$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json) Hash identifier: 2xqO2d5dlat6UeC8SN1BEyovBtwWlBNO33kmB+qwQrc= Subject key identifier: 83:81:94:6C:D0:A3:A7:16:A4:7A:BF:B2:70:DE:59:8E:52:AD:46:C5 Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Certificate serial: 57A9E249466DA05BC13A5A45EC5592FD19CB9BFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:42:47 +0000 Manifest this update: Thu 24 Sep 2026 01:37:47 +0000 Manifest next update: Fri 25 Sep 2026 03:00:47 +0000 Files and hashes: 1: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: VsYh6YbOr4U84JakVAk4dkfOXWHxQyyoBw1XVWb+SIk=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a9:e2:49:46:6d:a0:5b:c1:3a:5a:45:ec:55:92:fd:19:cb:9b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2 Validity Not Before: Sep 24 01:37:47 2026 GMT Not After : Sep 25 03:00:47 2026 GMT Subject: CN=8381946CD0A3A716A47ABFB270DE598E52AD46C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:31:7b:18:50:a7:22:22:af:51:5c:7f:91: 81:1d:e4:eb:7f:9c:36:b3:ce:37:08:dd:72:18:36: f8:70:a9:fa:9b:6c:c2:5e:ad:52:77:80:d7:c6:d8: 3f:13:2b:2e:fa:89:65:c1:f6:13:ee:8a:00:61:76: 13:08:4b:d5:59:f2:cd:a2:42:5a:06:98:70:9f:ee: 8f:ab:08:78:67:b0:0f:b3:d3:91:66:b9:fd:83:50: f6:50:41:50:ba:a4:68:19:78:7d:9a:a0:ab:23:cd: ae:ab:66:e2:59:eb:8d:df:87:e9:07:b1:6e:7c:44: a1:9f:5d:42:43:24:e7:2b:38:3a:d9:07:04:cc:dd: 8d:28:0a:72:61:01:a5:eb:be:17:93:c1:18:c2:9a: f8:0c:4e:3a:d5:1f:ec:3a:0f:cd:38:e3:b7:2d:4d: 1c:59:a1:21:b7:97:67:4f:ba:1e:c8:bd:09:d5:3e: 1a:61:a1:50:06:52:9c:5a:bd:04:7d:66:bb:91:92: 4d:b5:5e:4a:58:a6:62:b3:40:f7:1f:4d:a2:1f:a6: 73:0e:a4:f8:bb:4f:06:03:a4:0e:83:73:6c:86:a7: ab:59:86:2d:4d:8e:b8:86:20:f4:65:9c:ee:7e:8b: bd:c4:a6:30:34:25:22:86:5c:ed:72:07:ab:9f:0e: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:94:6C:D0:A3:A7:16:A4:7A:BF:B2:70:DE:59:8E:52:AD:46:C5 X509v3 Authority Key Identifier: keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:28:0e:e1:69:b0:e9:ec:4e:a8:f7:6a:22:fb:6d:52:b8:2f: 78:02:89:20:fc:39:7b:8a:4f:c1:3f:8e:46:e8:91:13:40:18: 64:7e:51:aa:d6:e7:9d:3b:c2:cc:17:bc:97:59:2e:63:ea:75: 00:c1:30:19:3e:d5:30:dc:14:0d:82:fb:22:c5:a8:12:92:64: 35:8c:5d:f3:8f:33:d4:a4:6c:5c:18:7d:43:f0:4c:c6:1a:0c: 67:05:5a:1f:10:95:ac:75:e0:01:98:fd:1b:50:df:94:96:9a: 85:16:73:31:47:4d:96:27:12:aa:dc:58:de:4e:be:69:78:d0: 87:2f:ae:1a:0b:69:af:4a:86:a0:a5:15:9a:94:b9:f4:3c:e0: d1:ff:63:a2:eb:5f:90:5f:d2:f1:9f:08:79:cf:7d:88:6b:a4: 58:23:79:7f:36:88:c4:66:99:b3:ab:46:5e:de:f5:6e:64:e9: 6b:b6:e6:8a:a6:8e:25:2d:87:f1:64:78:52:28:d9:8b:2d:a6: 76:fa:6f:76:b4:a2:d4:f9:50:19:a6:77:51:b7:18:53:9f:01: a2:62:ae:4e:f0:d5:ad:26:31:ae:ed:7f:f9:85:c4:08:36:d9: 1d:52:47:9f:6f:2e:f3:ba:3f:5b:5a:de:fe:d1:d3:29:08:d8: d8:13:23:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6niSUZtoFvBOlpF7FWS/RnLm/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2 NjM4MDhEMjAeFw0yNjA5MjQwMTM3NDdaFw0yNjA5MjUwMzAwNDdaMDMxMTAvBgNV BAMTKDgzODE5NDZDRDBBM0E3MTZBNDdBQkZCMjcwREU1OThFNTJBRDQ2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xjF7GFCnIiKvUVx/kYEd5Ot/ nDazzjcI3XIYNvhwqfqbbMJerVJ3gNfG2D8TKy76iWXB9hPuigBhdhMIS9VZ8s2i QloGmHCf7o+rCHhnsA+z05Fmuf2DUPZQQVC6pGgZeH2aoKsjza6rZuJZ643fh+kH sW58RKGfXUJDJOcrODrZBwTM3Y0oCnJhAaXrvheTwRjCmvgMTjrVH+w6D80447ct TRxZoSG3l2dPuh7IvQnVPhphoVAGUpxavQR9ZruRkk21XkpYpmKzQPcfTaIfpnMO pPi7TwYDpA6Dc2yGp6tZhi1NjriGIPRlnO5+i73EpjA0JSKGXO1yB6ufDk1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg4GUbNCjpxaker+ycN5ZjlKtRsUwHwYDVR0j BBgwFoAUSgFbCwoI0bP36jVJuWjd52Y4CNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRjMWM0OWMtZDQwNC00NWExLTllN2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIw QTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2NjM4MDhEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTAxNUIwQjBBMDhEMUIzRjdFQTM1NDlCOTY4RERFNzY2Mzgw OEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERE RTc2NjM4MDhEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUoDuFpsOnsTqj3aiL7bVK4L3gCiSD8OXuK T8E/jkbokRNAGGR+UarW5507wswXvJdZLmPqdQDBMBk+1TDcFA2C+yLFqBKSZDWM XfOPM9SkbFwYfUPwTMYaDGcFWh8Qlax14AGY/RtQ35SWmoUWczFHTZYnEqrcWN5O vml40IcvrhoLaa9KhqClFZqUufQ84NH/Y6LrX5Bf0vGfCHnPfYhrpFgjeX82iMRm mbOrRl7e9W5k6Wu25oqmjiUth/FkeFIo2Ystpnb6b3a0otT5UBmmd1G3GFOfAaJi rk7w1a0mMa7tf/mFxAg22R1SR59vLvO6P1ta3v7R0ykI2NgTIwg= -----END CERTIFICATE-----Generated at Thu Sep 24 06:45:59 2026 by rpki-client