$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json) Hash identifier: Nc0EGaIfelA2bFCWkbS9ZKT6ZQFngTiAxIuwJQt00C0= Subject key identifier: 5A:A8:69:DF:88:41:E6:94:1E:38:42:E6:62:D1:C5:36:17:99:B8:DD Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Certificate serial: 1E524EBFEC4537A4C16C21124B75EDCF025FF91F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 16:50:00 +0000 Manifest this update: Wed 16 Sep 2026 16:45:00 +0000 Manifest next update: Thu 17 Sep 2026 20:18:00 +0000 Files and hashes: 1: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: DXDHnGAmKTV82QD93h9pSeD+57UngvHazw1dp2UKQ2M=) 2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:52:4e:bf:ec:45:37:a4:c1:6c:21:12:4b:75:ed:cf:02:5f:f9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Validity Not Before: Sep 16 16:45:00 2026 GMT Not After : Sep 17 20:18:00 2026 GMT Subject: CN=5AA869DF8841E6941E3842E662D1C5361799B8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:88:e1:a0:2c:b5:af:6b:27:f7:6a:6d:0f: fc:e1:0b:fc:3e:3e:43:66:73:ef:a4:82:f4:72:de: 11:8c:d5:e3:41:d4:4f:54:55:25:4c:67:eb:eb:bd: 5c:b4:1a:85:2f:09:d5:3b:2d:8a:74:10:5f:2b:17: 37:ad:f0:44:a9:85:7f:68:b0:88:4b:ac:9a:66:5f: bf:11:2f:8b:4d:b4:89:72:45:ee:c6:df:fb:a3:c3: df:04:6d:a4:1a:87:65:b7:84:21:d9:1c:5d:d6:48: f9:ae:3d:3e:56:4b:f8:57:db:c8:fc:8a:97:61:44: f8:f7:fe:73:49:86:74:83:2f:00:21:23:9c:bd:19: 41:8c:4d:5d:b1:97:27:19:be:f4:d4:30:bd:e3:a7: 01:c6:62:02:df:7a:d6:ca:d2:bd:97:36:92:91:b7: b8:03:5e:f0:a7:83:dc:78:00:23:97:e5:ec:af:da: ee:72:22:76:38:56:f2:dd:c5:0e:be:4a:ce:45:25: 99:1f:d7:55:c2:aa:69:1e:18:12:06:ad:46:13:58: 0c:8c:ac:07:80:6e:2d:a3:2e:08:03:52:43:f2:92: 71:24:61:4e:f9:51:a6:bf:88:2c:c6:77:67:a4:aa: eb:a7:ba:c9:de:ca:2f:6a:0f:07:d4:fc:a6:43:84: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:69:DF:88:41:E6:94:1E:38:42:E6:62:D1:C5:36:17:99:B8:DD X509v3 Authority Key Identifier: keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b3:68:ab:fa:3f:c8:5d:71:a5:23:94:a9:9c:bc:45:69:dd: 64:3d:9b:0e:12:72:11:f7:ad:4e:d7:11:96:f4:44:50:a9:d2: c2:a7:ed:3f:42:5e:f0:1a:b0:4e:95:bf:89:52:ee:ec:e6:4e: 49:46:1f:72:c0:a6:87:99:06:a6:69:ec:e8:a2:d5:c4:95:12: b9:03:60:15:95:fe:05:70:1d:ec:18:3f:9e:1a:29:4d:fd:9d: e0:99:27:8c:40:0e:4c:50:de:1e:1a:54:1c:9c:29:22:ee:93: 6f:49:5c:34:6b:63:83:5f:32:2a:0e:10:1f:bd:08:71:c6:74: 2f:7f:0c:e0:b2:8a:00:47:7d:c4:72:d1:8d:34:e5:cc:70:06: c6:cd:e9:9b:34:1f:78:d1:fc:1e:58:f3:c0:28:c4:87:94:62: ce:cf:88:61:2d:31:fd:9a:cb:36:42:a8:99:f9:c2:09:a3:cc: 89:69:f7:ff:b7:33:cb:36:58:6e:81:38:bd:8b:d8:a6:33:fd: 53:d5:9f:1f:dc:68:6d:d7:70:f0:ae:38:fc:d1:f0:2e:62:51: 9f:25:45:db:5b:2f:ee:82:15:b9:7e:62:ef:96:f9:8f:03:6d: 16:36:d2:97:41:e6:97:41:58:29:8e:0f:2f:77:ae:15:13:26: 40:a4:6a:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlJOv+xFN6TBbCESS3XtzwJf+R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3 MDQ0Q0VCNTAeFw0yNjA5MTYxNjQ1MDBaFw0yNjA5MTcyMDE4MDBaMDMxMTAvBgNV BAMTKDVBQTg2OURGODg0MUU2OTQxRTM4NDJFNjYyRDFDNTM2MTc5OUI4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkc4jhoCy1r2sn92ptD/zhC/w+ PkNmc++kgvRy3hGM1eNB1E9UVSVMZ+vrvVy0GoUvCdU7LYp0EF8rFzet8ESphX9o sIhLrJpmX78RL4tNtIlyRe7G3/ujw98EbaQah2W3hCHZHF3WSPmuPT5WS/hX28j8 ipdhRPj3/nNJhnSDLwAhI5y9GUGMTV2xlycZvvTUML3jpwHGYgLfetbK0r2XNpKR t7gDXvCng9x4ACOX5eyv2u5yInY4VvLdxQ6+Ss5FJZkf11XCqmkeGBIGrUYTWAyM rAeAbi2jLggDUkPyknEkYU75Uaa/iCzGd2ekquunusneyi9qDwfU/KZDhJrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqhp34hB5pQeOELmYtHFNheZuN0wHwYDVR0j BBgwFoAUTZjDauQU3ir6umJcYBGIM3BEzrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNmQ4NmItZTNkZi00ZTJmLTkzNmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFF NDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3MDQ0Q0VCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDk4QzM2QUU0MTRERTJBRkFCQTYyNUM2MDExODgzMzcwNDRD RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4 MzM3MDQ0Q0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuzaKv6P8hdcaUjlKmcvEVp3WQ9mw4SchH3 rU7XEZb0RFCp0sKn7T9CXvAasE6Vv4lS7uzmTklGH3LApoeZBqZp7Oii1cSVErkD YBWV/gVwHewYP54aKU39neCZJ4xADkxQ3h4aVBycKSLuk29JXDRrY4NfMioOEB+9 CHHGdC9/DOCyigBHfcRy0Y005cxwBsbN6Zs0H3jR/B5Y88AoxIeUYs7PiGEtMf2a yzZCqJn5wgmjzIlp9/+3M8s2WG6BOL2L2KYz/VPVnx/caG3XcPCuOPzR8C5iUZ8l RdtbL+6CFbl+Yu+W+Y8DbRY20pdB5pdBWCmODy93rhUTJkCkaqk= -----END CERTIFICATE-----Generated at Thu Sep 17 11:33:46 2026 by rpki-client