$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json) Hash identifier: GiFkjU8CeW+Ra82an9ozhKww12meCkLMjtUjrwQugAA= Subject key identifier: 1A:B4:31:31:5C:4A:47:1B:5D:57:A5:42:3C:35:6E:73:94:DF:4D:58 Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Certificate serial: 651817F229D0A434B307605FCED38FDB9BA38F05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:08:45 +0000 Manifest this update: Thu 17 Sep 2026 00:03:45 +0000 Manifest next update: Fri 18 Sep 2026 02:17:45 +0000 Files and hashes: 1: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: +puXxVQtjtP44nO0h/MJB65SBEc+EhIwbVtBrbDEx2s=) 2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:18:17:f2:29:d0:a4:34:b3:07:60:5f:ce:d3:8f:db:9b:a3:8f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A Validity Not Before: Sep 17 00:03:45 2026 GMT Not After : Sep 18 02:17:45 2026 GMT Subject: CN=1AB431315C4A471B5D57A5423C356E7394DF4D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:fd:d7:74:e1:eb:c1:eb:ad:c9:93:cb:2b: d5:9e:11:43:a0:28:17:64:1f:7f:c6:9f:c4:06:9e: c0:97:b6:c1:b2:10:d9:ee:3e:3c:56:a8:d7:51:d7: f4:25:b6:39:85:8f:9b:fe:ce:53:40:fe:a0:e5:29: 7e:66:9f:7f:e3:78:f7:04:53:19:fe:8f:b4:01:34: 5c:ce:28:72:14:a1:90:9d:61:42:e4:cf:65:2a:31: 5e:f0:79:de:81:21:99:af:9f:b7:95:6e:ab:e9:68: 69:aa:40:0c:dc:b8:92:33:50:14:31:69:ef:ca:d8: 22:f0:1b:1a:b5:04:65:68:84:d3:28:08:4a:b5:e9: ed:84:45:8f:df:52:f7:2f:12:ae:20:ba:30:47:b0: 30:cb:2a:f5:2c:0f:ed:03:67:07:04:9f:f0:c1:02: 1d:1d:51:b7:72:65:d9:bd:13:92:1b:62:35:1a:d3: d7:40:18:25:49:74:e3:48:68:4f:e7:81:d4:44:e4: f9:4e:cc:24:04:f2:29:fe:5d:83:72:8a:04:7c:0d: d2:c5:dc:7e:44:84:b8:4b:18:9f:52:72:4f:09:24: a4:a5:51:d7:26:aa:1e:4a:65:79:d1:0f:4f:6f:42: cb:8b:90:59:da:e7:dd:93:c7:25:99:00:69:1c:cb: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:31:31:5C:4A:47:1B:5D:57:A5:42:3C:35:6E:73:94:DF:4D:58 X509v3 Authority Key Identifier: keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ee:49:5f:80:ce:eb:dd:5f:ad:18:90:9b:1e:f6:dd:08:99: 1f:11:3e:f6:b6:74:78:bf:d1:f2:6d:f0:ab:42:af:36:04:d4: e5:f5:10:6b:16:b8:8f:e1:51:0a:74:67:fb:30:2b:3c:5c:ef: 9f:96:ab:f8:c9:da:3e:de:07:65:42:0d:62:87:c6:9f:d3:83: 34:35:41:80:e3:05:43:b3:29:f2:4f:42:9d:86:17:55:8c:d7: a9:c4:d3:e6:85:a5:c3:51:f0:b1:4c:e0:78:db:6f:0a:60:32: e1:dc:16:bd:2d:2d:22:c0:87:ce:f2:32:fa:a4:8f:76:07:6a: 82:d1:6a:9c:0e:e6:2b:61:0a:e3:ba:38:d2:12:fc:5e:39:c6: df:ff:1b:c6:97:c7:0b:ab:db:df:ff:49:f4:a9:7f:9b:db:f1: e9:d0:35:cc:f3:b1:15:62:df:bf:66:33:ba:80:44:de:e8:d4: 9a:bb:50:06:fa:db:75:39:25:b8:2a:61:63:d3:99:b7:72:a7: f8:5e:a1:a8:43:12:b1:3f:b3:4b:b4:11:0d:d3:be:98:1c:18: 4d:99:3e:62:3a:40:c3:33:3b:4b:ab:19:08:de:32:ba:95:17: 47:b8:d0:65:2d:08:d9:6f:43:a1:d1:77:9a:82:4b:5c:33:aa: 4b:81:ef:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRgX8inQpDSzB2BfztOP25ujjwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFFMTU4MUVDN0RGRTY1RjVFOTlBQTYxMzQ3NUQ4NTQy ODA4QzQ2QTAeFw0yNjA5MTcwMDAzNDVaFw0yNjA5MTgwMjE3NDVaMDMxMTAvBgNV BAMTKDFBQjQzMTMxNUM0QTQ3MUI1RDU3QTU0MjNDMzU2RTczOTRERjRENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEv3XdOHrweutyZPLK9WeEUOg KBdkH3/Gn8QGnsCXtsGyENnuPjxWqNdR1/QltjmFj5v+zlNA/qDlKX5mn3/jePcE Uxn+j7QBNFzOKHIUoZCdYULkz2UqMV7wed6BIZmvn7eVbqvpaGmqQAzcuJIzUBQx ae/K2CLwGxq1BGVohNMoCEq16e2ERY/fUvcvEq4gujBHsDDLKvUsD+0DZwcEn/DB Ah0dUbdyZdm9E5IbYjUa09dAGCVJdONIaE/ngdRE5PlOzCQE8in+XYNyigR8DdLF 3H5EhLhLGJ9Sck8JJKSlUdcmqh5KZXnRD09vQsuLkFna592TxyWZAGkcy7ofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrQxMVxKRxtdV6VCPDVuc5TfTVgwHwYDVR0j BBgwFoAUSuFYHsff5l9emaphNHXYVCgIxGowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThjZWQxOGQtYTdjYy00YjQ0LWFmNGEtODVmMzA0ZjllYjZjLzAvNEFFMTU4MUVD N0RGRTY1RjVFOTlBQTYxMzQ3NUQ4NTQyODA4QzQ2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUUxNTgxRUM3REZFNjVGNUU5OUFBNjEzNDc1RDg1NDI4MDhD NDZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvNEFFMTU4MUVDN0RGRTY1RjVFOTlBQTYxMzQ3NUQ4 NTQyODA4QzQ2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbuSV+AzuvdX60YkJse9t0ImR8RPva2dHi/ 0fJt8KtCrzYE1OX1EGsWuI/hUQp0Z/swKzxc75+Wq/jJ2j7eB2VCDWKHxp/TgzQ1 QYDjBUOzKfJPQp2GF1WM16nE0+aFpcNR8LFM4HjbbwpgMuHcFr0tLSLAh87yMvqk j3YHaoLRapwO5ithCuO6ONIS/F45xt//G8aXxwur29//SfSpf5vb8enQNczzsRVi 379mM7qARN7o1Jq7UAb623U5JbgqYWPTmbdyp/heoahDErE/s0u0EQ3TvpgcGE2Z PmI6QMMzO0urGQjeMrqVF0e40GUtCNlvQ6HRd5qCS1wzqkuB79s= -----END CERTIFICATE-----Generated at Thu Sep 17 13:45:43 2026 by rpki-client