$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: oJuTnGcOspOERIceOVPg+GxJSrA97/qxT5O8N+3S61E= Subject key identifier: C2:3D:00:9A:8E:19:1A:3D:14:5E:0B:9C:D9:B0:80:DD:6C:A9:A1:70 Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 63D23DC3C94821C60EC076FFEF6335605D258888 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:26:43 +0000 Manifest this update: Mon 21 Sep 2026 12:21:43 +0000 Manifest next update: Tue 22 Sep 2026 13:56:43 +0000 Files and hashes: 1: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) 3: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: TGVlC25xpo9xF5Ojb5YpZqio2o6uAq5QQtwmeiiaDsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d2:3d:c3:c9:48:21:c6:0e:c0:76:ff:ef:63:35:60:5d:25:88:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Sep 21 12:21:43 2026 GMT Not After : Sep 22 13:56:43 2026 GMT Subject: CN=C23D009A8E191A3D145E0B9CD9B080DD6CA9A170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:29:76:9e:59:1f:78:f0:65:be:46:c8:ef: df:1e:83:8e:50:98:03:5a:bb:01:a9:ba:f8:e1:02: 6f:b6:00:a7:7c:e8:ff:87:f6:64:e1:59:07:cc:6b: b6:d4:57:e6:67:2e:a0:3a:ab:46:d5:b5:8d:ae:24: 1b:d3:01:5f:4d:5d:b1:8c:91:08:50:13:98:3a:a1: 8b:b1:28:76:ff:fc:d3:54:70:e8:5a:e6:93:a5:d5: 7b:81:2a:4e:6f:b4:31:66:b5:b6:47:c2:36:50:0d: 57:b6:76:cd:60:5b:16:08:a5:1c:6e:14:da:05:9f: cc:75:45:91:18:bb:48:57:54:82:54:a7:31:73:50: 70:3d:c9:7d:d2:6d:3f:3b:2b:fd:93:c8:56:f8:f4: f8:5f:46:da:d4:9b:5f:70:3c:6b:6d:04:50:0e:de: 2a:dd:1c:bd:dd:95:97:71:77:a4:ea:9b:9a:f1:ee: e5:ff:68:cf:60:40:4e:9e:b4:39:4a:5a:46:0d:3c: 0c:4d:ed:43:7f:5f:b7:9d:9a:e3:b2:9f:fc:c4:0e: 89:5f:9f:10:d3:62:a2:24:46:c3:a1:80:36:63:8a: 1f:ab:4d:ba:1c:37:03:27:e5:4c:41:e4:80:f1:33: 1e:27:54:62:9c:e0:35:df:b2:33:eb:70:92:9e:34: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:00:9A:8E:19:1A:3D:14:5E:0B:9C:D9:B0:80:DD:6C:A9:A1:70 X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:f6:7e:83:e0:aa:b7:fc:5b:95:53:5a:64:d6:ab:bc:50:6e: b9:70:22:dd:53:e9:d3:08:c0:e0:37:98:87:48:7e:7e:c4:18: e1:2a:c3:43:05:bf:f1:79:56:8d:03:66:cf:3d:84:20:0f:ec: 31:10:ad:5c:07:a2:5a:ae:3b:a6:e4:30:47:74:e2:cb:3b:54: 32:9c:bf:f5:1b:b3:37:16:28:ea:21:ee:24:64:00:a9:77:86: 36:4f:b5:19:c1:d0:90:4e:09:9f:05:0c:72:23:21:22:b3:ae: a5:18:c7:76:ed:67:d1:54:c4:c2:d6:bb:31:f4:7f:72:be:01: cc:36:35:bc:13:55:24:68:d0:c9:d7:0d:73:95:e3:98:45:d1: 29:4c:8a:a0:70:9e:94:6a:c3:c0:e4:6e:1f:e7:83:ad:e5:00: 64:a3:a0:2f:14:a2:c8:f8:73:1f:b8:86:e7:58:a0:f7:55:e3: 86:69:56:22:d3:b0:0e:57:1e:c7:8c:51:68:ec:ae:e3:65:21: 12:b2:34:94:44:b1:03:f5:bd:f8:44:8f:55:4a:d7:3e:d4:80: 2e:c9:e1:35:1e:a4:9f:33:b1:e2:90:42:7d:df:d9:4f:c9:eb: 4b:e7:b1:3c:9e:5a:bf:16:04:97:59:bd:35:69:09:4e:92:a0: 5d:6c:61:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9I9w8lIIcYOwHb/72M1YF0liIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjA5MjExMjIxNDNaFw0yNjA5MjIxMzU2NDNaMDMxMTAvBgNV BAMTKEMyM0QwMDlBOEUxOTFBM0QxNDVFMEI5Q0Q5QjA4MERENkNBOUExNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UCl2nlkfePBlvkbI798eg45Q mANauwGpuvjhAm+2AKd86P+H9mThWQfMa7bUV+ZnLqA6q0bVtY2uJBvTAV9NXbGM kQhQE5g6oYuxKHb//NNUcOha5pOl1XuBKk5vtDFmtbZHwjZQDVe2ds1gWxYIpRxu FNoFn8x1RZEYu0hXVIJUpzFzUHA9yX3SbT87K/2TyFb49PhfRtrUm19wPGttBFAO 3irdHL3dlZdxd6Tqm5rx7uX/aM9gQE6etDlKWkYNPAxN7UN/X7edmuOyn/zEDolf nxDTYqIkRsOhgDZjih+rTbocNwMn5UxB5IDxMx4nVGKc4DXfsjPrcJKeNMiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwj0Amo4ZGj0UXguc2bCA3WypoXAwHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMX2foPgqrf8W5VTWmTWq7xQbrlwIt1T6dMI wOA3mIdIfn7EGOEqw0MFv/F5Vo0DZs89hCAP7DEQrVwHolquO6bkMEd04ss7VDKc v/UbszcWKOoh7iRkAKl3hjZPtRnB0JBOCZ8FDHIjISKzrqUYx3btZ9FUxMLWuzH0 f3K+Acw2NbwTVSRo0MnXDXOV45hF0SlMiqBwnpRqw8Dkbh/ng63lAGSjoC8Uosj4 cx+4hudYoPdV44ZpViLTsA5XHseMUWjsruNlIRKyNJREsQP1vfhEj1VK1z7UgC7J 4TUepJ8zseKQQn3f2U/J60vnsTyeWr8WBJdZvTVpCU6SoF1sYcs= -----END CERTIFICATE-----Generated at Tue Sep 22 06:37:03 2026 by rpki-client