$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json) Hash identifier: KIOzHBomeTabsgrE0SXqwTe/2S4Zd/Yig2/wg8kBSzw= Subject key identifier: CD:2C:05:36:81:98:F0:50:59:1A:C6:34:6B:99:B4:12:C5:05:3D:8A Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Certificate serial: 45AFC8FF20888CA5A3595B718A4E2C66BBFDC9D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:19:18 +0000 Manifest this update: Mon 21 Sep 2026 22:14:18 +0000 Manifest next update: Tue 22 Sep 2026 23:39:18 +0000 Files and hashes: 1: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: TV83DBBva/Yu8X0tB5/tMT2MMGB2Z4ybvs9dqrW+pxY=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:af:c8:ff:20:88:8c:a5:a3:59:5b:71:8a:4e:2c:66:bb:fd:c9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Validity Not Before: Sep 21 22:14:18 2026 GMT Not After : Sep 22 23:39:18 2026 GMT Subject: CN=CD2C05368198F050591AC6346B99B412C5053D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:d9:82:4b:32:65:9e:63:1d:62:fc:18:c7: c2:4e:e3:b4:bc:dd:e0:60:37:65:02:a8:77:88:e4: e0:75:9b:cf:c1:ed:de:33:ac:0e:b9:5e:c4:4c:3e: 7b:3f:14:72:97:89:86:79:f3:82:07:84:4f:84:b2: 4a:8b:32:1f:ac:14:fc:ee:b5:18:40:e0:9f:da:47: 9b:19:bf:67:80:ef:40:bf:62:d0:bd:df:31:66:95: b7:33:40:47:eb:d9:d4:de:18:e5:bc:79:d8:c4:c3: 07:8e:fd:0d:15:1b:ae:cf:1f:b5:2b:b0:84:de:6c: 3c:67:52:5e:dd:53:82:fa:e4:7f:fe:61:a2:eb:70: af:07:70:3e:92:38:11:9b:91:49:f5:19:bb:19:bd: ef:ba:1d:18:3a:6e:42:2e:0f:60:a2:8a:30:f0:58: 9e:7a:d0:6f:9f:82:42:62:c0:95:a1:70:da:1c:37: 30:82:77:cc:47:40:31:0c:68:9b:bf:35:e9:8f:04: a6:33:98:33:10:8c:d6:ba:f1:b7:68:fd:18:c3:7b: 1a:de:f4:f5:29:4a:e8:7a:82:67:a6:cd:43:31:db: 4e:fa:9e:20:6e:ba:f0:30:dd:8e:8c:d2:ce:7f:25: e0:65:22:4c:e7:96:72:e5:c1:1f:cb:e9:c6:4f:04: 2c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2C:05:36:81:98:F0:50:59:1A:C6:34:6B:99:B4:12:C5:05:3D:8A X509v3 Authority Key Identifier: keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b4:2d:c3:2e:f3:c8:26:32:39:2d:0f:1e:f5:37:db:f2:7b: 0e:e5:1a:43:5a:84:ff:23:b3:b8:ea:9b:c8:02:58:e6:9e:70: ef:ab:68:4c:ac:83:e1:e1:bf:89:bc:ca:d6:d7:0d:0d:2a:4d: 38:3a:70:24:9a:28:cb:cf:ea:e4:f6:43:bf:7a:e2:34:47:63: 15:23:70:b6:27:84:aa:30:a5:4c:ee:ad:6e:d8:f3:7f:cf:e6: 5f:90:e8:e1:88:75:b5:58:c4:a2:5b:bb:4c:af:4a:ca:42:36: 8e:13:ba:02:ca:4a:ee:b8:b2:72:22:05:0b:e2:79:4d:ac:26: 25:d0:e2:a6:41:18:32:40:8f:59:65:18:1c:f0:50:41:65:75: f6:e6:58:ba:e7:8f:b6:f1:ae:ea:f3:65:59:b4:19:e1:41:f7: 63:ab:fa:47:e8:e3:87:a4:97:d9:25:26:19:56:eb:9b:93:57: a3:2a:4b:37:5e:d0:c2:0a:17:de:d3:48:02:10:08:be:69:54: 60:03:99:26:04:72:7d:cc:58:7d:88:b0:c8:81:92:b8:89:ad: 1c:b7:18:d4:50:ce:8d:12:df:07:2e:47:7e:72:b5:06:6e:d4: 19:55:67:13:46:23:f5:55:fb:2e:e6:95:f1:94:61:f7:13:cc: b0:8e:b4:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURa/I/yCIjKWjWVtxik4sZrv9ydcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx RTFGQkUwQjAeFw0yNjA5MjEyMjE0MThaFw0yNjA5MjIyMzM5MThaMDMxMTAvBgNV BAMTKENEMkMwNTM2ODE5OEYwNTA1OTFBQzYzNDZCOTlCNDEyQzUwNTNEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeqtmCSzJlnmMdYvwYx8JO47S8 3eBgN2UCqHeI5OB1m8/B7d4zrA65XsRMPns/FHKXiYZ584IHhE+EskqLMh+sFPzu tRhA4J/aR5sZv2eA70C/YtC93zFmlbczQEfr2dTeGOW8edjEwweO/Q0VG67PH7Ur sITebDxnUl7dU4L65H/+YaLrcK8HcD6SOBGbkUn1GbsZve+6HRg6bkIuD2CiijDw WJ560G+fgkJiwJWhcNocNzCCd8xHQDEMaJu/NemPBKYzmDMQjNa68bdo/RjDexre 9PUpSuh6gmemzUMx2076niBuuvAw3Y6M0s5/JeBlIkznlnLlwR/L6cZPBCy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSwFNoGY8FBZGsY0a5m0EsUFPYowHwYDVR0j BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0 RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACW0LcMu88gmMjktDx71N9vyew7lGkNahP8j s7jqm8gCWOaecO+raEysg+Hhv4m8ytbXDQ0qTTg6cCSaKMvP6uT2Q7964jRHYxUj cLYnhKowpUzurW7Y83/P5l+Q6OGIdbVYxKJbu0yvSspCNo4TugLKSu64snIiBQvi eU2sJiXQ4qZBGDJAj1llGBzwUEFldfbmWLrnj7bxrurzZVm0GeFB92Or+kfo44ek l9klJhlW65uTV6MqSzde0MIKF97TSAIQCL5pVGADmSYEcn3MWH2IsMiBkriJrRy3 GNRQzo0S3wcuR35ytQZu1BlVZxNGI/VV+y7mlfGUYfcTzLCOtMw= -----END CERTIFICATE-----Generated at Tue Sep 22 03:36:53 2026 by rpki-client