$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft (raw, json) Hash identifier: 8w8Z6ZD6KG9gLPkwBN3zl3oznJ1fGQK2o6SxuMmbtI8= Subject key identifier: A5:04:48:8B:95:49:3A:2E:8D:A8:54:8F:37:77:E6:3A:CC:E8:CD:93 Authority key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C Certificate issuer: /CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Certificate serial: 12011767B5308AA89460E48F4A6199CA77F075D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 10:55:58 +0000 Manifest this update: Sun 11 Oct 2026 10:50:58 +0000 Manifest next update: Mon 12 Oct 2026 14:50:58 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: UTTE4RHMUx5iXqdVFLmPyr84/+QQI3n2et5AtGkuCdU=) 2: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl (hash: wMjVyU8X2mk2/km3qUCh4t9EPomlotQs8sBcRCvRjvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 14:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:01:17:67:b5:30:8a:a8:94:60:e4:8f:4a:61:99:ca:77:f0:75:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Validity Not Before: Oct 11 10:50:58 2026 GMT Not After : Oct 12 14:50:58 2026 GMT Subject: CN=A504488B95493A2E8DA8548F3777E63ACCE8CD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5f:65:2e:0a:5e:03:a7:56:d9:7b:3c:60:fa: 1c:45:d3:dc:e3:94:8c:2a:54:8a:1a:4d:fa:04:f9: 95:7c:25:b6:8f:f7:93:68:33:13:7c:46:a6:2e:52: 0f:15:8e:64:77:c8:d7:9c:4d:dc:95:97:43:6f:ad: 0b:d5:fb:15:e5:1a:75:e7:bf:be:55:f2:ee:e4:a8: 2a:2c:73:5a:de:57:2b:59:54:54:d3:3c:55:c2:ce: 05:86:71:af:93:66:ec:14:b7:d7:d1:66:78:96:d7: 2d:5d:22:9f:4b:e9:6a:f5:61:9c:bf:52:44:51:f4: c1:3e:3c:c5:27:51:02:7e:ec:6f:8c:6f:e0:8c:ee: 48:73:8b:54:07:09:7d:7f:29:bf:c9:91:e2:8d:14: be:b5:5c:5a:2d:92:01:72:a4:3d:66:0a:55:f3:df: 79:5e:49:6b:94:7a:f0:02:21:a0:e9:50:9e:16:13: 44:35:ee:1e:ad:8a:d6:a0:5a:0a:3a:22:1b:55:e5: 1c:db:ca:cc:d8:50:a1:3f:c9:77:67:b1:57:4a:1d: a7:2a:39:b9:7d:20:b8:77:3a:07:86:ba:bc:cd:f2: b1:3f:09:de:f6:79:49:c8:4a:db:70:96:cf:25:0b: e3:b9:e4:de:2d:c8:d3:b4:da:77:6a:0b:f3:3e:5c: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:04:48:8B:95:49:3A:2E:8D:A8:54:8F:37:77:E6:3A:CC:E8:CD:93 X509v3 Authority Key Identifier: keyid:4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d2:77:76:b4:ab:5c:e3:53:36:f0:79:6f:85:2c:2b:27:ae: a5:c1:42:53:c7:81:87:04:b5:4e:a0:14:69:86:cf:46:a3:85: 76:40:31:40:eb:19:91:8c:e2:ec:3e:2d:a3:e9:19:4b:58:c6: 91:bd:aa:88:40:59:ef:26:8a:97:a8:ef:d2:80:8a:0b:25:fe: d9:4b:17:71:73:2a:a0:d2:c3:69:d2:3e:28:33:39:1f:b4:87: 01:7b:12:0e:b5:a9:c4:a9:65:2a:8a:76:e5:b5:5a:a8:04:ab: 22:75:97:6a:d5:db:70:18:51:e3:f8:b4:8a:1f:fb:ec:25:f9: a5:d9:37:b0:dd:68:8a:ea:30:14:af:2c:e2:ed:b0:84:19:13: 8e:f9:8d:6d:95:37:65:87:14:95:58:50:35:4d:da:eb:71:a8: 0e:20:04:4e:61:5f:39:70:7c:95:ba:36:84:a2:10:a1:f6:65: c8:bd:b9:fe:66:50:0d:d5:a0:45:14:29:74:2c:43:04:3c:0f: 26:87:0f:1a:96:05:57:65:89:b5:8c:b5:c1:32:e5:26:e4:dd: b3:71:a8:fc:cb:7b:f6:16:91:d4:ea:9b:37:59:62:1a:32:8a: 4b:73:a1:07:c9:68:c2:07:6e:c8:50:d8:0a:f7:bd:21:ad:1f: b0:34:c3:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgEXZ7UwiqiUYOSPSmGZynfwddMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRF NDFERUEwQzAeFw0yNjEwMTExMDUwNThaFw0yNjEwMTIxNDUwNThaMDMxMTAvBgNV BAMTKEE1MDQ0ODhCOTU0OTNBMkU4REE4NTQ4RjM3NzdFNjNBQ0NFOENEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtX2UuCl4Dp1bZezxg+hxF09zj lIwqVIoaTfoE+ZV8JbaP95NoMxN8RqYuUg8VjmR3yNecTdyVl0NvrQvV+xXlGnXn v75V8u7kqCosc1reVytZVFTTPFXCzgWGca+TZuwUt9fRZniW1y1dIp9L6Wr1YZy/ UkRR9ME+PMUnUQJ+7G+Mb+CM7khzi1QHCX1/Kb/JkeKNFL61XFotkgFypD1mClXz 33leSWuUevACIaDpUJ4WE0Q17h6titagWgo6IhtV5RzbyszYUKE/yXdnsVdKHacq Obl9ILh3OgeGurzN8rE/Cd72eUnISttwls8lC+O55N4tyNO02ndqC/M+XGl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQRIi5VJOi6NqFSPN3fmOszozZMwHwYDVR0j BBgwFoAUTrFgrphYi2DVrkKR79jR1OQd6gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1MGYwNzgtYzUzNS00ZjhlLTk2MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5 ODU4OEI2MEQ1QUU0MjkxRUZEOEQxRDRFNDFERUEwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RUIxNjBBRTk4NTg4QjYwRDVBRTQyOTFFRkQ4RDFENEU0MURF QTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvNEVCMTYwQUU5ODU4OEI2MEQ1QUU0MjkxRUZEOEQx RDRFNDFERUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPSd3a0q1zjUzbweW+FLCsnrqXBQlPHgYcE tU6gFGmGz0ajhXZAMUDrGZGM4uw+LaPpGUtYxpG9qohAWe8mipeo79KAigsl/tlL F3FzKqDSw2nSPigzOR+0hwF7Eg61qcSpZSqKduW1WqgEqyJ1l2rV23AYUeP4tIof ++wl+aXZN7DdaIrqMBSvLOLtsIQZE475jW2VN2WHFJVYUDVN2utxqA4gBE5hXzlw fJW6NoSiEKH2Zci9uf5mUA3VoEUUKXQsQwQ8DyaHDxqWBVdlibWMtcEy5Sbk3bNx qPzLe/YWkdTqmzdZYhoyiktzoQfJaMIHbshQ2Ar3vSGtH7A0w6w= -----END CERTIFICATE-----Generated at Mon Oct 12 02:16:14 2026 by rpki-client