$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: bJ21sHiY/NXV7aCooPA19dQvZARqLnNyYdcT114/SLs= Subject key identifier: FC:B6:5D:FB:09:BC:4C:55:C7:91:3C:E7:64:FD:67:AE:F0:11:D4:40 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 02CD8CF28A8D6967C589B0F22862890E6F7F7C1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: BC Signing time: Sun 20 Sep 2026 18:55:08 +0000 Manifest this update: Sun 20 Sep 2026 18:50:08 +0000 Manifest next update: Mon 21 Sep 2026 20:45:08 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 3: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: HFhWn9k+4mmZ6ZxwDBL7j/diCqC89+ERjdfb1b+0yxA=) 4: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cd:8c:f2:8a:8d:69:67:c5:89:b0:f2:28:62:89:0e:6f:7f:7c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Sep 20 18:50:08 2026 GMT Not After : Sep 21 20:45:08 2026 GMT Subject: CN=FCB65DFB09BC4C55C7913CE764FD67AEF011D440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:11:b7:ae:6b:55:b5:f2:72:96:38:94:fb: fa:3a:f6:0e:49:5e:40:51:70:5c:23:78:e4:56:47: 33:54:53:59:b7:ed:91:d1:60:03:91:86:74:7d:67: 4e:98:92:c4:f9:f4:d2:66:26:3b:fa:82:37:24:58: ff:30:79:eb:17:d0:a9:f3:ca:06:ca:ec:61:6a:8c: e9:91:17:61:b9:05:40:1b:14:51:8c:51:a7:c9:a1: 1a:1d:04:79:22:b4:e1:d8:04:2c:2b:f1:18:e0:ea: 1c:90:15:c0:54:52:2d:55:51:dd:fb:a7:bb:b1:55: ba:07:c4:e4:7f:06:43:82:f5:15:b8:14:e4:09:d3: 6a:b0:8e:dd:6c:74:03:b5:28:1f:19:62:25:15:5b: b9:7c:ac:de:13:66:d6:36:d2:58:cc:af:11:f6:aa: e2:ae:eb:8f:d0:55:55:c1:bc:f6:24:87:77:e3:ef: 16:18:49:dd:fd:f6:d4:50:65:13:9b:74:d3:60:cd: 3c:71:ef:a0:d4:2d:7b:ad:ba:bc:7d:39:bf:66:b3: 57:0a:65:69:1f:79:69:2d:de:4d:3f:45:2a:5c:b6: a6:fc:d5:d8:6b:e4:3f:1d:a7:43:0d:2d:3b:ab:d5: f9:df:80:c0:87:c4:ba:dc:74:d7:8d:9e:e0:67:c3: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B6:5D:FB:09:BC:4C:55:C7:91:3C:E7:64:FD:67:AE:F0:11:D4:40 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fd:a6:cf:69:5a:58:fc:b1:c9:f8:9d:a2:fe:4c:db:ba:1d: 65:31:ce:52:fb:9d:a8:7f:a0:2a:81:99:88:83:55:3f:24:fe: b5:cb:63:8e:48:68:24:3d:9e:7b:41:b3:46:9f:c1:f6:62:99: bd:4d:57:a7:89:61:e2:10:be:21:50:8b:f3:1c:9a:7d:84:cd: 8b:d3:61:73:55:23:2a:20:a6:36:74:7c:6c:8e:3e:13:1b:a2: 10:8f:d1:fd:91:dd:be:4c:21:be:82:2f:44:3e:c0:f5:7d:f5: 01:33:1d:a7:e6:4e:a5:bc:4c:38:d4:99:4a:e8:45:34:ab:85: 1e:f4:aa:d4:5c:4e:6e:4b:a7:8f:c5:bc:76:f9:35:fc:ec:06: 79:14:75:71:2c:83:44:4e:65:cd:3c:44:e7:6d:18:bc:28:8e: ad:7f:44:5f:b1:b5:52:9f:d8:32:53:36:4c:74:8f:5d:66:03: 2a:cf:a3:ed:bf:2b:7e:cc:17:34:2c:e2:a6:da:31:93:72:ad: 80:04:26:22:55:59:72:f4:a3:12:dc:2e:fd:68:6e:58:4e:6c: 3f:72:88:8d:64:97:5d:c2:f7:57:7f:87:2a:61:71:9b:54:4a: 1e:df:a2:4c:8d:da:dd:d0:b6:bf:5e:b9:38:b6:f9:5e:f3:0a: 03:fc:a9:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAs2M8oqNaWfFibDyKGKJDm9/fB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA5MjAxODUwMDhaFw0yNjA5MjEyMDQ1MDhaMDMxMTAvBgNV BAMTKEZDQjY1REZCMDlCQzRDNTVDNzkxM0NFNzY0RkQ2N0FFRjAxMUQ0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KRG3rmtVtfJyljiU+/o69g5J XkBRcFwjeORWRzNUU1m37ZHRYAORhnR9Z06YksT59NJmJjv6gjckWP8weesX0Knz ygbK7GFqjOmRF2G5BUAbFFGMUafJoRodBHkitOHYBCwr8Rjg6hyQFcBUUi1VUd37 p7uxVboHxOR/BkOC9RW4FOQJ02qwjt1sdAO1KB8ZYiUVW7l8rN4TZtY20ljMrxH2 quKu64/QVVXBvPYkh3fj7xYYSd399tRQZRObdNNgzTxx76DULXuturx9Ob9ms1cK ZWkfeWkt3k0/RSpctqb81dhr5D8dp0MNLTur1fnfgMCHxLrcdNeNnuBnw6wxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/LZd+wm8TFXHkTznZP1nrvAR1EAwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE39ps9pWlj8scn4naL+TNu6HWUxzlL7nah/ oCqBmYiDVT8k/rXLY45IaCQ9nntBs0afwfZimb1NV6eJYeIQviFQi/Mcmn2EzYvT YXNVIyogpjZ0fGyOPhMbohCP0f2R3b5MIb6CL0Q+wPV99QEzHafmTqW8TDjUmUro RTSrhR70qtRcTm5Lp4/FvHb5NfzsBnkUdXEsg0ROZc08ROdtGLwojq1/RF+xtVKf 2DJTNkx0j11mAyrPo+2/K37MFzQs4qbaMZNyrYAEJiJVWXL0oxLcLv1oblhObD9y iI1kl13C91d/hyphcZtUSh7fokyN2t3Qtr9euTi2+V7zCgP8qcM= -----END CERTIFICATE-----Generated at Mon Sep 21 01:57:27 2026 by rpki-client