:b1:66:ca:74:3c:5f:72:0b:08:68:95:35:cd:c6:38: 29:59:02:ef:5b:af:77:3c:e9:82:ac:ee:b7:3c:eb:74:8a:2a: c0:db:65:46:69:68:56:07:3c:8e:4c:0d:61:98:f8:d1:8b:df: 43:56:14:3b:c2:20:41:86:4d:c6:2f:9b:0b:96:eb:85:64:8f: f6:d9:87:cd:01:d9:30:93:aa:7a:31:a6:8a:1e:48:da:05:37: 75:df:c9:8a:a7:8b:51:62:a8:85:f8:11:cc:bb:a6:0b:1e:c3: 19:7a:2b:97:22:e8:0d:7b:1c:b9:23:66:af:ca:3f:d2:90:f3: bf:e3:f0:6e:28:3a:16:74:53:46:87:8f:9d:ec:9b:c5:d9:93: 55:88:7d:e5:8f:ec:bf:51:62:ee:40:75:f6:52:41:12:f8:2f: 70:88:09:f4:73:4a:ec:7d:4b:d1:5e:70:38:b0:5e:c9:12:fa: 6b:ca:db:5e:0a:52:d6:52:03:9c:af:2c:ed:9d:54:f2:79:6a: e9:4c:75:f9:66:5c:fb:53:6d:86:5b:5e:8b:ee:76:6d:54:e8: d5:2d:bd:1d:e9:7f:db:69:f7:59:f0:c3:bf:48:e5:73:0b:37: 9a:84:64:4e:7a:e1:1e:6a:84:63:36:f8:87:cc:df:4c:04:2b: 4e:3d:cd:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUkP6M6WQ2gplku24xQz/eWS3oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjA5MjEwOTM4MzVaFw0yNjA5MjIxMDI5MzVaMDMxMTAvBgNV BAMTKEU0RDE0NEFFRkE3OTc4NUE1MTM1RjU2MDQ0NzNDMjA2NEM3QjUzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ6vjWCPgLutQxGM7ktayeWNwD TCVEkakhOKeBHrtY0I1F9W6Wqgqa0FxSrWZxa08PvIdCGDS8Z1EhPZBoSNwvFcEi nsDNkLuKJB+Evo+7tbtFs6nMBGwSMSlAbL2/McmyN4nIZoOt9+Oj9ttWCdsJwRsx RGyEJv5bb4fQPmZqAStrechkkgHQC3ANzACPV19ouQMwOdJVK5tA0Y2uVWuqmRbP bdK+5Xqq1YxUA/7vg139mqejEBfY//DIG9h9TT5SR432Nnp1Qks3R587yCvucCm1 poTyE21Ce1qs/6mlSWA8YXDWsA5xM3dHgIOcd6vzkI59hPjRNbyW+7N2vC+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5NFErvp5eFpRNfVgRHPCBkx7U0UwHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkthLFmynQ8X3ILCGiVNc3GOClZAu9br3c8 6YKs7rc863SKKsDbZUZpaFYHPI5MDWGY+NGL30NWFDvCIEGGTcYvmwuW64Vkj/bZ h80B2TCTqnoxpooeSNoFN3XfyYqni1FiqIX4Ecy7pgsewxl6K5ci6A17HLkjZq/K P9KQ87/j8G4oOhZ0U0aHj53sm8XZk1WIfeWP7L9RYu5AdfZSQRL4L3CICfRzSux9 S9FecDiwXskS+mvK214KUtZSA5yvLO2dVPJ5aulMdflmXPtTbYZbXovudm1U6NUt vR3pf9tp91nww79I5XMLN5qEZE564R5qhGM2+IfM30wEK049zRo= -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:01 2026 by rpki-client