$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json) Hash identifier: iYIvNZ0zeEnpdFr/AeZmDBv5wuLGwThse4PIyYZPptE= Subject key identifier: CE:B8:41:D9:6F:93:20:70:16:82:7B:4B:2D:C1:52:5E:13:5F:19:19 Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Certificate serial: 4C33422FA8DB6AE42ECD9063EB05C5BA76B74D9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:05:17 +0000 Manifest this update: Wed 16 Sep 2026 17:00:17 +0000 Manifest next update: Thu 17 Sep 2026 20:27:17 +0000 Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=) 2: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: +8sbxXDjoB+CdKiYeJP+o1apKE06L53jKJtEwMWQnVY=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:33:42:2f:a8:db:6a:e4:2e:cd:90:63:eb:05:c5:ba:76:b7:4d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Validity Not Before: Sep 16 17:00:17 2026 GMT Not After : Sep 17 20:27:17 2026 GMT Subject: CN=CEB841D96F93207016827B4B2DC1525E135F1919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:57:10:9f:9d:43:0c:b2:7a:9c:3d:0e:cb: 23:88:a5:f3:67:54:3e:5f:45:b2:d9:3c:d2:14:c1: e1:84:12:2e:91:8a:c6:7c:f1:b2:67:1d:d3:f4:43: ba:88:67:94:34:3c:ee:8b:0c:e3:55:af:73:e3:4a: 05:72:c1:54:6b:ab:45:dc:99:e9:3a:24:95:dc:33: df:b3:ea:55:e2:09:3b:10:68:81:e3:19:39:d9:72: 21:1e:6b:ee:d5:d0:84:d6:39:7c:bb:7e:65:2e:2c: 02:f4:12:e3:47:b9:ba:3b:84:72:db:5e:f3:24:f2: 5d:a0:e6:81:52:27:fa:68:b8:e6:5d:ec:34:a1:5d: 75:c2:61:09:3c:5b:33:4c:6f:c3:49:9e:80:28:4d: 9b:23:8e:a5:c8:76:3b:4d:d9:89:da:2e:93:dd:e7: dd:6c:0c:6b:25:2c:5d:e9:3c:d6:84:f6:6f:2a:c0: 90:9a:27:cc:cd:ee:b5:1e:06:31:e4:93:cd:f1:4e: 4c:d1:80:db:7d:20:95:ec:4b:1e:b9:68:d9:73:ba: a0:95:af:e7:f0:22:a8:a4:04:67:72:e8:a2:d3:8f: e1:20:3c:3c:f3:64:52:2b:a8:0d:67:36:96:b4:94: a8:e2:6a:d3:ff:67:f4:c1:33:91:c5:0b:c2:bc:26: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:41:D9:6F:93:20:70:16:82:7B:4B:2D:C1:52:5E:13:5F:19:19 X509v3 Authority Key Identifier: keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:13:33:62:ae:05:de:5e:6d:85:d6:86:8f:0d:85:00:09:ff: 76:f0:92:ab:c8:42:d2:ee:55:ba:16:7a:ed:8a:24:44:2c:a9: 7f:2f:4c:92:e7:09:4c:7c:69:a7:56:4a:7f:63:61:4d:61:0f: 14:97:82:dc:af:83:35:04:7b:e3:3f:7d:31:cb:38:5f:14:fd: a8:9a:55:ff:2c:d0:74:55:d4:c3:63:4b:3a:e9:e0:39:b2:80: 6d:a2:fa:7b:c9:95:2a:b4:09:35:a1:0b:bf:01:52:ce:ce:78: c6:b1:05:0f:9a:c4:29:8e:2d:ba:b4:89:3b:64:67:82:1a:bb: 59:7e:a5:9b:da:7b:b0:11:15:2a:ae:a4:12:55:3e:0e:7d:10: 68:50:27:36:13:2a:bf:79:bd:4c:62:62:a7:4b:c0:3c:bd:2d: db:2d:45:4e:8a:22:2b:a3:9c:ad:25:2d:8e:53:e0:b3:84:5e: d6:e2:ac:87:b0:34:f0:47:bd:58:9f:4e:f5:2a:c0:de:f9:dc: 57:b9:f8:4c:26:ef:b6:0f:5a:1d:9d:df:96:4c:9e:77:40:6f: 81:5b:62:d9:f2:47:f3:18:54:b0:b8:54:54:e2:d0:3c:f3:a6: cd:73:dc:c4:f5:21:c8:8c:a6:cc:36:59:8e:73:9e:7e:52:6c: 64:44:f4:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDNCL6jbauQuzZBj6wXFuna3TZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx RTFGQkUwQjAeFw0yNjA5MTYxNzAwMTdaFw0yNjA5MTcyMDI3MTdaMDMxMTAvBgNV BAMTKENFQjg0MUQ5NkY5MzIwNzAxNjgyN0I0QjJEQzE1MjVFMTM1RjE5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcVcQn51DDLJ6nD0OyyOIpfNn VD5fRbLZPNIUweGEEi6RisZ88bJnHdP0Q7qIZ5Q0PO6LDONVr3PjSgVywVRrq0Xc mek6JJXcM9+z6lXiCTsQaIHjGTnZciEea+7V0ITWOXy7fmUuLAL0EuNHubo7hHLb XvMk8l2g5oFSJ/pouOZd7DShXXXCYQk8WzNMb8NJnoAoTZsjjqXIdjtN2YnaLpPd 591sDGslLF3pPNaE9m8qwJCaJ8zN7rUeBjHkk83xTkzRgNt9IJXsSx65aNlzuqCV r+fwIqikBGdy6KLTj+EgPDzzZFIrqA1nNpa0lKjiatP/Z/TBM5HFC8K8Jm2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrhB2W+TIHAWgntLLcFSXhNfGRkwHwYDVR0j BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0 RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIITM2KuBd5ebYXWho8NhQAJ/3bwkqvIQtLu VboWeu2KJEQsqX8vTJLnCUx8aadWSn9jYU1hDxSXgtyvgzUEe+M/fTHLOF8U/aia Vf8s0HRV1MNjSzrp4DmygG2i+nvJlSq0CTWhC78BUs7OeMaxBQ+axCmOLbq0iTtk Z4Iau1l+pZvae7ARFSqupBJVPg59EGhQJzYTKr95vUxiYqdLwDy9LdstRU6KIiuj nK0lLY5T4LOEXtbirIewNPBHvVifTvUqwN753Fe5+Ewm77YPWh2d35ZMnndAb4Fb YtnyR/MYVLC4VFTi0Dzzps1z3MT1IciMpsw2WY5znn5SbGRE9KQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:42:58 2026 by rpki-client