$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft File: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft (raw, json) Hash identifier: Ph1ouMUry3AWOm9cxTx/nJpzglYMu7NNw779JC6zlBQ= Subject key identifier: 74:E7:90:FC:68:D5:42:05:9C:5F:82:93:D5:F2:C0:84:9C:6C:26:CA Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Certificate serial: 1F8F76157E0B7F76A85DD0EB857E3A49D49CD7F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:08:28 +0000 Manifest this update: Wed 23 Sep 2026 22:03:28 +0000 Manifest next update: Fri 25 Sep 2026 01:12:28 +0000 Files and hashes: 1: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (hash: RIa7J3LAvz/WgKYY384LNu37wMI9xVMGk5ERckCbrdg=) 2: 3130332e38372e3138342e302f32322d3234203d3e20313336313036.roa (hash: cUNZmidOsIWQTz94E3YG+Xk0D06jdYQy+G4cYD1Jgrg=) 3: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (hash: Fm5DIjTwEczH/woDzsRLyNQNU1aSAK7oH6OWe3cCsR0=) 4: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (hash: 3oTd3qA7oalGsSJ103eTjg8luLc4IR3P9iD0vCHZrto=) 5: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl (hash: t3GufQdb/6oxyaSuynE52hKHSbHnmFFmYEq6jt/oGMs=) 6: 3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (hash: pLkBoj+4v20DRaLcdp6cqFNpj/dZk322J8DmIWECxxQ=) 7: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (hash: L0MFIY3SqIZyxWL0GLOuM9CG7lSHx8DFxNDzapVGoYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8f:76:15:7e:0b:7f:76:a8:5d:d0:eb:85:7e:3a:49:d4:9c:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Validity Not Before: Sep 23 22:03:28 2026 GMT Not After : Sep 25 01:12:28 2026 GMT Subject: CN=74E790FC68D542059C5F8293D5F2C0849C6C26CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:fb:c1:55:84:88:03:57:a5:6b:50:ab:7d: b0:aa:a9:b3:2f:0d:7e:b6:cd:a1:8f:eb:df:2f:09: 68:15:48:51:05:b7:ce:b7:39:00:be:44:78:30:39: d3:b0:ea:f5:1d:e7:b2:3c:19:93:eb:95:ca:49:89: ff:82:17:5f:ea:7a:1f:3f:99:ed:c0:38:75:94:64: 9f:d8:c8:dd:7b:36:56:f2:ed:0b:39:46:10:bc:e2: 6d:92:b8:33:a3:1f:59:1a:78:e0:d2:86:f9:3a:12: 3f:b4:24:78:bd:84:e4:c7:c4:6a:67:4c:d8:bd:1c: d1:05:02:83:6a:08:25:d0:f2:ed:e4:65:94:2c:9b: b7:2f:63:1a:6d:b7:59:f5:83:aa:d1:b2:f6:ba:2e: 26:a3:f3:41:28:eb:4a:5a:d2:2c:77:45:27:80:75: cd:dd:41:df:6d:1d:d1:ff:fd:78:8e:5e:ec:1d:e6: b9:dc:bc:c6:f4:39:c0:2e:b6:8a:d3:6e:79:bc:42: e0:92:61:b2:e3:2c:56:64:50:31:ec:a9:ae:47:78: 25:70:b6:29:4a:dd:f2:0f:f7:13:50:11:7f:3d:8c: af:ae:eb:71:fa:2f:06:1c:17:29:76:62:bc:a9:04: 35:7f:93:cb:19:2c:45:7b:54:07:de:17:ec:40:4d: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E7:90:FC:68:D5:42:05:9C:5F:82:93:D5:F2:C0:84:9C:6C:26:CA X509v3 Authority Key Identifier: keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0b:f7:07:6e:dd:ca:ea:85:ae:7e:23:78:e9:d7:b6:7b:4f: ad:c3:76:b1:c6:d1:b7:68:2a:2f:c4:99:ee:66:ed:61:37:b4: 04:57:a8:8b:03:1e:11:22:d2:29:f3:fe:db:6e:f8:48:2a:68: 15:e7:64:77:ea:db:b7:8e:6a:9d:64:69:e8:59:20:bc:da:e1: c8:04:8f:84:e5:0f:b7:af:8e:da:aa:0f:39:bd:b6:26:78:26: 02:06:49:e0:98:f8:10:95:cc:36:be:47:29:85:4d:22:7d:ce: 64:bc:90:20:6e:88:66:eb:8a:3b:74:9a:50:ef:0d:c7:3a:4f: 58:72:a6:c4:9d:68:3a:2b:21:a7:ee:bb:b8:6c:ca:e2:6d:54: ad:dc:f8:e1:9a:88:e9:a8:35:2d:d6:d0:45:65:56:46:ee:8b: 2f:3a:da:bb:08:db:7b:5e:c0:e1:d0:a7:9a:56:0c:04:d4:87: 5f:87:33:e0:1d:a0:0c:9a:6c:5b:06:3f:f7:8f:a0:b8:db:d7: 88:a1:66:0d:60:5f:51:af:ef:80:ce:d7:98:48:ab:d5:47:13: cf:ba:37:a0:9b:43:cf:6c:2d:da:04:6f:44:a5:0c:dd:96:7b: 37:97:71:12:39:33:c4:62:e5:5c:86:df:e1:9d:71:ce:65:01: b5:6a:dd:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH492FX4Lf3aoXdDrhX46SdSc1/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAyQTJF QkMyOEFDQzAeFw0yNjA5MjMyMjAzMjhaFw0yNjA5MjUwMTEyMjhaMDMxMTAvBgNV BAMTKDc0RTc5MEZDNjhENTQyMDU5QzVGODI5M0Q1RjJDMDg0OUM2QzI2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwXPvBVYSIA1ela1CrfbCqqbMv DX62zaGP698vCWgVSFEFt863OQC+RHgwOdOw6vUd57I8GZPrlcpJif+CF1/qeh8/ me3AOHWUZJ/YyN17Nlby7Qs5RhC84m2SuDOjH1kaeODShvk6Ej+0JHi9hOTHxGpn TNi9HNEFAoNqCCXQ8u3kZZQsm7cvYxptt1n1g6rRsva6Liaj80Eo60pa0ix3RSeA dc3dQd9tHdH//XiOXuwd5rncvMb0OcAutorTbnm8QuCSYbLjLFZkUDHsqa5HeCVw tilK3fIP9xNQEX89jK+u63H6LwYcFyl2YrypBDV/k8sZLEV7VAfeF+xATUQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOeQ/GjVQgWcX4KT1fLAhJxsJsowHwYDVR0j BBgwFoAUTIOVDrmKix8SQQm94JECouvCiswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M5NzZlYzUtYjA1YS00ODBmLTg2ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVC OThBOEIxRjEyNDEwOUJERTA5MTAyQTJFQkMyOEFDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzgzOTUwRUI5OEE4QjFGMTI0MTA5QkRFMDkxMDJBMkVCQzI4 QUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M5NzZlYzUtYjA1YS00ODBmLTg2 ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAy QTJFQkMyOEFDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkL9wdu3crqha5+I3jp17Z7T63DdrHG0bdo Ki/Eme5m7WE3tARXqIsDHhEi0inz/ttu+EgqaBXnZHfq27eOap1kaehZILza4cgE j4TlD7evjtqqDzm9tiZ4JgIGSeCY+BCVzDa+RymFTSJ9zmS8kCBuiGbrijt0mlDv Dcc6T1hypsSdaDorIafuu7hsyuJtVK3c+OGaiOmoNS3W0EVlVkbuiy862rsI23te wOHQp5pWDATUh1+HM+AdoAyabFsGP/ePoLjb14ihZg1gX1Gv74DO15hIq9VHE8+6 N6CbQ89sLdoEb0SlDN2WezeXcRI5M8Ri5VyG3+Gdcc5lAbVq3eo= -----END CERTIFICATE-----Generated at Thu Sep 24 10:14:20 2026 by rpki-client