$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json) Hash identifier: ZDmXcpJDL5uHXmx5qY72XRZv/kc2TrjhryciPH5rlo4= Subject key identifier: FD:58:23:FA:A6:78:3B:5D:1D:EB:1A:91:DB:C8:7D:A9:EB:12:03:B1 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 2A229BCE02D69A8E090FB0D4176D7D02E357CFCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 15:11:43 +0000 Manifest this update: Wed 02 Sep 2026 15:06:43 +0000 Manifest next update: Thu 03 Sep 2026 16:01:43 +0000 Files and hashes: 1: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=) 2: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=) 3: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: pUzTSX764GWtHHO9jcVOxnVCQQd9HOcC1kC/yiGkLr8=) 4: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=) 5: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=) 6: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=) 7: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: bDrqj+Z2YFqAz+YiMT0XqOCSnKXTgA2oA0qQYlktRdk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 16:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:22:9b:ce:02:d6:9a:8e:09:0f:b0:d4:17:6d:7d:02:e3:57:cf:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Sep 2 15:06:43 2026 GMT Not After : Sep 3 16:01:43 2026 GMT Subject: CN=FD5823FAA6783B5D1DEB1A91DBC87DA9EB1203B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:dc:e9:3a:c6:ab:e9:13:de:eb:27:04:91: 69:29:ff:43:04:de:28:0a:d1:32:aa:4b:b0:d8:e4: 18:f8:b4:44:c2:62:07:ca:30:0b:89:f0:59:78:14: 63:53:6c:c3:8f:ce:22:9a:2c:e5:c6:9b:f2:bc:4c: c9:ec:e4:8d:7f:4e:ae:1f:0d:35:a3:af:a2:0d:5d: 59:08:95:f2:ca:28:25:ee:0b:ac:de:7f:e8:8f:19: d5:44:89:be:9a:d9:f7:6b:fb:d7:f3:52:22:56:b5: 23:89:65:38:72:82:87:60:91:2e:8a:db:95:22:4a: b0:44:2c:da:04:ce:97:d9:c2:5e:80:6a:c0:d6:73: 5e:dd:1b:2f:37:9d:1d:0a:87:ed:6e:22:e2:30:93: 56:08:e1:04:a5:bc:85:2d:60:79:19:05:09:5f:cd: f1:d9:32:46:e7:24:e9:5d:8c:e1:9c:3e:ae:28:2d: 7c:c9:d7:2f:ef:e0:8c:02:16:8d:74:bf:6a:96:03: 27:fb:dd:00:76:14:c0:69:0b:0a:a2:bd:01:77:19: 43:1c:67:f0:26:26:e8:c5:02:da:da:c3:dd:9f:9d: ae:bf:eb:06:58:79:29:99:08:0e:f4:ba:bf:7f:52: 12:03:b8:40:aa:c9:8b:3e:23:7f:25:f1:6a:50:c4: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:58:23:FA:A6:78:3B:5D:1D:EB:1A:91:DB:C8:7D:A9:EB:12:03:B1 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:84:d3:df:49:1b:2a:3a:a9:04:36:d5:2e:86:ac:db:5b:bb: 89:26:3d:21:ff:73:2f:30:c3:bf:eb:04:db:33:62:5a:f7:53: 27:fb:6a:36:ad:eb:ac:b5:50:76:e5:4a:bf:78:27:1c:94:79: f5:43:75:3e:58:ba:df:61:a7:9a:1c:a3:28:05:87:d3:d5:2f: fb:e9:ba:95:3a:38:f9:ec:db:a8:08:ed:0a:5d:83:68:9d:14: 45:3a:dd:fb:10:38:6c:5c:ab:7d:8b:be:10:ee:2e:19:e5:2e: fd:1f:bf:4c:ca:b6:1a:48:e2:4f:b4:65:07:ae:b5:89:56:bc: ef:c1:18:f0:52:a7:06:a8:fc:9a:1a:4d:c0:aa:b9:74:ed:7b: ab:16:63:bc:1c:88:14:68:38:71:45:0f:e5:19:50:07:28:38: 67:42:50:05:92:63:04:e0:a1:ff:37:b6:24:dc:bd:13:c8:e8: 55:0e:15:06:2b:22:5c:06:d3:95:54:3d:fb:bd:5a:8c:ff:3a: 3a:d8:c7:22:07:02:ca:97:fa:5a:a0:63:d5:3f:7c:91:40:4f: 06:c6:cc:ac:b1:e7:f9:3a:81:bd:ee:7a:8e:a8:1d:50:10:de: 42:f9:96:7b:5f:65:af:14:f5:5d:52:08:88:bb:8b:fd:51:31: d3:59:3a:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiKbzgLWmo4JD7DUF219AuNXz8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA5MDIxNTA2NDNaFw0yNjA5MDMxNjAxNDNaMDMxMTAvBgNV BAMTKEZENTgyM0ZBQTY3ODNCNUQxREVCMUE5MURCQzg3REE5RUIxMjAzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGNzpOsar6RPe6ycEkWkp/0ME 3igK0TKqS7DY5Bj4tETCYgfKMAuJ8Fl4FGNTbMOPziKaLOXGm/K8TMns5I1/Tq4f DTWjr6INXVkIlfLKKCXuC6zef+iPGdVEib6a2fdr+9fzUiJWtSOJZThygodgkS6K 25UiSrBELNoEzpfZwl6AasDWc17dGy83nR0Kh+1uIuIwk1YI4QSlvIUtYHkZBQlf zfHZMkbnJOldjOGcPq4oLXzJ1y/v4IwCFo10v2qWAyf73QB2FMBpCwqivQF3GUMc Z/AmJujFAtraw92fna6/6wZYeSmZCA70ur9/UhIDuECqyYs+I38l8WpQxM8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Vgj+qZ4O10d6xqR28h9qesSA7EwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0Ux QTVFNTdENTI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmE099JGyo6qQQ21S6GrNtbu4kmPSH/cy8w w7/rBNszYlr3Uyf7ajat66y1UHblSr94JxyUefVDdT5Yut9hp5ocoygFh9PVL/vp upU6OPns26gI7Qpdg2idFEU63fsQOGxcq32LvhDuLhnlLv0fv0zKthpI4k+0ZQeu tYlWvO/BGPBSpwao/JoaTcCquXTte6sWY7wciBRoOHFFD+UZUAcoOGdCUAWSYwTg of83tiTcvRPI6FUOFQYrIlwG05VUPfu9Woz/OjrYxyIHAsqX+lqgY9U/fJFATwbG zKyx5/k6gb3ueo6oHVAQ3kL5lntfZa8U9V1SCIi7i/1RMdNZOng= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:23 2026 by rpki-client