$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: Kj/VawR5kyVihNQGbdDDCEP8k5SFYs/nhRyGkJDXv6Y= Subject key identifier: CD:C5:DF:FA:B4:33:42:06:A6:8A:34:9B:BC:79:4C:0F:35:3D:0A:44 Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 4BA0A892C481A80D9A7AE183EA33658E1DDF06E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:32:10 +0000 Manifest this update: Wed 16 Sep 2026 18:27:10 +0000 Manifest next update: Thu 17 Sep 2026 21:02:10 +0000 Files and hashes: 1: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: oiahU5AB/mRgaWpIWTlSV37A5vBrrBhVSrHLTPn9LAo=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a0:a8:92:c4:81:a8:0d:9a:7a:e1:83:ea:33:65:8e:1d:df:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: Sep 16 18:27:10 2026 GMT Not After : Sep 17 21:02:10 2026 GMT Subject: CN=CDC5DFFAB4334206A68A349BBC794C0F353D0A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:d4:0b:35:29:85:7b:1e:07:72:a6:58:0d: ae:f4:9e:3e:3a:c0:65:6a:47:01:f1:18:c0:cf:16: d4:23:6d:b0:4e:8b:10:7f:3e:a5:68:1c:fc:73:ac: 99:40:ff:1f:53:5d:f8:07:15:06:55:5c:82:db:2f: 54:a7:28:7b:89:a5:19:6c:b0:35:8a:a9:0e:20:54: 68:e7:fb:cc:48:d6:22:8f:51:7e:5c:14:70:46:47: 07:c5:61:82:c8:48:89:63:7c:13:55:f3:ee:64:04: b3:4c:9d:4c:1b:07:e5:45:8f:04:1e:f0:07:94:f3: 30:d4:99:ba:c9:9a:4d:39:0f:01:54:75:34:5f:06: b7:6e:e5:26:7d:e7:89:b4:ec:07:d1:2c:0f:b8:73: 78:0b:67:58:ba:be:33:c4:1f:8b:cb:07:14:dd:39: 12:d9:fd:eb:e8:34:1d:df:9b:6c:bd:3b:dc:42:c9: cc:9d:45:db:0b:4c:d4:ea:2a:55:36:3e:00:6a:6b: 46:b4:97:92:1f:38:af:7a:40:be:35:d2:15:89:94: 7f:d7:3b:8c:54:99:51:52:2b:0f:43:b2:ed:8f:bf: db:0d:f9:4a:fb:27:09:37:73:65:d0:9c:8e:8a:4d: 85:a7:74:0a:09:3f:8a:c2:92:f8:f2:70:49:ce:27: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C5:DF:FA:B4:33:42:06:A6:8A:34:9B:BC:79:4C:0F:35:3D:0A:44 X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1d:e3:16:94:a5:68:dd:bb:f4:5c:6b:48:80:70:05:2f:d8: 32:3f:96:e8:d5:f3:37:a9:35:73:cf:aa:db:d5:87:fb:97:26: 24:9f:91:9a:c8:ca:9c:73:90:4b:6a:84:d8:07:5a:cc:b6:2a: d1:a0:33:1b:0a:48:e2:7c:64:d7:be:57:55:36:99:76:1f:d3: 2c:b8:5e:74:9e:eb:11:1c:4b:4e:9b:70:a9:42:8f:e8:91:6d: 8d:7c:37:c7:14:55:80:a4:9c:ce:dd:bc:74:bd:68:af:21:9d: e9:73:47:ca:70:88:07:3e:32:64:76:e8:94:c6:32:2e:83:e9: d0:09:67:00:62:99:06:2e:66:e8:8f:13:68:a0:a0:d1:46:50: 69:0a:47:a1:42:55:77:8c:ba:72:83:0e:d5:b9:7c:36:68:fd: e2:50:3c:98:e4:75:f0:b0:4d:7c:ce:ee:1d:93:dc:d2:d5:28: e4:01:31:41:03:e9:69:e9:29:40:01:73:7d:d1:49:a0:eb:18: 81:1c:fc:f7:c5:47:0c:7e:ba:d7:95:b6:53:5e:24:9b:3c:ad: 8a:7c:2b:f5:16:e0:f7:94:78:a2:d8:2a:da:43:67:da:56:00: ce:89:df:39:42:da:d7:30:c8:6c:0b:db:66:9a:14:21:86:07: 28:ac:4a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6CoksSBqA2aeuGD6jNljh3fBuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA5MTYxODI3MTBaFw0yNjA5MTcyMTAyMTBaMDMxMTAvBgNV BAMTKENEQzVERkZBQjQzMzQyMDZBNjhBMzQ5QkJDNzk0QzBGMzUzRDBBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM7tQLNSmFex4HcqZYDa70nj46 wGVqRwHxGMDPFtQjbbBOixB/PqVoHPxzrJlA/x9TXfgHFQZVXILbL1SnKHuJpRls sDWKqQ4gVGjn+8xI1iKPUX5cFHBGRwfFYYLISIljfBNV8+5kBLNMnUwbB+VFjwQe 8AeU8zDUmbrJmk05DwFUdTRfBrdu5SZ954m07AfRLA+4c3gLZ1i6vjPEH4vLBxTd ORLZ/evoNB3fm2y9O9xCycydRdsLTNTqKlU2PgBqa0a0l5IfOK96QL410hWJlH/X O4xUmVFSKw9Dsu2Pv9sN+Ur7Jwk3c2XQnI6KTYWndAoJP4rCkvjycEnOJ0p/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcXf+rQzQgamijSbvHlMDzU9CkQwHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAd4xaUpWjdu/Rca0iAcAUv2DI/lujV8zep NXPPqtvVh/uXJiSfkZrIypxzkEtqhNgHWsy2KtGgMxsKSOJ8ZNe+V1U2mXYf0yy4 XnSe6xEcS06bcKlCj+iRbY18N8cUVYCknM7dvHS9aK8hnelzR8pwiAc+MmR26JTG Mi6D6dAJZwBimQYuZuiPE2igoNFGUGkKR6FCVXeMunKDDtW5fDZo/eJQPJjkdfCw TXzO7h2T3NLVKOQBMUED6WnpKUABc33RSaDrGIEc/PfFRwx+uteVtlNeJJs8rYp8 K/UW4PeUeKLYKtpDZ9pWAM6J3zlC2tcwyGwL22aaFCGGByisSpM= -----END CERTIFICATE-----Generated at Thu Sep 17 08:34:46 2026 by rpki-client