$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: TPnz+tDJxdb2cLu4TVsYuLwtrefWhcRyrlExk8MJb2I= Subject key identifier: A8:79:A6:41:83:D2:A0:B9:FF:46:FC:80:11:80:A4:CF:C2:65:B9:A5 Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 14A62C8106BE83347620CB02A26C1C6E98A0EC6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 22:06:18 +0000 Manifest this update: Wed 16 Sep 2026 22:01:18 +0000 Manifest next update: Thu 17 Sep 2026 23:02:18 +0000 Files and hashes: 1: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: 03Mzbd4zUDoQjSIO8F8Qz0+iGEmRWO/H7WpebXcZTqA=) 2: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a6:2c:81:06:be:83:34:76:20:cb:02:a2:6c:1c:6e:98:a0:ec:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Sep 16 22:01:18 2026 GMT Not After : Sep 17 23:02:18 2026 GMT Subject: CN=A879A64183D2A0B9FF46FC801180A4CFC265B9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:9e:cb:54:29:80:07:35:53:a6:d8:64:00: b7:f5:64:05:6d:ac:d1:5e:b1:51:46:14:fa:93:2f: 69:ad:aa:8c:37:52:60:06:3d:eb:77:1c:30:bb:3c: dc:30:72:09:ef:bf:70:e1:67:13:ce:0f:c2:c0:bc: 25:ec:37:31:80:b8:93:db:f3:cf:c3:06:ce:1f:37: 6f:58:bf:05:d8:2c:e4:8e:ea:e2:ba:78:70:e3:10: f7:38:bb:11:17:ee:65:e3:12:2e:0d:41:22:fd:a2: a0:29:b7:42:9f:02:28:67:87:d6:45:3b:2c:18:e3: a8:8b:ee:69:7c:7a:92:d5:ee:b2:31:48:6c:7c:74: 08:6b:7b:b6:4a:68:b9:73:a0:23:5d:1a:54:8a:18: 81:fc:2f:86:69:43:57:a4:95:83:6d:e2:bf:cb:4b: 45:ee:35:47:fa:2b:a0:4f:d9:a4:5e:b2:f9:97:81: 93:42:90:eb:81:e6:68:88:d6:ce:fd:99:ba:3e:e5: d2:ce:e9:fe:3a:3a:15:09:cc:21:5f:96:8b:a6:26: 3a:45:36:1b:26:2b:8d:74:75:a1:a5:45:24:27:a6: e5:bd:1c:3c:68:6f:a7:bb:ea:e7:86:9a:90:be:99: cb:8d:f8:a3:b3:99:27:d1:69:72:ef:ec:27:8b:2a: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:79:A6:41:83:D2:A0:B9:FF:46:FC:80:11:80:A4:CF:C2:65:B9:A5 X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bc:a7:f7:04:9f:55:24:6a:22:29:5d:ab:29:68:75:f6:b4: 01:cb:8c:71:99:5f:57:5e:54:5f:ff:79:88:1c:da:a1:c1:5a: 46:31:bb:d2:bb:76:bf:67:8f:01:23:11:97:7c:52:cd:67:b2: 75:fb:f2:37:2c:00:e5:da:e2:60:35:fd:92:3a:44:66:3c:7b: 5e:e5:df:45:34:67:94:65:a7:40:74:e3:0e:94:d9:6f:fd:0f: 88:b3:19:46:fa:9e:66:33:98:7f:87:9f:10:30:d3:c0:7c:b3: 48:c7:21:5b:2f:11:0b:03:c1:de:49:68:27:89:4d:40:7c:31: 9d:b0:3a:92:0c:20:bf:d5:07:a7:1c:2e:e6:cf:e8:07:af:e8: ab:4d:4c:56:86:63:22:c6:d8:01:09:26:74:25:97:c7:8c:5e: 08:14:f4:fd:49:95:46:2a:13:08:4c:a1:65:e9:84:8b:bc:3b: cf:05:97:7f:76:75:79:1a:60:e2:c3:1e:ec:9a:d6:f7:19:8b: f7:d5:7e:1f:be:33:a9:40:ec:1a:bf:b0:85:9e:0c:0a:e5:1c: 7b:0d:80:fe:a9:a5:49:cf:8c:ce:ec:94:21:a0:f2:21:c9:57: 2f:9e:f9:12:11:e6:d0:6c:d2:72:ae:c1:28:43:29:4e:4c:db: 4d:41:d8:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKYsgQa+gzR2IMsComwcbpig7GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjA5MTYyMjAxMThaFw0yNjA5MTcyMzAyMThaMDMxMTAvBgNV BAMTKEE4NzlBNjQxODNEMkEwQjlGRjQ2RkM4MDExODBBNENGQzI2NUI5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHw57LVCmABzVTpthkALf1ZAVt rNFesVFGFPqTL2mtqow3UmAGPet3HDC7PNwwcgnvv3DhZxPOD8LAvCXsNzGAuJPb 88/DBs4fN29YvwXYLOSO6uK6eHDjEPc4uxEX7mXjEi4NQSL9oqApt0KfAihnh9ZF OywY46iL7ml8epLV7rIxSGx8dAhre7ZKaLlzoCNdGlSKGIH8L4ZpQ1eklYNt4r/L S0XuNUf6K6BP2aResvmXgZNCkOuB5miI1s79mbo+5dLO6f46OhUJzCFfloumJjpF NhsmK410daGlRSQnpuW9HDxob6e76ueGmpC+mcuN+KOzmSfRaXLv7CeLKrZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqHmmQYPSoLn/RvyAEYCkz8JluaUwHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu8p/cEn1UkaiIpXaspaHX2tAHLjHGZX1de VF//eYgc2qHBWkYxu9K7dr9njwEjEZd8Us1nsnX78jcsAOXa4mA1/ZI6RGY8e17l 30U0Z5Rlp0B04w6U2W/9D4izGUb6nmYzmH+HnxAw08B8s0jHIVsvEQsDwd5JaCeJ TUB8MZ2wOpIMIL/VB6ccLubP6Aev6KtNTFaGYyLG2AEJJnQll8eMXggU9P1JlUYq EwhMoWXphIu8O88Fl392dXkaYOLDHuya1vcZi/fVfh++M6lA7Bq/sIWeDArlHHsN gP6ppUnPjM7slCGg8iHJVy+e+RIR5tBs0nKuwShDKU5M201B2Ek= -----END CERTIFICATE-----Generated at Thu Sep 17 11:50:20 2026 by rpki-client