$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: r+8BgQgpqprqC7ZTJFz7+ZQyiax/d+EY+2+Kt71oLaE= Subject key identifier: 3E:15:BF:F8:77:2A:DD:7B:86:57:7F:23:E0:8E:74:13:CB:71:6F:53 Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 2F80A46E50611691942FC831263FE68297C1A5AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 10:16:09 +0000 Manifest this update: Wed 02 Sep 2026 10:11:09 +0000 Manifest next update: Thu 03 Sep 2026 14:05:09 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) 2: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) 4: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: C968Tvu6uoSMh5Ie/4GoHycAbJ0enLjLCRgTxdgqEmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 14:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:80:a4:6e:50:61:16:91:94:2f:c8:31:26:3f:e6:82:97:c1:a5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Sep 2 10:11:09 2026 GMT Not After : Sep 3 14:05:09 2026 GMT Subject: CN=3E15BFF8772ADD7B86577F23E08E7413CB716F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:69:31:39:dc:49:65:e7:4c:0f:a0:e6:8d: eb:1e:67:a2:cc:e2:5e:3e:b1:78:cc:61:02:7a:c7: 56:06:cf:fe:10:d5:ca:47:bf:a2:06:4e:01:fa:bb: 6f:8f:92:a1:32:79:99:7b:a8:93:e5:aa:54:39:64: 91:fd:bb:5e:bd:cd:ba:73:b8:d4:cd:7d:93:d4:54: c7:9a:69:2c:2b:62:85:50:45:c8:46:10:83:44:c3: cb:7d:0b:bd:34:3e:c6:6f:96:61:49:30:8f:f7:a4: f2:f0:b8:fc:eb:ff:a0:d0:da:59:f4:a3:52:7b:e1: e6:d5:a8:a0:a7:5e:51:59:67:7b:b4:75:1c:fb:99: ee:31:39:f8:69:0d:21:cd:c6:1c:bf:20:92:95:29: ec:77:62:69:56:9a:37:34:5a:30:f8:d7:ee:9e:f4: 6e:9e:92:a4:49:47:8a:6e:df:97:77:7c:89:81:dd: 9e:0f:f2:da:2a:79:a1:41:93:fa:32:bb:2b:12:2f: 55:dd:b4:09:45:ea:44:eb:46:d6:e7:1e:45:4d:16: 8e:f9:00:d9:69:2a:eb:63:22:0b:c5:74:82:98:49: c8:1d:7a:03:73:e4:b3:0d:cf:e5:98:ac:44:00:55: 66:a9:a6:d8:22:23:29:96:79:13:3a:11:1c:f3:3b: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:15:BF:F8:77:2A:DD:7B:86:57:7F:23:E0:8E:74:13:CB:71:6F:53 X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f3:48:66:7c:a6:68:69:f1:8e:1c:d5:3f:6e:7e:da:20:e1: ca:0d:33:56:f5:b4:07:8a:10:54:65:5a:68:cc:e2:a3:2d:ff: 6e:a6:44:6d:e0:80:11:18:ec:9f:e4:9f:ae:3e:43:0f:01:26: 33:61:d8:46:ff:ef:c2:7c:64:39:9d:dc:6c:f2:9b:bc:83:4e: c0:7d:07:6b:87:d3:df:46:d3:aa:bf:ad:74:46:dc:11:4b:03: 01:5f:b6:be:58:ee:83:07:2f:c7:17:f3:3f:81:b1:e2:fd:6d: 73:a0:f9:93:af:c7:b3:84:e2:1b:7e:17:f7:8a:3b:22:3f:51: 23:7b:f9:f3:1c:4b:bb:dc:a4:8c:4d:a5:95:20:5f:da:0e:2d: 0f:37:56:aa:a5:ee:03:c7:e6:a7:b1:68:cc:3a:9c:22:06:c4: aa:15:87:57:63:5e:d7:2b:fa:9e:84:6b:a3:d3:39:d7:2a:4d: 12:cb:47:72:6d:17:d7:ff:2e:70:f9:d6:39:ef:b7:ca:c3:78: a7:a5:69:80:1a:77:db:f2:01:f8:c7:f8:1a:65:8f:1e:b2:83: 0e:2a:9c:1f:88:91:aa:60:d9:a4:fb:67:58:67:ad:f8:b5:16: 19:ab:b7:3d:59:58:21:8e:d9:62:92:39:15:de:5f:ab:29:fc: e6:d8:77:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4CkblBhFpGUL8gxJj/mgpfBpa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjA5MDIxMDExMDlaFw0yNjA5MDMxNDA1MDlaMDMxMTAvBgNV BAMTKDNFMTVCRkY4NzcyQUREN0I4NjU3N0YyM0UwOEU3NDEzQ0I3MTZGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaWkxOdxJZedMD6DmjeseZ6LM 4l4+sXjMYQJ6x1YGz/4Q1cpHv6IGTgH6u2+PkqEyeZl7qJPlqlQ5ZJH9u169zbpz uNTNfZPUVMeaaSwrYoVQRchGEINEw8t9C700PsZvlmFJMI/3pPLwuPzr/6DQ2ln0 o1J74ebVqKCnXlFZZ3u0dRz7me4xOfhpDSHNxhy/IJKVKex3YmlWmjc0WjD41+6e 9G6ekqRJR4pu35d3fImB3Z4P8toqeaFBk/oyuysSL1XdtAlF6kTrRtbnHkVNFo75 ANlpKutjIgvFdIKYScgdegNz5LMNz+WYrEQAVWapptgiIymWeRM6ERzzOysPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPhW/+Hcq3XuGV38j4I50E8txb1MwHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzzSGZ8pmhp8Y4c1T9uftog4coNM1b1tAeK EFRlWmjM4qMt/26mRG3ggBEY7J/kn64+Qw8BJjNh2Eb/78J8ZDmd3Gzym7yDTsB9 B2uH099G06q/rXRG3BFLAwFftr5Y7oMHL8cX8z+BseL9bXOg+ZOvx7OE4ht+F/eK OyI/USN7+fMcS7vcpIxNpZUgX9oOLQ83Vqql7gPH5qexaMw6nCIGxKoVh1djXtcr +p6Ea6PTOdcqTRLLR3JtF9f/LnD51jnvt8rDeKelaYAad9vyAfjH+Bpljx6ygw4q nB+Ikapg2aT7Z1hnrfi1Fhmrtz1ZWCGO2WKSORXeX6sp/ObYdyw= -----END CERTIFICATE-----Generated at Thu Sep 3 06:24:18 2026 by rpki-client