$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json) Hash identifier: eRDAbK6euUZp4h4fJnBh13g3hcEpRUpqt9UufGhUtH0= Subject key identifier: 69:EC:A1:34:E5:7F:94:0D:B8:6F:0B:AA:E7:FD:68:9A:DC:44:CD:9B Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F Certificate serial: 5D3E90DD3CDBDE97F87B7FE15873B25C3B6FFC28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft Manifest number: F3 Signing time: Thu 29 Oct 2026 12:51:25 +0000 Manifest this update: Thu 29 Oct 2026 12:46:25 +0000 Manifest next update: Fri 30 Oct 2026 14:44:25 +0000 Files and hashes: 1: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=) 2: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: gbaIwPXBIu/bPKekcO4dQD42q45LpPL4U6KeVAfHN70=) 3: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=) 4: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=) 5: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=) 6: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=) 7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=) 8: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=) 9: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=) 10: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3e:90:dd:3c:db:de:97:f8:7b:7f:e1:58:73:b2:5c:3b:6f:fc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F Validity Not Before: Oct 29 12:46:25 2026 GMT Not After : Oct 30 14:44:25 2026 GMT Subject: CN=69ECA134E57F940DB86F0BAAE7FD689ADC44CD9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:d1:a1:6f:2e:d4:ab:a9:2e:d8:b4:b7:a7: 38:7f:6c:ab:25:67:2f:05:a9:df:07:1b:80:55:77: 1c:48:8a:de:50:3b:8c:fc:06:8f:da:4a:8c:35:c8: f7:47:5e:50:7a:1e:f0:39:11:43:cd:12:c0:fa:1d: ff:5c:33:9f:91:00:1a:58:f0:f7:b1:a6:9b:39:3b: c9:bb:a4:a6:d6:ff:bd:bd:b4:da:d5:7f:92:c1:95: 0f:63:1d:55:d4:91:00:e2:42:5b:b9:5e:39:b6:81: a8:f4:dc:63:c8:a7:c1:48:ce:9e:21:68:19:6c:41: ab:80:1d:65:74:ef:f8:9e:40:d3:83:3c:e6:98:63: 10:ed:6e:68:d8:5b:ff:72:c9:0b:90:b6:4d:ec:bc: 06:3b:59:3c:94:56:3a:40:a6:3e:ff:a7:a8:39:ab: ba:b0:8f:a5:d3:a5:31:57:90:5c:f7:7c:af:b1:d5: 52:80:9e:e6:4f:de:5b:2c:14:52:87:30:5a:4e:d8: 07:94:c2:f2:fa:4b:9d:ee:9a:07:40:99:33:85:10: dd:14:a8:d5:00:6d:53:e8:0f:ad:81:11:1e:c1:a6: 71:bc:19:a7:f7:12:2c:b1:32:44:3d:25:17:ce:f8: 9a:14:b7:82:94:77:94:50:23:51:27:5e:42:33:9a: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:A1:34:E5:7F:94:0D:B8:6F:0B:AA:E7:FD:68:9A:DC:44:CD:9B X509v3 Authority Key Identifier: keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:08:87:17:64:3c:01:44:5d:1c:8b:86:27:d5:cc:8c:8e:d7: 9a:f7:5a:4e:e8:58:3d:53:aa:88:d2:aa:10:64:a3:33:23:bb: 7b:c0:d5:e1:73:8c:e7:50:63:fb:56:3a:ef:30:77:55:e3:c6: 15:b4:cf:a4:fe:e8:fa:6f:44:38:cc:0a:e7:01:64:42:6e:0c: 5e:c3:ee:de:f8:12:3f:b9:5a:27:26:2f:87:5f:2e:1c:8d:64: b6:74:fa:59:04:d5:fa:1c:c3:bf:7f:3e:77:d2:22:ad:5e:a5: 5c:ce:88:ff:e6:3e:79:65:9c:20:28:c9:d6:2e:cc:b4:1c:95: 21:d2:a0:3d:73:72:e3:83:f0:7a:46:51:89:1b:07:2a:34:4d: 6a:f0:24:7f:09:cd:ac:b9:dc:b5:5b:8c:3d:5e:b2:46:22:98: f0:5e:15:0c:b6:bd:0c:c6:99:79:b3:d7:72:55:87:03:2a:df: 9c:30:be:f4:05:dc:67:3e:c3:07:77:77:79:63:21:66:33:af: d7:ab:3f:07:2c:78:51:65:bf:d9:74:53:c6:83:93:f4:3c:49: a2:c7:42:f7:db:e5:8e:0e:e7:0b:d2:01:f2:07:a3:66:0e:72: cc:bf:24:c1:af:8e:83:9b:08:09:eb:b6:7c:3e:7a:1d:bb:75: 5f:cd:ea:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXT6Q3Tzb3pf4e3/hWHOyXDtv/CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgyOTkw NEVBQUI5RjAeFw0yNjEwMjkxMjQ2MjVaFw0yNjEwMzAxNDQ0MjVaMDMxMTAvBgNV BAMTKDY5RUNBMTM0RTU3Rjk0MERCODZGMEJBQUU3RkQ2ODlBREM0NENEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HdGhby7Uq6ku2LS3pzh/bKsl Zy8Fqd8HG4BVdxxIit5QO4z8Bo/aSow1yPdHXlB6HvA5EUPNEsD6Hf9cM5+RABpY 8Pexpps5O8m7pKbW/729tNrVf5LBlQ9jHVXUkQDiQlu5Xjm2gaj03GPIp8FIzp4h aBlsQauAHWV07/ieQNODPOaYYxDtbmjYW/9yyQuQtk3svAY7WTyUVjpApj7/p6g5 q7qwj6XTpTFXkFz3fK+x1VKAnuZP3lssFFKHMFpO2AeUwvL6S53umgdAmTOFEN0U qNUAbVPoD62BER7BpnG8Gaf3EiyxMkQ9JRfO+JoUt4KUd5RQI1EnXkIzmt7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaeyhNOV/lA24bwuq5/1omtxEzZswHwYDVR0j BBgwFoAUBEbVcbX9V9InhrCHLHSCmQTqq58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMyODk3MDYtYTRmNC00ZTFmLTlhNmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFC NUZENTdEMjI3ODZCMDg3MkM3NDgyOTkwNEVBQUI5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2RDU3MUI1RkQ1N0QyMjc4NkIwODcyQzc0ODI5OTA0RUFB QjlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh NmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgy OTkwNEVBQUI5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMIhxdkPAFEXRyLhifVzIyO15r3Wk7oWD1T qojSqhBkozMju3vA1eFzjOdQY/tWOu8wd1XjxhW0z6T+6PpvRDjMCucBZEJuDF7D 7t74Ej+5WicmL4dfLhyNZLZ0+lkE1focw79/PnfSIq1epVzOiP/mPnllnCAoydYu zLQclSHSoD1zcuOD8HpGUYkbByo0TWrwJH8Jzay53LVbjD1eskYimPBeFQy2vQzG mXmz13JVhwMq35wwvvQF3Gc+wwd3d3ljIWYzr9erPwcseFFlv9l0U8aDk/Q8SaLH Qvfb5Y4O5wvSAfIHo2YOcsy/JMGvjoObCAnrtnw+eh27dV/N6tg= -----END CERTIFICATE-----Generated at Thu Oct 29 17:50:26 2026 by rpki-client