$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: Mgw4niUp3IMhNTTHmumHiLT/0cfatEDMjVso3YG+qGM= Subject key identifier: DB:35:0B:92:D9:7D:E9:CD:90:FC:9C:D8:CE:C8:17:3C:EF:66:8A:74 Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 639CD26D6D244CA7BF54A2DC8A04CC365E53B1BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 23:32:10 +0000 Manifest this update: Wed 02 Sep 2026 23:27:10 +0000 Manifest next update: Thu 03 Sep 2026 23:48:10 +0000 Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 5: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: fYLIIBGa+qzthNM3sZUq8T5/9fIaOkOUfnffrlH5ViA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9c:d2:6d:6d:24:4c:a7:bf:54:a2:dc:8a:04:cc:36:5e:53:b1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Sep 2 23:27:10 2026 GMT Not After : Sep 3 23:48:10 2026 GMT Subject: CN=DB350B92D97DE9CD90FC9CD8CEC8173CEF668A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:12:37:ff:f7:b1:b4:45:d6:4d:8b:8b:27: c6:5a:95:68:6e:11:7d:a3:a8:4c:af:62:0e:35:5f: 77:83:ee:c4:b5:3e:c5:c9:ff:a1:80:de:57:4a:d3: 64:2a:ed:6f:c7:a8:4c:b9:8e:d9:16:23:fc:2c:6a: b3:06:99:22:69:5d:6b:1b:53:e0:43:e8:35:5b:f3: 55:ec:32:00:3a:1b:ce:c5:9b:39:95:f0:61:4c:ae: 29:01:40:4b:80:5b:e3:db:8e:b8:d9:29:1e:41:c8: f6:59:83:9c:58:c3:76:82:d2:e3:88:23:64:8d:2c: a1:16:a6:54:8d:85:af:db:a8:4b:0d:6f:0b:22:7e: 8b:cc:13:9c:00:0a:42:95:02:d1:60:49:9e:2b:7c: d6:f3:56:df:49:af:58:e3:b6:21:ef:b5:92:a0:54: dc:c0:9e:eb:19:65:a7:ca:ab:6c:59:7b:be:10:28: 25:b8:92:88:5c:5f:36:62:93:89:d7:c6:93:1f:6b: 53:32:37:e3:86:3d:84:80:0d:a5:59:a4:82:a3:7a: 29:1f:55:c3:20:46:82:b1:6c:8e:c1:12:a0:80:1a: 05:3a:e6:54:1c:12:94:08:1d:a6:11:f8:1c:42:9b: 47:3d:b5:9e:38:19:6a:95:b5:73:c9:fd:b0:95:c9: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:0B:92:D9:7D:E9:CD:90:FC:9C:D8:CE:C8:17:3C:EF:66:8A:74 X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e3:19:39:53:e9:24:65:76:bb:15:70:80:bb:cc:60:ae:67: 2c:e0:7a:db:09:6f:91:45:b5:84:57:5c:b7:52:04:c1:a2:ed: 3a:a1:13:14:d2:d7:61:07:95:c6:35:db:ca:36:3b:2e:2b:bd: ce:6c:83:10:d4:36:c0:0e:c9:68:c1:29:8c:a9:d2:7b:71:2b: 46:22:4e:19:9e:43:e9:52:87:fb:b8:56:46:bf:5e:4f:53:80: 7d:65:b5:8d:6f:13:f5:fe:f8:5c:0b:fb:32:cb:69:3b:c7:e3: bc:c3:23:3b:a0:af:b5:81:b0:28:a1:fe:79:fb:80:ce:22:47: d6:c8:15:e2:61:20:ae:3d:10:98:46:cf:69:18:17:54:64:6f: 38:7b:de:b0:f0:19:28:06:4f:ce:e1:16:fe:9a:4e:a4:fb:64: 92:f7:42:6e:f5:05:df:4b:55:91:7f:3f:7b:2b:39:8e:59:51: 45:0b:15:9a:7c:97:e5:a4:08:9b:a1:a1:30:14:d2:09:98:db: 95:e3:29:8d:ba:05:e5:c9:f6:e0:a3:0d:69:82:8b:73:5d:0e: db:e5:e9:4d:e9:9e:0d:db:3f:8e:fc:af:a4:60:5b:47:b0:47: 35:32:d9:36:12:89:b4:27:cd:cf:b8:cc:54:7c:1e:0d:40:7a: df:fb:e8:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5zSbW0kTKe/VKLcigTMNl5Tsb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjA5MDIyMzI3MTBaFw0yNjA5MDMyMzQ4MTBaMDMxMTAvBgNV BAMTKERCMzUwQjkyRDk3REU5Q0Q5MEZDOUNEOENFQzgxNzNDRUY2NjhBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQgBI3//extEXWTYuLJ8ZalWhu EX2jqEyvYg41X3eD7sS1PsXJ/6GA3ldK02Qq7W/HqEy5jtkWI/wsarMGmSJpXWsb U+BD6DVb81XsMgA6G87FmzmV8GFMrikBQEuAW+PbjrjZKR5ByPZZg5xYw3aC0uOI I2SNLKEWplSNha/bqEsNbwsifovME5wACkKVAtFgSZ4rfNbzVt9Jr1jjtiHvtZKg VNzAnusZZafKq2xZe74QKCW4kohcXzZik4nXxpMfa1MyN+OGPYSADaVZpIKjeikf VcMgRoKxbI7BEqCAGgU65lQcEpQIHaYR+BxCm0c9tZ44GWqVtXPJ/bCVyYtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2zULktl96c2Q/JzYzsgXPO9minQwHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjjGTlT6SRldrsVcIC7zGCuZyzgetsJb5FF tYRXXLdSBMGi7TqhExTS12EHlcY128o2Oy4rvc5sgxDUNsAOyWjBKYyp0ntxK0Yi ThmeQ+lSh/u4Vka/Xk9TgH1ltY1vE/X++FwL+zLLaTvH47zDIzugr7WBsCih/nn7 gM4iR9bIFeJhIK49EJhGz2kYF1Rkbzh73rDwGSgGT87hFv6aTqT7ZJL3Qm71Bd9L VZF/P3srOY5ZUUULFZp8l+WkCJuhoTAU0gmY25XjKY26BeXJ9uCjDWmCi3NdDtvl 6U3png3bP478r6RgW0ewRzUy2TYSibQnzc+4zFR8Hg1Aet/76Mw= -----END CERTIFICATE-----Generated at Thu Sep 3 05:17:33 2026 by rpki-client