$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft File: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft (raw, json) Hash identifier: Aweb8YAVs13JENhTOA+oq7rq1aaPDMAUK87kn8oi96I= Subject key identifier: 99:F7:96:C3:79:B9:D2:F3:2A:A4:79:6D:52:F8:5C:52:CB:C4:82:98 Authority key identifier: 4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F Certificate issuer: /CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Certificate serial: 01D37F457085F165393676824F2D88FE00A74344 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:08:50 +0000 Manifest this update: Thu 17 Sep 2026 00:03:50 +0000 Manifest next update: Fri 18 Sep 2026 00:12:50 +0000 Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: uBR3IGblPNZJ3jWpF0OXwKYD/CzwZlm+xMvRiWr2v+Q=) 2: 4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl (hash: MXBZJjchuQ+lblE5dMvmyyykXwGbnB0rI+yKjfL357A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d3:7f:45:70:85:f1:65:39:36:76:82:4f:2d:88:fe:00:a7:43:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F Validity Not Before: Sep 17 00:03:50 2026 GMT Not After : Sep 18 00:12:50 2026 GMT Subject: CN=99F796C379B9D2F32AA4796D52F85C52CBC48298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:02:1c:73:b6:56:63:73:c1:76:cf:58:23: cb:15:b6:49:02:1c:af:af:08:f2:d6:6e:77:28:af: e6:44:33:cd:00:ef:61:b1:3a:2a:db:ba:e6:c8:2b: 81:d2:e3:e4:30:29:64:33:0d:49:5b:41:ac:28:d5: 37:ed:2f:7a:98:99:e4:cd:72:4e:b8:c1:55:28:7f: c9:7d:f3:a0:8c:33:87:d3:49:79:37:69:5e:c4:ae: 34:f1:36:f3:93:85:87:2f:ba:9e:c0:67:c2:af:22: e9:77:33:ba:1f:87:06:3b:2b:ec:83:98:91:07:0f: 76:2a:18:e7:b5:a9:5b:a7:08:80:a9:37:12:f8:73: 82:c9:5b:f5:d4:75:73:36:d3:aa:20:f4:4c:5b:ec: 00:ed:ef:39:4b:d7:2f:aa:de:8f:7f:ee:ff:61:96: 81:d6:d9:49:f7:74:43:bd:7a:42:b7:35:c6:d9:b3: 36:7d:0e:c1:04:a3:80:44:4d:65:1e:01:7f:28:5f: 8f:19:6d:1f:4f:d2:5f:32:09:70:50:a4:d3:05:11: 11:b1:f9:63:33:7e:5a:d1:0d:f9:05:6d:aa:bd:18: 8b:08:c9:2d:a8:36:cc:e2:a4:32:ec:6d:ee:ea:a4: 59:f2:78:b9:43:d1:87:46:a9:b4:7d:fb:7d:e9:b7: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:96:C3:79:B9:D2:F3:2A:A4:79:6D:52:F8:5C:52:CB:C4:82:98 X509v3 Authority Key Identifier: keyid:4F:9D:EF:EA:18:F9:7C:95:D8:6B:C7:B3:9D:B7:D8:00:C1:F1:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/4F9DEFEA18F97C95D86BC7B39DB7D800C1F1920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0d:87:c3:e5:99:db:aa:32:67:67:48:45:d6:cf:77:56:c3: 41:b9:9a:3e:3a:3a:b1:c0:21:33:1a:3b:1b:bc:13:9d:29:b0: 2a:0a:87:ea:f7:c6:57:0f:77:fa:43:43:49:0d:5d:04:46:59: a4:ae:ea:b7:0a:86:0c:5a:9b:1a:58:42:d7:6a:db:f9:2d:be: c3:08:0b:d4:1a:b3:aa:be:ed:54:2f:6d:1c:e4:70:5f:be:02: 10:49:e1:1c:33:46:49:6d:b8:72:5c:7d:3a:3e:0e:f3:40:65: ee:1d:23:a0:d7:d9:7e:a7:4a:28:d7:30:e9:f5:a3:76:58:54: 6f:0c:ed:eb:5a:17:8f:1b:2c:99:d3:5c:a8:ab:62:59:0e:70: 2b:2a:99:99:9b:26:b4:9d:d5:cb:7a:52:ec:e4:18:8f:1e:0b: 23:26:82:4e:77:fd:cf:62:89:3d:e2:bc:1b:ac:31:e9:a3:e1: 29:b4:8c:bb:ef:2f:23:f4:5c:c6:e1:23:59:4e:ae:5f:cb:70: e5:42:ed:6a:7d:aa:26:da:45:2b:6a:9e:a2:fe:e6:cb:a6:81: 40:d0:aa:bf:bc:26:45:26:00:a3:3c:58:3f:82:f4:8b:50:96: 36:8f:32:fe:d4:f0:dd:de:5f:1a:4c:1f:ac:1e:9a:21:0c:6a: 3d:0a:da:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdN/RXCF8WU5NnaCTy2I/gCnQ0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBD MUYxOTIwRjAeFw0yNjA5MTcwMDAzNTBaFw0yNjA5MTgwMDEyNTBaMDMxMTAvBgNV BAMTKDk5Rjc5NkMzNzlCOUQyRjMyQUE0Nzk2RDUyRjg1QzUyQ0JDNDgyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgQIcc7ZWY3PBds9YI8sVtkkC HK+vCPLWbncor+ZEM80A72GxOirbuubIK4HS4+QwKWQzDUlbQawo1TftL3qYmeTN ck64wVUof8l986CMM4fTSXk3aV7ErjTxNvOThYcvup7AZ8KvIul3M7ofhwY7K+yD mJEHD3YqGOe1qVunCICpNxL4c4LJW/XUdXM206og9Exb7ADt7zlL1y+q3o9/7v9h loHW2Un3dEO9ekK3NcbZszZ9DsEEo4BETWUeAX8oX48ZbR9P0l8yCXBQpNMFERGx +WMzflrRDfkFbaq9GIsIyS2oNszipDLsbe7qpFnyeLlD0YdGqbR9+33ptz83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfeWw3m50vMqpHltUvhcUsvEgpgwHwYDVR0j BBgwFoAUT53v6hj5fJXYa8eznbfYAMHxkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE4ZjA0MzUtNGQzOC00N2VmLTg1MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUEx OEY5N0M5NUQ4NkJDN0IzOURCN0Q4MDBDMUYxOTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjlERUZFQTE4Rjk3Qzk1RDg2QkM3QjM5REI3RDgwMEMxRjE5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvNEY5REVGRUExOEY5N0M5NUQ4NkJDN0IzOURCN0Q4 MDBDMUYxOTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAANh8PlmduqMmdnSEXWz3dWw0G5mj46OrHA ITMaOxu8E50psCoKh+r3xlcPd/pDQ0kNXQRGWaSu6rcKhgxamxpYQtdq2/ktvsMI C9Qas6q+7VQvbRzkcF++AhBJ4RwzRkltuHJcfTo+DvNAZe4dI6DX2X6nSijXMOn1 o3ZYVG8M7etaF48bLJnTXKirYlkOcCsqmZmbJrSd1ct6UuzkGI8eCyMmgk53/c9i iT3ivBusMemj4Sm0jLvvLyP0XMbhI1lOrl/LcOVC7Wp9qibaRStqnqL+5sumgUDQ qr+8JkUmAKM8WD+C9ItQljaPMv7U8N3eXxpMH6wemiEMaj0K2gk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:32 2026 by rpki-client