$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: kAcSZThj7ohO6oKaVgFGCpo9i82LWxJ8bHyoF1lUadE= Subject key identifier: 16:06:69:F5:D0:F6:B1:47:40:91:D3:2D:75:D2:CF:D6:F2:4A:B3:0B Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 036B296929025D7DE801AAAD040E1C4676C8590B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:15:11 +0000 Manifest this update: Wed 16 Sep 2026 21:10:11 +0000 Manifest next update: Thu 17 Sep 2026 21:23:11 +0000 Files and hashes: 1: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: z2jVw+GcnuKubZcjptHezt7c+1d8Zbdxo0jtpMm4if8=) 2: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) 3: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) 4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6b:29:69:29:02:5d:7d:e8:01:aa:ad:04:0e:1c:46:76:c8:59:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Sep 16 21:10:11 2026 GMT Not After : Sep 17 21:23:11 2026 GMT Subject: CN=160669F5D0F6B1474091D32D75D2CFD6F24AB30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:90:a4:87:37:03:17:3e:9a:e3:30:14:0c: 5e:1a:2a:e9:46:e9:e4:d6:f5:cf:45:f3:89:35:cc: 9f:e3:ed:1d:47:49:1c:67:69:42:65:33:ed:09:e5: b9:11:53:80:5c:7c:ce:2e:dd:54:d3:b7:fe:65:1d: ce:f7:4d:8b:68:07:fd:80:25:f1:6b:ed:92:a8:c4: d8:dc:8a:b0:f5:0d:97:40:84:3d:cb:76:85:b6:33: 9e:ff:36:b8:6c:d6:07:b1:2b:c5:76:8b:ff:a2:75: 2a:dc:90:47:98:8f:56:72:42:81:44:de:1f:85:36: 4e:34:20:ec:4c:17:e1:db:55:88:e6:8e:d3:be:aa: a3:9d:71:81:c8:c5:40:a3:32:cc:5f:94:cc:48:44: 1a:db:ad:5d:21:63:98:40:5b:9d:bc:70:6c:f7:41: 00:e1:04:2f:9b:1e:fd:76:69:31:5b:39:7c:e8:fb: f3:5e:a0:d4:08:ec:fa:f0:6b:1f:d5:87:4a:5f:20: 80:74:b4:6c:1d:09:e1:8d:5a:b2:ad:e5:c5:78:d4: 13:f5:7c:9a:1e:67:ee:dc:78:8e:2b:9d:b1:0e:3e: 4e:5f:3f:f0:5f:aa:3b:ed:78:cf:ce:83:c1:2b:7f: be:75:e3:86:3c:09:32:6f:7f:be:1b:18:1e:c0:38: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:06:69:F5:D0:F6:B1:47:40:91:D3:2D:75:D2:CF:D6:F2:4A:B3:0B X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:62:20:cc:c1:89:65:01:69:0d:31:00:55:f5:12:ac:69:36: fe:99:6b:52:30:bb:c4:45:f6:80:41:da:d1:2e:82:2d:f5:7d: 7a:a5:81:cc:41:b4:c8:da:3f:88:8e:a6:6b:f1:0c:37:d6:fe: 19:31:d3:85:a4:7c:19:59:7b:1c:47:5f:f4:2b:73:e4:bc:79: 90:38:eb:29:e3:1c:70:5c:6b:3c:5f:7a:01:aa:a3:7c:c2:e1: f9:b2:f8:72:4a:b9:54:0e:99:85:40:33:a6:33:79:d8:71:24: 1b:5b:6b:cf:0c:99:4f:d6:ec:0d:87:3f:f4:04:3b:14:37:9c: d0:74:9f:46:e7:f9:ff:31:93:1a:66:72:9b:fe:92:3e:6c:de: ba:cc:f1:fb:11:ce:f6:37:30:1b:39:80:95:8b:18:2b:93:c8: 98:f2:33:17:b8:ed:ae:63:cc:ff:8f:3e:28:a9:8f:93:2b:90: 7f:b1:b2:26:6c:4f:ac:b6:98:28:da:41:48:fe:b3:50:16:2c: c3:48:fe:5b:1e:e9:f0:a4:90:4e:37:33:82:f0:f5:ea:db:cb: eb:c8:59:3c:77:d2:4b:f2:9c:d4:43:89:77:33:c2:08:fa:36: 73:38:6f:0e:d6:e8:ed:6f:22:f7:6b:2f:cb:ed:c8:2e:1f:da: b6:27:09:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2spaSkCXX3oAaqtBA4cRnbIWQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjA5MTYyMTEwMTFaFw0yNjA5MTcyMTIzMTFaMDMxMTAvBgNV BAMTKDE2MDY2OUY1RDBGNkIxNDc0MDkxRDMyRDc1RDJDRkQ2RjI0QUIzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3JCkhzcDFz6a4zAUDF4aKulG 6eTW9c9F84k1zJ/j7R1HSRxnaUJlM+0J5bkRU4BcfM4u3VTTt/5lHc73TYtoB/2A JfFr7ZKoxNjcirD1DZdAhD3LdoW2M57/Nrhs1gexK8V2i/+idSrckEeYj1ZyQoFE 3h+FNk40IOxMF+HbVYjmjtO+qqOdcYHIxUCjMsxflMxIRBrbrV0hY5hAW528cGz3 QQDhBC+bHv12aTFbOXzo+/NeoNQI7Prwax/Vh0pfIIB0tGwdCeGNWrKt5cV41BP1 fJoeZ+7ceI4rnbEOPk5fP/BfqjvteM/Og8Erf75144Y8CTJvf74bGB7AOGkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgZp9dD2sUdAkdMtddLP1vJKswswHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBiIMzBiWUBaQ0xAFX1EqxpNv6Za1Iwu8RF 9oBB2tEugi31fXqlgcxBtMjaP4iOpmvxDDfW/hkx04WkfBlZexxHX/Qrc+S8eZA4 6ynjHHBcazxfegGqo3zC4fmy+HJKuVQOmYVAM6YzedhxJBtba88MmU/W7A2HP/QE OxQ3nNB0n0bn+f8xkxpmcpv+kj5s3rrM8fsRzvY3MBs5gJWLGCuTyJjyMxe47a5j zP+PPiipj5MrkH+xsiZsT6y2mCjaQUj+s1AWLMNI/lse6fCkkE43M4Lw9erby+vI WTx30kvynNRDiXczwgj6NnM4bw7W6O1vIvdrL8vtyC4f2rYnCU8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:06 2026 by rpki-client