$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json) Hash identifier: Nvw20ZM4wQSoqfM7UAwWJejOorFFYJV+UHRhkB8A/rc= Subject key identifier: E3:8E:B6:F3:2B:41:DE:9B:FC:A3:2C:A3:3C:BE:B4:E3:E0:62:9D:3C Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 51746E3567E0E96B8A0EE2BF4663F890F95E6E38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft Manifest number: E2 Signing time: Sat 17 Oct 2026 10:47:41 +0000 Manifest this update: Sat 17 Oct 2026 10:42:41 +0000 Manifest next update: Sun 18 Oct 2026 14:43:41 +0000 Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=) 2: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: rPq8l/ryw2q3RtpyhmDUwqHnzdHpuDeOFqubIGzLXyo=) 3: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:74:6e:35:67:e0:e9:6b:8a:0e:e2:bf:46:63:f8:90:f9:5e:6e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: Oct 17 10:42:41 2026 GMT Not After : Oct 18 14:43:41 2026 GMT Subject: CN=E38EB6F32B41DE9BFCA32CA33CBEB4E3E0629D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:45:1b:f4:31:33:80:f0:aa:7c:45:32:08: d2:3b:00:e0:37:a9:c7:b3:1a:8e:f8:18:e5:6c:0b: af:94:6e:8a:6b:6c:5b:00:b9:cc:9d:63:dc:b7:90: 7e:41:ff:c3:a4:f0:81:69:41:ad:3d:f6:1c:ba:88: 6f:e2:16:01:8a:81:d6:0c:0b:a1:43:bf:fb:fc:7f: af:a7:f6:78:f5:8b:1d:48:49:99:74:d5:0c:0f:9b: 12:90:30:b6:2c:1e:21:92:67:47:b4:97:c5:c7:0d: 6b:05:ff:25:79:4c:81:ef:7c:16:71:53:08:d6:55: 86:55:16:67:55:04:b5:cf:38:89:45:46:09:e3:04: aa:6c:3f:6a:63:fc:47:d6:29:f0:39:8c:13:0e:80: a0:dd:d0:5c:a9:a5:c4:b1:5c:e4:36:3a:1d:b4:4f: 65:84:d2:4e:1c:d6:17:41:48:e8:19:b5:b8:34:10: 45:af:fa:50:e8:f2:cc:09:ec:a4:cf:44:fd:dc:3d: 83:70:a0:24:16:34:bf:f3:e5:b3:e6:6d:54:0d:46: 79:14:d4:3d:54:fa:42:f1:43:7e:cf:53:f5:1c:cc: 8e:6c:8c:b1:5b:26:f4:d0:d7:33:6b:fd:5a:54:f4: 24:89:25:b3:01:f4:5f:7d:12:76:31:71:bf:b9:f6: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8E:B6:F3:2B:41:DE:9B:FC:A3:2C:A3:3C:BE:B4:E3:E0:62:9D:3C X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8f:89:ba:73:f6:90:9c:56:da:d9:1e:ac:dd:64:a9:20:27: 20:60:b7:7d:a6:60:b8:1f:ef:69:e3:1f:8d:36:22:52:f5:c7: 3e:53:c9:f1:1b:51:55:fe:df:f3:1d:fa:f4:2a:1c:8d:d6:42: d5:57:6e:5b:a6:61:1e:f1:e2:91:e2:9f:01:56:67:3d:d8:36: fa:4e:58:a5:ec:28:bf:84:27:82:95:fa:a0:50:04:76:f8:f3: f1:1e:c0:43:17:e6:f2:51:b4:de:a0:6e:cd:f7:41:84:0b:b3: 4c:f7:2f:97:ce:ab:27:71:65:aa:5b:90:c6:05:1a:86:e1:1f: 22:73:ae:ed:39:9d:55:4f:20:7f:85:12:f7:ff:aa:2c:46:89: 52:9c:35:72:7d:12:63:76:2a:e2:14:47:08:c8:e3:46:f5:a1: 07:9d:d8:2e:df:9d:5d:e4:e7:32:f9:c9:96:26:17:bf:09:44: 18:83:1a:d2:ce:cb:52:27:a6:e9:c6:36:cc:2a:5d:60:d5:ab: dd:c6:05:eb:d9:8a:99:10:78:f4:78:19:ee:73:8d:3f:3d:13: c3:12:6b:3f:a6:79:ac:44:93:69:33:97:75:74:fb:3b:df:ad: cf:cc:ac:4e:de:67:bf:dc:60:ea:c1:f3:1e:fa:6b:77:9a:eb: df:04:b2:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXRuNWfg6WuKDuK/RmP4kPlebjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjEwMTcxMDQyNDFaFw0yNjEwMTgxNDQzNDFaMDMxMTAvBgNV BAMTKEUzOEVCNkYzMkI0MURFOUJGQ0EzMkNBMzNDQkVCNEUzRTA2MjlEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zEUb9DEzgPCqfEUyCNI7AOA3 qcezGo74GOVsC6+UboprbFsAucydY9y3kH5B/8Ok8IFpQa099hy6iG/iFgGKgdYM C6FDv/v8f6+n9nj1ix1ISZl01QwPmxKQMLYsHiGSZ0e0l8XHDWsF/yV5TIHvfBZx UwjWVYZVFmdVBLXPOIlFRgnjBKpsP2pj/EfWKfA5jBMOgKDd0FyppcSxXOQ2Oh20 T2WE0k4c1hdBSOgZtbg0EEWv+lDo8swJ7KTPRP3cPYNwoCQWNL/z5bPmbVQNRnkU 1D1U+kLxQ37PU/UczI5sjLFbJvTQ1zNr/VpU9CSJJbMB9F99EnYxcb+59gR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44628ytB3pv8oyyjPL604+BinTwwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JC RTJEMEUwRDM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCPibpz9pCcVtrZHqzdZKkgJyBgt32mYLgf 72njH402IlL1xz5TyfEbUVX+3/Md+vQqHI3WQtVXblumYR7x4pHinwFWZz3YNvpO WKXsKL+EJ4KV+qBQBHb48/EewEMX5vJRtN6gbs33QYQLs0z3L5fOqydxZapbkMYF GobhHyJzru05nVVPIH+FEvf/qixGiVKcNXJ9EmN2KuIURwjI40b1oQed2C7fnV3k 5zL5yZYmF78JRBiDGtLOy1InpunGNswqXWDVq93GBevZipkQePR4Ge5zjT89E8MS az+meaxEk2kzl3V0+zvfrc/MrE7eZ7/cYOrB8x76a3ea698EsqI= -----END CERTIFICATE-----Generated at Sat Oct 17 22:55:59 2026 by rpki-client