$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: Ot244vIVmytv1mX1kbLSxlXWJCJPQw5KYKM6HxV49sQ= Subject key identifier: 74:AD:47:42:ED:E6:0D:8B:26:58:CD:E2:A1:2F:F1:AB:71:54:2E:5F Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 01AE9518A540392B44BDADE89932E7EFBF39FAA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: BF Signing time: Tue 22 Sep 2026 15:15:17 +0000 Manifest this update: Tue 22 Sep 2026 15:10:17 +0000 Manifest next update: Wed 23 Sep 2026 19:11:17 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 4: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: Bufj39twFVqJxiGy/OZPQf6cVbmu4Vm9j4pqZiueiC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ae:95:18:a5:40:39:2b:44:bd:ad:e8:99:32:e7:ef:bf:39:fa:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Sep 22 15:10:17 2026 GMT Not After : Sep 23 19:11:17 2026 GMT Subject: CN=74AD4742EDE60D8B2658CDE2A12FF1AB71542E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a4:b5:c0:8f:9b:e3:de:65:b5:e7:e6:9f:b5: ab:73:14:b5:d4:a3:46:b3:48:48:43:76:27:60:e5: 54:24:35:21:5a:38:c7:51:91:71:fc:15:c3:a8:c9: c9:cc:46:98:2f:d1:2c:94:d9:67:2c:cd:d8:f9:51: 24:c8:1f:bf:fd:8b:1a:7a:f9:0c:41:dc:c8:0c:2a: 14:4c:7c:07:3f:0e:11:33:05:9e:8e:6e:5e:e0:db: 48:89:ef:16:75:3b:23:e7:73:bf:da:8d:8c:aa:55: e7:86:ee:97:86:87:f0:6e:24:30:59:0c:65:a4:a8: 12:cd:c6:44:16:9c:d3:08:58:5d:39:1b:fa:10:b8: c7:ad:f9:c8:bf:e8:48:03:32:45:03:c5:dd:8b:0f: 96:fb:a5:72:5e:cf:de:2f:b7:47:2c:59:6d:45:21: 58:3e:e4:d1:84:81:c2:9b:e8:0e:58:3a:93:dc:c5: d1:f2:d2:70:9d:18:c1:4d:6d:09:8d:33:4a:d5:5d: c0:a7:df:6b:83:47:3a:d3:28:de:d8:92:43:f3:7a: bf:13:76:5f:8a:49:88:3a:21:98:f4:c9:b4:10:a1: d0:f4:fd:fa:7d:41:8e:31:05:b5:e7:1b:0d:80:d9: 03:50:05:e7:6e:12:ac:da:c7:f9:eb:31:a0:d4:37: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AD:47:42:ED:E6:0D:8B:26:58:CD:E2:A1:2F:F1:AB:71:54:2E:5F X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:18:0f:50:a8:49:62:00:0a:05:d1:04:5d:fa:f1:50:3f:4e: d3:c6:b9:3e:32:30:c8:9a:22:fd:6e:23:9b:c4:c1:dd:80:87: 0e:68:7e:e2:45:bb:4e:04:5b:21:bc:d9:24:30:f9:bc:e1:a6: 8c:44:30:05:a7:1a:b5:b5:fd:ba:46:19:d1:e9:7c:24:34:4b: 77:cb:bf:57:39:c4:b1:3e:2d:19:26:f8:e8:dc:62:f1:e0:12: 55:ff:df:2f:8c:5b:0b:4d:9e:b5:4a:22:d5:a0:b4:10:5e:9c: 2d:60:0a:00:c6:f5:04:e3:b1:72:b5:ca:94:7c:b4:a6:56:9a: 4d:9b:92:16:1f:66:59:b0:8b:7a:b0:a8:48:94:2d:a5:49:a7: 7f:25:b6:c9:5b:fc:43:3c:1a:d9:2b:d4:63:b3:a7:7e:21:6c: 03:11:a5:b9:63:1e:a3:42:5d:87:4c:1c:2b:bc:cb:b7:74:9b: 53:63:64:ca:3d:4a:8b:b4:72:3c:1d:d2:5e:96:bf:76:76:ba: 0e:6b:13:ea:d9:ad:76:5e:37:75:18:21:96:11:22:48:d3:d6: 5a:01:00:51:4b:67:dd:45:63:46:6b:c6:35:00:30:09:a9:4f: 93:d4:82:c6:3e:01:51:93:ef:fb:fa:70:9c:42:02:66:e8:5a: 65:15:d2:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAa6VGKVAOStEva3omTLn7785+qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA5MjIxNTEwMTdaFw0yNjA5MjMxOTExMTdaMDMxMTAvBgNV BAMTKDc0QUQ0NzQyRURFNjBEOEIyNjU4Q0RFMkExMkZGMUFCNzE1NDJFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpLXAj5vj3mW15+aftatzFLXU o0azSEhDdidg5VQkNSFaOMdRkXH8FcOoycnMRpgv0SyU2Wcszdj5USTIH7/9ixp6 +QxB3MgMKhRMfAc/DhEzBZ6Obl7g20iJ7xZ1OyPnc7/ajYyqVeeG7peGh/BuJDBZ DGWkqBLNxkQWnNMIWF05G/oQuMet+ci/6EgDMkUDxd2LD5b7pXJez94vt0csWW1F IVg+5NGEgcKb6A5YOpPcxdHy0nCdGMFNbQmNM0rVXcCn32uDRzrTKN7YkkPzer8T dl+KSYg6IZj0ybQQodD0/fp9QY4xBbXnGw2A2QNQBeduEqzax/nrMaDUNxWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdK1HQu3mDYsmWM3ioS/xq3FULl8wHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYYD1CoSWIACgXRBF368VA/TtPGuT4yMMia Iv1uI5vEwd2Ahw5ofuJFu04EWyG82SQw+bzhpoxEMAWnGrW1/bpGGdHpfCQ0S3fL v1c5xLE+LRkm+OjcYvHgElX/3y+MWwtNnrVKItWgtBBenC1gCgDG9QTjsXK1ypR8 tKZWmk2bkhYfZlmwi3qwqEiULaVJp38ltslb/EM8Gtkr1GOzp34hbAMRpbljHqNC XYdMHCu8y7d0m1NjZMo9Sou0cjwd0l6Wv3Z2ug5rE+rZrXZeN3UYIZYRIkjT1loB AFFLZ91FY0ZrxjUAMAmpT5PUgsY+AVGT7/v6cJxCAmboWmUV0gU= -----END CERTIFICATE-----Generated at Tue Sep 22 22:23:41 2026 by rpki-client