$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json) Hash identifier: CwObvx9lFLEmp4SosCZML8k7qUlr/IOYmJSmf5DOoB8= Subject key identifier: 04:44:33:2C:D5:48:F3:F0:19:BE:0A:48:DA:AD:4A:A9:DD:75:33:7C Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Certificate serial: 021422439FA1E4BDEC40DAE5E4396B5E50A20B84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:18:54 +0000 Manifest this update: Wed 02 Sep 2026 17:13:54 +0000 Manifest next update: Thu 03 Sep 2026 20:36:54 +0000 Files and hashes: 1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=) 2: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: DWwQjBgIYSi9KMBxmfq1BhHtJAslKCRNVMBad87z/PY=) 3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:14:22:43:9f:a1:e4:bd:ec:40:da:e5:e4:39:6b:5e:50:a2:0b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Validity Not Before: Sep 2 17:13:54 2026 GMT Not After : Sep 3 20:36:54 2026 GMT Subject: CN=0444332CD548F3F019BE0A48DAAD4AA9DD75337C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:f9:92:a8:04:28:38:08:23:06:19:77:6f: 72:a1:e0:a3:75:50:1f:2d:f9:f6:67:4d:a4:b4:42: 0f:68:99:c2:89:b5:1b:fe:5b:65:2b:96:12:1c:80: 25:4b:fd:ee:6d:a9:ae:aa:38:b0:72:98:94:97:47: 48:e9:7b:4d:a3:e0:32:40:c7:27:5f:f0:34:09:f7: c5:59:de:af:70:6b:b4:8a:41:a5:d6:a3:3b:d3:5c: 47:f2:1a:53:3c:0d:14:ed:6a:33:19:62:e1:99:c8: 32:77:de:bd:9a:48:a9:81:4d:7a:8f:75:cd:75:f8: d6:57:2d:ff:d3:e0:58:0f:39:fe:2e:fe:7f:c4:6b: 3b:e9:0a:6f:55:af:7d:e2:1a:89:9c:6a:88:af:2e: 43:5a:cb:75:29:d9:fd:25:46:f5:e0:50:5f:3b:c0: 3c:18:ab:0a:6e:a7:26:a9:7f:2d:43:f7:72:43:aa: c7:43:6d:48:dc:07:17:17:5c:42:7f:f0:1e:5f:6f: 17:a5:cc:1c:b2:fd:55:e1:c7:ef:8e:8d:03:2a:69: dd:0e:34:e8:10:36:04:20:90:4f:f4:93:09:de:42: be:63:23:75:ff:bf:8c:bb:5c:2c:2a:d6:3e:f4:25: 78:3f:e1:06:09:18:bf:76:cd:98:fd:76:0a:85:4b: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:44:33:2C:D5:48:F3:F0:19:BE:0A:48:DA:AD:4A:A9:DD:75:33:7C X509v3 Authority Key Identifier: keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ce:7f:40:2f:51:0d:9d:61:d3:21:79:96:27:5e:18:49:18: 49:cc:1c:39:42:ff:a5:ac:b6:68:0f:69:87:ae:31:f2:2e:28: e9:88:6e:c0:eb:e2:59:cb:37:d1:47:bd:fe:34:08:41:5c:33: 98:33:71:da:2e:94:62:5e:a9:e4:3d:75:de:80:b1:6b:0a:ff: 5c:31:78:a1:32:85:a0:34:5f:ca:90:e2:61:77:03:e0:0d:94: e2:f9:6d:27:6a:d2:97:d2:ef:40:65:2a:4b:da:96:e7:57:a1: 6d:6f:18:b0:ce:07:88:e0:4a:17:49:f6:34:dd:d8:fa:9c:15: 44:b5:dc:06:0f:f5:45:6e:68:39:ae:f8:a6:e2:ce:57:3b:3b: c8:60:1f:5d:07:c9:92:25:4e:f2:76:b3:17:f6:d5:80:60:7d: 8f:fb:70:23:28:f4:fc:f0:29:79:a8:c3:aa:71:dd:5a:1c:24: 95:d1:b6:08:90:7b:b5:67:fd:ea:39:43:3b:3d:b2:c0:9e:9f: 33:fa:8c:02:a7:53:ae:29:c9:1a:81:cf:65:d8:b4:00:8d:87: 9a:66:f2:b2:1e:d7:1d:2c:d1:6b:91:fe:76:3f:2f:6e:99:12: 79:f5:b8:8e:4d:4b:7c:bb:03:b8:c9:78:25:92:53:06:00:0a: be:7e:f5:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhQiQ5+h5L3sQNrl5DlrXlCiC4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYz MzQyRTIzMDAeFw0yNjA5MDIxNzEzNTRaFw0yNjA5MDMyMDM2NTRaMDMxMTAvBgNV BAMTKDA0NDQzMzJDRDU0OEYzRjAxOUJFMEE0OERBQUQ0QUE5REQ3NTMzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhP/mSqAQoOAgjBhl3b3Kh4KN1 UB8t+fZnTaS0Qg9omcKJtRv+W2UrlhIcgCVL/e5tqa6qOLBymJSXR0jpe02j4DJA xydf8DQJ98VZ3q9wa7SKQaXWozvTXEfyGlM8DRTtajMZYuGZyDJ33r2aSKmBTXqP dc11+NZXLf/T4FgPOf4u/n/EazvpCm9Vr33iGomcaoivLkNay3Up2f0lRvXgUF87 wDwYqwpupyapfy1D93JDqsdDbUjcBxcXXEJ/8B5fbxelzByy/VXhx++OjQMqad0O NOgQNgQgkE/0kwneQr5jI3X/v4y7XCwq1j70JXg/4QYJGL92zZj9dgqFS7nnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBEQzLNVI8/AZvgpI2q1Kqd11M3wwHwYDVR0j BBgwFoAUtMbQYDdYL9D3Ijm3rty9DzNC4jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNjU1ZjEtMzhiNi00NDE1LThmYWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAz NzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYzMzQyRTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEM2RDA2MDM3NTgyRkQwRjcyMjM5QjdBRURDQkQwRjMzNDJF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JE MEYzMzQyRTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTOf0AvUQ2dYdMheZYnXhhJGEnMHDlC/6Ws tmgPaYeuMfIuKOmIbsDr4lnLN9FHvf40CEFcM5gzcdoulGJeqeQ9dd6AsWsK/1wx eKEyhaA0X8qQ4mF3A+ANlOL5bSdq0pfS70BlKkvaludXoW1vGLDOB4jgShdJ9jTd 2PqcFUS13AYP9UVuaDmu+Kbizlc7O8hgH10HyZIlTvJ2sxf21YBgfY/7cCMo9Pzw KXmow6px3VocJJXRtgiQe7Vn/eo5Qzs9ssCenzP6jAKnU64pyRqBz2XYtACNh5pm 8rIe1x0s0WuR/nY/L26ZEnn1uI5NS3y7A7jJeCWSUwYACr5+9ZA= -----END CERTIFICATE-----Generated at Thu Sep 3 08:01:08 2026 by rpki-client