$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.mft (raw, json) Hash identifier: 9TrwDkjBTulwn8+X7/hvm10SOpcwrX0SIs//NIjLcyQ= Subject key identifier: 77:DD:01:50:7D:27:FA:5E:80:41:A2:9F:A6:5D:B0:8B:06:5D:EA:1C Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Certificate issuer: /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Certificate serial: 679379909010B2AFB72CEC6FA3EC4BF794DE93B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:31:54 +0000 Manifest this update: Mon 21 Sep 2026 20:26:54 +0000 Manifest next update: Wed 23 Sep 2026 00:07:54 +0000 Files and hashes: 1: 4DC2282186B6221A7A52575CE005F2B42354E4A6.crl (hash: dfz7u74bVd+Oj+1hCB0JYvLXSUBrY9mK6MmMlLQBuXY=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:93:79:90:90:10:b2:af:b7:2c:ec:6f:a3:ec:4b:f7:94:de:93:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Validity Not Before: Sep 21 20:26:54 2026 GMT Not After : Sep 23 00:07:54 2026 GMT Subject: CN=77DD01507D27FA5E8041A29FA65DB08B065DEA1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:10:b7:de:bb:6e:3e:7a:21:de:fe:84:be: 68:ec:aa:e4:9a:00:c3:9a:f8:91:4b:76:5d:52:3d: 94:b8:98:27:38:9c:ac:a1:2e:4e:b5:e9:fc:fe:f0: 6b:1d:61:0c:1c:cb:fb:60:1f:fb:ae:d2:bd:08:ff: d4:7c:5f:64:fb:30:13:6b:bb:08:5d:3d:b6:f8:64: b0:d6:27:d9:a1:53:ec:e3:96:d3:34:53:01:cd:06: e8:a4:45:83:93:cb:72:ce:be:50:39:fa:fc:71:cf: a8:ac:99:ba:42:a2:50:01:9b:85:21:b2:06:6a:f0: 91:47:3e:55:3e:fa:de:2b:e7:1a:ad:9b:c4:2f:df: f7:a6:01:f8:cc:b2:eb:40:87:eb:57:36:7c:30:61: 11:c2:e7:c9:13:5d:f1:da:4f:d0:73:02:ea:63:79: d6:f4:39:de:e2:f6:f6:63:09:b6:c9:d1:ef:65:b5: 60:87:1d:3f:b6:40:4a:d5:07:d3:f6:ae:98:0e:9c: 2d:fc:43:b3:18:3c:d4:3b:9a:ec:a4:d8:86:0a:ab: 88:58:82:bc:18:db:64:1d:46:05:b3:98:89:da:b8: 7c:ba:fc:a0:de:63:dc:80:bd:0f:8c:cd:bd:06:e5: 82:83:ba:a1:fe:be:0e:4b:37:4e:e7:d0:3d:65:06: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DD:01:50:7D:27:FA:5E:80:41:A2:9F:A6:5D:B0:8B:06:5D:EA:1C X509v3 Authority Key Identifier: keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8f:8d:0a:46:68:16:d1:3a:fa:e7:19:56:38:97:31:fb:ef: d2:80:df:eb:81:b6:fb:27:8a:e1:7e:7f:c6:02:98:83:e6:4c: b8:ab:43:7d:b2:66:c2:8d:40:5e:e6:68:76:e6:32:74:09:8c: 0b:dc:e3:d1:ba:3b:1d:f4:dc:ea:28:7e:df:f9:d3:5d:62:40: f9:a8:08:ef:b4:27:0e:45:6a:97:f0:33:34:7b:0d:d8:e7:34: 6d:16:65:d6:56:62:9e:6d:6e:04:f9:1f:7f:90:46:4b:ae:91: 7f:c7:96:db:9a:72:57:cc:71:16:bc:b9:a5:0a:fa:94:01:94: 40:f7:7d:d3:d9:06:5f:79:d8:fd:39:ef:3b:70:fa:24:75:34: 47:fa:8d:cd:94:d3:ec:1e:a3:74:64:c1:7e:2c:21:e3:c7:d8: f9:10:ef:f4:4d:7b:33:06:eb:b9:8d:13:28:51:fd:4e:0f:9d: ea:28:e2:80:fe:c0:94:fd:c6:ab:fc:5f:c9:2d:b4:2a:5b:bf: 4a:ec:b1:e5:63:7a:39:f4:31:b8:ad:3e:b6:90:9e:f3:4d:e2: cc:ee:af:6b:e0:bc:dd:48:e7:12:2b:09:e4:8e:bc:13:a9:e2: 34:0e:1b:2a:ac:96:a4:0d:ed:c8:07:a5:05:0b:c6:14:4f:3f: 8a:de:67:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5N5kJAQsq+3LOxvo+xL95Tek7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQy MzU0RTRBNjAeFw0yNjA5MjEyMDI2NTRaFw0yNjA5MjMwMDA3NTRaMDMxMTAvBgNV BAMTKDc3REQwMTUwN0QyN0ZBNUU4MDQxQTI5RkE2NURCMDhCMDY1REVBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTBC33rtuPnoh3v6EvmjsquSa AMOa+JFLdl1SPZS4mCc4nKyhLk616fz+8GsdYQwcy/tgH/uu0r0I/9R8X2T7MBNr uwhdPbb4ZLDWJ9mhU+zjltM0UwHNBuikRYOTy3LOvlA5+vxxz6ismbpColABm4Uh sgZq8JFHPlU++t4r5xqtm8Qv3/emAfjMsutAh+tXNnwwYRHC58kTXfHaT9BzAupj edb0Od7i9vZjCbbJ0e9ltWCHHT+2QErVB9P2rpgOnC38Q7MYPNQ7muyk2IYKq4hY grwY22QdRgWzmInauHy6/KDeY9yAvQ+Mzb0G5YKDuqH+vg5LN07n0D1lBitRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd90BUH0n+l6AQaKfpl2wiwZd6hwwHwYDVR0j BBgwFoAUTcIoIYa2Ihp6Uldc4AXytCNU5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUxMWU5OGYtZjU0ZS00NjBiLTg4ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4 NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQyMzU0RTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REMyMjgyMTg2QjYyMjFBN0E1MjU3NUNFMDA1RjJCNDIzNTRF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYy QjQyMzU0RTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+PjQpGaBbROvrnGVY4lzH779KA3+uBtvsn iuF+f8YCmIPmTLirQ32yZsKNQF7maHbmMnQJjAvc49G6Ox303Oooft/5011iQPmo CO+0Jw5FapfwMzR7DdjnNG0WZdZWYp5tbgT5H3+QRkuukX/HltuaclfMcRa8uaUK +pQBlED3fdPZBl952P057ztw+iR1NEf6jc2U0+weo3RkwX4sIePH2PkQ7/RNezMG 67mNEyhR/U4Pneoo4oD+wJT9xqv8X8kttCpbv0rsseVjejn0MbitPraQnvNN4szu r2vgvN1I5xIrCeSOvBOp4jQOGyqslqQN7cgHpQULxhRPP4reZ6U= -----END CERTIFICATE-----Generated at Tue Sep 22 09:16:39 2026 by rpki-client