$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft File: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft (raw, json) Hash identifier: QsIlI3m5Wa6ZQIuXWmuSp/DTQPRwp6idhqNvgnLwhAo= Subject key identifier: 99:FC:67:EC:6D:05:53:47:CC:BC:F1:AE:BD:50:6A:E1:5B:8B:AD:9B Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Certificate serial: 08617D9056E0DCACFA0FF61542B326EF266B6FDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:58:23 +0000 Manifest this update: Thu 17 Sep 2026 03:53:23 +0000 Manifest next update: Fri 18 Sep 2026 06:54:23 +0000 Files and hashes: 1: 3130332e38372e3138342e302f32322d3234203d3e20313336313036.roa (hash: cUNZmidOsIWQTz94E3YG+Xk0D06jdYQy+G4cYD1Jgrg=) 2: 3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (hash: pLkBoj+4v20DRaLcdp6cqFNpj/dZk322J8DmIWECxxQ=) 3: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (hash: RIa7J3LAvz/WgKYY384LNu37wMI9xVMGk5ERckCbrdg=) 4: 4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl (hash: 3eL7P8ojhoQPC4zYE1eJ3C3LIkNm2q93xFZmuZyLB4g=) 5: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (hash: Fm5DIjTwEczH/woDzsRLyNQNU1aSAK7oH6OWe3cCsR0=) 6: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (hash: L0MFIY3SqIZyxWL0GLOuM9CG7lSHx8DFxNDzapVGoYg=) 7: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (hash: 3oTd3qA7oalGsSJ103eTjg8luLc4IR3P9iD0vCHZrto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:61:7d:90:56:e0:dc:ac:fa:0f:f6:15:42:b3:26:ef:26:6b:6f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Validity Not Before: Sep 17 03:53:23 2026 GMT Not After : Sep 18 06:54:23 2026 GMT Subject: CN=99FC67EC6D055347CCBCF1AEBD506AE15B8BAD9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:ca:b0:fc:ea:ac:f0:40:6d:5d:64:6f:3a: 89:27:9d:e3:75:95:a1:3b:02:47:46:15:25:22:c9: f1:f9:cb:be:03:ad:04:41:ef:f4:55:d6:59:d8:09: 40:bf:51:54:d2:b7:e3:19:48:90:b4:8e:50:ed:e9: 80:dc:bf:8d:43:6d:e7:94:8b:a1:c3:f3:45:22:d0: be:58:da:2a:f8:61:38:6c:4a:8d:6d:7c:db:79:13: dc:db:97:e3:3f:20:d6:9a:e6:61:37:48:5a:fd:5c: 7b:21:76:89:cf:ef:50:7e:09:70:bb:4a:e5:54:63: b5:b9:6c:25:4e:0d:4b:60:8a:4c:f7:4b:42:76:dc: 3d:84:8a:ea:c2:39:5a:8d:95:54:bc:18:76:5c:fb: c5:50:3d:0d:39:aa:a7:4c:19:72:77:18:7a:dc:76: 5c:37:4d:83:f8:b4:2a:0f:21:cd:c4:35:df:7f:d8: ca:7c:2f:ce:7e:8f:74:04:2f:6c:cd:46:94:b8:ef: 71:f9:f6:f1:d6:a5:cb:b6:f1:92:e9:32:82:d5:74: 14:49:5d:ae:8a:d7:44:6d:48:ed:5c:a1:1e:71:24: 6e:a9:75:05:71:08:34:61:1d:17:8e:8b:de:36:0d: c7:4e:08:53:31:19:57:38:4e:3a:0c:8c:7d:88:aa: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:67:EC:6D:05:53:47:CC:BC:F1:AE:BD:50:6A:E1:5B:8B:AD:9B X509v3 Authority Key Identifier: keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2a:1a:86:e9:4d:78:f4:f9:01:5c:6c:fe:8d:82:0b:5d:d8: a2:fb:48:03:e6:46:6e:5c:79:c7:ea:34:be:d6:2e:7b:81:23: 9f:4c:e9:db:e9:f1:02:91:2e:87:b9:11:7e:6c:2b:12:e9:78: 32:d2:39:f7:93:c1:be:f6:9f:b0:7a:63:47:48:e0:1b:4f:c0: bb:36:b9:e6:97:81:93:7e:47:6e:82:0a:e2:a7:8b:82:eb:c4: 1d:ab:49:7d:d1:9a:f4:d0:1f:ac:10:a7:6b:34:82:14:d1:6b: 08:eb:c4:91:56:27:d1:61:26:84:8d:2f:b3:bd:d9:8d:41:07: 2d:9e:f9:2d:4a:67:7d:85:30:d7:2a:6c:41:f2:c0:1a:b8:03: 40:3b:43:24:af:9c:71:07:80:15:e9:bf:9c:4a:fe:66:38:1f: 2c:9c:99:2d:14:e0:7b:cc:d3:e9:75:c4:65:90:45:35:fd:9d: 5b:4a:98:c1:ef:f0:38:db:16:23:04:6c:d2:ef:f4:76:29:0a: 5b:24:8e:7b:94:a4:d4:d9:99:4e:17:d9:e8:ee:f9:c6:61:d1: d1:b4:de:4c:d1:46:2a:8d:7a:c2:fd:d0:c6:cb:74:2e:36:b2: f2:9f:40:44:63:19:1e:66:c6:54:ee:ac:a8:08:9a:02:91:1a: af:74:8b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGF9kFbg3Kz6D/YVQrMm7yZrb94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAyQTJF QkMyOEFDQzAeFw0yNjA5MTcwMzUzMjNaFw0yNjA5MTgwNjU0MjNaMDMxMTAvBgNV BAMTKDk5RkM2N0VDNkQwNTUzNDdDQ0JDRjFBRUJENTA2QUUxNUI4QkFEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4cqw/Oqs8EBtXWRvOoknneN1 laE7AkdGFSUiyfH5y74DrQRB7/RV1lnYCUC/UVTSt+MZSJC0jlDt6YDcv41DbeeU i6HD80Ui0L5Y2ir4YThsSo1tfNt5E9zbl+M/INaa5mE3SFr9XHshdonP71B+CXC7 SuVUY7W5bCVODUtgikz3S0J23D2EiurCOVqNlVS8GHZc+8VQPQ05qqdMGXJ3GHrc dlw3TYP4tCoPIc3ENd9/2Mp8L85+j3QEL2zNRpS473H59vHWpcu28ZLpMoLVdBRJ Xa6K10RtSO1coR5xJG6pdQVxCDRhHReOi942DcdOCFMxGVc4TjoMjH2Iqlp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfxn7G0FU0fMvPGuvVBq4VuLrZswHwYDVR0j BBgwFoAUTIOVDrmKix8SQQm94JECouvCiswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M5NzZlYzUtYjA1YS00ODBmLTg2ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVC OThBOEIxRjEyNDEwOUJERTA5MTAyQTJFQkMyOEFDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzgzOTUwRUI5OEE4QjFGMTI0MTA5QkRFMDkxMDJBMkVCQzI4 QUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M5NzZlYzUtYjA1YS00ODBmLTg2 ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAy QTJFQkMyOEFDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsqGobpTXj0+QFcbP6Nggtd2KL7SAPmRm5c ecfqNL7WLnuBI59M6dvp8QKRLoe5EX5sKxLpeDLSOfeTwb72n7B6Y0dI4BtPwLs2 ueaXgZN+R26CCuKni4LrxB2rSX3RmvTQH6wQp2s0ghTRawjrxJFWJ9FhJoSNL7O9 2Y1BBy2e+S1KZ32FMNcqbEHywBq4A0A7QySvnHEHgBXpv5xK/mY4HyycmS0U4HvM 0+l1xGWQRTX9nVtKmMHv8DjbFiMEbNLv9HYpClskjnuUpNTZmU4X2eju+cZh0dG0 3kzRRiqNesL90MbLdC42svKfQERjGR5mxlTurKgImgKRGq90iyU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:26:51 2026 by rpki-client