$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft File: 4C87F894274B3B0E1928C39974942F14C8A8B54C.mft (raw, json) Hash identifier: jo5oJnAjDJLZuGiCKhYfXOTqNznMcni1BcSirSMoadU= Subject key identifier: 8F:B1:39:58:B4:AA:29:15:8A:E0:26:15:30:25:79:AA:E1:D0:10:D2 Authority key identifier: 4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C Certificate issuer: /CN=4C87F894274B3B0E1928C39974942F14C8A8B54C Certificate serial: 4320083002D1B767F315833EE5D1B68FDC0E6326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft Manifest number: BC Signing time: Fri 18 Sep 2026 12:13:02 +0000 Manifest this update: Fri 18 Sep 2026 12:08:02 +0000 Manifest next update: Sat 19 Sep 2026 13:39:02 +0000 Files and hashes: 1: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 77vqSQ2vYJSpRPJK+Drkv/GhwqBRFPysUVhKsIiSCoU=) 2: 4C87F894274B3B0E1928C39974942F14C8A8B54C.crl (hash: UVN8AAiKPYdHSIWxpND35ry/fFTAeYgE1Zg4JLqq5pk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 07:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:20:08:30:02:d1:b7:67:f3:15:83:3e:e5:d1:b6:8f:dc:0e:63:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C87F894274B3B0E1928C39974942F14C8A8B54C Validity Not Before: Sep 18 12:08:02 2026 GMT Not After : Sep 19 13:39:02 2026 GMT Subject: CN=8FB13958B4AA29158AE02615302579AAE1D010D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:95:fc:54:32:d8:10:ab:a2:4e:d4:16:87: 58:44:89:f4:52:a5:6b:e7:f7:a3:42:9e:f4:66:5d: 27:08:17:29:1e:64:e1:71:3c:8c:62:57:05:80:b3: 6f:c7:5a:13:87:52:c0:5c:a2:d5:03:06:7a:da:55: a1:e0:f6:cd:db:6d:0e:57:d9:02:67:7c:1e:9d:71: a2:db:88:de:33:49:5b:60:df:de:3a:b7:01:6c:2c: 86:52:33:aa:39:a7:22:28:74:aa:7b:c1:4e:8c:db: 24:59:cb:53:6d:94:be:b3:0c:36:03:d2:59:97:ce: e9:8b:ea:f0:6f:26:fd:06:28:64:a9:34:cd:d0:b3: 8a:76:d7:62:45:c7:26:03:fe:1a:28:1e:c8:76:d5: e0:44:9d:f0:3e:ef:31:65:52:76:27:d7:27:f3:48: 4c:fb:dc:0b:0a:57:e4:cb:36:97:13:9b:63:0a:42: 01:71:08:78:a3:ee:5d:55:42:68:8b:19:b0:73:15: ed:b9:f8:21:49:d3:0d:22:00:8e:5a:4e:7a:95:c7: 76:83:b8:d6:b4:31:b1:7f:a1:c0:f3:00:4f:ab:ff: b6:d0:72:ec:b7:7f:cc:89:77:da:ba:62:bd:5a:b1: 23:8c:33:4d:e9:63:c5:35:cf:03:20:4c:82:ac:31: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B1:39:58:B4:AA:29:15:8A:E0:26:15:30:25:79:AA:E1:D0:10:D2 X509v3 Authority Key Identifier: keyid:4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a0:4f:6b:93:b2:40:40:5e:6d:a7:18:6d:77:bd:9a:1c:80: 11:c7:9a:ba:bc:4f:59:a7:67:53:50:45:21:28:26:1f:73:3e: 4d:97:45:bd:e0:3d:eb:d4:85:55:51:5b:b4:be:82:6a:38:99: b0:e2:ae:5b:34:38:1f:d8:e7:8d:8e:05:30:39:51:48:55:85: 96:2d:c1:42:2b:e9:3b:16:f4:b0:29:50:8e:a4:79:98:f8:62: b2:e8:5a:49:45:8c:60:35:86:0b:45:a9:19:5a:44:69:9c:61: 68:1d:e8:56:9f:96:10:9b:eb:57:71:43:b2:88:0d:97:61:4d: 35:1e:91:fe:1c:69:10:34:bb:b2:b3:25:56:be:74:93:13:f1: 29:8a:77:da:9b:b0:f2:e0:34:78:84:b6:71:e3:0d:9f:df:4c: b3:6b:fc:5e:1d:dc:10:f5:69:d2:c2:68:64:7f:c3:0d:ce:84: c0:9a:c4:f4:92:28:96:0f:ba:83:cc:9e:31:eb:f0:36:3d:0e: b0:36:a4:de:9e:26:c4:a1:4b:80:eb:28:81:69:6f:56:6a:1d: d6:4a:3b:41:55:2e:5b:21:ae:0f:20:d9:c7:19:00:b6:46:80: 4b:17:0b:ca:9a:87:f0:ed:23:a6:5d:70:1d:15:0a:7b:f3:e4: 42:55:d6:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyAIMALRt2fzFYM+5dG2j9wOYyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4N0Y4OTQyNzRCM0IwRTE5MjhDMzk5NzQ5NDJGMTRD OEE4QjU0QzAeFw0yNjA5MTgxMjA4MDJaFw0yNjA5MTkxMzM5MDJaMDMxMTAvBgNV BAMTKDhGQjEzOTU4QjRBQTI5MTU4QUUwMjYxNTMwMjU3OUFBRTFEMDEwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXZX8VDLYEKuiTtQWh1hEifRS pWvn96NCnvRmXScIFykeZOFxPIxiVwWAs2/HWhOHUsBcotUDBnraVaHg9s3bbQ5X 2QJnfB6dcaLbiN4zSVtg3946twFsLIZSM6o5pyIodKp7wU6M2yRZy1NtlL6zDDYD 0lmXzumL6vBvJv0GKGSpNM3Qs4p212JFxyYD/hooHsh21eBEnfA+7zFlUnYn1yfz SEz73AsKV+TLNpcTm2MKQgFxCHij7l1VQmiLGbBzFe25+CFJ0w0iAI5aTnqVx3aD uNa0MbF/ocDzAE+r/7bQcuy3f8yJd9q6Yr1asSOMM03pY8U1zwMgTIKsMYUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7E5WLSqKRWK4CYVMCV5quHQENIwHwYDVR0j BBgwFoAUTIf4lCdLOw4ZKMOZdJQvFMiotUwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlMjZhYTMtMzA3My00Mjc2LWJkNzQtYWQ4NmYwOTljMjUzLzAvNEM4N0Y4OTQy NzRCM0IwRTE5MjhDMzk5NzQ5NDJGMTRDOEE4QjU0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Qzg3Rjg5NDI3NEIzQjBFMTkyOEMzOTk3NDk0MkYxNEM4QThC NTRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvNEM4N0Y4OTQyNzRCM0IwRTE5MjhDMzk5NzQ5NDJG MTRDOEE4QjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmgT2uTskBAXm2nGG13vZocgBHHmrq8T1mn Z1NQRSEoJh9zPk2XRb3gPevUhVVRW7S+gmo4mbDirls0OB/Y542OBTA5UUhVhZYt wUIr6TsW9LApUI6keZj4YrLoWklFjGA1hgtFqRlaRGmcYWgd6FaflhCb61dxQ7KI DZdhTTUekf4caRA0u7KzJVa+dJMT8SmKd9qbsPLgNHiEtnHjDZ/fTLNr/F4d3BD1 adLCaGR/ww3OhMCaxPSSKJYPuoPMnjHr8DY9DrA2pN6eJsShS4DrKIFpb1ZqHdZK O0FVLlshrg8g2ccZALZGgEsXC8qah/DtI6ZdcB0VCnvz5EJV1mo= -----END CERTIFICATE-----Generated at Fri Sep 18 15:08:09 2026 by rpki-client