$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json) Hash identifier: JRj5tHqKLB/nQWVqnALBHcaCdzbzi5dHWIrWwBSmBT0= Subject key identifier: 16:68:5F:F2:DA:DA:AE:7F:26:3E:B6:26:1E:DA:71:98:C3:C6:55:9D Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26 Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526 Certificate serial: 5219E1C9DEE556BF7FADD2EA0FCB5248963BC91B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:38:32 +0000 Manifest this update: Mon 21 Sep 2026 01:33:32 +0000 Manifest next update: Tue 22 Sep 2026 03:08:32 +0000 Files and hashes: 1: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: wZztPZGH6zqAMDwco3vzvWG8Cr3X6L1rzJPy4mVZKyI=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:19:e1:c9:de:e5:56:bf:7f:ad:d2:ea:0f:cb:52:48:96:3b:c9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526 Validity Not Before: Sep 21 01:33:32 2026 GMT Not After : Sep 22 03:08:32 2026 GMT Subject: CN=16685FF2DADAAE7F263EB6261EDA7198C3C6559D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:67:a5:ed:84:5d:55:a2:d7:05:0f:df:b6: 3b:66:b0:8a:66:93:ce:10:74:9e:68:fa:74:d2:b0: 08:40:80:6f:ae:f9:62:89:ab:9f:81:2d:d8:46:b1: 96:fc:14:37:25:08:b7:99:b1:d6:77:6a:80:97:82: 30:f4:76:98:76:56:cd:cb:8c:b8:6f:86:39:b8:e6: 5c:7e:d0:30:b7:bc:b9:a7:e2:d1:cb:0e:1d:5d:37: dd:7b:9a:b7:ed:71:e9:68:bf:9b:0a:fc:af:d8:6b: 0b:5a:c7:53:c0:e1:18:b9:e7:b7:14:c6:1c:14:78: 22:a1:e3:32:0e:cc:f8:09:2e:ea:4b:13:ab:34:fb: 38:6a:ba:59:b9:a9:73:26:61:7e:3f:73:a2:e4:d4: a4:d2:44:9d:03:58:d1:59:76:0f:21:a3:12:ca:9a: 5b:c0:19:2a:f7:aa:11:d6:99:9b:6b:bf:35:c1:00: 37:8c:2b:9c:61:68:21:aa:9b:e5:a5:bb:20:5d:1a: a9:f0:fd:9d:1c:e3:54:12:5c:f9:a0:a9:05:52:c2: bb:c3:6d:3e:88:82:42:f0:fc:f0:1e:33:8c:84:00: 03:37:ea:7c:88:64:56:46:d6:97:fc:f0:49:71:42: 21:c9:5b:6c:ca:6d:08:55:50:8f:2a:20:09:2d:39: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:68:5F:F2:DA:DA:AE:7F:26:3E:B6:26:1E:DA:71:98:C3:C6:55:9D X509v3 Authority Key Identifier: keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7b:fc:f7:9d:4b:4d:40:37:f1:88:73:19:4d:e5:02:dc:b4: 1c:7b:25:a7:bb:be:88:14:4e:df:70:0d:e6:8b:a9:88:47:0e: 08:21:98:fa:45:47:75:7d:46:01:80:f5:2e:e7:09:6a:0b:d5: 12:04:d0:eb:e8:bb:1b:88:37:17:b9:28:69:12:64:ae:83:c6: f0:39:0d:5b:dd:e2:83:c5:e2:43:4a:55:7a:ed:59:61:82:2a: d1:ec:b9:89:1e:53:9e:b4:a7:f0:7a:31:a7:cd:83:6a:69:ca: f4:48:1c:39:0c:3d:d7:61:fa:91:0b:29:5e:f0:13:29:b0:90: 76:2c:2d:31:9b:c6:22:9c:c4:65:60:ee:60:a3:23:1c:4b:5d: 9c:41:fe:18:5f:47:57:70:70:66:78:60:d5:35:a3:6d:9a:fb: 61:61:8b:74:b0:48:b3:ae:98:95:cf:a7:da:15:bb:4c:e7:17: 85:5a:99:a1:a0:2a:7c:e0:8f:c3:a1:9a:50:3f:af:71:58:e5: 47:1d:c2:22:31:c7:52:f2:62:4b:63:6c:05:5c:45:2d:49:ce: 1f:69:ca:1b:57:15:94:17:40:6b:21:4d:e3:d8:23:74:34:3d: 72:1b:79:8a:13:40:71:df:80:ce:a2:50:54:e5:c0:36:ff:37: 21:7b:8e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhnhyd7lVr9/rdLqD8tSSJY7yRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRBRDdE MkRENzUyNjAeFw0yNjA5MjEwMTMzMzJaFw0yNjA5MjIwMzA4MzJaMDMxMTAvBgNV BAMTKDE2Njg1RkYyREFEQUFFN0YyNjNFQjYyNjFFREE3MTk4QzNDNjU1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN2el7YRdVaLXBQ/ftjtmsIpm k84QdJ5o+nTSsAhAgG+u+WKJq5+BLdhGsZb8FDclCLeZsdZ3aoCXgjD0dph2Vs3L jLhvhjm45lx+0DC3vLmn4tHLDh1dN917mrftcelov5sK/K/Yawtax1PA4Ri557cU xhwUeCKh4zIOzPgJLupLE6s0+zhqulm5qXMmYX4/c6Lk1KTSRJ0DWNFZdg8hoxLK mlvAGSr3qhHWmZtrvzXBADeMK5xhaCGqm+WluyBdGqnw/Z0c41QSXPmgqQVSwrvD bT6IgkLw/PAeM4yEAAM36nyIZFZG1pf88ElxQiHJW2zKbQhVUI8qIAktObclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmhf8trarn8mPrYmHtpxmMPGVZ0wHwYDVR0j BBgwFoAUTTaNYOrityGOnFIkZd/a19LddSYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MDkwNDQtNTcxOC00ZjFkLWE2ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBF QUUyQjcyMThFOUM1MjI0NjVERkRBRDdEMkRENzUyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDM2OEQ2MEVBRTJCNzIxOEU5QzUyMjQ2NURGREFEN0QyREQ3 NTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRB RDdEMkRENzUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN7/PedS01AN/GIcxlN5QLctBx7Jae7vogU Tt9wDeaLqYhHDgghmPpFR3V9RgGA9S7nCWoL1RIE0OvouxuINxe5KGkSZK6DxvA5 DVvd4oPF4kNKVXrtWWGCKtHsuYkeU560p/B6MafNg2ppyvRIHDkMPddh+pELKV7w EymwkHYsLTGbxiKcxGVg7mCjIxxLXZxB/hhfR1dwcGZ4YNU1o22a+2Fhi3SwSLOu mJXPp9oVu0znF4VamaGgKnzgj8OhmlA/r3FY5UcdwiIxx1LyYktjbAVcRS1Jzh9p yhtXFZQXQGshTePYI3Q0PXIbeYoTQHHfgM6iUFTlwDb/NyF7jpA= -----END CERTIFICATE-----Generated at Mon Sep 21 05:38:44 2026 by rpki-client