$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft File: 4DD279AECD518B9CE764AE03708B711A40048A1E.mft (raw, json) Hash identifier: YsiwGOm4nYOPAl8f642udFGDKW2LHRawRP5T1SPkhd8= Subject key identifier: AA:19:77:8C:89:2A:E8:BA:B3:B1:D8:A2:FD:F0:8A:36:A7:C4:69:03 Authority key identifier: 4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E Certificate issuer: /CN=4DD279AECD518B9CE764AE03708B711A40048A1E Certificate serial: 70220095942FFC6C71F273FF376924BCA55F4721 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 17:21:28 +0000 Manifest this update: Mon 31 Aug 2026 17:16:28 +0000 Manifest next update: Tue 01 Sep 2026 19:50:28 +0000 Files and hashes: 1: 4DD279AECD518B9CE764AE03708B711A40048A1E.crl (hash: Ntd9puggRcKQQKDjule+aiUPdbLGEcGuGjEo5m+FOs8=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: mxXusZGfsr98abkNgqk3JfvCjZTqoXMC9/o99feBr+E=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: 6Laf+3GLGNpNAkhIsFH3maUJ3BnydIt6ABswzC07SLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 19:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:22:00:95:94:2f:fc:6c:71:f2:73:ff:37:69:24:bc:a5:5f:47:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD279AECD518B9CE764AE03708B711A40048A1E Validity Not Before: Aug 31 17:16:28 2026 GMT Not After : Sep 1 19:50:28 2026 GMT Subject: CN=AA19778C892AE8BAB3B1D8A2FDF08A36A7C46903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:2a:de:e5:f1:c6:20:45:31:1d:4a:1d:c1: 02:4d:bf:95:7f:f2:c9:bd:41:e1:7a:af:df:b0:70: 15:2a:5c:23:c4:d0:c6:56:b9:36:af:b2:81:55:6b: a1:8f:89:49:bd:81:bb:68:1c:0a:a5:6d:cf:4c:ae: f2:9e:8b:d3:60:5f:aa:05:cd:2a:70:2c:c9:3e:e9: 99:bf:c0:e3:d8:db:4a:6a:eb:d7:2d:27:9c:86:ea: c5:fd:38:5b:1d:04:4a:db:ce:4c:3d:63:9e:91:a4: 25:1f:62:90:b5:10:f7:32:87:5d:4f:fe:06:5d:c1: 01:e2:95:66:77:7b:e6:30:55:54:38:e6:2a:77:d1: e4:f0:4a:71:d4:54:78:8a:0b:10:28:4b:6d:09:a4: 3d:9f:bb:86:f6:3c:e6:9c:60:ba:1e:d6:22:10:b6: c0:44:4a:33:2d:07:d3:6f:85:1f:86:95:60:9a:7c: 1e:5f:80:90:93:6e:a6:12:cc:26:cc:4d:2c:cd:80: 2c:20:5b:e9:ef:45:64:2d:97:e6:19:32:eb:28:a1: 95:e4:60:3c:50:f9:22:06:1c:b7:78:c2:d0:43:92: a1:b6:7d:0f:ae:e0:e6:af:28:6c:e0:e8:40:6c:5e: 3d:0c:7e:91:a8:2e:cd:2c:28:34:d1:d0:f9:16:f9: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:19:77:8C:89:2A:E8:BA:B3:B1:D8:A2:FD:F0:8A:36:A7:C4:69:03 X509v3 Authority Key Identifier: keyid:4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:45:e3:f4:f3:c1:04:a2:9e:2d:d2:22:78:e5:77:e6:bd:1a: dc:26:24:3e:c1:b2:77:43:2d:7c:5f:fe:60:a9:5e:71:78:ec: 8d:d3:02:5a:bf:e8:11:50:55:fd:de:22:54:55:61:14:f0:19: fd:6e:eb:e0:3d:fe:41:83:ff:07:76:91:9b:81:2e:c8:5a:a1: b1:07:3f:ba:1a:cd:17:22:61:ff:7f:25:da:72:0d:b4:2a:2a: 0f:f1:e1:b3:1c:6e:74:f7:36:8b:50:50:e7:60:79:f2:fb:0b: de:ef:1e:6c:45:fc:d5:40:25:ef:ab:2d:3d:00:e2:a2:47:6b: 05:4d:ee:4d:5c:59:9f:42:04:c8:03:6f:4f:0b:1b:67:57:2e: ca:6b:d1:6d:ec:b3:42:df:10:b0:27:4d:c6:8b:9f:82:f7:ef: db:14:22:76:dc:ab:9a:d8:57:20:52:1c:2d:e6:da:73:31:21: 01:4c:b5:54:aa:f1:1b:1c:f1:19:da:96:73:06:55:36:6a:13: a1:64:0e:2a:94:d2:f1:d9:01:4f:36:d4:3d:d9:3e:21:18:2f: 58:ce:46:76:1c:6b:d9:41:d6:31:ca:a0:09:75:57:28:0a:45: 49:75:44:b5:c9:2d:dc:60:cb:60:06:bd:75:25:4c:29:7a:74: 13:e3:c4:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCIAlZQv/Gxx8nP/N2kkvKVfRyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0 MDA0OEExRTAeFw0yNjA4MzExNzE2MjhaFw0yNjA5MDExOTUwMjhaMDMxMTAvBgNV BAMTKEFBMTk3NzhDODkyQUU4QkFCM0IxRDhBMkZERjA4QTM2QTdDNDY5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Tyre5fHGIEUxHUodwQJNv5V/ 8sm9QeF6r9+wcBUqXCPE0MZWuTavsoFVa6GPiUm9gbtoHAqlbc9MrvKei9NgX6oF zSpwLMk+6Zm/wOPY20pq69ctJ5yG6sX9OFsdBErbzkw9Y56RpCUfYpC1EPcyh11P /gZdwQHilWZ3e+YwVVQ45ip30eTwSnHUVHiKCxAoS20JpD2fu4b2POacYLoe1iIQ tsBESjMtB9NvhR+GlWCafB5fgJCTbqYSzCbMTSzNgCwgW+nvRWQtl+YZMusooZXk YDxQ+SIGHLd4wtBDkqG2fQ+u4OavKGzg6EBsXj0MfpGoLs0sKDTR0PkW+eqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhl3jIkq6Lqzsdii/fCKNqfEaQMwHwYDVR0j BBgwFoAUTdJ5rs1Ri5znZK4DcItxGkAEih4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3MTQ2NjUtYzY3MC00NTFlLWJkY2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVD RDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0MDA0OEExRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQyNzlBRUNENTE4QjlDRTc2NEFFMDM3MDhCNzExQTQwMDQ4 QTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4Qjcx MUE0MDA0OEExRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFF4/TzwQSini3SInjld+a9GtwmJD7BsndD LXxf/mCpXnF47I3TAlq/6BFQVf3eIlRVYRTwGf1u6+A9/kGD/wd2kZuBLshaobEH P7oazRciYf9/JdpyDbQqKg/x4bMcbnT3NotQUOdgefL7C97vHmxF/NVAJe+rLT0A 4qJHawVN7k1cWZ9CBMgDb08LG2dXLspr0W3ss0LfELAnTcaLn4L379sUInbcq5rY VyBSHC3m2nMxIQFMtVSq8Rsc8RnalnMGVTZqE6FkDiqU0vHZAU821D3ZPiEYL1jO RnYca9lB1jHKoAl1VygKRUl1RLXJLdxgy2AGvXUlTCl6dBPjxJY= -----END CERTIFICATE-----Generated at Tue Sep 1 13:20:21 2026 by rpki-client