$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json) Hash identifier: G6pzK47qNT8S6UUq/2pdKjekHn7zjznnzksBFRhIO+I= Subject key identifier: C4:54:E0:A1:D9:83:F6:99:8F:D3:17:84:C9:99:84:2A:48:B6:32:D0 Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 22814BC286C2AF3D295D694F91E19B9AD34DCAD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft Manifest number: A3 Signing time: Mon 31 Aug 2026 13:20:31 +0000 Manifest this update: Mon 31 Aug 2026 13:15:31 +0000 Manifest next update: Tue 01 Sep 2026 16:48:31 +0000 Files and hashes: 1: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: L07z+CtzlInFRwP3WgdJrNBvlLhqMf/aO0RrXvvJ4FQ=) 2: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=) 3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 16:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:81:4b:c2:86:c2:af:3d:29:5d:69:4f:91:e1:9b:9a:d3:4d:ca:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: Aug 31 13:15:31 2026 GMT Not After : Sep 1 16:48:31 2026 GMT Subject: CN=C454E0A1D983F6998FD31784C999842A48B632D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:3e:69:35:4a:65:0e:12:92:fd:43:b0:c9: 0c:67:a9:56:c4:1d:de:f1:fd:d7:f4:dc:1d:c3:5d: f7:4e:42:f8:27:73:42:9d:50:db:b3:23:09:11:ca: ba:03:1f:8a:78:57:1b:4b:a0:6f:60:98:bb:2f:c3: 80:47:a4:e1:d3:94:10:f3:30:19:24:85:56:9c:80: 33:d0:3a:a4:48:6c:11:17:c9:61:d9:7b:e5:2c:60: 68:92:4b:88:f6:f6:d9:14:d6:ed:93:94:a2:88:7d: 86:9d:56:c2:e8:16:f2:3f:c7:e9:42:1e:60:5b:e0: f8:88:32:50:01:ae:39:10:79:fe:31:c6:83:90:bf: bc:8c:95:36:3d:e5:1a:2f:c3:24:70:0e:68:36:1f: 3f:6c:4b:32:17:9e:22:b9:0d:a9:a1:bd:ec:db:e5: 6e:a8:c4:e3:af:09:cb:4b:44:ea:99:92:30:db:37: 55:66:4c:25:cc:c0:3e:71:91:57:4c:55:56:30:40: d2:1c:de:7b:d4:57:b8:d4:b2:eb:06:cc:d1:61:d4: 43:93:58:0d:25:0d:c4:8c:02:a7:e5:e5:5b:72:b6: 8a:66:35:96:0f:6e:cf:c0:0a:04:ae:c4:56:5f:c8: a5:19:b9:12:38:a5:10:5c:65:c2:5d:32:cc:d9:ec: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:54:E0:A1:D9:83:F6:99:8F:D3:17:84:C9:99:84:2A:48:B6:32:D0 X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2e:5b:8c:e7:f5:b7:20:38:d9:0e:e2:c0:4c:62:30:c4:43: 0b:7f:71:95:89:aa:39:d0:ea:bd:60:07:ff:07:16:bd:82:1a: ce:08:05:52:9f:a2:31:c6:0e:00:7b:0e:7a:5d:d3:24:33:12: 01:91:cd:ab:8a:2d:ba:bc:b7:e7:67:35:ef:2b:a0:0f:2d:88: dd:fa:2f:a0:c3:bc:c8:03:d6:02:c9:9b:01:67:14:c0:0e:a1: f7:3b:ce:bc:3a:b7:ca:80:aa:d7:8a:db:6e:0f:85:75:f8:6e: df:72:81:1d:ef:f7:c5:6f:ff:92:c7:6b:13:d7:77:8e:03:4c: d7:9c:c6:06:55:08:dd:55:5e:12:e2:6f:dc:aa:e8:08:bb:cf: 48:35:15:11:34:35:b7:ec:7f:24:41:15:43:12:a2:f1:87:47: e4:0e:42:d6:47:20:14:59:43:2b:e6:e3:74:03:1f:fd:67:5e: 38:a1:75:34:3a:5f:8b:c3:99:d4:e4:79:34:57:9b:e9:ab:d7: ac:60:f1:37:6d:a5:68:bf:78:30:b0:0e:55:23:4d:cd:c0:f1: 40:3a:7d:da:26:0a:4c:25:a7:a9:c8:85:e6:c4:74:7e:7b:a1: a0:c9:e2:61:0a:d7:10:b2:54:06:7e:d4:aa:0f:5c:2f:ea:45: 97:74:d0:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoFLwobCrz0pXWlPkeGbmtNNytIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjA4MzExMzE1MzFaFw0yNjA5MDExNjQ4MzFaMDMxMTAvBgNV BAMTKEM0NTRFMEExRDk4M0Y2OTk4RkQzMTc4NEM5OTk4NDJBNDhCNjMyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbT5pNUplDhKS/UOwyQxnqVbE Hd7x/df03B3DXfdOQvgnc0KdUNuzIwkRyroDH4p4VxtLoG9gmLsvw4BHpOHTlBDz MBkkhVacgDPQOqRIbBEXyWHZe+UsYGiSS4j29tkU1u2TlKKIfYadVsLoFvI/x+lC HmBb4PiIMlABrjkQef4xxoOQv7yMlTY95RovwyRwDmg2Hz9sSzIXniK5Damhvezb 5W6oxOOvCctLROqZkjDbN1VmTCXMwD5xkVdMVVYwQNIc3nvUV7jUsusGzNFh1EOT WA0lDcSMAqfl5VtytopmNZYPbs/ACgSuxFZfyKUZuRI4pRBcZcJdMszZ7DmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFTgodmD9pmP0xeEyZmEKki2MtAwHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcuW4zn9bcgONkO4sBMYjDEQwt/cZWJqjnQ 6r1gB/8HFr2CGs4IBVKfojHGDgB7Dnpd0yQzEgGRzauKLbq8t+dnNe8roA8tiN36 L6DDvMgD1gLJmwFnFMAOofc7zrw6t8qAqteK224PhXX4bt9ygR3v98Vv/5LHaxPX d44DTNecxgZVCN1VXhLib9yq6Ai7z0g1FRE0NbfsfyRBFUMSovGHR+QOQtZHIBRZ Qyvm43QDH/1nXjihdTQ6X4vDmdTkeTRXm+mr16xg8TdtpWi/eDCwDlUjTc3A8UA6 fdomCkwlp6nIhebEdH57oaDJ4mEK1xCyVAZ+1KoPXC/qRZd00Kc= -----END CERTIFICATE-----Generated at Tue Sep 1 03:47:32 2026 by rpki-client