$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: NHgZec32Rlk6HO2yGPdJ2CyVMSW5C22zAPjj+tGtesk= Subject key identifier: B7:46:28:5E:FF:C8:2F:6D:93:0A:26:1A:06:72:8E:FF:A0:7D:FE:E6 Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 1051E0E072F16E61051BDE3D791E985F6AE7B077 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: BC Signing time: Sun 20 Sep 2026 21:54:04 +0000 Manifest this update: Sun 20 Sep 2026 21:49:04 +0000 Manifest next update: Mon 21 Sep 2026 23:19:04 +0000 Files and hashes: 1: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=) 2: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) 3: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 4: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 5: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: 3hH4PzkaZh9NWEPdWeCEPnv8caUtdemR5lSKZ/OcAAs=) 6: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=) 7: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=) 8: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 9: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=) 10: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) 11: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=) 12: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 13: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:51:e0:e0:72:f1:6e:61:05:1b:de:3d:79:1e:98:5f:6a:e7:b0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: Sep 20 21:49:04 2026 GMT Not After : Sep 21 23:19:04 2026 GMT Subject: CN=B746285EFFC82F6D930A261A06728EFFA07DFEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:9e:fa:ee:0a:6b:28:9d:fb:9f:bf:e8:ec: 88:00:da:94:4a:5d:3d:08:48:39:c3:98:ab:41:b0: ec:07:80:7e:ab:4a:7b:52:4d:55:a8:b5:bd:5d:0b: 97:c4:67:36:3d:93:83:57:bb:e1:10:de:c0:11:dd: 3b:61:45:d4:f6:27:3d:64:a8:84:a6:b1:44:d5:9b: b0:af:22:07:55:6d:9c:9e:03:a6:d9:c6:66:21:9a: 84:45:61:f3:e9:07:a2:5b:3a:6a:fa:5f:90:87:39: 90:81:78:4e:9b:dc:8c:b8:e2:7b:29:bf:43:c1:7b: 33:4f:c6:8d:78:29:99:d6:32:82:a0:59:74:41:76: bf:18:a9:de:c2:29:12:6c:09:28:5f:7f:39:10:32: a9:00:2f:a2:62:c1:b2:50:e2:a5:c5:be:bc:cc:61: f6:a9:56:3e:1b:f8:05:aa:c6:c2:5b:93:c0:6b:64: 90:53:3f:ae:24:a8:8c:36:a4:96:d7:0e:82:74:7a: 34:eb:16:3c:b1:6f:df:32:d7:3e:d4:ca:58:56:f6: f5:41:17:54:7a:0c:aa:22:4e:92:fe:5c:31:6f:19: b8:e3:dd:17:70:23:2c:b8:62:d7:0b:7c:71:e4:65: ac:37:4d:ba:6c:4e:66:2d:49:0a:83:a3:15:a5:ef: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:46:28:5E:FF:C8:2F:6D:93:0A:26:1A:06:72:8E:FF:A0:7D:FE:E6 X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dd:9b:5e:36:5c:ba:ea:3f:66:e7:ff:da:eb:46:e0:6a:26: 08:57:d3:c6:3e:42:ac:86:00:08:20:a8:85:ad:a6:08:f0:67: 8c:7f:53:00:23:47:20:a9:47:c0:7c:5e:94:c1:c0:6c:c3:83: f9:c8:0a:06:e3:c5:34:df:dc:76:dc:5d:9d:74:99:15:da:65: 06:30:5e:7a:05:b9:88:29:ac:1e:08:52:b3:2a:38:44:e0:5d: fd:6b:bf:b9:58:54:d9:2e:78:9f:5a:f6:23:fb:b0:48:34:0b: b1:38:4e:d3:28:bd:47:b5:eb:ed:94:5c:e3:0f:be:a3:39:aa: ef:1e:ae:98:3e:4c:ce:c1:b3:4f:c5:44:ef:99:18:df:b6:7e: 9c:10:34:85:14:8f:dd:d7:e8:fb:cb:49:68:4c:31:8b:2c:7f: 3f:64:c5:dc:a8:92:9c:a5:76:9e:b9:e7:d2:2a:ae:1d:78:7f: db:30:db:35:67:c8:cf:e0:ed:ed:41:5c:63:19:1c:56:1d:0b: 39:6d:99:42:65:c8:79:b7:3c:2d:22:d8:9f:09:e6:62:31:d5: 12:4e:da:5b:35:7c:93:1b:7d:83:b9:18:ad:ca:53:20:1e:d6: d2:6c:6e:cc:19:49:6c:67:de:bc:2a:ec:94:13:b6:c1:05:27: 25:02:07:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFHg4HLxbmEFG949eR6YX2rnsHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA5MjAyMTQ5MDRaFw0yNjA5MjEyMzE5MDRaMDMxMTAvBgNV BAMTKEI3NDYyODVFRkZDODJGNkQ5MzBBMjYxQTA2NzI4RUZGQTA3REZFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jp767gprKJ37n7/o7IgA2pRK XT0ISDnDmKtBsOwHgH6rSntSTVWotb1dC5fEZzY9k4NXu+EQ3sAR3TthRdT2Jz1k qISmsUTVm7CvIgdVbZyeA6bZxmYhmoRFYfPpB6JbOmr6X5CHOZCBeE6b3Iy44nsp v0PBezNPxo14KZnWMoKgWXRBdr8Yqd7CKRJsCShffzkQMqkAL6JiwbJQ4qXFvrzM YfapVj4b+AWqxsJbk8BrZJBTP64kqIw2pJbXDoJ0ejTrFjyxb98y1z7UylhW9vVB F1R6DKoiTpL+XDFvGbjj3RdwIyy4YtcLfHHkZaw3TbpsTmYtSQqDoxWl778rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0YoXv/IL22TCiYaBnKO/6B9/uYwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbdm142XLrqP2bn/9rrRuBqJghX08Y+QqyG AAggqIWtpgjwZ4x/UwAjRyCpR8B8XpTBwGzDg/nICgbjxTTf3HbcXZ10mRXaZQYw XnoFuYgprB4IUrMqOETgXf1rv7lYVNkueJ9a9iP7sEg0C7E4TtMovUe16+2UXOMP vqM5qu8erpg+TM7Bs0/FRO+ZGN+2fpwQNIUUj93X6PvLSWhMMYssfz9kxdyokpyl dp6559Iqrh14f9sw2zVnyM/g7e1BXGMZHFYdCzltmUJlyHm3PC0i2J8J5mIx1RJO 2ls1fJMbfYO5GK3KUyAe1tJsbswZSWxn3rwq7JQTtsEFJyUCB3s= -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:26 2026 by rpki-client