$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: yZc53JJ6VTiLtl2r+MIteu3QXo1vmuxKL/uablDWEOE= Subject key identifier: 25:F2:1F:B9:9E:A3:65:17:55:A0:8A:AA:A6:6F:EC:B3:D5:03:92:B2 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 6296B7297A93AA92EADFB25603C6D57EB8552A8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 09:59:29 +0000 Manifest this update: Thu 03 Sep 2026 09:54:29 +0000 Manifest next update: Fri 04 Sep 2026 13:17:29 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) 2: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: vc7cMHpbYAC+j+tzbVU3FdFkeRsevm8CCf1KwX7p6Gs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:96:b7:29:7a:93:aa:92:ea:df:b2:56:03:c6:d5:7e:b8:55:2a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Sep 3 09:54:29 2026 GMT Not After : Sep 4 13:17:29 2026 GMT Subject: CN=25F21FB99EA3651755A08AAAA66FECB3D50392B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:28:b8:0d:e9:d5:86:f6:1a:05:d3:b3:f7:b3: f9:ca:cd:3d:0b:23:1b:d9:7e:fa:75:1c:33:81:03: 3a:93:cd:e1:40:15:74:41:1b:0a:b7:67:fd:fc:61: 5b:80:81:87:8b:db:30:3f:ac:15:d5:06:a0:d4:aa: 49:ae:c9:2e:f5:8c:03:c4:f4:60:cb:45:f0:5c:13: 10:66:68:40:19:c3:45:e6:aa:48:62:ce:cb:b1:12: 4b:64:5e:a2:6a:fc:0b:12:6d:f0:d0:64:36:0a:0e: e7:be:6b:5a:cb:24:09:f1:6b:82:57:3d:c7:8b:7e: ca:70:e9:c8:3d:9a:2e:fa:1a:54:a8:5c:6e:52:74: c0:d9:f5:d0:35:7b:fa:17:59:4d:93:54:09:a2:19: ea:c9:bd:48:9b:57:ec:6f:e3:55:94:3f:66:88:56: f6:3f:f0:bf:24:b4:75:9b:c3:9e:9b:e2:d9:5c:37: da:0f:19:b3:18:a6:ce:5a:5a:30:24:4f:c1:9a:6e: 54:9b:2a:23:d8:fa:c5:99:8f:38:b0:2d:5e:61:b4: 70:28:97:4a:4d:37:8a:75:38:89:2c:8a:10:c4:0f: 32:a9:84:c9:cd:ec:39:e8:6d:bb:35:ee:50:79:ea: 0a:69:a0:9f:ef:ed:f0:3b:fc:89:b8:45:f3:b5:11: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F2:1F:B9:9E:A3:65:17:55:A0:8A:AA:A6:6F:EC:B3:D5:03:92:B2 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4f:cd:3b:23:55:0f:5a:ee:4f:a9:88:51:9c:44:c6:2c:84: e8:11:79:58:6e:14:e7:29:a1:45:f9:3a:df:55:94:d3:8a:78: 59:44:b8:d8:65:e4:76:1c:39:b4:3b:07:58:de:a8:b2:d6:f0: 90:70:13:63:df:1c:d8:7d:5f:57:17:78:43:83:e2:b8:e9:03: e4:07:4b:79:0d:db:72:3c:d7:8e:ba:76:19:bb:c8:bc:a5:02: 63:88:78:94:ab:21:23:ec:62:20:01:b3:2d:ba:56:56:5d:e5: 8a:65:81:82:63:68:9b:fd:9b:a3:4a:77:77:93:cf:3e:9c:39: 91:aa:99:0f:d6:0d:e0:8e:3f:1a:88:aa:5c:e2:23:ea:0d:0a: 21:3e:b6:c4:9d:99:57:8b:77:b8:ed:c3:1b:06:c3:26:59:bb: 58:f3:64:61:5f:7f:cf:37:5e:d7:3a:7f:a3:1f:b6:b0:ac:56: 67:9e:6b:6b:bf:cf:7c:a4:4d:30:a5:a7:fc:d5:d6:5b:f4:6d: 44:0c:c4:e3:ee:5b:e6:45:bf:9d:61:70:a8:4d:8d:6d:91:22: cd:c1:7f:e4:6e:1d:36:33:85:70:8e:74:1b:9d:e8:24:80:16: e0:0d:5e:25:c6:4c:db:26:42:a1:15:25:9c:52:4c:da:56:5e: 3d:09:d4:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpa3KXqTqpLq37JWA8bVfrhVKo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjA5MDMwOTU0MjlaFw0yNjA5MDQxMzE3MjlaMDMxMTAvBgNV BAMTKDI1RjIxRkI5OUVBMzY1MTc1NUEwOEFBQUE2NkZFQ0IzRDUwMzkyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKLgN6dWG9hoF07P3s/nKzT0L IxvZfvp1HDOBAzqTzeFAFXRBGwq3Z/38YVuAgYeL2zA/rBXVBqDUqkmuyS71jAPE 9GDLRfBcExBmaEAZw0XmqkhizsuxEktkXqJq/AsSbfDQZDYKDue+a1rLJAnxa4JX PceLfspw6cg9mi76GlSoXG5SdMDZ9dA1e/oXWU2TVAmiGerJvUibV+xv41WUP2aI VvY/8L8ktHWbw56b4tlcN9oPGbMYps5aWjAkT8GablSbKiPY+sWZjziwLV5htHAo l0pNN4p1OIksihDEDzKphMnN7Dnobbs17lB56gppoJ/v7fA7/Im4RfO1Ef85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJfIfuZ6jZRdVoIqqpm/ss9UDkrIwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApPzTsjVQ9a7k+piFGcRMYshOgReVhuFOcp oUX5Ot9VlNOKeFlEuNhl5HYcObQ7B1jeqLLW8JBwE2PfHNh9X1cXeEOD4rjpA+QH S3kN23I81466dhm7yLylAmOIeJSrISPsYiABsy26VlZd5YplgYJjaJv9m6NKd3eT zz6cOZGqmQ/WDeCOPxqIqlziI+oNCiE+tsSdmVeLd7jtwxsGwyZZu1jzZGFff883 Xtc6f6MftrCsVmeea2u/z3ykTTClp/zV1lv0bUQMxOPuW+ZFv51hcKhNjW2RIs3B f+RuHTYzhXCOdBud6CSAFuANXiXGTNsmQqEVJZxSTNpWXj0J1Ck= -----END CERTIFICATE-----Generated at Thu Sep 3 16:20:14 2026 by rpki-client