$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft File: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft (raw, json) Hash identifier: 7CPSq3CDbNVlaMMQRJchhX7tY1fv7aYIs1r5vw7MSpY= Subject key identifier: D7:96:30:13:A3:69:21:79:97:5B:1D:58:04:76:61:21:6A:2B:E6:DC Authority key identifier: 4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D Certificate issuer: /CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Certificate serial: 6F03247C5DE261FBB603D3C3C2825CEF5BA295B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 07:53:11 +0000 Manifest this update: Fri 18 Sep 2026 07:48:11 +0000 Manifest next update: Sat 19 Sep 2026 11:44:11 +0000 Files and hashes: 1: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: Zw4QmhGoJFSvupLpsnKhkJ+LH7pcQWGQYF42nA48zgM=) 2: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 1TQlSvM9bM0BPJInGgS17LfSaiZ9EQP3P7+JjRlSEnE=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: 6Yw4zWSLXh3EP0vz7URtYM2sAyDkZxqfeg6Oy1ZSbCU=) 4: 4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl (hash: fwJhXZ+cYCNsVd60IvhBytJxfJlexAugkSTOOoyShWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 07:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:03:24:7c:5d:e2:61:fb:b6:03:d3:c3:c2:82:5c:ef:5b:a2:95:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7477DABC7930FE1809FECAC0EA751E0271CB4D Validity Not Before: Sep 18 07:48:11 2026 GMT Not After : Sep 19 11:44:11 2026 GMT Subject: CN=D7963013A3692179975B1D58047661216A2BE6DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:af:58:ba:62:59:a3:72:2a:d8:e3:3d:fd: 43:35:ef:24:23:bc:06:2a:9c:ec:70:89:6e:a6:e4: a3:0b:7f:11:75:14:01:3b:45:ed:59:32:39:49:c7: 4d:f2:47:5d:81:4e:22:4b:1e:07:62:2e:df:f5:1c: ba:18:86:6e:aa:97:4a:79:f2:4b:78:52:f8:ec:0e: 2d:e9:01:00:de:ce:14:71:f3:c1:ba:3a:66:40:7a: 8d:98:56:aa:57:35:33:77:24:d6:0c:84:c1:08:cd: 8f:12:35:79:bb:53:0d:97:17:39:6d:dd:e0:9f:2b: 31:d6:9a:bb:54:b1:51:ea:50:6f:a1:35:a8:ec:7a: b2:b0:c3:1c:43:00:31:f0:92:b4:45:04:75:85:b3: 65:65:62:c3:7c:ba:67:9a:2e:53:5b:e2:01:7f:e2: 3e:b7:6d:09:bc:51:ca:bd:be:0e:8b:ac:64:52:47: e6:f5:27:b9:ee:13:e4:c4:dc:ff:19:82:b7:ea:23: 04:4b:1f:d9:cf:fc:30:be:25:5d:eb:ff:08:15:30: 6a:96:f0:ab:cd:d5:f3:88:75:85:20:14:6d:f5:01: 52:54:6c:45:9f:73:a8:e3:1b:eb:9b:ef:42:26:6c: 10:3a:49:61:96:ac:16:d1:c1:56:4e:a1:30:c7:86: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:96:30:13:A3:69:21:79:97:5B:1D:58:04:76:61:21:6A:2B:E6:DC X509v3 Authority Key Identifier: keyid:4E:74:77:DA:BC:79:30:FE:18:09:FE:CA:C0:EA:75:1E:02:71:CB:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/4E7477DABC7930FE1809FECAC0EA751E0271CB4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ac:78:1a:b2:9d:53:61:68:84:13:80:6a:b3:88:be:d3:c1: ae:20:aa:7e:05:ea:62:26:9a:ef:e0:6b:c4:5b:4b:61:38:63: e7:05:21:02:83:16:fe:5e:17:2b:8d:92:e4:76:1a:06:08:66: 98:cd:4c:d9:d2:af:a1:b2:0d:ed:ce:a8:21:6b:7d:aa:89:47: 1c:6a:e2:29:6c:f0:e5:a1:bd:06:a5:a0:de:07:f4:e7:4c:a9: 61:c3:e2:99:99:e7:92:15:47:da:35:af:63:6c:c7:16:a2:71: 23:96:b0:29:37:7d:1b:cd:ce:8f:8e:3d:df:08:c0:bd:10:87: b4:de:93:d3:bd:6e:8f:9d:c2:9e:17:82:e5:6f:38:7a:cf:bb: e1:b1:79:66:2e:1f:db:6b:a3:bf:7a:12:e9:56:04:77:43:ca: 5c:64:ae:ee:cc:d5:00:cb:fd:06:ef:e4:15:b1:83:45:af:53: f7:e8:10:bf:42:93:ce:ea:15:b8:53:ac:fb:34:bb:82:8a:b9: 13:61:0d:ba:a8:99:e7:b3:b7:c0:9a:24:68:ac:a2:00:cb:31: 21:a1:67:d2:05:8e:bc:f3:3e:54:eb:71:32:1a:d9:dd:69:f5: a5:78:84:4e:4b:95:50:d1:7f:a6:6c:c9:ae:ad:8d:b1:38:9f: 4d:0a:e4:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwMkfF3iYfu2A9PDwoJc71uilbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUw MjcxQ0I0RDAeFw0yNjA5MTgwNzQ4MTFaFw0yNjA5MTkxMTQ0MTFaMDMxMTAvBgNV BAMTKEQ3OTYzMDEzQTM2OTIxNzk5NzVCMUQ1ODA0NzY2MTIxNkEyQkU2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mK9YumJZo3Iq2OM9/UM17yQj vAYqnOxwiW6m5KMLfxF1FAE7Re1ZMjlJx03yR12BTiJLHgdiLt/1HLoYhm6ql0p5 8kt4UvjsDi3pAQDezhRx88G6OmZAeo2YVqpXNTN3JNYMhMEIzY8SNXm7Uw2XFzlt 3eCfKzHWmrtUsVHqUG+hNajserKwwxxDADHwkrRFBHWFs2VlYsN8umeaLlNb4gF/ 4j63bQm8Ucq9vg6LrGRSR+b1J7nuE+TE3P8ZgrfqIwRLH9nP/DC+JV3r/wgVMGqW 8KvN1fOIdYUgFG31AVJUbEWfc6jjG+ub70ImbBA6SWGWrBbRwVZOoTDHhvwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15YwE6NpIXmXWx1YBHZhIWor5twwHwYDVR0j BBgwFoAUTnR32rx5MP4YCf7KwOp1HgJxy00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjOGNkYTUtMzQ4My00MmIwLWIzODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFC Qzc5MzBGRTE4MDlGRUNBQzBFQTc1MUUwMjcxQ0I0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTc0NzdEQUJDNzkzMEZFMTgwOUZFQ0FDMEVBNzUxRTAyNzFD QjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvNEU3NDc3REFCQzc5MzBGRTE4MDlGRUNBQzBFQTc1 MUUwMjcxQ0I0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGseBqynVNhaIQTgGqziL7Twa4gqn4F6mIm mu/ga8RbS2E4Y+cFIQKDFv5eFyuNkuR2GgYIZpjNTNnSr6GyDe3OqCFrfaqJRxxq 4ils8OWhvQaloN4H9OdMqWHD4pmZ55IVR9o1r2NsxxaicSOWsCk3fRvNzo+OPd8I wL0Qh7Tek9O9bo+dwp4XguVvOHrPu+GxeWYuH9tro796EulWBHdDylxkru7M1QDL /Qbv5BWxg0WvU/foEL9Ck87qFbhTrPs0u4KKuRNhDbqomeezt8CaJGisogDLMSGh Z9IFjrzzPlTrcTIa2d1p9aV4hE5LlVDRf6Zsya6tjbE4n00K5MA= -----END CERTIFICATE-----Generated at Fri Sep 18 15:07:00 2026 by rpki-client