$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: 93HU6pVLE4qqT+50jsgjJwY4M60SCfQX/JRYnxs11ro= Subject key identifier: BC:CE:12:9F:02:07:A5:5B:D7:66:51:51:F1:E3:BF:F7:BB:C7:43:7D Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 1CCEB9BBED42A9CDC733125DAB2A1A1FBD9A2E83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:15:35 +0000 Manifest this update: Mon 21 Sep 2026 23:10:35 +0000 Manifest next update: Wed 23 Sep 2026 03:12:35 +0000 Files and hashes: 1: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: mCAjljFaBvL5+o8vNYr9o/hHB7Yvmo0i7h/rRQULK/8=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ce:b9:bb:ed:42:a9:cd:c7:33:12:5d:ab:2a:1a:1f:bd:9a:2e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: Sep 21 23:10:35 2026 GMT Not After : Sep 23 03:12:35 2026 GMT Subject: CN=BCCE129F0207A55BD7665151F1E3BFF7BBC7437D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:d8:60:f9:8a:46:dd:88:4f:e2:f5:ff:42: 91:42:03:39:6a:e3:9c:c5:cb:17:b6:bf:b8:a6:86: 9f:47:04:e4:8f:45:bb:d9:7e:0b:dc:75:e9:94:b3: c1:2a:42:16:8a:c2:76:71:2a:a3:68:31:6c:1a:c0: 08:d7:d2:62:2c:83:bc:5a:6d:5d:4f:36:d0:59:15: ab:50:ba:33:c2:94:60:74:a7:d4:ac:74:a2:39:17: b4:4f:51:bf:bb:4a:f1:e9:a6:57:0d:70:17:1e:ec: 11:dc:2b:5c:a1:0e:80:62:b5:f1:0e:07:bf:eb:bb: 83:d9:d2:34:5b:30:6c:0b:13:1d:e2:55:ab:fd:90: 86:e5:5c:a9:eb:2f:b9:b2:e4:ec:9d:8f:49:95:5d: 77:d9:03:ea:54:f4:0f:f5:70:73:8e:c9:6f:45:70: 46:3c:b4:d1:e8:88:30:d1:57:f0:ba:dc:68:fb:f9: 2b:7f:b3:fd:7f:ce:be:12:2e:07:29:07:80:fc:ce: 5b:8f:3c:6f:a3:3d:de:43:e2:da:08:d5:00:cc:23: 39:5c:04:f0:f6:61:ca:c0:ab:9d:b0:97:a6:18:f4: 9a:dd:9e:6d:7b:d6:5b:8c:d1:4d:22:3a:2e:13:69: 15:e0:ea:f1:a8:4d:ef:58:5c:c9:d8:c2:1c:bd:4b: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:12:9F:02:07:A5:5B:D7:66:51:51:F1:E3:BF:F7:BB:C7:43:7D X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:28:0c:d3:dd:b9:a1:80:17:77:97:88:15:a5:c7:46:ad:c4: 88:11:2d:52:70:2d:55:79:a6:91:cb:d0:29:79:00:5a:cc:c9: 39:b7:c6:9f:a3:f7:fa:8a:31:e3:f1:0e:5c:49:f6:f2:5e:1d: 91:04:16:1a:df:b4:14:e2:54:38:d4:c6:bf:08:81:d2:f3:41: a3:41:eb:c6:df:f7:3a:6f:c9:0b:5c:56:31:9a:a2:9a:18:6f: 94:20:2e:58:5e:7d:84:ad:39:bc:39:1f:d7:78:ca:8a:89:33: 34:04:00:5a:7c:f8:68:88:97:51:23:5c:b5:03:2b:a2:52:d8: f2:93:74:df:c5:9f:cd:0d:6c:f8:3c:57:15:d7:5a:80:ca:47: af:20:4f:19:7d:2f:62:a9:5b:06:e8:bd:86:ca:4f:f9:dc:38: 41:dd:c9:57:7f:36:32:eb:2c:b3:46:37:99:50:fb:36:4f:80: 87:de:39:c6:92:2f:46:d1:ab:b9:41:94:b3:1c:88:3b:a7:67: 18:7b:8b:42:36:de:dd:4f:35:ce:ee:0e:73:dd:d4:b0:3f:eb: 34:9e:a8:da:b7:c5:f8:f6:c7:35:1d:be:d6:cf:f0:b6:53:51: e8:cf:95:95:7a:87:82:e3:9c:4d:3b:78:87:91:7f:fe:c4:9f: 3c:81:1c:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM65u+1Cqc3HMxJdqyoaH72aLoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjA5MjEyMzEwMzVaFw0yNjA5MjMwMzEyMzVaMDMxMTAvBgNV BAMTKEJDQ0UxMjlGMDIwN0E1NUJENzY2NTE1MUYxRTNCRkY3QkJDNzQzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtdhg+YpG3YhP4vX/QpFCAzlq 45zFyxe2v7imhp9HBOSPRbvZfgvcdemUs8EqQhaKwnZxKqNoMWwawAjX0mIsg7xa bV1PNtBZFatQujPClGB0p9SsdKI5F7RPUb+7SvHpplcNcBce7BHcK1yhDoBitfEO B7/ru4PZ0jRbMGwLEx3iVav9kIblXKnrL7my5Oydj0mVXXfZA+pU9A/1cHOOyW9F cEY8tNHoiDDRV/C63Gj7+St/s/1/zr4SLgcpB4D8zluPPG+jPd5D4toI1QDMIzlc BPD2YcrAq52wl6YY9Jrdnm171luM0U0iOi4TaRXg6vGoTe9YXMnYwhy9S/OdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvM4SnwIHpVvXZlFR8eO/97vHQ30wHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMoDNPduaGAF3eXiBWlx0atxIgRLVJwLVV5 ppHL0Cl5AFrMyTm3xp+j9/qKMePxDlxJ9vJeHZEEFhrftBTiVDjUxr8IgdLzQaNB 68bf9zpvyQtcVjGaopoYb5QgLlhefYStObw5H9d4yoqJMzQEAFp8+GiIl1EjXLUD K6JS2PKTdN/Fn80NbPg8VxXXWoDKR68gTxl9L2KpWwbovYbKT/ncOEHdyVd/NjLr LLNGN5lQ+zZPgIfeOcaSL0bRq7lBlLMciDunZxh7i0I23t1PNc7uDnPd1LA/6zSe qNq3xfj2xzUdvtbP8LZTUejPlZV6h4LjnE07eIeRf/7EnzyBHHw= -----END CERTIFICATE-----Generated at Tue Sep 22 07:46:47 2026 by rpki-client