$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: zHdsrUJyf9Q+Zsi/tBfZ0RtpAZIeNz3pSIXVA8XXvFY= Subject key identifier: DB:4B:13:40:4C:EE:6E:23:51:E5:CC:53:BD:3E:0A:7C:C5:97:B7:02 Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 72D8127704B03282EEAC05BE17A428633D1943F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:38:29 +0000 Manifest this update: Mon 21 Sep 2026 13:33:29 +0000 Manifest next update: Tue 22 Sep 2026 15:59:29 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) 2: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: EMP1yZOxKg7j+FonVwRMC4t4l0gRekIdFvu0wr4M9NM=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d8:12:77:04:b0:32:82:ee:ac:05:be:17:a4:28:63:3d:19:43:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Sep 21 13:33:29 2026 GMT Not After : Sep 22 15:59:29 2026 GMT Subject: CN=DB4B13404CEE6E2351E5CC53BD3E0A7CC597B702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:4d:58:f2:19:5e:6d:ff:36:0d:dd:6c:17: 2d:aa:c4:5d:02:8b:3b:78:3e:f0:46:0e:9f:20:90: fc:77:29:7c:98:37:7d:20:c3:27:42:03:68:20:c3: 72:1c:34:e4:a7:c6:a3:c8:08:bd:ce:a3:40:2c:98: ab:5c:f5:28:38:32:6c:31:ee:0d:f7:2d:16:3f:59: e8:03:18:29:d2:70:91:f6:c4:b9:04:9f:bb:76:44: 59:89:0d:99:8f:99:a2:57:13:fd:3c:71:03:78:04: ca:d9:b7:d8:3a:c1:02:26:d5:ce:86:75:ee:14:23: 62:25:c1:48:2e:c1:a7:ad:df:49:4b:34:6e:b2:7c: 92:5a:02:4c:6b:8b:d5:36:4d:75:f9:fa:94:13:27: 0c:09:fa:93:e5:95:68:2b:7e:c6:70:90:6f:15:d0: af:ab:54:aa:6b:11:1f:db:fa:b0:f6:00:df:c1:59: f2:29:73:77:04:86:b8:9b:0f:76:d6:9b:a4:b4:d8: 94:e9:5b:12:28:1f:ed:f2:37:36:7d:e1:51:4e:6c: c4:2f:ed:59:69:d1:8a:55:1e:ee:c0:9b:1a:f4:96: e7:ff:e3:d8:e9:a3:9a:21:f5:2e:52:9f:8b:6f:06: f0:bc:7e:5f:d7:f3:48:7d:72:ca:98:54:ed:bc:a9: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4B:13:40:4C:EE:6E:23:51:E5:CC:53:BD:3E:0A:7C:C5:97:B7:02 X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3e:89:6e:33:7b:99:ce:33:27:29:f0:1f:6e:67:d8:08:47: c5:ee:16:e2:ae:f2:a0:81:c1:f0:c8:50:c1:75:42:42:a6:1b: 35:c5:a7:67:01:86:b1:09:dc:85:89:91:59:78:1f:39:1f:6d: 42:78:ca:72:21:10:69:2c:17:99:7b:c6:b7:7e:58:2b:99:b0: c4:8c:ca:05:bc:b4:b8:b5:c2:25:8a:02:63:62:9c:d3:b6:6a: ec:bc:ca:02:d1:f9:3d:1f:ce:a8:5d:74:52:89:d9:2b:78:67: 0a:83:12:63:5c:06:bd:65:0a:47:b2:31:07:33:44:23:2d:90: 5b:f8:c2:a3:6b:af:bf:9c:ab:34:4d:d9:3a:67:4f:54:94:c2: 5e:28:f3:29:72:ec:0d:8a:2c:b1:b7:b1:f0:2c:f9:88:32:0b: 4c:af:65:d2:f0:9d:49:91:3a:99:aa:89:aa:4d:fa:58:51:f2: df:91:97:be:09:78:99:e6:ef:dc:bb:20:ee:cb:0c:68:cf:a2: b1:c4:dc:37:67:21:cd:89:67:33:2a:8d:50:ee:a8:fb:32:fa: c8:09:ec:46:fe:f3:be:20:1d:3a:71:52:a9:32:5a:23:f1:69: 34:b6:bb:56:3b:7c:94:93:a1:17:79:9e:c4:ee:01:dc:7f:fc: ee:14:6e:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctgSdwSwMoLurAW+F6QoYz0ZQ/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA5MjExMzMzMjlaFw0yNjA5MjIxNTU5MjlaMDMxMTAvBgNV BAMTKERCNEIxMzQwNENFRTZFMjM1MUU1Q0M1M0JEM0UwQTdDQzU5N0I3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZk1Y8hlebf82Dd1sFy2qxF0C izt4PvBGDp8gkPx3KXyYN30gwydCA2ggw3IcNOSnxqPICL3Oo0AsmKtc9Sg4Mmwx 7g33LRY/WegDGCnScJH2xLkEn7t2RFmJDZmPmaJXE/08cQN4BMrZt9g6wQIm1c6G de4UI2IlwUguwaet30lLNG6yfJJaAkxri9U2TXX5+pQTJwwJ+pPllWgrfsZwkG8V 0K+rVKprER/b+rD2AN/BWfIpc3cEhribD3bWm6S02JTpWxIoH+3yNzZ94VFObMQv 7Vlp0YpVHu7Amxr0luf/49jpo5oh9S5Sn4tvBvC8fl/X80h9csqYVO28qaZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20sTQEzubiNR5cxTvT4KfMWXtwIwHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA+iW4ze5nOMycp8B9uZ9gIR8XuFuKu8qCB wfDIUMF1QkKmGzXFp2cBhrEJ3IWJkVl4HzkfbUJ4ynIhEGksF5l7xrd+WCuZsMSM ygW8tLi1wiWKAmNinNO2auy8ygLR+T0fzqhddFKJ2St4ZwqDEmNcBr1lCkeyMQcz RCMtkFv4wqNrr7+cqzRN2TpnT1SUwl4o8yly7A2KLLG3sfAs+YgyC0yvZdLwnUmR OpmqiapN+lhR8t+Rl74JeJnm79y7IO7LDGjPorHE3DdnIc2JZzMqjVDuqPsy+sgJ 7Eb+874gHTpxUqkyWiPxaTS2u1Y7fJSToRd5nsTuAdx//O4Ubo4= -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:28 2026 by rpki-client