$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: 9ppmCpeScTiP+WZ53cXlL6BHlEnZ7KzQSYuH2RBASB0= Subject key identifier: 4D:2B:16:C2:85:69:C7:E4:CD:B3:1E:E6:AE:D5:67:AB:12:9A:D1:2E Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 4F72C8A28C5349C58DB92AF16C561E30447054F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 09:03:30 +0000 Manifest this update: Thu 03 Sep 2026 08:58:30 +0000 Manifest next update: Fri 04 Sep 2026 09:25:30 +0000 Files and hashes: 1: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: RE+Q3yd53IL4LviRTNbtki4i+5rJNTTdLwagwM5CRrk=) 2: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 3: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 4: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 5: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 7: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:72:c8:a2:8c:53:49:c5:8d:b9:2a:f1:6c:56:1e:30:44:70:54:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Sep 3 08:58:30 2026 GMT Not After : Sep 4 09:25:30 2026 GMT Subject: CN=4D2B16C28569C7E4CDB31EE6AED567AB129AD12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:2d:a1:a0:6e:2d:1e:ae:ca:16:23:8b:db: 96:cb:61:7a:4c:81:74:fc:72:ff:39:fb:01:c9:5f: f5:95:f4:cc:12:8c:7a:3a:fd:c2:67:d9:e0:c4:70: 84:25:2c:c1:8b:d3:b0:b0:0e:3d:f5:76:4d:7d:39: 69:86:b5:7b:93:bd:29:85:10:30:9f:82:a5:17:58: 4d:e4:5d:62:e2:ab:fb:3e:ab:12:81:80:2e:7b:e9: 91:37:34:81:e0:08:27:6b:90:0e:50:ba:b2:81:6e: b1:30:43:e0:a3:12:9a:b6:cb:da:c2:cf:de:58:9c: 38:15:49:55:1d:3f:3e:48:29:db:8e:de:8b:c6:7a: cf:52:d2:3b:b9:7a:1a:58:4e:49:83:48:74:ee:fe: 5a:06:4f:45:34:ac:86:5d:ab:34:e0:3f:41:9a:f6: ab:c9:3a:ae:ad:48:8e:f7:42:ab:7c:97:dd:eb:ac: 16:20:1a:f4:e6:d3:84:b5:49:54:f5:09:f9:b0:5b: 63:a9:a8:c1:a9:33:af:7c:02:00:02:e6:30:5f:94: f6:2a:cf:35:44:c7:7b:d1:47:1c:59:1b:65:8b:96: 08:ef:a2:6e:d7:d9:56:ec:85:57:28:7c:16:5d:fe: 6f:f6:e0:20:68:ab:f2:2a:0c:4d:7d:6d:ce:7e:85: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2B:16:C2:85:69:C7:E4:CD:B3:1E:E6:AE:D5:67:AB:12:9A:D1:2E X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a5:18:44:16:a9:5d:ac:75:37:1b:bc:58:dc:23:d0:9e:86: 63:9c:eb:2e:f3:53:da:7b:fa:2a:3f:6f:af:a1:e4:af:67:88: 0c:ef:31:02:05:2d:51:ca:13:33:3a:02:6a:68:85:b8:00:65: 7b:6f:25:ce:80:4b:03:0b:07:9c:4c:75:d2:93:fe:ad:7a:ab: e7:70:db:d4:eb:33:72:61:16:14:d1:39:8b:06:48:63:4b:2e: 62:b0:bc:a1:56:58:82:6f:96:92:3b:41:66:7e:4f:f1:82:7a: d8:79:d4:61:93:48:7d:97:40:d1:1e:b3:46:86:52:32:8c:09: 33:14:13:09:96:5f:1e:41:b0:73:6a:a2:27:7f:f2:4e:ac:ae: 60:c2:f9:7c:33:b5:d4:a5:a8:6d:af:76:4d:9b:e7:ef:9d:fd: ec:9e:15:3c:9f:01:c1:c6:94:1d:cb:5a:c2:42:cd:9f:e8:e8: 4f:92:e8:26:79:c8:01:b9:f3:fe:b7:57:60:5b:19:2e:aa:92: f3:df:ab:75:2e:64:55:08:f9:f5:d5:36:12:58:9a:01:cf:51: c9:55:4b:66:07:c3:12:0b:1a:ec:c8:d6:d7:13:9f:d0:10:02: 7f:27:03:d7:67:cc:f1:14:f8:72:32:78:68:3a:30:c5:46:65: f2:56:18:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3LIooxTScWNuSrxbFYeMERwVPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA5MDMwODU4MzBaFw0yNjA5MDQwOTI1MzBaMDMxMTAvBgNV BAMTKDREMkIxNkMyODU2OUM3RTRDREIzMUVFNkFFRDU2N0FCMTI5QUQxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLC2hoG4tHq7KFiOL25bLYXpM gXT8cv85+wHJX/WV9MwSjHo6/cJn2eDEcIQlLMGL07CwDj31dk19OWmGtXuTvSmF EDCfgqUXWE3kXWLiq/s+qxKBgC576ZE3NIHgCCdrkA5QurKBbrEwQ+CjEpq2y9rC z95YnDgVSVUdPz5IKduO3ovGes9S0ju5ehpYTkmDSHTu/loGT0U0rIZdqzTgP0Ga 9qvJOq6tSI73Qqt8l93rrBYgGvTm04S1SVT1CfmwW2OpqMGpM698AgAC5jBflPYq zzVEx3vRRxxZG2WLlgjvom7X2VbshVcofBZd/m/24CBoq/IqDE19bc5+hfAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTSsWwoVpx+TNsx7mrtVnqxKa0S4wHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHClGEQWqV2sdTcbvFjcI9CehmOc6y7zU9p7 +io/b6+h5K9niAzvMQIFLVHKEzM6AmpohbgAZXtvJc6ASwMLB5xMddKT/q16q+dw 29TrM3JhFhTROYsGSGNLLmKwvKFWWIJvlpI7QWZ+T/GCeth51GGTSH2XQNEes0aG UjKMCTMUEwmWXx5BsHNqoid/8k6srmDC+XwztdSlqG2vdk2b5++d/eyeFTyfAcHG lB3LWsJCzZ/o6E+S6CZ5yAG58/63V2BbGS6qkvPfq3UuZFUI+fXVNhJYmgHPUclV S2YHwxILGuzI1tcTn9AQAn8nA9dnzPEU+HIyeGg6MMVGZfJWGP4= -----END CERTIFICATE-----Generated at Thu Sep 3 14:17:14 2026 by rpki-client