$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json) Hash identifier: b1K6SVqhqHubtxwn8lXEkpuHq8v2D6p8GnQzOPuFb6Y= Subject key identifier: 7B:7C:70:E9:98:CD:2A:CD:CD:FF:88:75:85:43:82:DB:A0:4A:87:BE Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Certificate serial: 1A664B4C82740FD406CD09F2347EF9B782E5A84E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft Manifest number: BE Signing time: Sun 20 Sep 2026 11:57:00 +0000 Manifest this update: Sun 20 Sep 2026 11:52:00 +0000 Manifest next update: Mon 21 Sep 2026 15:22:00 +0000 Files and hashes: 1: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: weVq1rAc3fJyMuYi34HZY5KCZWt9mnKuAVoq4RY9m8w=) 2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:66:4b:4c:82:74:0f:d4:06:cd:09:f2:34:7e:f9:b7:82:e5:a8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Validity Not Before: Sep 20 11:52:00 2026 GMT Not After : Sep 21 15:22:00 2026 GMT Subject: CN=7B7C70E998CD2ACDCDFF8875854382DBA04A87BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:59:8a:7e:70:72:31:b4:f1:bc:02:66:7f: 78:23:09:24:f2:bb:1d:d2:97:20:3b:83:d5:ea:7d: 96:18:c8:d6:89:7d:48:21:57:ef:48:44:47:18:7e: 71:fb:8d:9b:fc:91:f4:b2:b0:93:e8:c7:4e:2a:0e: 43:cf:10:41:18:66:ce:41:b9:ef:3d:33:83:20:f2: 78:54:64:aa:bd:c3:b9:03:a5:ae:c3:6e:b0:8b:4f: 1b:19:73:55:5b:6f:f4:f7:54:14:a7:07:3b:cb:83: ee:db:0f:25:53:d4:ec:77:7b:79:ed:b6:ea:a0:d2: 6a:7c:3e:fc:c6:18:1a:d2:2f:6f:0a:1f:91:08:e2: 91:63:4f:bf:cd:21:c5:0a:92:79:02:56:2c:00:b4: 15:63:54:b4:81:51:33:cf:da:31:ec:58:14:95:da: db:ad:cb:35:31:a7:2c:5b:e2:ba:27:42:a9:2d:1e: fb:35:fe:e0:1c:98:28:6d:a8:74:f0:0d:88:6a:9a: ea:34:75:db:26:4b:cd:b7:b8:9d:f0:4a:0a:e0:2e: 7c:53:e7:97:6f:9b:49:fa:40:76:85:63:7a:b5:45: 1a:d8:fc:f5:cb:14:c7:fd:09:5c:92:29:a3:d0:7a: fa:bb:44:94:dd:94:13:fd:e6:0a:85:4d:fc:d4:f8: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:70:E9:98:CD:2A:CD:CD:FF:88:75:85:43:82:DB:A0:4A:87:BE X509v3 Authority Key Identifier: keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:3a:97:60:b0:d7:a6:59:f9:4f:7f:2d:9e:6f:52:a2:eb:61: 9d:52:2c:2e:2e:47:9c:22:c9:6a:45:d3:53:4f:e1:b1:50:68: e2:20:9d:dc:ca:6e:86:a9:7f:46:e5:80:67:66:88:b3:e6:be: 5f:26:d7:25:65:f5:ec:32:6c:35:e5:5c:8d:65:45:ea:8e:20: 6f:f6:5f:f3:f6:cc:54:85:ae:f0:c1:76:6b:e3:10:4e:6b:55: 2a:4a:8e:72:bd:a6:0c:e4:eb:6f:13:8c:fc:d8:29:a3:8a:ed: b5:59:7c:25:a1:88:0d:9e:76:04:04:6f:18:ef:ee:4f:5a:95: 82:39:50:7c:a6:01:50:68:b0:d9:9f:2f:7f:96:f4:a1:4d:f2: fe:3b:ef:a2:29:47:10:2e:ca:ea:26:80:73:94:cb:d7:13:c4: 5d:a8:70:62:ed:82:cc:4a:90:2d:94:62:4a:a0:41:c5:6a:05: 34:1a:f1:80:ef:06:c6:a2:47:09:ec:0d:07:73:b5:62:27:a0: 41:44:48:8f:b7:8b:c1:82:6b:e3:5f:c9:d8:dc:73:c0:4c:83: db:98:9e:f4:d8:a7:ab:98:11:4e:b1:a2:e4:e0:66:60:a7:7d: e3:e9:a1:2c:8f:7b:ab:65:d6:e6:80:87:a7:bb:86:21:91:ec: 37:02:71:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmZLTIJ0D9QGzQnyNH75t4LlqE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2 M0QxMEY1ODAeFw0yNjA5MjAxMTUyMDBaFw0yNjA5MjExNTIyMDBaMDMxMTAvBgNV BAMTKDdCN0M3MEU5OThDRDJBQ0RDREZGODg3NTg1NDM4MkRCQTA0QTg3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsiFmKfnByMbTxvAJmf3gjCSTy ux3SlyA7g9XqfZYYyNaJfUghV+9IREcYfnH7jZv8kfSysJPox04qDkPPEEEYZs5B ue89M4Mg8nhUZKq9w7kDpa7DbrCLTxsZc1Vbb/T3VBSnBzvLg+7bDyVT1Ox3e3nt tuqg0mp8PvzGGBrSL28KH5EI4pFjT7/NIcUKknkCViwAtBVjVLSBUTPP2jHsWBSV 2tutyzUxpyxb4ronQqktHvs1/uAcmChtqHTwDYhqmuo0ddsmS823uJ3wSgrgLnxT 55dvm0n6QHaFY3q1RRrY/PXLFMf9CVySKaPQevq7RJTdlBP95gqFTfzU+BedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3xw6ZjNKs3N/4h1hUOC26BKh74wHwYDVR0j BBgwFoAUTAtkfB333OIgEGvaEcHX0WPRD1gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzZjY2YTgtYTBmZi00NGZhLWJkYTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0Mx REY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2M0QxMEY1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzBCNjQ3QzFERjdEQ0UyMjAxMDZCREExMUMxRDdEMTYzRDEw RjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3 RDE2M0QxMEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALc6l2Cw16ZZ+U9/LZ5vUqLrYZ1SLC4uR5wi yWpF01NP4bFQaOIgndzKboapf0blgGdmiLPmvl8m1yVl9ewybDXlXI1lReqOIG/2 X/P2zFSFrvDBdmvjEE5rVSpKjnK9pgzk628TjPzYKaOK7bVZfCWhiA2edgQEbxjv 7k9alYI5UHymAVBosNmfL3+W9KFN8v4776IpRxAuyuomgHOUy9cTxF2ocGLtgsxK kC2UYkqgQcVqBTQa8YDvBsaiRwnsDQdztWInoEFESI+3i8GCa+Nfydjcc8BMg9uY nvTYp6uYEU6xouTgZmCnfePpoSyPe6tl1uaAh6e7hiGR7DcCcfo= -----END CERTIFICATE-----Generated at Mon Sep 21 09:02:36 2026 by rpki-client