$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: ATs8MY7+E0PyJT4nPRGr/h/T9cWxcHWFB1SdzvtPcgQ= Subject key identifier: 57:8D:E2:BD:AA:91:6C:73:36:07:04:8F:56:C9:A8:D2:BA:1A:EF:47 Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 2A458B9E5B9D2BA191D1BF19A6EE5802323D7DC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: BA Signing time: Thu 17 Sep 2026 12:03:35 +0000 Manifest this update: Thu 17 Sep 2026 11:58:35 +0000 Manifest next update: Fri 18 Sep 2026 13:01:35 +0000 Files and hashes: 1: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: nH/17lZnauYT04+2EE2BFEiruQ+B7kkouD4QlQwPlp0=) 2: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) 3: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) 4: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 5: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:45:8b:9e:5b:9d:2b:a1:91:d1:bf:19:a6:ee:58:02:32:3d:7d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Sep 17 11:58:35 2026 GMT Not After : Sep 18 13:01:35 2026 GMT Subject: CN=578DE2BDAA916C733607048F56C9A8D2BA1AEF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:f7:c4:f3:63:9e:35:53:26:c3:ef:c1:24: 67:4d:1f:b9:ca:98:a1:01:6d:80:7a:3a:8e:6b:61: 80:e9:75:7b:aa:48:29:8a:ce:3e:9f:fd:c9:17:f5: f4:63:68:27:1d:30:0f:73:9c:df:8d:54:5e:2e:9f: 4b:72:53:b5:e8:15:97:6a:6b:1a:67:3c:dc:67:92: a0:ae:03:04:ad:ae:37:df:c0:5e:40:57:75:bc:d9: 2c:93:cb:66:7e:96:23:05:01:87:9d:95:95:eb:da: 56:27:15:69:da:2a:6f:d6:8f:a1:ca:b1:9e:19:7b: c5:25:be:ee:b6:37:60:b8:0a:c1:ca:13:ce:19:1a: c5:8d:be:93:6a:16:de:5c:e9:86:68:5b:88:da:3c: 92:3e:86:98:78:8f:d8:cc:e3:d9:5b:c1:03:94:7d: 4f:ab:92:d9:d7:46:2f:f5:29:97:81:75:1e:d4:0b: 65:ba:3f:35:3c:e5:3b:e4:ee:90:35:1a:b7:2c:7d: 84:e5:93:d1:c3:b4:c7:71:e4:6e:2e:ba:84:ff:39: 5c:a6:3e:a2:d0:26:6e:54:e9:1f:33:c6:58:f0:f1: c4:14:08:8b:7c:c4:8d:e0:82:09:f4:ec:19:da:a4: 30:26:91:5c:1f:2b:55:37:12:13:a0:a8:13:e6:81: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8D:E2:BD:AA:91:6C:73:36:07:04:8F:56:C9:A8:D2:BA:1A:EF:47 X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:25:ed:53:8a:8d:92:6f:f0:1d:41:f1:72:77:11:d3:01:4d: 3d:b7:f5:71:b8:a6:f9:b4:75:af:2b:8b:07:e3:a9:9c:f7:e3: c6:4c:2e:18:29:76:90:23:aa:70:38:3a:65:0f:f8:6e:55:7d: 9e:ed:90:87:93:22:77:92:02:fa:67:ec:d9:40:93:a3:07:4d: 6e:2f:dc:9d:1f:69:82:a9:10:28:42:e9:b7:1c:60:c5:6c:2b: c1:53:10:14:d8:37:c5:5d:ca:34:43:51:5c:e8:8f:69:a7:c3: f0:cc:ef:c0:65:98:0e:81:47:73:b3:d5:21:87:65:86:3b:e5: 24:4c:f2:3d:9e:c1:c3:60:bc:3d:20:b3:76:80:19:fa:8c:b8: 5d:a5:af:ea:90:32:e1:75:62:22:13:48:40:ed:bf:41:b4:98: c7:3e:28:cb:6a:07:bb:41:b9:6e:87:0f:31:b5:6e:e9:ee:40: ac:82:73:db:ea:e4:d1:c7:4a:1b:56:14:2d:ec:79:91:76:a3: 95:57:f1:37:1d:24:58:b8:b1:32:5c:26:56:9e:12:15:02:78: be:be:7a:9d:70:40:8e:38:a6:28:8e:4b:e1:74:a6:66:ac:89: 70:6a:35:ea:62:84:d3:0f:6b:b9:b7:69:fe:78:5d:30:27:75: f7:9c:50:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkWLnludK6GR0b8Zpu5YAjI9fcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjA5MTcxMTU4MzVaFw0yNjA5MTgxMzAxMzVaMDMxMTAvBgNV BAMTKDU3OERFMkJEQUE5MTZDNzMzNjA3MDQ4RjU2QzlBOEQyQkExQUVGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2/fE82OeNVMmw+/BJGdNH7nK mKEBbYB6Oo5rYYDpdXuqSCmKzj6f/ckX9fRjaCcdMA9znN+NVF4un0tyU7XoFZdq axpnPNxnkqCuAwStrjffwF5AV3W82SyTy2Z+liMFAYedlZXr2lYnFWnaKm/Wj6HK sZ4Ze8Ulvu62N2C4CsHKE84ZGsWNvpNqFt5c6YZoW4jaPJI+hph4j9jM49lbwQOU fU+rktnXRi/1KZeBdR7UC2W6PzU85Tvk7pA1GrcsfYTlk9HDtMdx5G4uuoT/OVym PqLQJm5U6R8zxljw8cQUCIt8xI3gggn07BnapDAmkVwfK1U3EhOgqBPmgYQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV43ivaqRbHM2BwSPVsmo0roa70cwHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQl7VOKjZJv8B1B8XJ3EdMBTT239XG4pvm0 da8riwfjqZz348ZMLhgpdpAjqnA4OmUP+G5VfZ7tkIeTIneSAvpn7NlAk6MHTW4v 3J0faYKpEChC6bccYMVsK8FTEBTYN8VdyjRDUVzoj2mnw/DM78BlmA6BR3Oz1SGH ZYY75SRM8j2ewcNgvD0gs3aAGfqMuF2lr+qQMuF1YiITSEDtv0G0mMc+KMtqB7tB uW6HDzG1bunuQKyCc9vq5NHHShtWFC3seZF2o5VX8TcdJFi4sTJcJlaeEhUCeL6+ ep1wQI44piiOS+F0pmasiXBqNepihNMPa7m3af54XTAndfecUCY= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:54 2026 by rpki-client