$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft File: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft (raw, json) Hash identifier: KEXwTZWMQCunSCG7Rbxs7Cr6MuS0xbMIoUwd8AEH8nM= Subject key identifier: DA:99:DD:47:A8:53:B1:DA:49:74:6D:10:5C:48:A3:8B:2B:D6:7C:A2 Authority key identifier: C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2 Certificate issuer: /CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2 Certificate serial: 4C446F1C2F8E37BE9002C1FEFBCE5DA276028229 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft Manifest number: D6 Signing time: Fri 09 Oct 2026 05:50:08 +0000 Manifest this update: Fri 09 Oct 2026 05:45:08 +0000 Manifest next update: Sat 10 Oct 2026 07:23:08 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: mCuIl3B+Pq3Irur4J3MaaMeyRxcQ7JCNDx31iNrLDkc=) 2: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: 3Y+Wkuip7kYwTNZB3EWxSZVFtVvvUlonF/rrTJ0WSdE=) 3: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl (hash: 0m95isnxbLwtPDRa9qIHTUu5IelKyscHyAIzQwjgk1M=) 4: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 9sxhuASFKHOXbj0DOd/0uIHrTBma/ztKpCl/pA1bt+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:44:6f:1c:2f:8e:37:be:90:02:c1:fe:fb:ce:5d:a2:76:02:82:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2 Validity Not Before: Oct 9 05:45:08 2026 GMT Not After : Oct 10 07:23:08 2026 GMT Subject: CN=DA99DD47A853B1DA49746D105C48A38B2BD67CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:60:0c:9b:21:00:d0:45:96:eb:9a:35:c1: 5e:07:a3:8f:13:d5:77:bc:f3:e2:fc:fd:9c:13:b9: 6f:a8:7e:94:3e:17:64:ab:b2:4d:72:64:11:97:0e: 5c:33:94:af:57:83:2b:5c:8c:c6:12:e1:89:98:ec: 9f:d2:c9:dc:1a:6f:76:2a:dd:0e:eb:4c:85:59:b0: 76:87:ba:08:2f:d6:57:4e:90:7d:cc:d0:a7:b6:8e: b3:f2:49:88:8f:da:fb:7a:2a:80:7a:60:dd:7c:1e: 77:2c:2d:a0:f9:17:be:86:2a:e6:b3:a3:b4:5e:c6: 95:04:9f:57:3c:39:8c:15:4e:57:7c:4a:91:3f:ca: b4:55:6f:29:ce:15:68:1a:89:58:70:71:da:de:82: 15:17:80:34:05:5a:2b:7d:6d:33:e1:93:b9:a1:15: 82:9d:4f:f7:9a:53:22:2c:eb:b2:d1:c5:84:25:4a: 16:b8:8b:ad:47:ef:ad:9d:ce:18:17:ec:ea:36:fb: 12:af:70:cc:d3:64:01:c7:8d:fd:44:ea:0f:e1:02: 19:d3:17:14:72:3d:bd:00:f0:98:5e:64:8c:40:1d: a8:1a:c5:75:bf:6b:e3:f6:75:38:af:b8:68:af:27: 56:7c:e8:84:22:e5:0d:fe:41:3f:6b:bc:40:b1:b4: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:99:DD:47:A8:53:B1:DA:49:74:6D:10:5C:48:A3:8B:2B:D6:7C:A2 X509v3 Authority Key Identifier: keyid:C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8c:f1:11:28:fe:c3:49:22:01:5a:f8:aa:cd:72:7c:cf:79: 81:91:9c:b8:89:f6:bd:34:00:0f:f3:43:07:21:94:4a:43:97: 2e:d6:7d:99:49:8f:b1:4e:fa:cd:50:55:ef:f0:33:01:ef:37: 68:99:fd:fd:66:c9:00:b2:26:ba:f9:43:ed:2b:1c:79:38:f9: a9:12:ea:fc:f2:0b:f2:aa:10:5c:0d:b3:da:00:b6:af:8b:01: 07:b7:3d:8a:cf:f1:3c:85:e9:18:f8:fb:60:0a:d2:95:5e:66: 03:e0:98:ee:10:26:5c:bc:b1:d3:cd:4d:ef:91:36:db:c8:29: 5d:09:6a:d6:94:4a:07:6f:6f:38:19:15:2e:5c:79:54:8f:9f: e0:f4:20:4e:c9:ea:ba:d3:17:e9:b3:5a:19:14:f9:63:5b:39: 5a:6e:d9:cb:fb:40:ec:53:3d:4f:64:54:e0:3d:b6:c1:75:f7: fc:96:e1:89:bf:95:5b:6c:d8:bb:12:80:75:5f:21:a3:8c:ec: fb:06:b3:18:e8:cf:a1:09:9c:45:21:06:8f:31:36:9f:18:7d: 25:4c:dc:af:62:a3:5c:9c:c6:c3:d3:91:33:d7:96:f1:69:a8: f9:0b:b3:23:94:e8:5e:73:8a:63:50:11:ef:a6:bc:9c:de:9c: 89:85:84:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTERvHC+ON76QAsH++85donYCgikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRG MTVFQTRGMjAeFw0yNjEwMDkwNTQ1MDhaFw0yNjEwMTAwNzIzMDhaMDMxMTAvBgNV BAMTKERBOTlERDQ3QTg1M0IxREE0OTc0NkQxMDVDNDhBMzhCMkJENjdDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiWAMmyEA0EWW65o1wV4Ho48T 1Xe88+L8/ZwTuW+ofpQ+F2Srsk1yZBGXDlwzlK9XgytcjMYS4YmY7J/Sydwab3Yq 3Q7rTIVZsHaHuggv1ldOkH3M0Ke2jrPySYiP2vt6KoB6YN18HncsLaD5F76GKuaz o7RexpUEn1c8OYwVTld8SpE/yrRVbynOFWgaiVhwcdreghUXgDQFWit9bTPhk7mh FYKdT/eaUyIs67LRxYQlSha4i61H762dzhgX7Oo2+xKvcMzTZAHHjf1E6g/hAhnT FxRyPb0A8JheZIxAHagaxXW/a+P2dTivuGivJ1Z86IQi5Q3+QT9rvECxtHxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pndR6hTsdpJdG0QXEijiyvWfKIwHwYDVR0j BBgwFoAUxGBaD7fw4sLQVEM6nk/LxPFepPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMWM1MjktNjI0NC00NTAzLWFmNTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZC N0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRGMTVFQTRGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDYwNUEwRkI3RjBFMkMyRDA1NDQzM0E5RTRGQ0JDNEYxNUVB NEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNC QzRGMTVFQTRGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuM8REo/sNJIgFa+KrNcnzPeYGRnLiJ9r00 AA/zQwchlEpDly7WfZlJj7FO+s1QVe/wMwHvN2iZ/f1myQCyJrr5Q+0rHHk4+akS 6vzyC/KqEFwNs9oAtq+LAQe3PYrP8TyF6Rj4+2AK0pVeZgPgmO4QJly8sdPNTe+R NtvIKV0JataUSgdvbzgZFS5ceVSPn+D0IE7J6rrTF+mzWhkU+WNbOVpu2cv7QOxT PU9kVOA9tsF19/yW4Ym/lVts2LsSgHVfIaOM7PsGsxjoz6EJnEUhBo8xNp8YfSVM 3K9io1ycxsPTkTPXlvFpqPkLsyOU6F5zimNQEe+mvJzenImFhEY= -----END CERTIFICATE-----Generated at Fri Oct 9 17:39:43 2026 by rpki-client