$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft File: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft (raw, json) Hash identifier: ll5nRbI3ztcBwX6nOcXZRvTAPdWAMYXb64ZgUG1lZwg= Subject key identifier: D6:4B:45:93:3C:CA:44:13:FF:7C:55:9C:27:9D:AF:A0:D9:80:4A:99 Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B Certificate issuer: /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Certificate serial: 0D8E029522B4DEE611EA8EA570F84014B52286B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 13:02:51 +0000 Manifest this update: Thu 03 Sep 2026 12:57:51 +0000 Manifest next update: Fri 04 Sep 2026 14:12:51 +0000 Files and hashes: 1: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl (hash: ub04ykKRtg7p2FMQvwZ3TXVssm3F8zFZaOyt0g8yzwg=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: S+rOrm27Es7W6Om8mBBRTFySKu0A8+vu3LzCH/NnAfQ=) 3: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8e:02:95:22:b4:de:e6:11:ea:8e:a5:70:f8:40:14:b5:22:86:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Validity Not Before: Sep 3 12:57:51 2026 GMT Not After : Sep 4 14:12:51 2026 GMT Subject: CN=D64B45933CCA4413FF7C559C279DAFA0D9804A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:ec:13:0c:24:38:71:a8:09:ab:16:db:4c: db:31:ea:cc:6c:40:14:45:4c:71:12:e1:cd:a5:60: 1f:a8:88:4b:5f:8d:ed:33:4b:4c:9c:2c:9b:e8:54: a3:db:71:42:64:8d:a5:34:b5:6c:8c:e8:ee:66:f4: b2:fb:1d:04:f4:61:7c:6a:12:77:09:99:12:17:f3: 0c:aa:2a:5e:3c:1f:1b:28:c0:27:58:b2:11:7a:a6: 84:59:93:2f:9e:cb:51:6d:27:16:0a:76:9d:64:23: c3:62:59:92:93:14:57:6f:75:a1:c9:60:76:63:b9: 8d:f6:c3:83:36:11:06:cf:5e:cf:06:87:2d:6f:b9: d8:15:51:d2:a0:52:c7:9d:06:0e:a6:d7:5b:f1:2c: 66:76:22:cb:7c:f1:8e:aa:f0:12:17:37:98:2c:87: de:a9:d8:c0:09:a3:24:58:c8:7b:1c:bb:bf:1c:a3: 71:be:b3:a4:b3:1e:fc:c2:53:99:b6:6f:58:9c:4b: 0f:b9:40:7c:9f:17:bd:dc:97:a6:38:72:9f:b2:b4: 5f:32:0a:43:50:aa:31:c7:e5:a0:2b:11:9e:8a:65: ac:48:be:9d:d9:90:f8:c0:5b:cb:ac:72:38:c6:2e: 67:10:6c:74:17:60:8b:1e:55:17:5a:28:02:84:38: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:45:93:3C:CA:44:13:FF:7C:55:9C:27:9D:AF:A0:D9:80:4A:99 X509v3 Authority Key Identifier: keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:20:a2:62:bd:02:af:0a:55:87:32:0d:89:e0:c9:4d:15:e5: a5:01:50:22:e4:c4:af:43:1e:18:9d:1e:73:76:64:8c:92:30: 3b:ab:e0:d3:c6:1f:c6:0b:6b:aa:7c:1d:20:04:7a:e8:99:7e: c4:46:f8:03:b1:d8:0c:4c:a4:e4:5e:04:71:00:b9:9e:0c:f1: cf:df:61:15:cb:24:29:b3:a2:d0:bd:0a:f9:b7:9c:b5:e9:61: 52:99:54:cf:8d:31:78:3c:c9:f3:e2:4e:89:f4:ad:34:c8:36: 07:b9:a9:ee:c6:97:44:91:ff:08:a0:f0:28:ce:e8:0d:18:96: 7f:ae:78:01:39:69:aa:e3:14:a3:d8:14:59:3d:ad:38:b6:70: dc:e7:4a:30:94:32:1d:e6:8a:ff:19:51:5e:8b:72:57:ea:08: 0c:d3:99:2e:76:73:46:35:f5:60:92:9c:fc:cc:7b:3e:31:5f: 82:b7:bb:ce:41:57:9c:61:ea:55:4d:aa:73:fa:2a:06:76:05: 78:8e:25:42:7d:92:ca:0e:8e:2c:ec:7d:4c:f3:5b:c0:e8:a0: 90:62:51:82:b9:a6:b3:e3:af:02:f2:c3:0d:22:bf:cb:15:d0: ad:3c:9e:b9:a3:4c:80:37:60:ba:5f:a3:a4:2e:6f:58:7d:7a: 52:04:c0:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDY4ClSK03uYR6o6lcPhAFLUihrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD MTk4NzA0QjAeFw0yNjA5MDMxMjU3NTFaFw0yNjA5MDQxNDEyNTFaMDMxMTAvBgNV BAMTKEQ2NEI0NTkzM0NDQTQ0MTNGRjdDNTU5QzI3OURBRkEwRDk4MDRBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCs+wTDCQ4cagJqxbbTNsx6sxs QBRFTHES4c2lYB+oiEtfje0zS0ycLJvoVKPbcUJkjaU0tWyM6O5m9LL7HQT0YXxq EncJmRIX8wyqKl48HxsowCdYshF6poRZky+ey1FtJxYKdp1kI8NiWZKTFFdvdaHJ YHZjuY32w4M2EQbPXs8Ghy1vudgVUdKgUsedBg6m11vxLGZ2Ist88Y6q8BIXN5gs h96p2MAJoyRYyHscu78co3G+s6SzHvzCU5m2b1icSw+5QHyfF73cl6Y4cp+ytF8y CkNQqjHH5aArEZ6KZaxIvp3ZkPjAW8uscjjGLmcQbHQXYIseVRdaKAKEOAybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ktFkzzKRBP/fFWcJ52voNmASpkwHwYDVR0j BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2 Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3 MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0Ex MjlDMTk4NzA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAggomK9Aq8KVYcyDYngyU0V5aUBUCLkxK9D HhidHnN2ZIySMDur4NPGH8YLa6p8HSAEeuiZfsRG+AOx2AxMpOReBHEAuZ4M8c/f YRXLJCmzotC9Cvm3nLXpYVKZVM+NMXg8yfPiTon0rTTINge5qe7Gl0SR/wig8CjO 6A0Yln+ueAE5aarjFKPYFFk9rTi2cNznSjCUMh3miv8ZUV6LclfqCAzTmS52c0Y1 9WCSnPzMez4xX4K3u85BV5xh6lVNqnP6KgZ2BXiOJUJ9ksoOjizsfUzzW8DooJBi UYK5prPjrwLyww0iv8sV0K08nrmjTIA3YLpfo6Qub1h9elIEwKs= -----END CERTIFICATE-----Generated at Thu Sep 3 18:13:46 2026 by rpki-client