$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json) Hash identifier: fm/3xDH0TuxkRDw7mlKmkgF+Fk1N2hzW4Di3fCudxmI= Subject key identifier: 58:39:E7:00:AD:BD:EE:57:44:6B:C6:E6:24:2D:7D:FF:E3:99:89:24 Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 222CB0B0E8C4DA49DEA8E009E3E054CACFB07671 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:06:05 +0000 Manifest this update: Thu 17 Sep 2026 06:01:05 +0000 Manifest next update: Fri 18 Sep 2026 08:59:05 +0000 Files and hashes: 1: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=) 2: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=) 3: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=) 4: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=) 5: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: Daxk5hR+Q0E+EcADmpGH6nHyLqL4X4F83OKprdTYumw=) 6: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=) 7: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=) 8: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2c:b0:b0:e8:c4:da:49:de:a8:e0:09:e3:e0:54:ca:cf:b0:76:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: Sep 17 06:01:05 2026 GMT Not After : Sep 18 08:59:05 2026 GMT Subject: CN=5839E700ADBDEE57446BC6E6242D7DFFE3998924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:a2:10:47:ca:41:79:2d:80:ad:7d:18:2a: 5a:92:97:e1:69:f2:3a:87:3c:27:e2:bc:b0:f3:e0: 71:7d:ab:f7:23:ec:e7:2d:58:96:33:6c:a2:ca:c1: 37:8c:50:68:01:b9:c8:3d:9e:5e:a1:31:7b:e2:04: c6:a4:e6:08:90:45:03:6c:22:a1:6d:2d:86:b3:ea: d4:89:86:b2:5a:30:a6:ee:cd:e9:ee:bd:e1:38:9d: 69:09:2e:99:86:9b:ea:0b:12:20:02:68:86:7a:42: cd:58:a1:78:1c:e1:07:d8:ab:a2:1b:ff:60:21:98: ad:90:92:23:b7:97:bd:85:a3:e8:ab:d6:0c:d4:82: c8:3e:e9:81:09:9f:1d:20:b3:ff:a9:91:bf:c6:3a: 59:5c:4b:9b:e7:45:fc:00:bc:fb:86:44:f8:7a:38: d6:a2:3d:94:56:ef:10:63:97:c1:00:7b:92:39:6e: 48:a4:e8:1e:3d:eb:5f:54:cc:dc:df:cb:ca:8a:9c: 98:6b:8e:c7:1d:8a:1b:89:7f:96:7c:bb:b2:ee:16: 82:6d:f6:f9:97:8d:59:28:89:9e:bb:4e:54:64:1d: 38:4f:62:14:d6:96:24:ae:61:cb:f6:1f:31:59:97: c1:b7:a3:b6:b6:04:7d:b6:d9:6b:7f:bb:53:67:5f: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:E7:00:AD:BD:EE:57:44:6B:C6:E6:24:2D:7D:FF:E3:99:89:24 X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8b:82:74:fe:69:a2:66:3b:ff:0e:8c:1a:f9:ce:f9:b4:b3: b8:20:b2:ad:bb:89:bd:01:44:bf:3c:db:f6:2d:79:eb:56:4d: 2a:a8:98:c5:bc:1f:94:af:ed:d4:16:0d:38:f7:8c:fd:6f:d5: 3e:1e:3d:b8:fd:ef:a3:47:45:be:66:21:64:60:1f:fe:82:bd: 99:91:e4:46:14:9b:f3:ac:23:01:b2:89:a4:a0:eb:66:a5:fa: a2:67:94:06:28:c5:5f:f5:e2:46:bc:fa:6f:99:86:7d:e4:0e: eb:bd:5c:da:6b:72:87:bd:ea:a3:1f:1e:46:f0:66:ad:fa:1c: 53:3b:f7:ff:a3:15:a8:36:bb:db:75:ea:8c:1a:6b:22:42:30: bb:c3:a3:db:7e:0e:a6:16:33:d7:8a:15:11:18:0b:c1:bc:f1: 77:4c:9e:9e:f3:23:94:5f:a9:48:34:57:8f:ac:8a:ef:3a:b8: e8:58:e3:40:bb:f5:d4:99:a0:40:94:5f:8b:25:60:d7:15:3b: 75:16:35:54:80:c9:ae:b0:e4:13:e2:7a:9c:83:75:fb:c2:87: da:74:70:21:27:a0:7f:3f:eb:13:d0:d7:20:c7:2c:dc:89:13: 57:0a:93:c7:94:db:88:68:a4:22:e9:5e:6c:64:31:6f:c6:fb: 94:a8:53:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiywsOjE2kneqOAJ4+BUys+wdnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA5MTcwNjAxMDVaFw0yNjA5MTgwODU5MDVaMDMxMTAvBgNV BAMTKDU4MzlFNzAwQURCREVFNTc0NDZCQzZFNjI0MkQ3REZGRTM5OTg5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkM6IQR8pBeS2ArX0YKlqSl+Fp 8jqHPCfivLDz4HF9q/cj7OctWJYzbKLKwTeMUGgBucg9nl6hMXviBMak5giQRQNs IqFtLYaz6tSJhrJaMKbuzenuveE4nWkJLpmGm+oLEiACaIZ6Qs1YoXgc4QfYq6Ib /2AhmK2QkiO3l72Fo+ir1gzUgsg+6YEJnx0gs/+pkb/GOllcS5vnRfwAvPuGRPh6 ONaiPZRW7xBjl8EAe5I5bkik6B49619UzNzfy8qKnJhrjscdihuJf5Z8u7LuFoJt 9vmXjVkoiZ67TlRkHThPYhTWliSuYcv2HzFZl8G3o7a2BH222Wt/u1NnX45rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDnnAK297ldEa8bmJC19/+OZiSQwHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECLgnT+aaJmO/8OjBr5zvm0s7ggsq27ib0B RL882/YteetWTSqomMW8H5Sv7dQWDTj3jP1v1T4ePbj976NHRb5mIWRgH/6CvZmR 5EYUm/OsIwGyiaSg62al+qJnlAYoxV/14ka8+m+Zhn3kDuu9XNprcoe96qMfHkbw Zq36HFM79/+jFag2u9t16owaayJCMLvDo9t+DqYWM9eKFREYC8G88XdMnp7zI5Rf qUg0V4+siu86uOhY40C79dSZoECUX4slYNcVO3UWNVSAya6w5BPiepyDdfvCh9p0 cCEnoH8/6xPQ1yDHLNyJE1cKk8eU24hopCLpXmxkMW/G+5SoU54= -----END CERTIFICATE-----Generated at Thu Sep 17 12:41:03 2026 by rpki-client