$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: RZSfZEXFy4XOtNly1PAy8+34EXbIpEQZ1axr1m5R6DY= Subject key identifier: 56:DB:C8:F9:BC:14:64:07:10:B5:48:03:4B:9E:B5:7C:02:E8:9E:A3 Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 7BB6C5EB63B501725ABED704FD6EBAF7178B3188 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:39:33 +0000 Manifest this update: Wed 16 Sep 2026 20:34:33 +0000 Manifest next update: Thu 17 Sep 2026 21:47:33 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) 2: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: ZJ20el7ORNO/KqS3f7CBVxjZwLN5HZvZSODhRf79EUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b6:c5:eb:63:b5:01:72:5a:be:d7:04:fd:6e:ba:f7:17:8b:31:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: Sep 16 20:34:33 2026 GMT Not After : Sep 17 21:47:33 2026 GMT Subject: CN=56DBC8F9BC14640710B548034B9EB57C02E89EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:11:ee:0b:40:07:f6:f6:ba:4a:54:f5:25: 22:61:ff:51:52:ac:93:b5:fa:b9:2b:e9:09:2f:21: f5:15:e7:d7:06:75:0b:51:21:9c:41:50:55:33:52: 4d:11:de:cf:2f:c8:86:d4:10:b5:24:77:70:12:4f: 60:27:51:54:6a:45:68:85:72:21:8d:46:84:3e:d9: 0a:61:d5:5f:c3:af:cf:8b:47:f2:53:54:4c:3f:3f: 55:01:3b:53:3d:86:70:b0:1f:d6:60:10:0e:06:5a: b2:1b:88:71:3b:ad:54:29:aa:0b:d4:a2:65:91:fd: 55:e4:3e:68:66:aa:0c:d0:73:51:a3:9c:e2:45:e4: 75:89:7e:97:27:19:b0:05:5f:1c:67:14:31:f9:94: a2:61:53:df:d5:55:4d:c6:ed:db:4f:98:b6:2f:5b: ec:0f:34:77:b3:75:4c:b0:d0:a3:7a:32:0f:eb:f6: 01:6a:54:19:2c:53:20:9c:b4:7e:50:09:27:54:90: e2:b2:4f:3f:62:ce:41:da:bc:fe:fc:3c:9f:cc:bd: d3:45:c7:3a:c7:12:60:5a:61:d5:74:c6:13:71:26: ee:77:ca:01:8c:96:67:f2:0a:8f:a6:22:c8:13:81: 45:11:ae:d8:c7:ff:e8:5c:07:1e:cc:a4:06:a5:d7: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DB:C8:F9:BC:14:64:07:10:B5:48:03:4B:9E:B5:7C:02:E8:9E:A3 X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2c:ad:2a:9f:bf:c8:9e:36:71:03:08:45:d8:77:fd:0e:41: e5:c5:7b:26:4f:37:c3:84:b0:e7:8d:22:19:c0:d8:55:35:de: 41:2d:dc:48:bf:6c:75:bd:2f:d2:eb:1a:42:17:74:7e:1b:08: a8:b8:fc:cb:ee:ac:9f:fc:4d:b6:2a:54:42:1f:52:9e:a8:cd: 78:37:17:d2:f5:e1:f2:c0:a9:a9:64:0c:96:32:88:ab:b3:d8: d9:d8:a8:59:c1:80:96:a0:76:9a:7d:74:e2:06:bf:56:b4:ec: 78:53:f4:e4:27:08:f3:a1:db:cd:df:4b:08:64:75:24:fc:19: 30:ff:38:2f:68:29:c0:c0:ec:4a:5c:09:ef:af:71:9b:d8:87: 39:27:c6:88:f1:8e:93:e4:a2:50:73:a8:f2:f9:fa:3d:78:26: bb:2c:15:7d:fd:73:c4:87:1f:a4:2b:ec:46:a4:96:84:bf:9c: c1:b5:07:7e:ac:cc:d6:06:32:c8:bc:14:93:f7:38:c9:17:a4: dc:f5:5c:cf:3f:5b:e7:52:4d:38:9e:84:12:13:e0:c3:fa:61: f4:98:be:52:2b:d5:37:cf:19:82:e4:68:af:9b:24:e4:2f:27: d5:b1:80:49:c1:30:ad:b6:26:ba:f3:f7:24:a4:1a:65:79:fb: 96:42:9b:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7bF62O1AXJavtcE/W669xeLMYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjA5MTYyMDM0MzNaFw0yNjA5MTcyMTQ3MzNaMDMxMTAvBgNV BAMTKDU2REJDOEY5QkMxNDY0MDcxMEI1NDgwMzRCOUVCNTdDMDJFODlFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpRHuC0AH9va6SlT1JSJh/1FS rJO1+rkr6QkvIfUV59cGdQtRIZxBUFUzUk0R3s8vyIbUELUkd3AST2AnUVRqRWiF ciGNRoQ+2Qph1V/Dr8+LR/JTVEw/P1UBO1M9hnCwH9ZgEA4GWrIbiHE7rVQpqgvU omWR/VXkPmhmqgzQc1GjnOJF5HWJfpcnGbAFXxxnFDH5lKJhU9/VVU3G7dtPmLYv W+wPNHezdUyw0KN6Mg/r9gFqVBksUyCctH5QCSdUkOKyTz9izkHavP78PJ/MvdNF xzrHEmBaYdV0xhNxJu53ygGMlmfyCo+mIsgTgUURrtjH/+hcBx7MpAal18dRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtvI+bwUZAcQtUgDS561fALonqMwHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEsrSqfv8ieNnEDCEXYd/0OQeXFeyZPN8OE sOeNIhnA2FU13kEt3Ei/bHW9L9LrGkIXdH4bCKi4/MvurJ/8TbYqVEIfUp6ozXg3 F9L14fLAqalkDJYyiKuz2NnYqFnBgJagdpp9dOIGv1a07HhT9OQnCPOh283fSwhk dST8GTD/OC9oKcDA7EpcCe+vcZvYhzknxojxjpPkolBzqPL5+j14JrssFX39c8SH H6Qr7EakloS/nMG1B36szNYGMsi8FJP3OMkXpNz1XM8/W+dSTTiehBIT4MP6YfSY vlIr1TfPGYLkaK+bJOQvJ9WxgEnBMK22Jrrz9ySkGmV5+5ZCm+Q= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:31 2026 by rpki-client