$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json) Hash identifier: mJt8DijiV81aCs2DLuMlOwabEWZf4CJkLEznjxNXuto= Subject key identifier: FB:8F:0D:E0:D0:41:DD:10:67:A5:1D:A2:97:02:89:C5:AB:90:D2:C3 Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Certificate serial: 304495358CCDBD071C68063FF96CFAE7AD2329A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:58:56 +0000 Manifest this update: Mon 21 Sep 2026 01:53:56 +0000 Manifest next update: Tue 22 Sep 2026 02:47:56 +0000 Files and hashes: 1: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=) 2: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: I0ZmNcWgmPKMXD5DRrhICki0YqSMScsPtfvlqcix28o=) 3: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:44:95:35:8c:cd:bd:07:1c:68:06:3f:f9:6c:fa:e7:ad:23:29:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Validity Not Before: Sep 21 01:53:56 2026 GMT Not After : Sep 22 02:47:56 2026 GMT Subject: CN=FB8F0DE0D041DD1067A51DA2970289C5AB90D2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:03:40:d2:44:1b:4b:81:f8:ee:bd:51:c4: 27:8b:37:08:62:fb:09:49:52:74:22:ca:17:9a:74: c2:6e:bf:35:79:36:4b:cc:cb:2c:71:28:a4:53:6c: 1d:26:e5:c1:a7:1d:db:26:d5:e1:1f:da:f8:b9:7d: 63:21:00:1d:59:1f:e3:3c:43:57:52:1c:e7:83:f5: 71:a8:19:06:22:ec:31:7e:3e:5e:93:b2:03:16:7b: d3:0e:f5:e8:88:17:a2:dc:1c:f1:bb:f3:36:7a:f5: fe:8d:72:e8:ed:04:73:93:02:b4:ef:fa:88:e1:46: e6:67:08:76:64:76:af:e3:b0:9a:17:9d:7b:17:2c: 8e:79:5b:80:bb:b9:07:ca:49:de:5a:65:83:6c:7b: 53:fe:b9:47:21:f4:3c:09:35:14:f5:08:1c:76:4d: 4a:ce:bb:14:93:ae:28:cf:74:a0:70:23:8e:cd:20: 4f:dd:e2:33:54:cd:fa:65:ff:3c:93:43:05:a2:fc: fa:44:bd:14:b8:72:6f:19:b4:b1:32:7f:11:4d:4d: e2:f8:b8:4c:5d:88:e4:3f:e6:0c:ec:54:19:87:13: 1f:58:7e:7c:fc:d7:47:60:57:10:9b:93:ca:ae:88: 74:60:7b:c3:1a:11:b2:c7:c5:15:55:3a:c6:bc:b8: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:0D:E0:D0:41:DD:10:67:A5:1D:A2:97:02:89:C5:AB:90:D2:C3 X509v3 Authority Key Identifier: keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a6:ba:c0:ea:ed:1a:d0:64:f5:c1:ce:7a:62:87:9b:6d:a5: ce:05:99:b3:01:92:d3:97:b4:d0:cc:dc:cb:68:cc:99:e6:68: 89:a1:bc:e4:f8:0f:1a:04:46:00:bc:17:16:d0:ca:5b:25:4a: 65:b3:0e:65:a7:39:48:21:a3:b2:5c:20:bc:08:77:fa:fd:21: e4:c2:38:c9:8a:0f:12:4e:e3:eb:e0:55:1e:20:a1:9b:98:b0: 24:50:f1:81:ef:ac:cd:26:d9:c7:f2:d1:d4:d6:20:ed:15:db: 81:1a:71:e5:ca:2b:c2:aa:56:14:7a:0d:6d:e7:01:3a:d0:3b: 65:cf:fd:9f:cf:63:6c:8e:82:db:a2:ef:f5:8f:8b:f8:13:c8: d5:62:08:95:64:fb:dd:74:78:f0:b8:d5:e2:a3:95:82:20:a1: 4a:ca:b9:50:a6:0d:5d:a8:42:d3:38:34:4f:fb:32:bb:bf:b9: 25:ce:c1:04:6e:93:5b:09:b5:5d:97:4b:19:32:79:d3:e2:c9: 0a:d5:e7:bf:78:fa:c7:cf:fc:58:8e:9a:e8:36:8c:8e:46:0f: 2a:c1:0d:18:78:52:eb:4e:c6:6d:72:1a:7a:22:4c:4c:c4:95: 5a:82:a5:ae:56:2c:36:8c:7d:29:0b:a2:98:81:31:f7:86:8d: 21:6d:10:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMESVNYzNvQccaAY/+Wz6560jKaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIx RkYyQzVDNDAeFw0yNjA5MjEwMTUzNTZaFw0yNjA5MjIwMjQ3NTZaMDMxMTAvBgNV BAMTKEZCOEYwREUwRDA0MUREMTA2N0E1MURBMjk3MDI4OUM1QUI5MEQyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mQNA0kQbS4H47r1RxCeLNwhi +wlJUnQiyheadMJuvzV5NkvMyyxxKKRTbB0m5cGnHdsm1eEf2vi5fWMhAB1ZH+M8 Q1dSHOeD9XGoGQYi7DF+Pl6TsgMWe9MO9eiIF6LcHPG78zZ69f6NcujtBHOTArTv +ojhRuZnCHZkdq/jsJoXnXsXLI55W4C7uQfKSd5aZYNse1P+uUch9DwJNRT1CBx2 TUrOuxSTrijPdKBwI47NIE/d4jNUzfpl/zyTQwWi/PpEvRS4cm8ZtLEyfxFNTeL4 uExdiOQ/5gzsVBmHEx9Yfnz810dgVxCbk8quiHRge8MaEbLHxRVVOsa8uHa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+48N4NBB3RBnpR2ilwKJxauQ0sMwHwYDVR0j BBgwFoAUSztU9KEgPZ316AlCKMkfwh/yxcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWExZTBiZDctMjgxYS00ZWJhLWI5OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRB MTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIxRkYyQzVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QjNCNTRGNEExMjAzRDlERjVFODA5NDIyOEM5MUZDMjFGRjJD NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFG QzIxRkYyQzVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2musDq7RrQZPXBznpih5ttpc4FmbMBktOX tNDM3MtozJnmaImhvOT4DxoERgC8FxbQylslSmWzDmWnOUgho7JcILwId/r9IeTC OMmKDxJO4+vgVR4goZuYsCRQ8YHvrM0m2cfy0dTWIO0V24EaceXKK8KqVhR6DW3n ATrQO2XP/Z/PY2yOgtui7/WPi/gTyNViCJVk+910ePC41eKjlYIgoUrKuVCmDV2o QtM4NE/7Mru/uSXOwQRuk1sJtV2XSxkyedPiyQrV5794+sfP/FiOmug2jI5GDyrB DRh4UutOxm1yGnoiTEzElVqCpa5WLDaMfSkLopiBMfeGjSFtEGU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:24:57 2026 by rpki-client