$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft File: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft (raw, json) Hash identifier: fQuEqJ4itF1LrBzWAbl8AUJojvX3lypAxIkrTMNR6PY= Subject key identifier: E5:2A:E1:D1:63:EB:0C:93:0A:81:9A:D8:10:84:C7:CF:F1:D3:DA:63 Authority key identifier: 4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD Certificate issuer: /CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Certificate serial: 138D03CF8CC09767A281113DA30066CF81AAB905 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:53:41 +0000 Manifest this update: Wed 16 Sep 2026 19:48:41 +0000 Manifest next update: Thu 17 Sep 2026 23:19:41 +0000 Files and hashes: 1: 4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl (hash: PADYUDdrLcRs11v1keW0c4dvP0LoCS0QKeRaSG52pGg=) 2: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: JeyiXx4erlba3GA8MtFHqgBMpzij5IWYDmBP3qqgmrQ=) 3: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: NuzvjRElosYE2UG7+eZwvvIrrAeM5hY3Zl0vPo88tlQ=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: OQGBTyYct40Pw4G0aqEIxJAdvOkNRB0tfWNHiKyDkc0=) 5: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: ZfYq00HTDjpvUdw6nAEEEqjvY8Q+YEiON1rQ+odVxcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8d:03:cf:8c:c0:97:67:a2:81:11:3d:a3:00:66:cf:81:aa:b9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CAC4B05C6220A5A917FEA917D34766F32B36DCD Validity Not Before: Sep 16 19:48:41 2026 GMT Not After : Sep 17 23:19:41 2026 GMT Subject: CN=E52AE1D163EB0C930A819AD81084C7CFF1D3DA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:6d:4b:f0:27:da:bb:a0:00:75:45:3d:fc: 40:70:2b:82:45:03:58:dd:24:a5:95:74:60:2c:f2: 3f:5f:a0:32:bd:75:fb:56:1e:d6:e9:4b:64:09:03: 31:1f:f0:d3:a3:a8:1c:d3:78:77:8a:1b:e1:93:eb: db:92:a0:86:58:88:72:d4:71:35:1a:6b:11:71:56: 20:80:91:4d:9c:44:ce:90:02:c6:1a:dd:62:5c:a3: 34:0a:11:07:a0:d8:07:82:de:94:8f:3f:e7:61:94: b2:b8:50:a8:b3:97:31:a4:fc:fc:e1:65:74:81:31: e8:7a:3e:10:6d:b2:6e:95:c3:58:5b:21:e8:d2:50: a7:61:f0:bd:36:06:62:35:f1:c0:09:b9:55:40:a1: fc:da:26:60:12:35:5a:c9:76:b1:ce:a9:ba:a2:e2: 5c:24:72:e0:2f:15:e8:cf:82:3d:3f:77:4c:85:2f: 12:26:e9:37:c6:29:a5:0c:7e:94:e7:82:cd:5f:97: e7:63:98:d4:8f:eb:62:0d:5e:26:df:06:42:4f:e8: e2:bd:c4:69:45:97:75:b7:b0:db:41:aa:5e:89:db: f4:c2:b4:f9:f0:d8:30:fa:9a:4d:df:63:bd:62:29: 68:54:0f:22:b8:35:cd:55:db:0d:f7:ea:c2:01:6e: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2A:E1:D1:63:EB:0C:93:0A:81:9A:D8:10:84:C7:CF:F1:D3:DA:63 X509v3 Authority Key Identifier: keyid:4C:AC:4B:05:C6:22:0A:5A:91:7F:EA:91:7D:34:76:6F:32:B3:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/4CAC4B05C6220A5A917FEA917D34766F32B36DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:78:7f:49:2d:73:31:13:f9:16:5e:29:b4:9e:f4:e0:86:a8: ca:1d:9b:f0:b0:64:2d:62:ed:de:aa:3f:07:c6:64:4b:d8:7c: 10:2f:05:39:dd:5e:63:2c:54:09:ef:47:39:e1:5f:46:96:07: fe:0c:55:62:e4:f9:ba:5e:ef:cf:47:3b:2e:38:9f:dd:07:ca: 4f:20:54:33:b6:21:6a:c2:cd:5f:55:24:aa:e3:cb:8b:4f:c4: 4e:d2:42:09:6c:6b:80:90:85:9d:18:b5:db:85:43:88:85:03: 61:c1:c7:c7:4a:e9:f5:12:27:98:ea:5f:03:86:7b:37:89:00: 98:2d:3c:79:dd:22:5a:ba:f7:8b:7b:71:f7:96:7a:f2:e0:89: af:0a:8b:a1:71:1c:d5:15:9d:77:01:6a:84:f4:96:b9:cb:7d: 0d:81:ca:2c:e6:14:c6:cf:44:f9:c1:b4:02:b9:b8:9d:80:4d: 68:8d:4e:e4:6d:ea:71:dc:d0:67:be:f4:d9:c8:48:3d:08:7c: f7:31:23:5a:db:79:4f:69:c4:f7:04:fa:f4:22:b1:b3:14:f9: 24:ee:bc:a5:19:86:d8:36:44:23:ed:d1:f9:0a:e5:75:ae:12: f8:c7:e0:c8:c2:41:ee:b4:31:fe:45:e6:09:70:03:0b:7a:4a: 49:a7:7d:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE40Dz4zAl2eigRE9owBmz4GquQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYz MkIzNkRDRDAeFw0yNjA5MTYxOTQ4NDFaFw0yNjA5MTcyMzE5NDFaMDMxMTAvBgNV BAMTKEU1MkFFMUQxNjNFQjBDOTMwQTgxOUFEODEwODRDN0NGRjFEM0RBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoom1L8Cfau6AAdUU9/EBwK4JF A1jdJKWVdGAs8j9foDK9dftWHtbpS2QJAzEf8NOjqBzTeHeKG+GT69uSoIZYiHLU cTUaaxFxViCAkU2cRM6QAsYa3WJcozQKEQeg2AeC3pSPP+dhlLK4UKizlzGk/Pzh ZXSBMeh6PhBtsm6Vw1hbIejSUKdh8L02BmI18cAJuVVAofzaJmASNVrJdrHOqbqi 4lwkcuAvFejPgj0/d0yFLxIm6TfGKaUMfpTngs1fl+djmNSP62INXibfBkJP6OK9 xGlFl3W3sNtBql6J2/TCtPnw2DD6mk3fY71iKWhUDyK4Nc1V2w336sIBboJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Srh0WPrDJMKgZrYEITHz/HT2mMwHwYDVR0j BBgwFoAUTKxLBcYiClqRf+qRfTR2bzKzbc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZTljOWYtZDYwNy00NDk3LWFmMjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVD NjIyMEE1QTkxN0ZFQTkxN0QzNDc2NkYzMkIzNkRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0FDNEIwNUM2MjIwQTVBOTE3RkVBOTE3RDM0NzY2RjMyQjM2 RENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvNENBQzRCMDVDNjIyMEE1QTkxN0ZFQTkxN0QzNDc2 NkYzMkIzNkRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFF4f0ktczET+RZeKbSe9OCGqModm/CwZC1i 7d6qPwfGZEvYfBAvBTndXmMsVAnvRznhX0aWB/4MVWLk+bpe789HOy44n90Hyk8g VDO2IWrCzV9VJKrjy4tPxE7SQglsa4CQhZ0YtduFQ4iFA2HBx8dK6fUSJ5jqXwOG ezeJAJgtPHndIlq694t7cfeWevLgia8Ki6FxHNUVnXcBaoT0lrnLfQ2ByizmFMbP RPnBtAK5uJ2ATWiNTuRt6nHc0Ge+9NnISD0IfPcxI1rbeU9pxPcE+vQisbMU+STu vKUZhtg2RCPt0fkK5XWuEvjH4MjCQe60Mf5F5glwAwt6SkmnffA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:54:25 2026 by rpki-client