$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft File: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json) Hash identifier: eGwsBd3rrabKloyM207Z8kYYJAJT1sfS0BTwdpsJyWE= Subject key identifier: 40:4F:8B:9A:96:1B:E4:5E:60:52:DD:DB:D0:4C:48:32:7D:62:79:A6 Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 Certificate issuer: /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Certificate serial: 1B22305CF0171D7E0AA1483F146D37DA2682F729 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft Manifest number: BA Signing time: Wed 16 Sep 2026 23:07:32 +0000 Manifest this update: Wed 16 Sep 2026 23:02:32 +0000 Manifest next update: Fri 18 Sep 2026 00:44:32 +0000 Files and hashes: 1: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: 24pDRFi++YYM7uwQY405HNNNJVQnJIMCYPCvW74/Ndk=) 2: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:22:30:5c:f0:17:1d:7e:0a:a1:48:3f:14:6d:37:da:26:82:f7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3 Validity Not Before: Sep 16 23:02:32 2026 GMT Not After : Sep 18 00:44:32 2026 GMT Subject: CN=404F8B9A961BE45E6052DDDBD04C48327D6279A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:70:01:a8:50:c1:6b:25:87:ba:13:2b:02: 8e:0e:6f:75:61:2f:a6:9a:e0:46:97:b1:e6:01:ea: 5c:18:31:bb:32:0b:b5:4e:46:d1:2a:2d:ff:72:a2: 55:26:0b:44:77:a6:dd:fa:3b:92:71:ac:7b:d4:21: 18:78:41:f5:62:73:f4:31:29:cd:a6:d4:82:c9:73: 43:80:27:04:1e:61:c8:5e:73:07:4d:26:03:89:b8: 93:5a:a9:c0:11:69:36:a5:78:4a:d9:29:3a:43:c3: 12:6b:4a:7c:7a:be:13:92:67:b8:43:27:40:10:17: 68:2e:bf:31:8f:20:4f:f5:f7:b5:ee:e4:bc:78:bb: f1:ec:fe:35:8e:20:91:0a:47:77:89:7c:80:69:39: bc:25:b3:74:b6:b6:d3:75:07:6f:50:cf:bb:b7:bf: db:3f:06:a4:93:1c:2b:50:56:86:7e:30:ef:03:62: 5b:0a:ff:d1:6a:6a:63:70:cc:67:40:ff:59:d1:2a: d1:0d:d2:f4:a6:9c:39:62:9c:e9:f3:d2:84:93:ea: d9:57:df:29:ce:b2:bd:f5:7c:dc:86:fd:c3:0b:5c: 06:bc:28:47:f2:21:9b:a3:54:e0:af:83:ce:c1:a8: 74:42:db:f2:a1:d5:01:3f:93:29:17:ec:54:16:80: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:8B:9A:96:1B:E4:5E:60:52:DD:DB:D0:4C:48:32:7D:62:79:A6 X509v3 Authority Key Identifier: keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:27:ce:83:79:42:4f:c0:c9:ff:1a:b3:6c:68:76:05:ce:75: 90:3e:92:9b:8c:a6:ae:28:c6:d9:8e:5c:7e:32:96:59:49:00: 1d:ec:8b:b9:56:ec:0f:db:15:84:ef:22:e7:3f:d2:a9:b2:ac: 2e:56:0c:0f:9a:4f:be:a5:60:bf:08:2b:b3:26:b5:0c:3d:5d: c4:b9:a8:57:82:8f:e4:89:ed:11:50:02:2d:0b:64:6b:45:0b: 25:81:ff:04:0e:6c:4b:81:d6:39:c9:c1:b1:99:95:d2:f3:b9: aa:20:87:21:58:ce:8b:5c:8f:49:68:ae:3e:43:54:c6:7f:be: d5:aa:61:4b:ff:05:12:6f:a1:6d:ab:db:19:df:60:a4:9b:9c: dd:70:6e:71:e2:97:fb:14:2b:c8:6a:9d:59:15:70:29:60:38: 50:19:d0:ee:af:79:0a:52:5b:6d:75:34:06:ff:7c:09:01:0c: 60:41:ce:a6:9a:03:3a:05:61:32:b5:0f:84:bf:87:b4:fe:64: 11:16:98:dc:96:46:c7:0c:0e:ed:ad:25:63:9b:13:b0:86:2a: 0d:ca:76:47:6e:47:69:4c:11:06:88:16:0a:4b:6d:9d:d2:cc: 04:99:75:bb:00:ba:8c:47:4e:3c:de:d8:c0:0a:33:cf:b9:d6: 1d:70:d3:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyIwXPAXHX4KoUg/FG032iaC9ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2 QTJGOTdFMzAeFw0yNjA5MTYyMzAyMzJaFw0yNjA5MTgwMDQ0MzJaMDMxMTAvBgNV BAMTKDQwNEY4QjlBOTYxQkU0NUU2MDUyREREQkQwNEM0ODMyN0Q2Mjc5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1nABqFDBayWHuhMrAo4Ob3Vh L6aa4EaXseYB6lwYMbsyC7VORtEqLf9yolUmC0R3pt36O5JxrHvUIRh4QfVic/Qx Kc2m1ILJc0OAJwQeYchecwdNJgOJuJNaqcARaTaleErZKTpDwxJrSnx6vhOSZ7hD J0AQF2guvzGPIE/197Xu5Lx4u/Hs/jWOIJEKR3eJfIBpObwls3S2ttN1B29Qz7u3 v9s/BqSTHCtQVoZ+MO8DYlsK/9FqamNwzGdA/1nRKtEN0vSmnDlinOnz0oST6tlX 3ynOsr31fNyG/cMLXAa8KEfyIZujVOCvg87BqHRC2/Kh1QE/kykX7FQWgIYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQE+LmpYb5F5gUt3b0ExIMn1ieaYwHwYDVR0j BBgwFoAUTXRQwnlOQlWe+/OpD7BD1Wovl+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1ZjE1YzktNTg0My00NzA1LWI2OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3 OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2QTJGOTdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDc0NTBDMjc5NEU0MjU1OUVGQkYzQTkwRkIwNDNENTZBMkY5 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQz RDU2QTJGOTdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYnzoN5Qk/Ayf8as2xodgXOdZA+kpuMpq4o xtmOXH4ylllJAB3si7lW7A/bFYTvIuc/0qmyrC5WDA+aT76lYL8IK7MmtQw9XcS5 qFeCj+SJ7RFQAi0LZGtFCyWB/wQObEuB1jnJwbGZldLzuaoghyFYzotcj0lorj5D VMZ/vtWqYUv/BRJvoW2r2xnfYKSbnN1wbnHil/sUK8hqnVkVcClgOFAZ0O6veQpS W211NAb/fAkBDGBBzqaaAzoFYTK1D4S/h7T+ZBEWmNyWRscMDu2tJWObE7CGKg3K dkduR2lMEQaIFgpLbZ3SzASZdbsAuoxHTjze2MAKM8+51h1w0/o= -----END CERTIFICATE-----Generated at Thu Sep 17 07:35:20 2026 by rpki-client