$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json) Hash identifier: pnTgEWzgQr+naRGnGVpAEcc85x3yhHZrahaAJHVWGjs= Subject key identifier: 7B:41:4C:25:E7:CD:10:D1:28:4D:09:D5:8A:AC:38:CE:C0:9D:6F:CA Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Certificate serial: 0DA7A2D03FFAF641F983A3DA284D5CA1352D117D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:26:30 +0000 Manifest this update: Thu 17 Sep 2026 02:21:30 +0000 Manifest next update: Fri 18 Sep 2026 04:13:30 +0000 Files and hashes: 1: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: DRFYs1MHr325DpUkN7UMQI4/ROQBBPClqgIQRqLFZ9o=) 2: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a7:a2:d0:3f:fa:f6:41:f9:83:a3:da:28:4d:5c:a1:35:2d:11:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4 Validity Not Before: Sep 17 02:21:30 2026 GMT Not After : Sep 18 04:13:30 2026 GMT Subject: CN=7B414C25E7CD10D1284D09D58AAC38CEC09D6FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:96:15:0e:98:82:ef:94:1e:8e:ff:5a:42: 29:ae:25:99:73:1d:1b:a0:12:34:35:83:3d:cb:04: ad:41:e4:2d:00:75:b0:2f:c1:1c:38:d7:2f:62:5f: f3:77:ff:9f:5d:98:c4:01:e2:30:7a:ad:c9:f3:50: a6:49:21:d1:df:bc:eb:61:6f:84:d5:cc:2d:8d:06: 6f:5b:f9:8e:c7:22:87:63:ca:be:65:37:16:c5:98: 51:9b:90:6f:81:3b:56:9a:0c:d4:3c:f8:dd:ca:55: fd:86:a5:96:07:c3:3d:26:38:93:be:a7:13:82:9d: 9c:43:80:fb:8f:5b:b6:9b:87:0d:1a:73:ca:df:cf: 89:d9:8e:90:ee:4b:db:00:52:b6:3d:ab:4e:1f:40: b6:7b:ce:0d:1b:b9:d2:df:b8:08:f6:5c:a0:6a:b0: d9:93:06:d6:bf:ed:ff:53:d0:6d:21:b5:44:27:81: 55:a6:d7:ac:12:c0:43:64:14:0d:33:51:32:2d:e9: dd:2c:dc:8a:9d:69:9c:61:36:52:c6:c4:0d:b8:d4: 69:e5:e7:fd:bd:a2:3d:d5:80:19:5d:76:37:0a:29: 16:6d:a3:fa:99:38:45:51:9a:78:07:fa:8f:ca:3c: d8:51:1a:d4:48:60:1c:9a:4d:50:31:73:74:35:af: c0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:41:4C:25:E7:CD:10:D1:28:4D:09:D5:8A:AC:38:CE:C0:9D:6F:CA X509v3 Authority Key Identifier: keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3c:c2:54:0f:a7:44:fb:2c:73:0e:8f:f9:e4:29:7b:c0:e0: 41:f1:b0:6d:0d:d4:71:51:dd:a5:02:67:c4:78:44:d5:bd:ce: da:e0:e7:45:22:9f:bb:71:e4:46:2e:4f:14:2b:22:2b:72:d6: 2b:93:1c:41:11:7b:50:ec:17:9c:ca:90:3d:7e:bc:63:f7:81: 7c:c5:6a:63:14:50:fb:49:65:1f:fa:87:b8:c7:e7:0d:e9:52: f4:49:f5:4e:bc:3f:6a:43:c5:3d:34:6f:06:96:f7:72:41:71: fb:45:11:d0:fb:71:ad:70:f2:4c:37:3f:fa:05:16:40:39:a1: 0c:f4:45:30:77:68:b9:56:ad:84:7e:d6:c5:fc:97:10:d0:a2: f9:4e:a7:64:30:f2:0e:c9:49:0e:9c:e5:e3:89:68:94:6d:d1: df:f7:e8:39:6d:4b:26:35:0e:4a:8c:8c:c0:2b:44:25:91:51: bc:d9:a7:31:8b:1d:ed:1d:d9:7c:13:69:62:8f:5b:a0:9c:4a: 9f:9b:31:21:b1:1b:15:c7:c0:28:19:8e:0f:64:e9:63:52:50: fe:06:2d:74:0d:01:e8:c0:4a:f0:02:f2:61:b4:7f:c9:83:1c: 3f:9d:6d:17:24:4a:00:ba:90:5d:dc:36:33:4b:4a:ae:ed:07: e0:b2:2f:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaei0D/69kH5g6PaKE1coTUtEX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlF M0ZENEZFNDAeFw0yNjA5MTcwMjIxMzBaFw0yNjA5MTgwNDEzMzBaMDMxMTAvBgNV BAMTKDdCNDE0QzI1RTdDRDEwRDEyODREMDlENThBQUMzOENFQzA5RDZGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1X5YVDpiC75Qejv9aQimuJZlz HRugEjQ1gz3LBK1B5C0AdbAvwRw41y9iX/N3/59dmMQB4jB6rcnzUKZJIdHfvOth b4TVzC2NBm9b+Y7HIodjyr5lNxbFmFGbkG+BO1aaDNQ8+N3KVf2GpZYHwz0mOJO+ pxOCnZxDgPuPW7abhw0ac8rfz4nZjpDuS9sAUrY9q04fQLZ7zg0budLfuAj2XKBq sNmTBta/7f9T0G0htUQngVWm16wSwENkFA0zUTIt6d0s3IqdaZxhNlLGxA241Gnl 5/29oj3VgBlddjcKKRZto/qZOEVRmngH+o/KPNhRGtRIYByaTVAxc3Q1r8ANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe0FMJefNENEoTQnViqw4zsCdb8owHwYDVR0j BBgwFoAUS7McwMBkOo73X1Syw1C22eP9T+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTExYTNkNTYtYWM3NS00OTgxLTk3MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBD MDY0M0E4RUY3NUY1NEIyQzM1MEI2RDlFM0ZENEZFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkIzMUNDMEMwNjQzQThFRjc1RjU0QjJDMzUwQjZEOUUzRkQ0 RkU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvNEJCMzFDQzBDMDY0M0E4RUY3NUY1NEIyQzM1MEI2 RDlFM0ZENEZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc8wlQPp0T7LHMOj/nkKXvA4EHxsG0N1HFR 3aUCZ8R4RNW9ztrg50Uin7tx5EYuTxQrIity1iuTHEERe1DsF5zKkD1+vGP3gXzF amMUUPtJZR/6h7jH5w3pUvRJ9U68P2pDxT00bwaW93JBcftFEdD7ca1w8kw3P/oF FkA5oQz0RTB3aLlWrYR+1sX8lxDQovlOp2Qw8g7JSQ6c5eOJaJRt0d/36DltSyY1 DkqMjMArRCWRUbzZpzGLHe0d2XwTaWKPW6CcSp+bMSGxGxXHwCgZjg9k6WNSUP4G LXQNAejASvAC8mG0f8mDHD+dbRckSgC6kF3cNjNLSq7tB+CyL7o= -----END CERTIFICATE-----Generated at Thu Sep 17 09:18:17 2026 by rpki-client