$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json) Hash identifier: C6xGQzM2Z3BofWRgs9XBG/LopfdrDePO5CnydA0answ= Subject key identifier: 40:DD:B9:2C:E1:48:7F:1B:F7:97:71:F5:26:54:FD:8C:D1:AF:43:8D Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Certificate serial: 1B14507AC86AA6FD16BD7B0D89A941F76BFCC55D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 01:32:04 +0000 Manifest this update: Sat 26 Sep 2026 01:27:04 +0000 Manifest next update: Sun 27 Sep 2026 03:08:04 +0000 Files and hashes: 1: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: t5itWKyA1f96SN9XAtRMIYIg0cHLpNFoKCUjMnC3pLk=) 2: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:14:50:7a:c8:6a:a6:fd:16:bd:7b:0d:89:a9:41:f7:6b:fc:c5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Validity Not Before: Sep 26 01:27:04 2026 GMT Not After : Sep 27 03:08:04 2026 GMT Subject: CN=40DDB92CE1487F1BF79771F52654FD8CD1AF438D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:bf:da:0a:7f:a3:79:f2:a7:71:d2:fa:80: 0f:96:85:fe:c3:97:81:b0:2e:dc:cf:95:5b:1b:92: 20:b8:18:d0:99:f6:2a:6b:46:85:8d:ad:e1:00:c4: d2:5e:5a:79:a4:ca:60:e9:b1:0c:1a:73:54:6f:66: dd:66:73:20:7d:7a:af:b6:72:08:dc:fe:11:0e:93: 72:a2:a2:a2:ef:3f:ab:d2:c1:bf:27:06:8e:cd:5c: 07:e2:28:f2:c0:8a:4f:05:06:0c:cb:41:55:e0:45: 8c:14:86:e3:5e:9f:81:4a:98:92:20:45:ba:24:29: 90:67:aa:16:e4:0e:09:12:e9:97:50:fa:25:1b:1e: 7e:24:52:ac:71:e2:a5:1f:6f:4b:20:f6:90:e5:b0: 86:d3:63:93:2b:bd:b7:1b:af:87:6f:d7:84:c9:3b: 7f:1a:2e:fd:ae:8c:1a:51:b0:75:ae:95:d6:9c:6c: e7:c6:8c:90:23:36:7d:38:5c:4b:02:cb:4c:df:ca: 7c:b0:b0:e6:e9:d0:7e:04:ca:a8:2a:dc:42:b7:c3: 83:20:95:06:cc:2d:22:f0:cd:53:43:d2:19:82:d9: 4d:0f:48:39:2c:53:9b:ad:40:ef:6d:f0:e2:af:25: 5b:dd:28:b6:55:a6:ee:31:5f:59:7f:44:2b:f0:b9: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:B9:2C:E1:48:7F:1B:F7:97:71:F5:26:54:FD:8C:D1:AF:43:8D X509v3 Authority Key Identifier: keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ad:cb:42:ec:ef:89:0a:72:a5:43:09:e5:41:d0:14:80:50: eb:cf:21:f5:ac:4b:c1:a7:b5:15:d2:1d:6a:13:7a:03:c6:03: 66:d6:0e:0b:e6:86:09:17:0c:54:6c:66:60:53:a2:4a:26:5f: 48:67:10:2a:2c:5a:ed:c0:bd:c5:18:1e:22:7c:ba:00:96:b1: 11:2f:52:83:b3:65:0d:7c:8f:3b:22:a8:84:ad:2e:8b:27:b4: 73:bb:1e:7e:1d:fc:a5:dd:61:d1:17:b5:44:57:f6:73:7b:65: d4:60:6c:ba:32:36:d4:d9:db:df:b9:c7:c9:1f:0a:4b:3a:f1: aa:6f:a4:5a:f6:0c:24:ad:20:fe:29:65:79:52:67:35:f4:a0: 86:1b:bb:fa:91:6b:99:6b:1a:c3:1d:5a:58:28:d6:11:6b:cd: 8c:0a:5d:05:d4:9a:9d:96:ce:11:f3:11:04:5d:db:31:e0:00: d2:83:c6:e4:6f:82:ae:42:90:8e:d6:8c:f4:3a:5f:ee:72:07: eb:63:69:7b:e8:ab:98:38:0b:34:e5:d9:33:ce:6c:7e:9c:9b: c7:23:7e:b5:89:f4:98:98:92:ff:85:23:53:a1:31:ac:8e:6c: 57:fb:0b:ca:25:49:f1:aa:64:a7:4f:cd:ca:40:05:38:16:d7: 72:da:b7:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxRQeshqpv0WvXsNialB92v8xV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlF M0ZENEZFNDAeFw0yNjA5MjYwMTI3MDRaFw0yNjA5MjcwMzA4MDRaMDMxMTAvBgNV BAMTKDQwRERCOTJDRTE0ODdGMUJGNzk3NzFGNTI2NTRGRDhDRDFBRjQzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtpb/aCn+jefKncdL6gA+Whf7D l4GwLtzPlVsbkiC4GNCZ9iprRoWNreEAxNJeWnmkymDpsQwac1RvZt1mcyB9eq+2 cgjc/hEOk3KioqLvP6vSwb8nBo7NXAfiKPLAik8FBgzLQVXgRYwUhuNen4FKmJIg RbokKZBnqhbkDgkS6ZdQ+iUbHn4kUqxx4qUfb0sg9pDlsIbTY5Mrvbcbr4dv14TJ O38aLv2ujBpRsHWuldacbOfGjJAjNn04XEsCy0zfynywsObp0H4Eyqgq3EK3w4Mg lQbMLSLwzVND0hmC2U0PSDksU5utQO9t8OKvJVvdKLZVpu4xX1l/RCvwuQi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQN25LOFIfxv3l3H1JlT9jNGvQ40wHwYDVR0j BBgwFoAUS7McwMBkOo73X1Syw1C22eP9T+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExYTNkNTYtYWM3NS00OTgxLTk3MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBD MDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlFM0ZENEZFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkIzMUNDMEMwNjQzQThFRjc1RjU0QjJDMzUwQjZEOUUzRkQ0 RkU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2 RDlFM0ZENEZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKty0Ls74kKcqVDCeVB0BSAUOvPIfWsS8Gn tRXSHWoTegPGA2bWDgvmhgkXDFRsZmBTokomX0hnECosWu3AvcUYHiJ8ugCWsREv UoOzZQ18jzsiqIStLosntHO7Hn4d/KXdYdEXtURX9nN7ZdRgbLoyNtTZ29+5x8kf Cks68apvpFr2DCStIP4pZXlSZzX0oIYbu/qRa5lrGsMdWlgo1hFrzYwKXQXUmp2W zhHzEQRd2zHgANKDxuRvgq5CkI7WjPQ6X+5yB+tjaXvoq5g4CzTl2TPObH6cm8cj frWJ9JiYkv+FI1OhMayObFf7C8olSfGqZKdPzcpABTgW13Lat98= -----END CERTIFICATE-----Generated at Sat Sep 26 07:23:07 2026 by rpki-client