$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft File: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft (raw, json) Hash identifier: Tixtn4opP7Q2essAFiQ1evDR2PvgksJAVGjRZjCC74g= Subject key identifier: 66:99:FE:BE:8A:5B:86:F2:6A:0B:00:88:2F:52:38:4E:4A:31:7E:0C Authority key identifier: 4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 Certificate issuer: /CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Certificate serial: 208D7874EE47853F07650DFA35ACA741865F8D8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:44:36 +0000 Manifest this update: Wed 16 Sep 2026 20:39:36 +0000 Manifest next update: Fri 18 Sep 2026 00:40:36 +0000 Files and hashes: 1: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: CHd91Km0nR+qP58cZt8MMTA3jronphrVjPNjJ4FduNs=) 2: 4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl (hash: KvoAwj3h8bZocg+wF1GLWGPGv3sb1s4l37KV5M47WBU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8d:78:74:ee:47:85:3f:07:65:0d:fa:35:ac:a7:41:86:5f:8d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A18E5540FB9CFE07A95EDF89BAF7CE978E94258 Validity Not Before: Sep 16 20:39:36 2026 GMT Not After : Sep 18 00:40:36 2026 GMT Subject: CN=6699FEBE8A5B86F26A0B00882F52384E4A317E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:38:fd:80:5e:3b:73:04:77:8b:98:36:10: a1:73:a1:f6:8d:05:37:69:21:66:61:a9:b7:7c:a9: 79:17:57:8c:25:09:90:0e:83:aa:84:b0:e0:e4:95: 0e:42:1b:b9:7f:b6:d6:84:6b:60:67:fa:9e:33:0f: a4:fc:8f:61:b4:81:70:4e:ab:97:d9:85:af:57:7a: 2e:f6:9b:ad:11:6d:83:7b:e1:1b:cc:9a:e2:05:a2: dc:5a:a1:31:a2:75:27:3f:0b:67:3d:c0:2a:5d:57: 8c:fc:27:09:01:cd:2f:b5:83:7e:43:2f:44:1b:54: 6c:f6:70:c6:a8:e3:58:5c:b3:2b:ee:a4:a2:69:a8: 31:8d:a7:4c:06:8c:35:da:45:c2:64:01:87:0e:83: a0:31:ec:b0:2c:76:5d:b8:78:04:83:e6:37:26:18: 7e:f6:3d:ef:26:3e:1a:60:fb:a3:c4:fd:6e:f3:20: 11:e5:5b:17:64:0f:b2:f5:21:36:06:44:0d:fc:e7: c5:44:1b:8d:fc:28:2d:da:db:e4:c3:3d:e8:87:3f: 5d:ca:6f:d3:21:4a:8c:c1:98:4f:72:8d:1c:69:62: c6:9c:ab:38:8e:c2:e9:a2:13:7b:20:c8:42:30:c7: 4f:8b:0d:65:7d:52:e7:02:84:ae:6f:ec:99:3d:44: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:99:FE:BE:8A:5B:86:F2:6A:0B:00:88:2F:52:38:4E:4A:31:7E:0C X509v3 Authority Key Identifier: keyid:4A:18:E5:54:0F:B9:CF:E0:7A:95:ED:F8:9B:AF:7C:E9:78:E9:42:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/4A18E5540FB9CFE07A95EDF89BAF7CE978E94258.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:22:b5:01:bc:4a:2e:2e:3b:d9:3c:73:7c:cf:46:52:e9:94: e2:7d:39:63:cb:64:1b:d7:05:9c:7c:7c:90:af:b7:cc:ff:81: 5a:a2:2b:9b:d3:94:47:a9:e1:a0:4e:8a:90:eb:87:7c:fd:b8: 80:ac:d9:63:8e:7f:e5:b9:5d:59:bd:0f:a1:bc:a0:fd:b1:5d: 29:15:2e:65:39:47:b3:9d:36:79:1f:20:d7:28:98:2b:de:67: 17:b4:38:99:3e:46:cc:3d:d6:7c:7a:28:34:a6:48:64:d3:26: 0e:38:d3:63:5f:96:43:c6:2d:78:fd:4d:d5:01:8b:c0:4a:8b: a1:fa:0b:67:00:12:40:03:fb:f2:a4:e3:90:f4:19:ee:a0:91: 04:fd:4a:e5:9d:b8:dc:ae:e7:ef:57:6c:30:ee:30:8c:28:f4: 90:23:14:29:1a:15:2d:46:b4:04:bf:78:bf:74:d7:08:c3:c3: a7:75:59:0b:db:e1:e6:31:44:1b:76:76:53:b3:a6:81:98:d5: 0d:9a:69:03:1f:ef:9d:f2:ee:38:28:e9:06:1f:8c:fc:c3:83: e8:11:15:4d:34:e0:85:b1:c0:e0:d9:74:59:3e:3f:8f:e9:06: 04:d9:03:3f:1f:ff:e2:e9:10:90:35:97:e6:4e:f5:6f:5c:82: c8:e9:b8:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUII14dO5HhT8HZQ36NaynQYZfjYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3 OEU5NDI1ODAeFw0yNjA5MTYyMDM5MzZaFw0yNjA5MTgwMDQwMzZaMDMxMTAvBgNV BAMTKDY2OTlGRUJFOEE1Qjg2RjI2QTBCMDA4ODJGNTIzODRFNEEzMTdFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgzj9gF47cwR3i5g2EKFzofaN BTdpIWZhqbd8qXkXV4wlCZAOg6qEsODklQ5CG7l/ttaEa2Bn+p4zD6T8j2G0gXBO q5fZha9Xei72m60RbYN74RvMmuIFotxaoTGidSc/C2c9wCpdV4z8JwkBzS+1g35D L0QbVGz2cMao41hcsyvupKJpqDGNp0wGjDXaRcJkAYcOg6Ax7LAsdl24eASD5jcm GH72Pe8mPhpg+6PE/W7zIBHlWxdkD7L1ITYGRA3858VEG438KC3a2+TDPeiHP13K b9MhSozBmE9yjRxpYsacqziOwumiE3sgyEIwx0+LDWV9UucChK5v7Jk9RP7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpn+vopbhvJqCwCIL1I4TkoxfgwwHwYDVR0j BBgwFoAUShjlVA+5z+B6le34m6986XjpQlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlmYzk5NmYtNzJjYS00ZDZiLWEwZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQw RkI5Q0ZFMDdBOTVFREY4OUJBRjdDRTk3OEU5NDI1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTE4RTU1NDBGQjlDRkUwN0E5NUVERjg5QkFGN0NFOTc4RTk0 MjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvNEExOEU1NTQwRkI5Q0ZFMDdBOTVFREY4OUJBRjdD RTk3OEU5NDI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsitQG8Si4uO9k8c3zPRlLplOJ9OWPLZBvX BZx8fJCvt8z/gVqiK5vTlEep4aBOipDrh3z9uICs2WOOf+W5XVm9D6G8oP2xXSkV LmU5R7OdNnkfINcomCveZxe0OJk+Rsw91nx6KDSmSGTTJg4402NflkPGLXj9TdUB i8BKi6H6C2cAEkAD+/Kk45D0Ge6gkQT9SuWduNyu5+9XbDDuMIwo9JAjFCkaFS1G tAS/eL901wjDw6d1WQvb4eYxRBt2dlOzpoGY1Q2aaQMf753y7jgo6QYfjPzDg+gR FU004IWxwODZdFk+P4/pBgTZAz8f/+LpEJA1l+ZO9W9cgsjpuFE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:36 2026 by rpki-client