$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: Tb2l2tgh+6imE092K7ezP3AAfPyqp6QePkzih/PMs1w= Subject key identifier: B3:61:86:54:55:AF:41:67:D6:A0:88:51:7E:07:A1:C2:A5:EF:BF:24 Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 2897A6B79945D105815765F7969E13C24FF9849E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:56:21 +0000 Manifest this update: Wed 16 Sep 2026 17:51:21 +0000 Manifest next update: Thu 17 Sep 2026 20:46:21 +0000 Files and hashes: 1: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: GDZ7FMPKuHgwIol61s131ZWgYLcFr4LbFHISOfuB1nM=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:97:a6:b7:99:45:d1:05:81:57:65:f7:96:9e:13:c2:4f:f9:84:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: Sep 16 17:51:21 2026 GMT Not After : Sep 17 20:46:21 2026 GMT Subject: CN=B361865455AF4167D6A088517E07A1C2A5EFBF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:5c:34:02:30:2b:91:38:d8:e7:68:85:58: ca:22:d7:ca:4b:e6:c2:aa:c7:f7:40:2e:51:21:0a: 36:15:2f:e1:62:ad:7f:be:b8:48:c8:79:bf:48:3a: 28:c1:ce:45:c9:3c:11:87:e7:08:11:8a:74:a8:c3: 13:b1:42:b5:b0:ff:49:a4:88:3c:15:a9:81:d1:9c: 2f:a8:b5:97:03:80:38:11:3c:50:87:64:4e:65:f1: b2:b6:8e:c3:10:93:11:15:c1:48:0a:f4:0c:b9:82: 3c:d6:c0:01:51:37:5c:e2:33:f3:6d:d6:17:54:4a: 32:2a:d1:4f:02:ee:5f:e4:d3:7b:da:8d:54:8c:0a: 33:a4:1a:52:78:c5:4f:1f:98:5a:4a:db:0b:f4:35: 17:a6:28:1f:ff:af:7c:38:aa:89:d4:f1:c8:ed:0e: f5:f2:4a:f6:97:7e:a4:11:10:a3:70:99:58:d8:72: 6c:d7:c0:37:bf:3d:9c:08:9c:e3:e7:1c:94:3a:d9: 95:91:21:18:b9:03:5e:67:1c:30:44:c7:4f:14:28: 98:8e:bd:09:77:70:5b:cd:1c:5f:18:96:86:af:62: af:a8:34:a6:b4:e5:3d:02:b7:73:c5:e9:f8:c3:db: 63:54:53:87:de:bc:e9:fc:f0:b9:0b:45:23:25:d4: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:61:86:54:55:AF:41:67:D6:A0:88:51:7E:07:A1:C2:A5:EF:BF:24 X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a1:eb:c3:14:ca:ff:ae:b3:4a:2b:1e:e7:91:30:86:35:7a: 4b:9b:e7:bb:fa:3f:d0:ac:9a:7c:e0:17:66:bf:a6:ea:0a:59: 11:97:98:e1:09:8b:c3:87:64:09:16:90:75:99:48:fb:74:a4: e9:a7:52:97:ae:c6:8b:27:b6:4b:01:c0:f1:b4:2c:ff:4e:f9: d7:10:94:e8:ef:e8:86:7d:16:a0:f1:fd:5c:8c:a2:f2:7b:ef: 42:c5:ed:31:6c:77:5c:37:5c:47:a9:db:31:8a:cd:fe:22:ae: 90:72:2f:ac:eb:05:c7:fd:2c:a7:82:2f:02:55:d8:82:54:1e: c8:cf:31:7d:2a:bf:26:0e:26:91:43:3d:d7:37:79:81:e7:80: 38:f6:a0:3a:44:3f:93:bf:0a:d6:6b:19:5b:18:cc:ec:aa:19: 5c:f5:34:b5:66:50:40:c3:26:41:74:5a:20:94:b2:c9:e1:d7: 60:e0:83:f3:b6:d2:a9:1e:63:f0:bb:9f:fd:5a:8f:25:f9:36: 3c:f8:3f:5a:d2:a2:1b:97:3a:8f:b5:70:1a:02:f9:85:18:94: 1c:a3:92:43:08:f8:27:50:f6:a1:b2:b3:37:cb:f3:18:a6:cc: 0c:de:d3:2d:12:ae:32:c2:be:c6:c2:7e:61:b9:f3:aa:1e:dc: f8:bb:3e:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJemt5lF0QWBV2X3lp4Twk/5hJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjA5MTYxNzUxMjFaFw0yNjA5MTcyMDQ2MjFaMDMxMTAvBgNV BAMTKEIzNjE4NjU0NTVBRjQxNjdENkEwODg1MTdFMDdBMUMyQTVFRkJGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvFw0AjArkTjY52iFWMoi18pL 5sKqx/dALlEhCjYVL+FirX++uEjIeb9IOijBzkXJPBGH5wgRinSowxOxQrWw/0mk iDwVqYHRnC+otZcDgDgRPFCHZE5l8bK2jsMQkxEVwUgK9Ay5gjzWwAFRN1ziM/Nt 1hdUSjIq0U8C7l/k03vajVSMCjOkGlJ4xU8fmFpK2wv0NRemKB//r3w4qonU8cjt DvXySvaXfqQREKNwmVjYcmzXwDe/PZwInOPnHJQ62ZWRIRi5A15nHDBEx08UKJiO vQl3cFvNHF8YloavYq+oNKa05T0Ct3PF6fjD22NUU4fevOn88LkLRSMl1DaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2GGVFWvQWfWoIhRfgehwqXvvyQwHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuh68MUyv+us0orHueRMIY1ekub57v6P9Cs mnzgF2a/puoKWRGXmOEJi8OHZAkWkHWZSPt0pOmnUpeuxosntksBwPG0LP9O+dcQ lOjv6IZ9FqDx/VyMovJ770LF7TFsd1w3XEep2zGKzf4irpByL6zrBcf9LKeCLwJV 2IJUHsjPMX0qvyYOJpFDPdc3eYHngDj2oDpEP5O/CtZrGVsYzOyqGVz1NLVmUEDD JkF0WiCUssnh12Dgg/O20qkeY/C7n/1ajyX5Njz4P1rSohuXOo+1cBoC+YUYlByj kkMI+CdQ9qGyszfL8ximzAze0y0SrjLCvsbCfmG586oe3Pi7PhQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:21:37 2026 by rpki-client