$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json) Hash identifier: 5k8hKMrMRWNJTWhblNuQ+fKMG2ZQxH4QuP6uDI4JCaQ= Subject key identifier: 2B:FC:82:45:12:67:87:A8:8F:38:B5:45:CF:59:E8:0D:78:59:4F:43 Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669 Certificate serial: 7A288A87CC415CC47A1649232F5E4CEE0CFEBC6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 16:52:25 +0000 Manifest this update: Mon 21 Sep 2026 16:47:25 +0000 Manifest next update: Tue 22 Sep 2026 19:35:25 +0000 Files and hashes: 1: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=) 2: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=) 4: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=) 5: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: Qnwqif8o+oNMeseUYZpWI1iEPLI1ery1RDA7rxZzbzs=) 6: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=) 7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:28:8a:87:cc:41:5c:c4:7a:16:49:23:2f:5e:4c:ee:0c:fe:bc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669 Validity Not Before: Sep 21 16:47:25 2026 GMT Not After : Sep 22 19:35:25 2026 GMT Subject: CN=2BFC8245126787A88F38B545CF59E80D78594F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:3e:e5:f3:56:9c:f6:a7:e5:67:40:45:11: 46:81:9e:fb:98:03:bd:0d:4b:05:ac:96:e6:d2:df: 23:03:d2:e0:89:0e:48:e4:1f:13:16:7b:2e:23:35: a4:ae:bc:7f:3e:d6:8c:21:4d:6b:c6:d9:86:30:c3: 23:e3:09:b7:5a:89:34:8a:ff:c4:47:b6:27:68:ed: e4:ea:15:59:fe:d2:31:e6:9e:31:e7:5c:c0:e2:d2: 39:79:16:ba:01:a4:af:e2:0d:2a:db:b5:fb:4c:f8: c1:c5:24:07:b3:8f:37:cf:2e:ba:f9:ad:21:24:f7: 79:b4:dc:22:9d:21:09:51:6a:5e:29:05:59:24:4f: 96:41:8c:55:2e:98:31:57:07:27:4c:64:37:e3:08: e1:df:5d:34:17:44:17:0e:da:9b:bb:5d:19:b6:3b: 4d:ea:61:e5:c4:28:25:d3:50:ae:b5:42:33:0e:1b: f5:49:0c:89:bd:9c:65:ef:1f:67:aa:e3:c9:59:b7: 33:64:c1:69:58:13:9d:58:83:1a:a6:e7:98:2a:1a: c5:ce:b5:20:e6:41:3f:c4:91:db:6c:9f:3b:cd:56: a4:19:11:d3:65:10:b2:d8:b3:29:2f:d3:0e:c9:7f: 50:3f:37:6b:66:41:ec:fc:93:a5:82:3f:60:36:2a: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FC:82:45:12:67:87:A8:8F:38:B5:45:CF:59:E8:0D:78:59:4F:43 X509v3 Authority Key Identifier: keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5a:f3:c1:9c:ba:ba:0b:97:27:f4:fe:8f:14:4a:8e:e4:54: f2:10:f8:2d:87:27:68:41:b1:b5:e3:f9:2f:a5:d6:80:ad:da: f7:25:02:7b:bd:05:1e:ca:a8:b2:cb:57:12:cf:c3:39:77:1c: b6:78:45:16:f7:f3:23:5c:20:85:ec:47:e3:8b:ce:3b:45:fa: 29:16:c1:95:74:07:c3:a0:fe:15:0a:80:2d:94:90:0c:63:94: 25:23:7e:07:42:c2:cb:46:8f:6c:42:cf:7a:82:72:d0:0c:28: 40:6d:c4:38:aa:9c:ef:a9:7b:e2:7d:d6:79:25:63:da:47:2a: 6c:17:10:c2:37:57:36:c3:3d:60:e9:62:42:28:a4:ea:07:85: 64:bd:19:8d:ee:69:17:b8:6e:15:a9:11:c6:ad:51:7f:d2:0c: 93:01:a0:42:45:c9:b4:61:3e:3c:2a:c7:0f:cf:e3:29:a1:88: 42:e7:47:4a:d7:e8:4f:5e:26:8e:d9:42:c8:c1:78:b9:f0:42: d8:be:dc:32:4f:83:a3:bf:53:85:7a:74:41:ae:5b:a4:4f:ab: 90:8f:b9:c5:be:79:65:d7:a8:c0:d0:7e:7c:16:8a:89:d5:cc: 9b:14:c4:1d:3a:a8:1c:de:0d:4d:4a:13:17:b5:40:b1:61:9c: 9b:85:57:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiiKh8xBXMR6FkkjL15M7gz+vGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0 MTMxRjY2OTAeFw0yNjA5MjExNjQ3MjVaFw0yNjA5MjIxOTM1MjVaMDMxMTAvBgNV BAMTKDJCRkM4MjQ1MTI2Nzg3QTg4RjM4QjU0NUNGNTlFODBENzg1OTRGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOz7l81ac9qflZ0BFEUaBnvuY A70NSwWslubS3yMD0uCJDkjkHxMWey4jNaSuvH8+1owhTWvG2YYwwyPjCbdaiTSK /8RHtido7eTqFVn+0jHmnjHnXMDi0jl5FroBpK/iDSrbtftM+MHFJAezjzfPLrr5 rSEk93m03CKdIQlRal4pBVkkT5ZBjFUumDFXBydMZDfjCOHfXTQXRBcO2pu7XRm2 O03qYeXEKCXTUK61QjMOG/VJDIm9nGXvH2eq48lZtzNkwWlYE51Ygxqm55gqGsXO tSDmQT/EkdtsnzvNVqQZEdNlELLYsykv0w7Jf1A/N2tmQez8k6WCP2A2Kg4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/yCRRJnh6iPOLVFz1noDXhZT0MwHwYDVR0j BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1 MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG NjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0 Njc0MTMxRjY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxa88GcuroLlyf0/o8USo7kVPIQ+C2HJ2hB sbXj+S+l1oCt2vclAnu9BR7KqLLLVxLPwzl3HLZ4RRb38yNcIIXsR+OLzjtF+ikW wZV0B8Og/hUKgC2UkAxjlCUjfgdCwstGj2xCz3qCctAMKEBtxDiqnO+pe+J91nkl Y9pHKmwXEMI3VzbDPWDpYkIopOoHhWS9GY3uaRe4bhWpEcatUX/SDJMBoEJFybRh Pjwqxw/P4ymhiELnR0rX6E9eJo7ZQsjBeLnwQti+3DJPg6O/U4V6dEGuW6RPq5CP ucW+eWXXqMDQfnwWionVzJsUxB06qBzeDU1KExe1QLFhnJuFV3k= -----END CERTIFICATE-----Generated at Tue Sep 22 00:49:52 2026 by rpki-client