$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json) Hash identifier: g00gas6/5W43HTnAWfQtHjVzYDdjeEzOYoNAFSWueHk= Subject key identifier: 0C:0B:F4:92:F3:16:F1:94:18:8C:F2:FC:A8:D9:97:9A:1E:BA:BD:F1 Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Certificate serial: 310BED0DAEBDFFDF9725F2955FCBD51F5BF04911 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:58:48 +0000 Manifest this update: Wed 16 Sep 2026 19:53:48 +0000 Manifest next update: Thu 17 Sep 2026 20:31:48 +0000 Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=) 2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: Nq4vQdi9JmTchiMgeFrR7wmMRhvxLZrUVPjIQnwcq7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0b:ed:0d:ae:bd:ff:df:97:25:f2:95:5f:cb:d5:1f:5b:f0:49:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Validity Not Before: Sep 16 19:53:48 2026 GMT Not After : Sep 17 20:31:48 2026 GMT Subject: CN=0C0BF492F316F194188CF2FCA8D9979A1EBABDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:7c:62:e7:d2:6e:a2:a6:e8:4e:c9:0a:fc: 9d:e8:95:31:ed:1c:80:e5:bb:9f:a0:5e:59:79:50: 80:43:c1:88:75:f2:b3:9b:b4:d0:46:11:1d:bb:02: 60:90:6d:87:06:45:a1:69:72:6a:b1:cc:f9:cf:b3: 8f:43:53:4d:f4:d1:31:02:aa:5e:b7:f4:10:15:51: 34:8f:f6:cd:66:84:64:f1:4e:dc:0e:31:e8:f2:43: d2:d7:84:6a:f5:cb:20:43:44:52:5c:59:dd:b8:41: 44:ef:1b:12:90:1c:f6:1c:c3:a4:20:b0:bf:73:70: b1:75:e3:42:2b:2e:fa:4c:7c:dc:72:d9:39:4a:3b: 76:a5:15:98:25:a0:91:80:d1:e0:19:8c:69:fa:e4: 08:cd:84:50:95:fa:c6:0f:f8:b7:20:cd:10:c5:9e: 82:f7:0b:18:16:1d:1d:26:64:26:99:c8:1c:f4:e2: 4f:90:3a:81:7f:7b:30:39:e0:5f:49:99:b4:9c:ff: 84:9a:9e:55:c9:3e:92:ca:95:b2:25:38:9b:31:a1: 5f:08:57:32:08:11:c9:62:82:b3:6e:cb:22:77:03: 57:f6:bd:49:17:37:0c:36:7d:b3:1a:a6:3c:b7:67: 8d:ee:fd:e6:7b:c4:d7:bf:ba:36:da:8f:f1:e1:2a: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:F4:92:F3:16:F1:94:18:8C:F2:FC:A8:D9:97:9A:1E:BA:BD:F1 X509v3 Authority Key Identifier: keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:db:fd:9c:b2:af:3d:bb:27:b9:bd:e9:f6:75:43:5f:8e:ab: 0c:19:e0:e9:cc:ea:6d:95:12:cb:38:5e:7b:2e:30:0e:9a:bc: e6:3a:14:01:ee:62:95:84:e3:df:a9:bc:b4:64:bf:f7:8e:39: 3a:ec:07:d8:64:90:b9:a8:61:88:28:89:cd:fa:c3:5f:1f:fe: 7a:fa:82:d1:64:cb:2d:09:d3:c0:9b:0b:19:6d:37:38:33:a6: fc:fe:3a:80:89:e7:5a:bd:89:0f:ad:14:c9:5a:04:fd:e4:6d: b3:5f:48:ea:26:9e:88:d4:33:3e:d9:83:b9:ce:ee:1c:5b:b6: d8:5b:a1:3b:27:67:6d:45:d1:eb:48:fa:17:e4:aa:4f:2e:5a: 0e:95:c1:e9:83:71:ff:3e:66:27:6e:85:0e:fd:e5:ba:16:55: 9f:5b:a9:d2:9c:40:60:51:71:8d:a0:30:2d:21:61:47:07:98: 1f:e7:f0:7e:27:50:36:6a:be:8a:26:e7:73:06:b4:05:79:8f: f8:50:bc:f2:95:18:60:8b:2a:e3:3a:f9:5e:46:56:8f:b7:cb: 46:c4:7a:38:cd:6c:b0:8d:36:3f:0d:f9:d4:0d:60:a8:73:b8: d9:c4:42:a6:9b:84:73:11:51:0a:42:55:4a:52:79:80:60:13: 63:f8:34:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQvtDa69/9+XJfKVX8vVH1vwSREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2 M0QxMEY1ODAeFw0yNjA5MTYxOTUzNDhaFw0yNjA5MTcyMDMxNDhaMDMxMTAvBgNV BAMTKDBDMEJGNDkyRjMxNkYxOTQxODhDRjJGQ0E4RDk5NzlBMUVCQUJERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIHxi59JuoqboTskK/J3olTHt HIDlu5+gXll5UIBDwYh18rObtNBGER27AmCQbYcGRaFpcmqxzPnPs49DU0300TEC ql639BAVUTSP9s1mhGTxTtwOMejyQ9LXhGr1yyBDRFJcWd24QUTvGxKQHPYcw6Qg sL9zcLF140IrLvpMfNxy2TlKO3alFZgloJGA0eAZjGn65AjNhFCV+sYP+LcgzRDF noL3CxgWHR0mZCaZyBz04k+QOoF/ezA54F9JmbSc/4SanlXJPpLKlbIlOJsxoV8I VzIIEcligrNuyyJ3A1f2vUkXNww2fbMapjy3Z43u/eZ7xNe/ujbaj/HhKuPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDAv0kvMW8ZQYjPL8qNmXmh66vfEwHwYDVR0j BBgwFoAUTAtkfB333OIgEGvaEcHX0WPRD1gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzZjY2YTgtYTBmZi00NGZhLWJkYTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0Mx REY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2M0QxMEY1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzBCNjQ3QzFERjdEQ0UyMjAxMDZCREExMUMxRDdEMTYzRDEw RjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3 RDE2M0QxMEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjb/Zyyrz27J7m96fZ1Q1+OqwwZ4OnM6m2V Ess4XnsuMA6avOY6FAHuYpWE49+pvLRkv/eOOTrsB9hkkLmoYYgoic36w18f/nr6 gtFkyy0J08CbCxltNzgzpvz+OoCJ51q9iQ+tFMlaBP3kbbNfSOomnojUMz7Zg7nO 7hxbtthboTsnZ21F0etI+hfkqk8uWg6VwemDcf8+ZiduhQ795boWVZ9bqdKcQGBR cY2gMC0hYUcHmB/n8H4nUDZqvoom53MGtAV5j/hQvPKVGGCLKuM6+V5GVo+3y0bE ejjNbLCNNj8N+dQNYKhzuNnEQqabhHMRUQpCVUpSeYBgE2P4NOI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:39 2026 by rpki-client