$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft File: 4958ACA345C7658A0DAF8E986F7577A772837161.mft (raw, json) Hash identifier: f4Z+L015AFRchzi1pXOpzoYKhDe+5Ilwi6sM+wRXs4o= Subject key identifier: C3:D2:FC:DF:DA:AB:75:C7:CF:E2:70:29:0E:75:18:FA:54:A6:3D:5E Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161 Certificate serial: 4AD32A17E82F5456CB39E7EA36142AE39102FA4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:44:24 +0000 Manifest this update: Thu 17 Sep 2026 08:39:24 +0000 Manifest next update: Fri 18 Sep 2026 10:17:24 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=) 2: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: ERSYk3hZf9PVzWt1WH0Bk7NUbuFdmrm4ZK2jNR3DM5g=) 3: 4958ACA345C7658A0DAF8E986F7577A772837161.crl (hash: ZvUHPSvlaI/PjKB9HN+OTpwuzeWBZlLus6Z6nn5D//U=) 4: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d3:2a:17:e8:2f:54:56:cb:39:e7:ea:36:14:2a:e3:91:02:fa:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161 Validity Not Before: Sep 17 08:39:24 2026 GMT Not After : Sep 18 10:17:24 2026 GMT Subject: CN=C3D2FCDFDAAB75C7CFE270290E7518FA54A63D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:83:be:74:c0:41:42:f4:aa:81:b7:8d:a2: 80:95:c1:a7:b1:2e:de:b6:a7:d4:39:b2:f8:b1:67: b5:d8:41:f0:b6:e3:62:5c:39:c7:8d:ce:82:a2:fe: 94:98:cb:69:f2:5e:99:d8:0e:ee:3b:cd:78:ce:67: 73:ab:e8:3b:81:2c:9c:55:7e:8d:e5:1b:84:8c:f1: 7a:e6:22:3b:2c:66:c7:4b:b7:17:11:45:3d:27:41: 87:e6:fc:5d:7b:30:5d:f4:12:89:f5:f4:b7:c8:88: be:76:44:30:d8:42:64:c5:e1:29:b5:92:d4:f5:ce: 03:96:ae:3c:59:dd:8a:18:db:ea:26:9c:a6:55:b7: 17:3a:b6:21:42:21:58:d5:75:40:7d:27:ca:05:9a: 8b:ce:b1:7b:df:b4:0d:6c:7e:d4:d2:f0:dc:6d:f6: ce:99:6d:3a:6e:13:db:80:76:e8:ad:71:b7:f4:a3: b0:c4:bd:6a:31:fc:ec:bc:02:d8:4f:f5:4e:29:b5: 8b:7b:41:77:d6:bf:a9:34:a9:7e:51:a4:8b:dd:fa: 4d:b4:8f:0f:de:68:a3:6e:a0:1e:2c:cf:85:ec:1d: 0d:9a:ac:c9:1f:03:d3:0e:e6:9b:c1:eb:8a:20:6c: 3c:85:8a:be:19:47:17:1e:eb:f5:16:35:49:36:94: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D2:FC:DF:DA:AB:75:C7:CF:E2:70:29:0E:75:18:FA:54:A6:3D:5E X509v3 Authority Key Identifier: keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5d:63:e2:40:ec:62:c0:9d:99:4f:4c:a4:c3:33:35:88:76: 65:9d:98:81:c4:d0:85:d9:48:2f:aa:30:6e:58:4c:8b:0e:66: 84:7d:88:c5:2c:25:b1:5b:a6:4c:93:63:ae:16:21:16:21:23: b1:09:d9:59:8c:e1:a4:3f:1c:e8:2a:27:c6:61:11:f5:25:dd: c8:68:a4:eb:7a:5e:13:ed:95:2a:02:6e:06:5f:d2:85:e0:cc: a9:0a:8c:d1:1f:a0:11:28:ca:c8:be:a7:8e:09:59:3c:f9:f8: 4d:f5:07:3c:d8:04:7f:a2:9b:70:56:fc:e8:9b:7a:a6:0b:21: 42:36:b9:25:48:e6:d7:db:af:4a:d4:08:38:87:21:e1:99:bc: e3:01:7d:07:c6:51:54:fd:21:08:b9:f8:70:0b:15:53:dc:ae: 7f:1b:ad:5a:c8:c9:a7:0b:61:3f:59:dd:4c:d9:54:e7:38:fe: 52:dd:b8:e7:82:db:2f:04:f8:bd:fc:df:f5:80:85:e1:00:2f: bc:d8:0a:69:de:fc:e8:56:4d:73:0b:75:2c:59:93:ea:bd:e2: e1:b1:73:69:8a:89:d5:35:a2:02:54:c6:08:3e:95:e9:e0:0e: a7:08:2f:47:6d:02:dc:33:fd:e4:66:65:68:0b:26:c7:4b:76: 99:d7:6d:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStMqF+gvVFbLOefqNhQq45EC+kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3 MjgzNzE2MTAeFw0yNjA5MTcwODM5MjRaFw0yNjA5MTgxMDE3MjRaMDMxMTAvBgNV BAMTKEMzRDJGQ0RGREFBQjc1QzdDRkUyNzAyOTBFNzUxOEZBNTRBNjNENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgeoO+dMBBQvSqgbeNooCVwaex Lt62p9Q5svixZ7XYQfC242JcOceNzoKi/pSYy2nyXpnYDu47zXjOZ3Or6DuBLJxV fo3lG4SM8XrmIjssZsdLtxcRRT0nQYfm/F17MF30Eon19LfIiL52RDDYQmTF4Sm1 ktT1zgOWrjxZ3YoY2+omnKZVtxc6tiFCIVjVdUB9J8oFmovOsXvftA1sftTS8Nxt 9s6ZbTpuE9uAduitcbf0o7DEvWox/Oy8AthP9U4ptYt7QXfWv6k0qX5RpIvd+k20 jw/eaKNuoB4sz4XsHQ2arMkfA9MO5pvB64ogbDyFir4ZRxce6/UWNUk2lCoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9L839qrdcfP4nApDnUY+lSmPV4wHwYDVR0j BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0 NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3 MTYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3 QTc3MjgzNzE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhdY+JA7GLAnZlPTKTDMzWIdmWdmIHE0IXZ SC+qMG5YTIsOZoR9iMUsJbFbpkyTY64WIRYhI7EJ2VmM4aQ/HOgqJ8ZhEfUl3cho pOt6XhPtlSoCbgZf0oXgzKkKjNEfoBEoysi+p44JWTz5+E31BzzYBH+im3BW/Oib eqYLIUI2uSVI5tfbr0rUCDiHIeGZvOMBfQfGUVT9IQi5+HALFVPcrn8brVrIyacL YT9Z3UzZVOc4/lLduOeC2y8E+L383/WAheEAL7zYCmne/OhWTXMLdSxZk+q94uGx c2mKidU1ogJUxgg+lengDqcIL0dtAtwz/eRmZWgLJsdLdpnXbe4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:08 2026 by rpki-client