$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft File: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json) Hash identifier: iuYzWiK8cDZpkt1Dkh32kHLqUye0RBBvaBEoxczaryQ= Subject key identifier: F0:C5:7F:A0:2A:20:DB:C0:C1:0E:BA:67:5D:52:B5:E7:A9:CF:58:C0 Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 Certificate issuer: /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Certificate serial: 2818B1F9420E12418036596D1D70EC64CB2096EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft Manifest number: DD Signing time: Tue 13 Oct 2026 01:28:20 +0000 Manifest this update: Tue 13 Oct 2026 01:23:20 +0000 Manifest next update: Wed 14 Oct 2026 02:48:20 +0000 Files and hashes: 1: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: kufPs8KgeMDJ1OqwwFaSpjIVxpb9EHhOYFIPTr7foqI=) 2: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:18:b1:f9:42:0e:12:41:80:36:59:6d:1d:70:ec:64:cb:20:96:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Validity Not Before: Oct 13 01:23:20 2026 GMT Not After : Oct 14 02:48:20 2026 GMT Subject: CN=F0C57FA02A20DBC0C10EBA675D52B5E7A9CF58C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:d8:bd:fc:b1:5b:19:82:7e:5e:08:23:72: c7:27:ca:39:ac:f8:57:b6:2b:b0:e2:f7:74:c7:e8: 17:b0:14:18:92:d1:ec:16:de:06:80:25:63:3e:ee: 74:94:d6:c3:68:a2:10:f5:f4:af:3f:f4:ef:32:fc: f8:07:5b:db:be:1b:51:df:17:de:cd:b2:df:d2:18: ce:ca:a0:48:b7:08:b8:36:ee:f5:ed:fb:a6:4f:53: 12:da:ad:61:87:e7:b9:3a:10:5d:dc:37:02:1f:74: b8:2c:38:2e:fb:51:d4:16:83:ca:9e:b8:6e:2c:49: b8:1c:6d:a0:ef:66:30:92:ce:38:d0:c0:ae:1c:c4: 07:1b:54:f7:a3:e7:d9:0f:68:71:91:e7:a3:d0:c8: 69:79:f1:e2:a3:eb:02:ec:18:82:ad:3b:28:e5:3d: f4:e4:b8:45:ca:2e:20:61:2d:ae:51:2e:89:03:92: c7:39:a6:f9:23:f3:0c:56:00:ec:3d:95:54:3d:41: e5:21:11:b3:01:85:36:4f:60:fa:0d:cf:1f:43:46: e9:37:88:79:dc:c5:93:de:7a:0e:06:29:b6:b7:3f: 66:93:f8:58:55:0b:03:0f:30:e9:93:40:05:90:45: f8:7e:86:b2:50:64:71:0e:c7:18:47:47:16:d7:04: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:7F:A0:2A:20:DB:C0:C1:0E:BA:67:5D:52:B5:E7:A9:CF:58:C0 X509v3 Authority Key Identifier: keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b1:7c:b1:a7:77:0a:e5:e1:45:ab:f2:b9:4d:12:3f:ca:1d: 22:18:c8:0e:3e:b0:a4:15:47:7a:49:74:9a:76:66:51:70:b7: 51:e5:fa:e8:ff:28:f1:79:6b:5c:50:f8:2e:90:08:f6:90:92: f6:46:42:98:17:c7:06:67:91:6d:84:22:ae:f4:f6:2a:c7:09: de:4e:97:fa:e9:52:70:21:d9:fe:a5:a4:c3:c3:d4:a7:8f:18: de:97:88:f0:4e:7d:99:8c:c0:a5:ee:e0:8c:9c:37:4a:7e:48: e9:76:53:22:25:9f:23:3b:15:03:41:e5:8d:e5:a1:74:e0:17: 85:df:5d:23:e4:f1:3c:36:4b:1a:a6:6d:75:19:aa:1e:4e:1d: 52:ca:40:21:df:51:0b:4f:49:bb:45:e9:93:1c:ff:7d:be:f0: 21:83:bd:90:e1:f9:c5:fa:fd:3d:25:b8:5a:cb:b0:3b:6a:02: 9a:c9:75:7d:f9:ea:ec:fe:61:13:8e:14:74:6d:a3:47:0e:81: 38:be:87:00:e1:22:e5:e7:45:48:c5:34:7b:bc:4a:f7:a8:e5: ee:6d:ec:c3:39:ca:04:0e:2e:36:f5:70:5c:9d:7c:77:2e:28: 00:19:dd:95:8c:cf:79:21:62:9b:24:e5:62:04:9f:5c:ee:8b: 27:04:a4:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBix+UIOEkGANlltHXDsZMsgluwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2 QTJGOTdFMzAeFw0yNjEwMTMwMTIzMjBaFw0yNjEwMTQwMjQ4MjBaMDMxMTAvBgNV BAMTKEYwQzU3RkEwMkEyMERCQzBDMTBFQkE2NzVENTJCNUU3QTlDRjU4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgti9/LFbGYJ+Xggjcscnyjms +Fe2K7Di93TH6BewFBiS0ewW3gaAJWM+7nSU1sNoohD19K8/9O8y/PgHW9u+G1Hf F97Nst/SGM7KoEi3CLg27vXt+6ZPUxLarWGH57k6EF3cNwIfdLgsOC77UdQWg8qe uG4sSbgcbaDvZjCSzjjQwK4cxAcbVPej59kPaHGR56PQyGl58eKj6wLsGIKtOyjl PfTkuEXKLiBhLa5RLokDksc5pvkj8wxWAOw9lVQ9QeUhEbMBhTZPYPoNzx9DRuk3 iHncxZPeeg4GKba3P2aT+FhVCwMPMOmTQAWQRfh+hrJQZHEOxxhHRxbXBPivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MV/oCog28DBDrpnXVK156nPWMAwHwYDVR0j BBgwFoAUTXRQwnlOQlWe+/OpD7BD1Wovl+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1ZjE1YzktNTg0My00NzA1LWI2OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3 OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2QTJGOTdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDc0NTBDMjc5NEU0MjU1OUVGQkYzQTkwRkIwNDNENTZBMkY5 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQz RDU2QTJGOTdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGxfLGndwrl4UWr8rlNEj/KHSIYyA4+sKQV R3pJdJp2ZlFwt1Hl+uj/KPF5a1xQ+C6QCPaQkvZGQpgXxwZnkW2EIq709irHCd5O l/rpUnAh2f6lpMPD1KePGN6XiPBOfZmMwKXu4IycN0p+SOl2UyIlnyM7FQNB5Y3l oXTgF4XfXSPk8Tw2SxqmbXUZqh5OHVLKQCHfUQtPSbtF6ZMc/32+8CGDvZDh+cX6 /T0luFrLsDtqAprJdX356uz+YROOFHRto0cOgTi+hwDhIuXnRUjFNHu8Sveo5e5t 7MM5ygQOLjb1cFydfHcuKAAZ3ZWMz3khYpsk5WIEn1zuiycEpEA= -----END CERTIFICATE-----Generated at Tue Oct 13 19:09:23 2026 by rpki-client