$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: En9HWe7CESyvGUeS2Wqd6Jsj/XYgSD/qqop7mSftM+Q= Subject key identifier: 46:DC:4F:0B:B3:92:A1:C1:5B:91:56:E3:8A:79:A8:90:D0:BF:CB:2B Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 4BFF727F83CF194F3AF686EF763CA5EDAD4F83D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:10:22 +0000 Manifest this update: Mon 21 Sep 2026 23:05:22 +0000 Manifest next update: Wed 23 Sep 2026 00:10:22 +0000 Files and hashes: 1: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 3: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 4: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: DnMKrfLo/GDbgRoYBthnE2LmxlEaUAQTdBeUN/yozhc=) 5: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ff:72:7f:83:cf:19:4f:3a:f6:86:ef:76:3c:a5:ed:ad:4f:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Sep 21 23:05:22 2026 GMT Not After : Sep 23 00:10:22 2026 GMT Subject: CN=46DC4F0BB392A1C15B9156E38A79A890D0BFCB2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:06:14:49:d6:a4:08:5e:0d:5b:35:f6:53: 1f:67:0e:80:d9:5f:bf:2f:44:03:7c:ea:c5:67:29: 74:75:90:9d:a2:5a:9b:9f:bc:51:f0:86:75:ab:08: 32:cd:16:d3:99:9e:43:02:ff:42:4d:b6:4a:9f:14: f3:48:a6:16:38:67:0e:9d:84:a5:6b:12:01:d9:24: cb:5c:1e:16:1f:44:4b:02:9d:fc:59:d3:a3:ff:59: b4:2c:97:f7:eb:2c:db:e6:a9:37:fc:a8:6c:40:0d: 86:3a:4e:af:91:69:87:ad:20:01:86:96:cc:d3:39: 19:92:d7:ce:ab:f4:5d:cb:73:5f:3d:82:bb:c1:72: 55:7b:66:ca:be:e2:a3:0d:62:e9:32:6f:4a:4d:28: 4b:70:47:d2:57:65:d5:cd:20:e2:79:35:54:ec:04: 7e:24:d0:0a:bf:06:46:4a:b2:eb:cf:a8:fb:70:c7: 15:17:f8:6a:46:c6:ec:fa:71:8a:eb:e3:16:7b:9f: 6d:1b:28:83:9f:e8:47:cb:29:2c:2b:2a:57:c7:93: e4:5b:0f:51:d8:29:3e:55:33:bc:ea:c1:b2:ce:08: cd:1e:29:19:8e:b0:d3:b4:5d:6b:31:5b:a8:db:85: e9:59:39:96:58:8e:cd:18:81:92:61:7e:fc:71:e5: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DC:4F:0B:B3:92:A1:C1:5B:91:56:E3:8A:79:A8:90:D0:BF:CB:2B X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f1:c9:eb:ce:0a:88:65:ee:0e:fb:1a:06:22:04:8e:7a:e3: 9a:c9:34:34:d8:18:e0:1d:e9:eb:95:12:05:4e:88:5a:ba:fa: 4a:ec:e1:43:73:d6:54:50:95:f0:6b:16:27:b1:ae:6d:c3:b0: 59:73:4f:cd:61:69:a5:a3:28:db:5c:fe:ca:18:6e:4b:90:4c: bb:71:61:4c:64:df:83:99:0d:30:01:73:e8:d7:6d:47:00:0e: 69:97:c5:ab:6f:6c:48:4f:df:26:d8:3c:84:85:5f:d8:65:68: 92:eb:4c:a1:d3:7e:e8:e3:89:77:4e:bf:ef:4b:f5:db:64:70: ba:48:c9:69:ed:95:c6:95:ea:67:db:77:ba:c4:40:53:33:67: e7:67:0c:73:5b:39:2b:53:06:fb:8c:78:bb:43:21:4c:5b:d5: 6a:ae:4d:e6:bf:d2:b4:39:f5:b3:bf:9c:49:bd:ce:c9:f1:de: 7d:2a:d3:fb:96:7e:21:74:d7:f1:a1:89:64:37:11:01:92:57: 58:1d:5d:30:9f:88:3c:33:a9:58:a7:01:f0:64:67:d1:b4:44: 46:d7:44:1a:01:f9:8d:0b:3e:bf:e1:2a:35:2d:4b:ac:b3:11: 13:45:79:87:6c:d9:87:be:f3:47:32:9d:2e:8b:a8:04:b8:0b: 91:8a:d1:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/9yf4PPGU869obvdjyl7a1Pg9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA5MjEyMzA1MjJaFw0yNjA5MjMwMDEwMjJaMDMxMTAvBgNV BAMTKDQ2REM0RjBCQjM5MkExQzE1QjkxNTZFMzhBNzlBODkwRDBCRkNCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wwYUSdakCF4NWzX2Ux9nDoDZ X78vRAN86sVnKXR1kJ2iWpufvFHwhnWrCDLNFtOZnkMC/0JNtkqfFPNIphY4Zw6d hKVrEgHZJMtcHhYfREsCnfxZ06P/WbQsl/frLNvmqTf8qGxADYY6Tq+RaYetIAGG lszTORmS186r9F3Lc189grvBclV7Zsq+4qMNYukyb0pNKEtwR9JXZdXNIOJ5NVTs BH4k0Aq/BkZKsuvPqPtwxxUX+GpGxuz6cYrr4xZ7n20bKIOf6EfLKSwrKlfHk+Rb D1HYKT5VM7zqwbLOCM0eKRmOsNO0XWsxW6jbhelZOZZYjs0YgZJhfvxx5Xq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURtxPC7OSocFbkVbjinmokNC/yyswHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInxyevOCohl7g77GgYiBI5645rJNDTYGOAd 6euVEgVOiFq6+krs4UNz1lRQlfBrFiexrm3DsFlzT81haaWjKNtc/soYbkuQTLtx YUxk34OZDTABc+jXbUcADmmXxatvbEhP3ybYPISFX9hlaJLrTKHTfujjiXdOv+9L 9dtkcLpIyWntlcaV6mfbd7rEQFMzZ+dnDHNbOStTBvuMeLtDIUxb1WquTea/0rQ5 9bO/nEm9zsnx3n0q0/uWfiF01/GhiWQ3EQGSV1gdXTCfiDwzqVinAfBkZ9G0REbX RBoB+Y0LPr/hKjUtS6yzERNFeYds2Ye+80cynS6LqAS4C5GK0Vc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:27:43 2026 by rpki-client