$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft File: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft (raw, json) Hash identifier: vVsrj+ZT41e6bsHoopJ9ixK1e+fR+IMPHeOV5LBk+wM= Subject key identifier: 42:35:79:F7:A5:0D:D7:B7:D7:4B:4F:29:F7:78:F4:3D:50:1E:DF:F7 Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE Certificate issuer: /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Certificate serial: 11C9B91B3D37A1BF15309D3D20D835818D947741 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 16:39:44 +0000 Manifest this update: Wed 16 Sep 2026 16:34:44 +0000 Manifest next update: Thu 17 Sep 2026 17:24:44 +0000 Files and hashes: 1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=) 2: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl (hash: M8jTcYjgIet9SxDtN/36NCcnALUSFvi1ZmrlR9om7NI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c9:b9:1b:3d:37:a1:bf:15:30:9d:3d:20:d8:35:81:8d:94:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Validity Not Before: Sep 16 16:34:44 2026 GMT Not After : Sep 17 17:24:44 2026 GMT Subject: CN=423579F7A50DD7B7D74B4F29F778F43D501EDFF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:f3:a8:b0:ac:d2:77:bd:5f:e3:ca:e6:9c: 4f:15:f0:0f:53:54:8a:3b:97:f3:35:8c:94:96:c6: 8f:97:fa:d6:f7:1f:2f:ac:eb:bd:d5:28:34:7b:14: d3:39:c1:12:b5:21:59:2f:ee:3d:60:31:80:e2:aa: 4d:74:b9:ad:b9:b2:82:a3:38:a3:72:72:90:28:63: ed:50:d9:10:3e:9d:2e:a5:cc:c7:50:29:7b:f4:41: 79:83:14:37:aa:a6:65:7f:32:7a:81:5d:9f:fb:be: 57:b1:ea:87:12:bc:99:1a:fa:a4:f8:ae:ad:b0:50: 37:23:02:c0:fd:44:29:fc:a0:35:37:9c:4f:cb:e1: 5c:b4:7f:94:39:92:a0:3c:77:e0:0a:ab:f5:40:19: eb:78:85:33:a3:4a:e7:ca:be:39:ce:1c:db:6b:06: 97:3d:4a:57:36:2d:bc:1e:34:2b:0e:ce:b7:8a:e1: 85:c7:1b:34:3b:f0:ef:19:a7:36:6a:31:bb:3f:1c: 83:b6:ed:24:b3:66:9d:4c:f0:59:68:ab:9d:db:05: b0:85:b9:1f:35:98:e2:ca:93:cf:f7:fe:84:03:9a: 94:35:f5:a4:dd:2e:b5:f3:e8:cd:49:1d:39:53:ac: 79:05:4d:39:e9:78:d5:5c:dd:e4:b7:2a:aa:d4:0c: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:79:F7:A5:0D:D7:B7:D7:4B:4F:29:F7:78:F4:3D:50:1E:DF:F7 X509v3 Authority Key Identifier: keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d3:52:e9:cd:49:b8:d1:e5:b3:18:57:4a:f2:e3:67:10:05: ad:36:c4:5f:aa:6e:21:6a:d7:1b:55:ae:f5:e4:9e:d0:ab:1e: 0f:fb:aa:4c:ba:ea:a4:31:86:ab:2f:41:9c:70:51:36:c4:1e: 21:ae:f6:5e:42:92:e2:f4:40:fd:47:c7:e0:b3:b5:d8:7f:5b: 28:d7:4c:87:eb:a2:6d:5b:a4:cd:c4:0c:c4:0f:4c:92:fb:ef: 26:d8:cc:6a:d8:5e:69:48:c1:08:c4:3f:66:89:bb:66:0e:79: 88:f0:7d:94:85:ba:a1:62:c7:83:69:c6:1d:27:7f:f0:f0:d8: 15:9d:13:67:ed:51:3b:62:c4:02:bd:c9:c4:67:ea:84:86:7a: 2a:d2:af:29:24:0c:93:c2:eb:fe:19:bf:74:f1:33:c6:44:a2: 70:d1:ac:15:f1:d6:55:e7:c5:85:5c:e3:83:8d:c2:de:fc:38: 2f:c6:91:21:cc:b8:97:65:fe:53:ba:b9:b2:46:fd:eb:a9:d6: 89:12:f3:de:df:a7:3d:f6:41:22:75:03:b9:5f:8b:98:7d:b2: 14:17:12:a8:ac:38:7f:1a:0f:3f:ab:17:2d:1f:f4:af:22:84: 46:42:81:fe:8e:50:c1:8e:db:b7:a6:b7:fb:de:ef:6c:1e:82: 35:22:e9:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcm5Gz03ob8VMJ09INg1gY2Ud0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQy NkIzN0NCRTAeFw0yNjA5MTYxNjM0NDRaFw0yNjA5MTcxNzI0NDRaMDMxMTAvBgNV BAMTKDQyMzU3OUY3QTUwREQ3QjdENzRCNEYyOUY3NzhGNDNENTAxRURGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0/OosKzSd71f48rmnE8V8A9T VIo7l/M1jJSWxo+X+tb3Hy+s673VKDR7FNM5wRK1IVkv7j1gMYDiqk10ua25soKj OKNycpAoY+1Q2RA+nS6lzMdQKXv0QXmDFDeqpmV/MnqBXZ/7vlex6ocSvJka+qT4 rq2wUDcjAsD9RCn8oDU3nE/L4Vy0f5Q5kqA8d+AKq/VAGet4hTOjSufKvjnOHNtr Bpc9Slc2LbweNCsOzreK4YXHGzQ78O8ZpzZqMbs/HIO27SSzZp1M8Floq53bBbCF uR81mOLKk8/3/oQDmpQ19aTdLrXz6M1JHTlTrHkFTTnpeNVc3eS3KqrUDLLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQjV596UN17fXS08p93j0PVAe3/cwHwYDVR0j BBgwFoAUQnLTSeBLOl0CVh7hkpXg/SazfL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTY3NTBiZjktOWY1OC00MjhhLTg5NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlF MDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQyNkIzN0NCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjcyRDM0OUUwNEIzQTVEMDI1NjFFRTE5Mjk1RTBGRDI2QjM3 Q0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUw RkQyNkIzN0NCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzTUunNSbjR5bMYV0ry42cQBa02xF+qbiFq 1xtVrvXkntCrHg/7qky66qQxhqsvQZxwUTbEHiGu9l5CkuL0QP1Hx+Cztdh/WyjX TIfrom1bpM3EDMQPTJL77ybYzGrYXmlIwQjEP2aJu2YOeYjwfZSFuqFix4Npxh0n f/Dw2BWdE2ftUTtixAK9ycRn6oSGeirSrykkDJPC6/4Zv3TxM8ZEonDRrBXx1lXn xYVc44ONwt78OC/GkSHMuJdl/lO6ubJG/eup1okS897fpz32QSJ1A7lfi5h9shQX EqisOH8aDz+rFy0f9K8ihEZCgf6OUMGO27emt/ve72wegjUi6V0= -----END CERTIFICATE-----Generated at Thu Sep 17 06:40:41 2026 by rpki-client