$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: 1Bo73k/Ted7StyyKr0m/iopCVQ98QHptnWBXjKjsHjE= Subject key identifier: 59:CE:C4:EF:89:8D:7C:FE:07:5A:18:E1:60:96:8D:82:98:10:94:59 Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 51F30D97A273A378489E5E20753F8053817F57A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:20:15 +0000 Manifest this update: Thu 17 Sep 2026 01:15:15 +0000 Manifest next update: Fri 18 Sep 2026 04:50:15 +0000 Files and hashes: 1: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 3: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) 4: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) 5: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) 6: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: RV6rRsnUYj8ExUpUhm4aeNsFNrMADTxTeGzjRhVaTVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f3:0d:97:a2:73:a3:78:48:9e:5e:20:75:3f:80:53:81:7f:57:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: Sep 17 01:15:15 2026 GMT Not After : Sep 18 04:50:15 2026 GMT Subject: CN=59CEC4EF898D7CFE075A18E160968D8298109459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:e0:96:35:d4:e5:e6:fd:d2:63:d4:92:9c: 88:6c:ac:a4:da:fd:2f:ea:77:a3:65:46:00:54:9f: b3:c8:18:18:5d:f6:cc:f3:48:d0:87:ae:13:7c:b4: 50:1f:db:06:57:f3:74:d9:79:31:aa:56:68:17:c7: e0:17:d3:1c:8e:53:8a:bc:e0:86:72:0f:c5:c6:ff: 1c:ad:56:2c:d7:02:d9:e5:9a:92:bd:3b:64:85:3a: e1:71:d4:95:44:34:b1:91:3d:c2:ff:a0:27:5d:02: 01:f3:30:70:8c:25:ee:f7:83:16:b8:1e:a5:a5:d6: a9:de:e5:b1:4d:23:6f:d6:98:4b:36:8f:36:58:c1: 10:0f:c7:da:84:62:7d:f2:11:0e:6a:1e:bf:75:f3: bb:ae:dd:8f:e7:f6:78:0d:7d:8e:da:ba:e5:5f:07: 7a:b8:ef:a8:74:a6:0e:4c:a9:0c:8c:8d:3a:92:32: fa:77:9c:e8:f2:d6:13:bf:6c:65:2b:59:b9:b6:00: 2e:8a:2d:0e:91:8c:01:bc:1f:a1:d6:48:df:b0:4e: a3:3f:c5:3d:1f:fe:10:9b:36:49:98:14:2e:72:59: bf:b6:c5:06:32:df:43:0e:8f:94:44:2d:b9:9e:b4: 9f:d4:e1:3b:02:db:83:d3:c3:0f:d7:ab:7d:13:a0: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CE:C4:EF:89:8D:7C:FE:07:5A:18:E1:60:96:8D:82:98:10:94:59 X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:49:66:66:5a:7e:6b:26:24:26:a1:df:7b:54:51:a2:df:90: cf:d3:c1:c7:51:07:e8:cc:66:bd:b8:d0:32:81:19:15:11:56: 74:20:58:31:47:51:ce:22:0d:11:15:f9:19:7b:3b:cd:34:9b: 27:dd:c2:01:d0:56:03:0a:5a:99:05:66:88:e1:12:93:3f:4c: 9d:31:df:9a:7d:cf:16:ad:51:33:8e:e5:c9:8c:28:6c:c8:92: 62:a9:42:ad:56:1d:07:a5:40:e0:cf:9d:40:43:96:dd:4c:3e: 1d:1a:c5:6b:9a:7a:1f:2d:3e:f6:24:24:a3:c5:ab:63:21:9e: a9:cc:3c:52:f0:f4:9b:35:f1:ae:1d:6f:7a:a8:b7:66:17:84: 40:f8:88:b8:8b:13:b4:81:4d:34:c3:72:cc:3c:a7:80:ff:a4: c2:3a:10:6f:37:9c:e4:fe:01:7a:71:ae:e8:a5:69:69:08:a4: 0a:af:7f:3e:89:47:b8:33:b6:5c:ef:6c:55:a9:08:88:88:97: 32:1a:c7:32:88:16:49:8c:3c:c3:80:1a:b9:a0:f3:b8:47:81: 70:cf:c6:bf:f1:c7:cc:fd:8c:1b:7a:cd:6e:2b:fe:4b:b7:e9: 9a:00:51:24:25:ee:60:c5:aa:48:72:a8:90:05:14:14:45:08: 63:f4:c7:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfMNl6Jzo3hInl4gdT+AU4F/V6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA5MTcwMTE1MTVaFw0yNjA5MTgwNDUwMTVaMDMxMTAvBgNV BAMTKDU5Q0VDNEVGODk4RDdDRkUwNzVBMThFMTYwOTY4RDgyOTgxMDk0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBuCWNdTl5v3SY9SSnIhsrKTa /S/qd6NlRgBUn7PIGBhd9szzSNCHrhN8tFAf2wZX83TZeTGqVmgXx+AX0xyOU4q8 4IZyD8XG/xytVizXAtnlmpK9O2SFOuFx1JVENLGRPcL/oCddAgHzMHCMJe73gxa4 HqWl1qne5bFNI2/WmEs2jzZYwRAPx9qEYn3yEQ5qHr9187uu3Y/n9ngNfY7auuVf B3q476h0pg5MqQyMjTqSMvp3nOjy1hO/bGUrWbm2AC6KLQ6RjAG8H6HWSN+wTqM/ xT0f/hCbNkmYFC5yWb+2xQYy30MOj5RELbmetJ/U4TsC24PTww/Xq30ToKHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWc7E74mNfP4HWhjhYJaNgpgQlFkwHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRJZmZafmsmJCah33tUUaLfkM/TwcdRB+jM Zr240DKBGRURVnQgWDFHUc4iDREV+Rl7O800myfdwgHQVgMKWpkFZojhEpM/TJ0x 35p9zxatUTOO5cmMKGzIkmKpQq1WHQelQODPnUBDlt1MPh0axWuaeh8tPvYkJKPF q2MhnqnMPFLw9Js18a4db3qot2YXhED4iLiLE7SBTTTDcsw8p4D/pMI6EG83nOT+ AXpxruilaWkIpAqvfz6JR7gztlzvbFWpCIiIlzIaxzKIFkmMPMOAGrmg87hHgXDP xr/xx8z9jBt6zW4r/ku36ZoAUSQl7mDFqkhyqJAFFBRFCGP0x4w= -----END CERTIFICATE-----Generated at Thu Sep 17 16:27:21 2026 by rpki-client