$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft File: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft (raw, json) Hash identifier: lhqRH+/KiY6ZrpKm0WxS283paqRJTNsvumur8l0+Wu0= Subject key identifier: 78:18:F5:5F:D1:9D:12:9F:86:AE:EB:D7:F9:D8:74:E4:48:0C:55:21 Authority key identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 Certificate issuer: /CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Certificate serial: 3DA4A8D86F114B6D9DFF3F9F086E8906CE52F4D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft Manifest number: BA Signing time: Thu 17 Sep 2026 01:40:31 +0000 Manifest this update: Thu 17 Sep 2026 01:35:31 +0000 Manifest next update: Fri 18 Sep 2026 02:15:31 +0000 Files and hashes: 1: 4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl (hash: S0TzCnPneDlFmyjhLMPmj3NzmYCsWIkoTnCskLlK3VY=) 2: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: RvtUSv5wWi3n8E8bv7TL5og1sIQ+mOz0JnsESGUYn90=) 3: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: ZkcJ9wfmIKEugmJByxtJwR7ao5xiPesfYT/0HhMfeP0=) 4: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: 6Uutpwq/rWWifiMD0z9UYdw7tMZltuDb9h43wNM8zNc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:a8:d8:6f:11:4b:6d:9d:ff:3f:9f:08:6e:89:06:ce:52:f4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8 Validity Not Before: Sep 17 01:35:31 2026 GMT Not After : Sep 18 02:15:31 2026 GMT Subject: CN=7818F55FD19D129F86AEEBD7F9D874E4480C5521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:af:37:88:60:0d:23:28:8d:88:d5:68:f6: 92:0c:dc:e6:31:bc:f3:c4:7e:39:06:77:88:f7:d2: a9:f1:91:6d:21:58:a7:68:74:92:c4:32:c4:12:7d: 02:14:7d:66:c6:f0:33:55:0e:75:39:ed:71:50:6a: 1e:ae:06:60:7a:46:5d:66:91:05:8a:e2:15:1e:63: 45:cc:35:21:41:ef:e6:3c:51:9d:6e:db:4b:46:d2: f7:6c:84:c6:a9:4f:fc:81:b8:01:e9:8a:94:d1:c0: 06:a5:cc:23:78:0a:92:00:37:f8:2c:75:90:9c:4a: 31:ba:50:37:01:37:ea:0a:aa:e5:9d:6b:ad:1e:73: 4a:29:7c:74:5b:e3:b2:d7:45:42:17:0d:c9:cd:32: 77:0e:fb:f7:11:50:13:5e:d3:e0:b9:2a:c3:6e:2d: 13:9c:20:2b:b3:45:db:c3:6a:81:28:ab:a0:cc:73: de:d0:31:a0:d9:fe:72:bf:f1:09:b0:3b:39:3b:17: ea:45:5f:f6:33:1a:73:9b:6f:02:71:72:73:98:8f: 40:4d:cf:cd:08:9b:04:6d:6f:81:86:ef:72:30:47: 39:ab:63:a8:df:c9:cd:3c:5c:e8:92:f3:6a:da:e2: 4e:6b:f9:87:d3:68:ac:74:61:64:1b:35:19:7a:99: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:18:F5:5F:D1:9D:12:9F:86:AE:EB:D7:F9:D8:74:E4:48:0C:55:21 X509v3 Authority Key Identifier: keyid:4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:90:45:5b:05:0c:b1:e7:84:0a:0d:8e:7b:4d:3d:cc:9c:2a: 74:5b:d5:da:8d:e0:5b:c0:0a:3b:97:17:0e:f1:e4:e4:50:17: f0:40:d5:eb:3e:3a:10:7a:05:85:08:37:f4:e7:f3:9e:b6:87: eb:94:a4:ad:04:d2:94:53:f9:a4:47:3a:18:28:81:76:d9:8e: 6a:af:e4:c3:43:54:7c:bc:82:c4:42:51:6b:ea:b0:0b:1e:69: cc:21:e6:3d:ed:97:8f:21:de:e2:60:e7:23:97:cb:9b:dd:05: d4:75:a1:49:ac:a0:15:21:b0:85:e3:dc:16:90:8c:f6:3f:5e: 24:ac:a8:1e:92:61:80:62:81:20:72:10:b7:be:ca:b5:f6:21: ef:48:b7:4d:3b:65:b6:c0:37:9b:47:bf:0c:b1:43:01:c2:df: 44:52:9c:d0:f8:53:96:f0:d2:0e:8b:dd:8c:d6:eb:5f:a4:b8: e1:78:45:db:3e:90:7f:e3:a3:72:61:2f:90:08:9e:53:62:23: fb:cc:15:a6:96:92:cd:e3:ef:8e:9e:08:17:b9:70:c7:4a:38: ba:32:67:bf:11:65:77:52:85:3f:31:f1:7a:db:ea:fb:7e:c7: 46:7d:69:2c:ae:06:d8:22:b2:f3:d5:a0:cb:6b:65:55:fb:41: 2f:b0:a6:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaSo2G8RS22d/z+fCG6JBs5S9NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4Mzcw NUQxQkVBODAeFw0yNjA5MTcwMTM1MzFaFw0yNjA5MTgwMjE1MzFaMDMxMTAvBgNV BAMTKDc4MThGNTVGRDE5RDEyOUY4NkFFRUJEN0Y5RDg3NEU0NDgwQzU1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFq83iGANIyiNiNVo9pIM3OYx vPPEfjkGd4j30qnxkW0hWKdodJLEMsQSfQIUfWbG8DNVDnU57XFQah6uBmB6Rl1m kQWK4hUeY0XMNSFB7+Y8UZ1u20tG0vdshMapT/yBuAHpipTRwAalzCN4CpIAN/gs dZCcSjG6UDcBN+oKquWda60ec0opfHRb47LXRUIXDcnNMncO+/cRUBNe0+C5KsNu LROcICuzRdvDaoEoq6DMc97QMaDZ/nK/8QmwOzk7F+pFX/YzGnObbwJxcnOYj0BN z80ImwRtb4GG73IwRzmrY6jfyc08XOiS82ra4k5r+YfTaKx0YWQbNRl6mZtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBj1X9GdEp+GruvX+dh05EgMVSEwHwYDVR0j BBgwFoAUT1fnxkftwqf4jaLg7ScYNwXRvqgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzEzNzM5ZTEtYjVkYi00NzM0LTgzOGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0 N0VEQzJBN0Y4OERBMkUwRUQyNzE4MzcwNUQxQkVBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjU3RTdDNjQ3RURDMkE3Rjg4REEyRTBFRDI3MTgzNzA1RDFC RUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz OGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4 MzcwNUQxQkVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2QRVsFDLHnhAoNjntNPcycKnRb1dqN4FvA CjuXFw7x5ORQF/BA1es+OhB6BYUIN/Tn8562h+uUpK0E0pRT+aRHOhgogXbZjmqv 5MNDVHy8gsRCUWvqsAseacwh5j3tl48h3uJg5yOXy5vdBdR1oUmsoBUhsIXj3BaQ jPY/XiSsqB6SYYBigSByELe+yrX2Ie9It007ZbbAN5tHvwyxQwHC30RSnND4U5bw 0g6L3YzW61+kuOF4Rds+kH/jo3JhL5AInlNiI/vMFaaWks3j746eCBe5cMdKOLoy Z78RZXdShT8x8Xrb6vt+x0Z9aSyuBtgisvPVoMtrZVX7QS+wpsU= -----END CERTIFICATE-----Generated at Thu Sep 17 11:05:25 2026 by rpki-client