$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: 0R72nJrAFM+3HGgVuVHN83BAel7bTYxkW5vdsotesuQ= Subject key identifier: 11:FE:E7:6C:46:D6:3B:18:D9:8F:96:C5:0B:5D:A6:6A:D3:DC:42:A2 Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 453817D22329E76651B51D315B5EB39FA61BDF49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:26:52 +0000 Manifest this update: Mon 21 Sep 2026 20:21:52 +0000 Manifest next update: Tue 22 Sep 2026 20:37:52 +0000 Files and hashes: 1: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: ektcPJoq+9+uRNhyQl9MZaBIRjkpFu8cAd9MBvdA2+U=) 2: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 3: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) 4: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 5: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 6: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 7: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:38:17:d2:23:29:e7:66:51:b5:1d:31:5b:5e:b3:9f:a6:1b:df:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Sep 21 20:21:52 2026 GMT Not After : Sep 22 20:37:52 2026 GMT Subject: CN=11FEE76C46D63B18D98F96C50B5DA66AD3DC42A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d9:f8:26:2e:eb:81:4f:99:9d:fe:ff:98:05: 4a:73:b8:2f:92:52:a9:3e:4c:2a:4f:ae:2d:5d:45: 1b:01:18:db:44:79:f9:9e:6e:37:47:1f:0a:3c:a3: f6:08:f6:d7:d2:53:fc:17:a8:c5:5f:4c:70:be:5b: 82:bc:43:88:de:94:02:31:d0:d3:63:d7:b3:b2:a2: 1d:a7:e9:b8:ac:54:2a:b4:2f:d2:20:66:74:dd:c7: c8:2a:e0:b2:96:1c:de:25:4e:14:ea:5f:ae:5e:e4: 32:36:ea:79:b6:9a:6f:40:c8:1b:29:64:7a:fe:47: 83:f6:bb:b1:80:d2:0e:61:79:b7:13:ed:0b:c1:80: 26:6c:22:aa:91:1a:43:d3:df:c9:61:c7:1d:8b:f9: 92:e5:76:f8:2c:b0:b6:3d:e8:6a:b0:3e:76:19:87: 51:32:93:71:d4:38:25:a5:05:c2:a3:52:c4:7d:71: 62:33:a4:7f:aa:9c:0f:a0:cc:e0:61:49:71:d1:47: c2:e9:09:63:7f:89:d0:a3:7a:17:3c:e8:ce:fa:c9: 2d:4c:92:f9:03:e6:b3:57:12:14:13:af:27:a7:59: 29:2a:40:ea:9e:54:27:97:de:1c:2e:83:27:b6:62: 74:42:f9:e6:f5:6b:6a:c1:83:87:7c:1b:61:87:4c: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FE:E7:6C:46:D6:3B:18:D9:8F:96:C5:0B:5D:A6:6A:D3:DC:42:A2 X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:59:1d:7a:1c:44:4c:bd:99:ed:07:52:2d:41:9c:cc:1d:12: 2d:64:bb:4c:c6:ff:aa:f1:09:07:88:a7:cf:72:fb:91:a9:ff: 01:9b:70:d9:25:9e:5c:24:a3:a4:d3:db:af:84:ce:38:7b:fe: 4d:76:71:c9:c1:c4:ab:b6:ce:19:67:a2:f7:e1:13:89:72:51: 0f:70:3e:8c:55:4b:a9:a4:fe:0a:ce:b5:cb:ad:3a:be:ec:d1: 41:83:c2:21:08:47:ab:fd:e2:85:6a:98:83:11:04:82:a9:1e: dd:5f:79:02:eb:9d:6f:4a:0b:08:cb:c9:70:f6:ef:ea:e4:39: 9c:02:64:91:d2:99:e5:f4:f4:8b:b8:72:2f:b9:2d:d9:d5:5f: 4c:5e:6b:18:0e:4f:45:22:d9:75:0f:41:fe:f8:89:8d:e0:57: 78:6e:84:f2:6c:b5:76:da:9f:82:18:b1:88:0a:0b:88:02:5d: ab:30:e1:de:76:34:84:2f:33:31:08:1c:23:8b:25:34:b0:42: d5:ed:4b:13:68:4d:44:b4:bd:cf:eb:33:44:2e:fd:43:fc:6e: 65:9f:db:73:f4:4d:a6:19:2a:d6:3d:34:5c:ec:63:d4:8e:af: e3:85:92:93:63:76:29:bf:c0:62:22:11:22:4d:93:cd:9c:8a: f9:ee:73:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTgX0iMp52ZRtR0xW16zn6Yb30kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA5MjEyMDIxNTJaFw0yNjA5MjIyMDM3NTJaMDMxMTAvBgNV BAMTKDExRkVFNzZDNDZENjNCMThEOThGOTZDNTBCNURBNjZBRDNEQzQyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt2fgmLuuBT5md/v+YBUpzuC+S Uqk+TCpPri1dRRsBGNtEefmebjdHHwo8o/YI9tfSU/wXqMVfTHC+W4K8Q4jelAIx 0NNj17Oyoh2n6bisVCq0L9IgZnTdx8gq4LKWHN4lThTqX65e5DI26nm2mm9AyBsp ZHr+R4P2u7GA0g5hebcT7QvBgCZsIqqRGkPT38lhxx2L+ZLldvgssLY96GqwPnYZ h1Eyk3HUOCWlBcKjUsR9cWIzpH+qnA+gzOBhSXHRR8LpCWN/idCjehc86M76yS1M kvkD5rNXEhQTryenWSkqQOqeVCeX3hwugye2YnRC+eb1a2rBg4d8G2GHTBvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEf7nbEbWOxjZj5bFC12matPcQqIwHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlZHXocREy9me0HUi1BnMwdEi1ku0zG/6rx CQeIp89y+5Gp/wGbcNklnlwko6TT26+Ezjh7/k12ccnBxKu2zhlnovfhE4lyUQ9w PoxVS6mk/grOtcutOr7s0UGDwiEIR6v94oVqmIMRBIKpHt1feQLrnW9KCwjLyXD2 7+rkOZwCZJHSmeX09Iu4ci+5LdnVX0xeaxgOT0Ui2XUPQf74iY3gV3huhPJstXba n4IYsYgKC4gCXasw4d52NIQvMzEIHCOLJTSwQtXtSxNoTUS0vc/rM0Qu/UP8bmWf 23P0TaYZKtY9NFzsY9SOr+OFkpNjdim/wGIiESJNk82civnuc3s= -----END CERTIFICATE-----Generated at Tue Sep 22 09:33:09 2026 by rpki-client