$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: 8ja+wTqRG8Id4nbEjsixxxtY3iuw/0C/+NWZdyC+SHg= Subject key identifier: 8F:99:9F:DC:B3:28:94:CE:C2:51:46:41:84:B7:4A:7C:F2:07:C4:CD Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 63CA24EC2EEB6516743868A9D006FAA475DE33B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:12:51 +0000 Manifest this update: Mon 21 Sep 2026 09:07:51 +0000 Manifest next update: Tue 22 Sep 2026 09:57:51 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) 2: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: XVXrJSKb5QTkx4pAHBSByXt2pLBrSsjyvCCyfLs/8M8=) 3: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ca:24:ec:2e:eb:65:16:74:38:68:a9:d0:06:fa:a4:75:de:33:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Sep 21 09:07:51 2026 GMT Not After : Sep 22 09:57:51 2026 GMT Subject: CN=8F999FDCB32894CEC251464184B74A7CF207C4CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:42:d8:5c:57:39:f6:7f:7f:a9:b6:44:62: 33:29:94:67:f3:03:fd:aa:0c:5b:35:01:04:4f:a0: 5a:22:69:5e:85:8c:af:a6:85:37:75:98:e6:87:64: 28:b7:52:23:a8:22:94:7e:1c:52:ba:5d:09:4a:d9: ce:bb:fb:54:32:2b:ad:23:73:96:80:ae:f6:e1:61: 1f:cf:12:13:b1:72:4d:ef:95:98:c8:19:1c:46:8b: 66:f4:95:42:25:4e:aa:8c:6e:69:4d:3e:0f:4f:5d: bf:e8:21:2b:98:09:92:23:5e:86:f2:7d:35:2c:93: e2:84:c0:52:35:f2:b7:69:45:5b:2f:e2:02:67:6c: ad:b3:bd:52:3a:05:e7:35:1e:04:0e:a0:18:bf:28: 08:70:06:a9:51:b6:43:20:ee:d6:8a:23:ec:66:46: 4d:1c:66:db:12:1d:5b:8b:be:d4:63:19:11:59:d6: ae:f0:e9:2e:d9:57:4b:b6:13:62:e8:21:8f:a9:c2: 63:32:2f:a2:a5:55:8b:6f:aa:2e:33:c5:74:16:e3: 11:51:8b:6a:f8:0d:73:c3:39:46:85:29:94:5b:ff: 18:64:6c:ec:d2:2d:f5:97:8a:c7:25:1c:ae:9f:08: 59:e3:f7:6f:9d:d6:5e:68:02:7e:05:3d:01:80:ea: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:99:9F:DC:B3:28:94:CE:C2:51:46:41:84:B7:4A:7C:F2:07:C4:CD X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6c:45:7a:5e:17:c2:70:ca:9f:95:8e:5c:ba:4b:0e:2d:7d: bd:e0:54:6f:f3:47:9a:85:d4:00:8f:c4:3e:b4:8e:9f:40:dd: a1:d8:6b:32:92:19:31:86:18:4c:8f:38:63:36:a0:d6:3f:74: 22:af:61:5c:94:5c:c5:87:f8:48:9a:ce:d8:83:5e:c4:d3:fc: 4e:68:56:d1:15:19:79:9b:91:c2:fb:78:6d:c8:9f:72:87:60: f7:b2:1a:1f:06:9e:3d:62:64:a7:09:09:2c:dc:cc:94:75:bf: 2d:84:65:51:cd:84:14:95:e4:85:e3:6c:1d:15:1b:68:1f:a5: a2:18:15:4a:94:65:10:76:63:2a:88:ec:64:35:92:e0:e5:6d: 5a:3a:7b:06:bd:8d:29:cc:e3:fd:8d:04:d6:f5:0c:35:79:57: d7:9e:21:c3:b2:4d:e2:c5:38:b9:47:be:4e:4c:5a:80:00:a3: d8:d7:dc:b1:f9:5b:71:b4:0e:d3:5d:cf:97:57:c1:2b:d0:fc: 0d:08:ec:ca:93:0c:d6:fd:c1:4b:b6:b5:f1:51:37:04:ba:42: 18:47:94:7c:a1:e4:53:99:b2:02:53:40:72:5d:bb:76:ca:e4: 74:97:fe:24:71:9f:6a:51:da:5d:f6:26:64:9e:25:34:95:97: 0b:0b:55:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8ok7C7rZRZ0OGip0Ab6pHXeM7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA5MjEwOTA3NTFaFw0yNjA5MjIwOTU3NTFaMDMxMTAvBgNV BAMTKDhGOTk5RkRDQjMyODk0Q0VDMjUxNDY0MTg0Qjc0QTdDRjIwN0M0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBokLYXFc59n9/qbZEYjMplGfz A/2qDFs1AQRPoFoiaV6FjK+mhTd1mOaHZCi3UiOoIpR+HFK6XQlK2c67+1QyK60j c5aArvbhYR/PEhOxck3vlZjIGRxGi2b0lUIlTqqMbmlNPg9PXb/oISuYCZIjXoby fTUsk+KEwFI18rdpRVsv4gJnbK2zvVI6Bec1HgQOoBi/KAhwBqlRtkMg7taKI+xm Rk0cZtsSHVuLvtRjGRFZ1q7w6S7ZV0u2E2LoIY+pwmMyL6KlVYtvqi4zxXQW4xFR i2r4DXPDOUaFKZRb/xhkbOzSLfWXisclHK6fCFnj92+d1l5oAn4FPQGA6t2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5mf3LMolM7CUUZBhLdKfPIHxM0wHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5sRXpeF8Jwyp+Vjly6Sw4tfb3gVG/zR5qF 1ACPxD60jp9A3aHYazKSGTGGGEyPOGM2oNY/dCKvYVyUXMWH+EiaztiDXsTT/E5o VtEVGXmbkcL7eG3In3KHYPeyGh8Gnj1iZKcJCSzczJR1vy2EZVHNhBSV5IXjbB0V G2gfpaIYFUqUZRB2YyqI7GQ1kuDlbVo6ewa9jSnM4/2NBNb1DDV5V9eeIcOyTeLF OLlHvk5MWoAAo9jX3LH5W3G0DtNdz5dXwSvQ/A0I7MqTDNb9wUu2tfFRNwS6QhhH lHyh5FOZsgJTQHJdu3bK5HSX/iRxn2pR2l32JmSeJTSVlwsLVUk= -----END CERTIFICATE-----Generated at Mon Sep 21 13:18:07 2026 by rpki-client