$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft File: 4DC2282186B6221A7A52575CE005F2B42354E4A6.mft (raw, json) Hash identifier: o03347j3LrKErb38mBfTZvZdVWEN1J/BIoKiUzukKfU= Subject key identifier: 1C:E9:D7:E8:A0:0C:A6:E6:6A:33:BC:61:57:B7:21:44:55:3C:D5:43 Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 Certificate issuer: /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Certificate serial: 3BB70754ACA1C41AA4299E06DC3011A0BD830A19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:20:07 +0000 Manifest this update: Thu 17 Sep 2026 09:15:07 +0000 Manifest next update: Fri 18 Sep 2026 10:33:07 +0000 Files and hashes: 1: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=) 2: 4DC2282186B6221A7A52575CE005F2B42354E4A6.crl (hash: 2lcylOk1ZhqVyHihmdybCpHbZ6PuzkEfNMqk3rRt+JQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:07:54:ac:a1:c4:1a:a4:29:9e:06:dc:30:11:a0:bd:83:0a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6 Validity Not Before: Sep 17 09:15:07 2026 GMT Not After : Sep 18 10:33:07 2026 GMT Subject: CN=1CE9D7E8A00CA6E66A33BC6157B72144553CD543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:35:14:a7:87:e0:09:5d:5e:c3:fe:69:f3: b2:17:96:38:9d:99:45:e2:c4:5e:b3:f8:d3:fd:11: 87:66:c0:e3:ff:40:21:1c:4a:d8:bb:d7:cc:8a:98: a4:be:32:83:e7:8e:83:fe:f7:6d:34:d0:ab:e8:5c: bd:e8:40:f7:7d:d3:93:11:e2:cc:d4:18:a9:39:4b: 89:c2:32:c0:4e:0d:d1:dc:e0:b5:34:d1:b6:5a:05: 56:fe:93:44:e5:d8:97:47:29:e7:04:3b:b0:f3:a9: f4:3e:fa:af:5b:7c:c9:32:72:88:1b:05:f4:12:d8: d4:4b:db:df:02:01:79:bc:93:8c:d8:6c:34:32:c3: 88:14:69:45:1d:1a:cf:06:26:98:50:6f:1b:a1:36: 6b:3e:13:2e:2d:9e:d4:30:c0:c3:8a:c6:9b:3e:d5: 30:88:7c:ac:73:2a:64:d1:2a:a5:f1:12:6f:3d:81: 44:df:68:e4:fe:de:8f:46:23:70:68:c7:c1:d0:01: 0a:b1:d0:e9:68:10:8a:40:25:4f:e8:58:77:65:a5: 8f:5a:15:13:53:3c:cb:93:c6:ee:d7:6b:49:13:1f: d0:65:0e:65:d0:22:3d:66:d1:1e:29:86:65:e9:7a: c5:15:23:91:8a:05:c1:44:b2:09:49:23:20:9a:7d: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E9:D7:E8:A0:0C:A6:E6:6A:33:BC:61:57:B7:21:44:55:3C:D5:43 X509v3 Authority Key Identifier: keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cc:10:a5:13:bc:6c:fe:dd:55:4f:e2:89:bc:56:1d:f2:66: a3:b5:3c:e3:96:ac:76:df:60:a7:4d:b8:57:05:c1:49:86:c0: cf:70:b0:4e:3b:d7:a9:bf:8d:2d:56:ba:3e:a7:0d:e5:e1:f2: 42:4d:97:03:5f:bb:bc:e8:73:1c:13:9e:58:91:b6:41:5c:05: 02:77:e9:8e:ce:cd:bc:2b:bc:3e:d1:21:c3:e5:e8:83:cc:3d: 03:ad:49:40:bb:f8:cf:58:27:9b:48:0d:0c:3a:1e:fc:23:71: e8:97:c5:a3:4d:57:4b:1c:19:a0:e3:bc:87:d0:d6:63:33:a3: 7e:6c:6c:ea:c3:3f:c7:9c:92:51:15:1b:2f:b9:13:4b:5c:84: b6:4b:62:80:30:c9:3e:a9:7e:09:ec:87:70:94:0f:6c:59:fa: f5:f4:a2:97:48:3a:44:25:78:08:b1:1e:90:a5:7b:8b:03:16: 55:6c:82:78:0b:93:e4:84:a5:83:06:fe:45:29:ac:da:de:e7: 61:26:1b:a3:39:71:0b:41:ba:ca:6a:4a:59:c2:53:2b:48:eb: d9:d4:8d:65:e0:9e:8a:90:49:f6:c4:9c:92:e9:92:d8:fe:ec: e5:a2:61:a1:ce:c9:46:f0:6d:1c:8a:81:4c:ea:bf:f1:38:6a: eb:4f:bc:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7cHVKyhxBqkKZ4G3DARoL2DChkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQy MzU0RTRBNjAeFw0yNjA5MTcwOTE1MDdaFw0yNjA5MTgxMDMzMDdaMDMxMTAvBgNV BAMTKDFDRTlEN0U4QTAwQ0E2RTY2QTMzQkM2MTU3QjcyMTQ0NTUzQ0Q1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMDUUp4fgCV1ew/5p87IXljid mUXixF6z+NP9EYdmwOP/QCEcSti718yKmKS+MoPnjoP+92000KvoXL3oQPd905MR 4szUGKk5S4nCMsBODdHc4LU00bZaBVb+k0Tl2JdHKecEO7DzqfQ++q9bfMkycogb BfQS2NRL298CAXm8k4zYbDQyw4gUaUUdGs8GJphQbxuhNms+Ey4tntQwwMOKxps+ 1TCIfKxzKmTRKqXxEm89gUTfaOT+3o9GI3Box8HQAQqx0OloEIpAJU/oWHdlpY9a FRNTPMuTxu7Xa0kTH9BlDmXQIj1m0R4phmXpesUVI5GKBcFEsglJIyCafexzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOnX6KAMpuZqM7xhV7chRFU81UMwHwYDVR0j BBgwFoAUTcIoIYa2Ihp6Uldc4AXytCNU5KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUxMWU5OGYtZjU0ZS00NjBiLTg4ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4 NkI2MjIxQTdBNTI1NzVDRTAwNUYyQjQyMzU0RTRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REMyMjgyMTg2QjYyMjFBN0E1MjU3NUNFMDA1RjJCNDIzNTRF NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvNERDMjI4MjE4NkI2MjIxQTdBNTI1NzVDRTAwNUYy QjQyMzU0RTRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvMEKUTvGz+3VVP4om8Vh3yZqO1POOWrHbf YKdNuFcFwUmGwM9wsE4716m/jS1Wuj6nDeXh8kJNlwNfu7zocxwTnliRtkFcBQJ3 6Y7OzbwrvD7RIcPl6IPMPQOtSUC7+M9YJ5tIDQw6HvwjceiXxaNNV0scGaDjvIfQ 1mMzo35sbOrDP8ecklEVGy+5E0tchLZLYoAwyT6pfgnsh3CUD2xZ+vX0opdIOkQl eAixHpCle4sDFlVsgngLk+SEpYMG/kUprNre52EmG6M5cQtBuspqSlnCUytI69nU jWXgnoqQSfbEnJLpktj+7OWiYaHOyUbwbRyKgUzqv/E4autPvIs= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:26 2026 by rpki-client