$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: zGYRuK1gtJPOVXxO5axKOET8PRby35pKeHFp5GTvJE4= Subject key identifier: 18:B5:E0:48:4C:A1:FA:2D:6F:68:D8:8C:9A:E1:DA:AC:45:A2:AD:EE Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 5086B16A4C47B3E7DD0B4D3E77CDC73B972BF09E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:20:22 +0000 Manifest this update: Wed 16 Sep 2026 21:15:22 +0000 Manifest next update: Thu 17 Sep 2026 22:19:22 +0000 Files and hashes: 1: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: NSUPnZ6eDk0ufpg8MFGF7metvTYtHyBI7MSvSem8vL4=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:86:b1:6a:4c:47:b3:e7:dd:0b:4d:3e:77:cd:c7:3b:97:2b:f0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Sep 16 21:15:22 2026 GMT Not After : Sep 17 22:19:22 2026 GMT Subject: CN=18B5E0484CA1FA2D6F68D88C9AE1DAAC45A2ADEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:67:9f:6d:e9:32:ed:4b:82:87:3c:70:f6: 93:f6:f8:60:85:f5:1f:7f:41:8d:3c:57:7b:e9:80: c3:fe:30:ca:8e:0e:d8:1f:d6:94:ac:01:8c:e5:45: ab:c3:e0:16:60:68:33:1d:1a:26:e6:73:41:2f:52: 84:76:85:d0:1b:19:db:f2:87:54:47:7a:3f:b8:5b: 70:30:14:8e:fd:a0:00:f7:64:1e:06:51:c0:06:a2: eb:6c:ba:83:f4:36:4f:1d:77:75:f8:4a:aa:82:cb: 17:fa:5f:14:28:1b:06:48:89:d0:18:23:74:5d:cc: 97:2a:9e:83:2d:18:e8:16:f1:ac:3c:5d:04:c5:25: 9f:75:8e:63:d0:f7:c7:be:51:c9:86:0a:40:24:70: 8f:96:ee:17:57:ec:05:41:1e:29:6e:75:e8:a2:ff: a5:39:6c:83:ce:03:c8:64:28:3d:6c:73:aa:89:26: 30:52:91:c8:c1:13:3d:84:b7:f2:eb:26:bc:c3:3b: bd:2b:3b:8d:52:bb:70:98:c6:12:ee:83:ac:2e:1f: 2c:82:84:4e:68:24:8f:92:01:be:34:39:d6:6a:56: 06:fe:46:99:42:c5:46:7a:b1:66:db:79:c1:20:9d: f2:73:09:f7:49:78:f0:13:6a:03:75:4c:06:7f:9a: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:E0:48:4C:A1:FA:2D:6F:68:D8:8C:9A:E1:DA:AC:45:A2:AD:EE X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:31:67:56:28:8e:7f:f1:11:0e:79:77:6d:1e:1a:d4:8e:ec: 3c:9d:f8:27:00:e6:33:b7:6e:e1:d6:83:74:b5:05:f7:4c:0d: 4c:ab:c7:61:ae:c6:2f:b1:31:4b:96:02:b7:7e:29:f6:19:cf: db:a0:b7:c6:81:58:95:66:39:c8:5e:4c:92:48:ff:8a:e2:f4: 19:b1:e4:5d:79:f3:e4:73:f3:d9:e2:b1:22:7d:f1:b3:3d:62: 1d:79:3a:69:d6:32:fc:f7:f3:59:e0:be:ba:fd:87:83:ae:ec: 74:97:cc:24:1d:89:86:4c:5c:a9:b0:8f:d7:03:aa:08:14:5d: 26:48:b1:07:62:c1:5a:34:19:45:a5:71:73:5a:be:fb:aa:e9: 6a:93:d9:e0:bf:6b:fe:e1:f9:ce:75:24:5b:ee:ee:99:7a:d5: cc:7c:1c:1b:f5:03:e4:5a:4c:5c:68:23:f3:c3:0a:b7:e0:f2: 9f:31:9f:d8:50:90:04:f3:7b:90:18:eb:6e:eb:31:07:4f:dc: 27:85:e7:b8:4e:5e:8d:da:21:a0:9c:69:d9:fe:88:72:61:11: 05:26:86:63:80:af:5e:b1:d3:28:3c:b2:99:e7:08:1a:6f:32: 7c:60:31:35:87:db:b7:29:b4:1c:0b:1a:54:67:29:52:c4:98: c0:70:99:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIaxakxHs+fdC00+d83HO5cr8J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA5MTYyMTE1MjJaFw0yNjA5MTcyMjE5MjJaMDMxMTAvBgNV BAMTKDE4QjVFMDQ4NENBMUZBMkQ2RjY4RDg4QzlBRTFEQUFDNDVBMkFERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWWefbeky7UuChzxw9pP2+GCF 9R9/QY08V3vpgMP+MMqODtgf1pSsAYzlRavD4BZgaDMdGibmc0EvUoR2hdAbGdvy h1RHej+4W3AwFI79oAD3ZB4GUcAGoutsuoP0Nk8dd3X4SqqCyxf6XxQoGwZIidAY I3RdzJcqnoMtGOgW8aw8XQTFJZ91jmPQ98e+UcmGCkAkcI+W7hdX7AVBHiludeii /6U5bIPOA8hkKD1sc6qJJjBSkcjBEz2Et/LrJrzDO70rO41Su3CYxhLug6wuHyyC hE5oJI+SAb40OdZqVgb+RplCxUZ6sWbbecEgnfJzCfdJePATagN1TAZ/mn2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGLXgSEyh+i1vaNiMmuHarEWire4wHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUxZ1Yojn/xEQ55d20eGtSO7Dyd+CcA5jO3 buHWg3S1BfdMDUyrx2Guxi+xMUuWArd+KfYZz9ugt8aBWJVmOcheTJJI/4ri9Bmx 5F158+Rz89nisSJ98bM9Yh15OmnWMvz381ngvrr9h4Ou7HSXzCQdiYZMXKmwj9cD qggUXSZIsQdiwVo0GUWlcXNavvuq6WqT2eC/a/7h+c51JFvu7pl61cx8HBv1A+Ra TFxoI/PDCrfg8p8xn9hQkATze5AY627rMQdP3CeF57hOXo3aIaCcadn+iHJhEQUm hmOAr16x0yg8spnnCBpvMnxgMTWH27cptBwLGlRnKVLEmMBwmcA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:54:32 2026 by rpki-client