$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: SUU2/TSZa2SizuRzfefSwi5fsLqPIULw4Ih7VdiZV5o= Subject key identifier: 61:46:BC:17:00:CC:7D:8E:1B:A5:DB:7C:FA:0B:06:1A:35:1D:C2:FF Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 20D0F28DD386D208111A60FC234EA46E46B57EA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:36:37 +0000 Manifest this update: Thu 17 Sep 2026 02:31:37 +0000 Manifest next update: Fri 18 Sep 2026 06:15:37 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 3: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: s5Qn5GcL8jqO0lHzpV7jpQc5GBFiGL1gem/rpxThcYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d0:f2:8d:d3:86:d2:08:11:1a:60:fc:23:4e:a4:6e:46:b5:7e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Sep 17 02:31:37 2026 GMT Not After : Sep 18 06:15:37 2026 GMT Subject: CN=6146BC1700CC7D8E1BA5DB7CFA0B061A351DC2FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:17:23:ba:47:bc:f3:2b:3d:62:89:ee:d0: 52:e1:99:57:3b:c8:1e:42:e4:9e:08:2c:cd:16:ad: 7c:b7:e4:6d:95:d4:66:d6:62:45:64:73:a9:04:a0: 10:a0:93:6d:fb:d6:a2:78:7a:2f:5a:3d:99:82:32: da:21:5e:8d:97:64:54:01:45:56:8f:f4:41:6a:12: ee:84:e2:85:51:c6:62:39:cd:a9:09:89:8d:8c:e9: 06:61:a3:28:4a:44:3c:51:9d:b0:1f:94:e0:b1:78: fe:c3:bf:a0:15:76:62:84:79:64:59:d8:45:cd:a7: 2b:5a:19:ed:8c:e4:e7:39:c5:68:3a:78:2f:93:67: 1f:bf:7c:c4:84:58:cb:a6:b8:c8:12:08:be:53:85: 41:c1:b0:f9:82:57:fe:54:4e:16:84:b6:f7:b2:02: 34:ac:e9:f5:b0:cf:37:47:4a:08:03:b1:67:af:7e: 58:8a:93:d5:bf:84:44:c1:f0:73:e4:46:cb:f4:dc: c4:8b:4d:1f:d4:30:59:cc:eb:17:ce:b7:55:c0:18: b0:b8:30:09:e0:77:0d:8a:73:87:3a:f9:d5:22:e2: c7:02:30:cc:84:7d:56:9b:31:e8:e6:60:3a:48:85: 91:6c:55:67:62:f2:22:11:53:ed:db:b7:4e:3a:18: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:46:BC:17:00:CC:7D:8E:1B:A5:DB:7C:FA:0B:06:1A:35:1D:C2:FF X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ee:e6:18:9d:e7:63:d3:b6:dd:67:08:ea:cb:ee:5d:e1:b5: 86:73:e2:d6:16:00:21:1f:3f:0c:79:2d:03:98:57:f4:08:57: c1:c5:a9:9d:c5:21:59:ef:ac:0e:09:a7:a8:87:dd:4a:f7:1a: df:f9:e7:44:b6:fd:e2:bf:61:51:83:90:87:15:9d:d0:5c:ef: 51:a7:c4:f2:9b:b0:3d:91:6a:8f:bc:be:fd:b3:9a:d6:05:bc: fd:97:95:2b:b0:e1:89:11:f2:87:29:be:33:c6:e2:5f:55:dd: e7:e0:f2:8b:67:2e:21:0e:7c:7d:a8:39:ca:b1:11:0e:fd:f4: da:77:52:16:37:dc:d1:15:3e:7f:3b:d6:a1:72:ca:c5:26:ef: 28:89:06:7d:b5:18:a7:09:63:93:c3:91:5c:ef:4e:8a:07:03: 39:53:12:28:c1:26:f4:e5:2c:bd:87:67:d9:db:d0:79:c1:d0: a8:de:89:81:3f:b0:09:1c:b3:64:fd:ea:6f:ee:36:49:8b:da: fb:90:2c:b9:e4:20:48:d6:69:60:5d:b8:ca:53:70:38:a0:61: 13:96:a1:7e:7a:c7:05:48:ea:9e:5e:22:b9:89:6f:5b:51:9b: 95:f0:52:bb:34:fb:aa:68:75:48:cd:d8:c7:f9:6e:ee:97:3f: 60:aa:44:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINDyjdOG0ggRGmD8I06kbka1fqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjA5MTcwMjMxMzdaFw0yNjA5MTgwNjE1MzdaMDMxMTAvBgNV BAMTKDYxNDZCQzE3MDBDQzdEOEUxQkE1REI3Q0ZBMEIwNjFBMzUxREMyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstRcjuke88ys9Yonu0FLhmVc7 yB5C5J4ILM0WrXy35G2V1GbWYkVkc6kEoBCgk2371qJ4ei9aPZmCMtohXo2XZFQB RVaP9EFqEu6E4oVRxmI5zakJiY2M6QZhoyhKRDxRnbAflOCxeP7Dv6AVdmKEeWRZ 2EXNpytaGe2M5Oc5xWg6eC+TZx+/fMSEWMumuMgSCL5ThUHBsPmCV/5UThaEtvey AjSs6fWwzzdHSggDsWevfliKk9W/hETB8HPkRsv03MSLTR/UMFnM6xfOt1XAGLC4 MAngdw2Kc4c6+dUi4scCMMyEfVabMejmYDpIhZFsVWdi8iIRU+3bt046GIP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUa8FwDMfY4bpdt8+gsGGjUdwv8wHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/u5hid52PTtt1nCOrL7l3htYZz4tYWACEf Pwx5LQOYV/QIV8HFqZ3FIVnvrA4Jp6iH3Ur3Gt/550S2/eK/YVGDkIcVndBc71Gn xPKbsD2Rao+8vv2zmtYFvP2XlSuw4YkR8ocpvjPG4l9V3efg8otnLiEOfH2oOcqx EQ799Np3UhY33NEVPn871qFyysUm7yiJBn21GKcJY5PDkVzvTooHAzlTEijBJvTl LL2HZ9nb0HnB0KjeiYE/sAkcs2T96m/uNkmL2vuQLLnkIEjWaWBduMpTcDigYROW oX56xwVI6p5eIrmJb1tRm5XwUrs0+6podUjN2Mf5bu6XP2CqRI0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:47:34 2026 by rpki-client