$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json) Hash identifier: 68SZN898goEbfc3ufjFo25+hadwFEAzPwb9cpxHOZEM= Subject key identifier: 6C:A0:FD:13:43:BD:B6:C9:CA:D8:96:F7:F3:07:0C:D3:3F:FB:60:02 Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Certificate serial: 750EBFEDBD3DD34D082870DDA95E4220DC57E750 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft Manifest number: BF Signing time: Mon 21 Sep 2026 05:48:54 +0000 Manifest this update: Mon 21 Sep 2026 05:43:54 +0000 Manifest next update: Tue 22 Sep 2026 06:53:54 +0000 Files and hashes: 1: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: K/+03HU2GlRnleH7mKffgpfKl5qYXKA1zlEhNN3KPVU=) 2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:bf:ed:bd:3d:d3:4d:08:28:70:dd:a9:5e:42:20:dc:57:e7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Validity Not Before: Sep 21 05:43:54 2026 GMT Not After : Sep 22 06:53:54 2026 GMT Subject: CN=6CA0FD1343BDB6C9CAD896F7F3070CD33FFB6002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:ac:24:1b:d4:40:d7:cd:73:8f:ad:8c:c5: 04:2d:d5:1f:7f:de:7a:e5:6e:01:b2:8d:24:f3:f1: 00:1b:28:49:fc:f3:e0:ba:1b:5c:f3:a7:9f:73:db: 01:97:5a:b8:be:27:33:c6:04:1e:95:e9:d9:45:75: 48:ac:09:70:79:fb:0a:8c:93:79:d4:52:eb:74:21: 3f:08:86:a8:75:f2:99:fc:b7:f6:42:95:c7:24:87: 6b:c9:3e:35:45:33:1a:31:37:54:3f:27:b3:e3:f9: 1c:18:96:bd:e3:70:20:d2:85:88:e2:96:28:b3:ec: 14:9e:0d:a9:de:40:fd:01:20:6a:75:1d:bf:54:34: e6:80:2d:f5:79:36:51:15:da:31:5a:4e:0b:1b:be: 36:00:d1:e6:66:ba:b6:a1:f1:0d:7f:19:cc:03:88: 84:13:fd:a4:25:6e:72:5e:a5:90:67:e9:e8:6e:cf: 47:76:c4:d5:03:c3:19:53:e3:ce:31:8d:9c:ac:12: 42:4e:ac:60:38:75:f7:8f:02:bc:21:56:bf:3c:31: 53:72:88:88:90:23:e6:56:20:57:c0:8f:df:62:de: 63:fd:e6:1a:8b:25:8f:52:65:ae:57:a2:3b:49:77: 99:0c:29:2e:e0:c9:3d:3e:a5:5f:28:47:30:b3:48: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A0:FD:13:43:BD:B6:C9:CA:D8:96:F7:F3:07:0C:D3:3F:FB:60:02 X509v3 Authority Key Identifier: keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:99:0f:5d:d2:47:a5:90:f6:69:7c:b0:0f:be:65:2f:d3: 70:25:c9:12:86:3f:d1:38:6d:bb:12:20:eb:a2:fb:6d:88:81: fd:d7:3c:e3:4c:61:c8:f9:15:14:ad:95:e9:d0:e3:16:0f:21: 74:a2:bc:1c:fd:78:40:7f:15:0a:df:1d:c8:6e:0b:ee:e5:bf: b0:60:66:4a:96:28:52:4a:4b:73:9c:4a:5d:bb:fa:e1:2d:e8: b9:f8:3d:61:74:e1:3a:68:1e:b1:83:b6:e0:1d:3d:f3:d2:12: f6:f7:c9:97:a5:be:6b:71:e3:83:ce:94:98:b6:23:22:55:34: 26:b4:ca:52:d9:cb:f7:82:2b:f3:80:07:66:7d:d1:98:5d:00: b3:33:b6:3a:94:71:12:1c:5a:b1:a5:b8:54:bc:ff:40:ec:9d: 1a:e9:ca:6f:ad:de:c2:fc:26:30:7e:06:49:f0:7b:59:2d:43: 21:7d:ba:76:2f:3e:17:ee:27:bb:a2:ea:71:ec:c5:1e:17:65: be:0d:a3:df:e0:a4:f0:44:85:55:af:4e:05:03:91:45:0c:a1: e4:02:a4:33:5f:92:dc:e9:2d:4e:5b:28:4b:1d:f6:75:a3:f7: dc:c8:6d:49:d8:e7:b3:49:22:8a:91:0b:b9:2c:9e:cf:c0:52: ba:d5:07:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQ6/7b09000IKHDdqV5CINxX51AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3 MDQ0Q0VCNTAeFw0yNjA5MjEwNTQzNTRaFw0yNjA5MjIwNjUzNTRaMDMxMTAvBgNV BAMTKDZDQTBGRDEzNDNCREI2QzlDQUQ4OTZGN0YzMDcwQ0QzM0ZGQjYwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQO6wkG9RA181zj62MxQQt1R9/ 3nrlbgGyjSTz8QAbKEn88+C6G1zzp59z2wGXWri+JzPGBB6V6dlFdUisCXB5+wqM k3nUUut0IT8Ihqh18pn8t/ZClcckh2vJPjVFMxoxN1Q/J7Pj+RwYlr3jcCDShYji liiz7BSeDaneQP0BIGp1Hb9UNOaALfV5NlEV2jFaTgsbvjYA0eZmurah8Q1/GcwD iIQT/aQlbnJepZBn6ehuz0d2xNUDwxlT484xjZysEkJOrGA4dfePArwhVr88MVNy iIiQI+ZWIFfAj99i3mP95hqLJY9SZa5XojtJd5kMKS7gyT0+pV8oRzCzSDOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKD9E0O9tsnK2Jb38wcM0z/7YAIwHwYDVR0j BBgwFoAUTZjDauQU3ir6umJcYBGIM3BEzrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNmQ4NmItZTNkZi00ZTJmLTkzNmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFF NDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3MDQ0Q0VCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDk4QzM2QUU0MTRERTJBRkFCQTYyNUM2MDExODgzMzcwNDRD RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4 MzM3MDQ0Q0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUqmQ9d0kelkPZpfLAPvmUv03AlyRKGP9E4 bbsSIOui+22Igf3XPONMYcj5FRStlenQ4xYPIXSivBz9eEB/FQrfHchuC+7lv7Bg ZkqWKFJKS3OcSl27+uEt6Ln4PWF04TpoHrGDtuAdPfPSEvb3yZelvmtx44POlJi2 IyJVNCa0ylLZy/eCK/OAB2Z90ZhdALMztjqUcRIcWrGluFS8/0DsnRrpym+t3sL8 JjB+Bknwe1ktQyF9unYvPhfuJ7ui6nHsxR4XZb4No9/gpPBEhVWvTgUDkUUMoeQC pDNfktzpLU5bKEsd9nWj99zIbUnY57NJIoqRC7ksns/AUrrVB7w= -----END CERTIFICATE-----Generated at Mon Sep 21 16:31:19 2026 by rpki-client