$ rpki-client -vvvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: mrzKmTANrkt5xuvXJ9aV1BEpoQI14r0xJUPm0l9lW4E= Subject key identifier: 79:DB:E5:21:7C:62:B0:76:2A:B2:56:11:92:0D:7C:1C:92:27:33:2F Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 41FBB540F17053F785EA69E9705A2EE1BE94D177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 11:32:17 +0000 Manifest this update: Mon 02 Nov 2026 11:27:17 +0000 Manifest next update: Tue 03 Nov 2026 15:23:17 +0000 Files and hashes: 1: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: TkaP4tHFI+ximtbfCDgxqJBaBl1Ym2vG6Rb8xR5YbL4=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fb:b5:40:f1:70:53:f7:85:ea:69:e9:70:5a:2e:e1:be:94:d1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Nov 2 11:27:17 2026 GMT Not After : Nov 3 15:23:17 2026 GMT Subject: CN=79DBE5217C62B0762AB25611920D7C1C9227332F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:38:75:52:1d:28:de:60:06:b3:36:93:4b: 1e:f0:75:b8:e7:39:08:9c:3d:da:d4:a4:94:47:33: 98:6c:4e:51:ee:e1:62:6a:a9:be:51:29:aa:4d:82: c7:b7:55:5f:17:f4:17:ba:48:33:95:79:c5:6a:13: 0a:5f:66:60:cb:55:34:63:86:3d:4d:e6:99:37:fa: be:2a:88:00:4e:c2:7a:16:ef:7e:b3:02:c4:6b:e6: ca:1d:6d:d4:1d:d7:c5:9b:42:cc:20:23:86:cc:b5: 55:24:2a:6c:bb:35:7a:d4:ed:1f:24:62:db:6e:7a: 01:87:24:94:17:71:e4:9d:8c:4b:ac:89:cd:27:34: 13:1d:c8:4a:b5:8d:c8:a1:54:85:7e:8f:ad:41:47: f2:7b:86:a3:c8:79:3e:a9:4f:6f:f4:bd:74:f0:22: f1:16:6b:5e:f2:3d:00:d1:4f:45:f1:e6:51:a8:5f: 16:ff:6f:e2:28:2a:52:ba:06:13:7f:11:38:0c:f0: 10:1d:51:c0:a8:03:8d:a4:5c:ca:eb:6a:07:0a:1e: f2:40:ec:d0:cc:c8:8e:aa:8a:48:3c:bc:c6:09:13: 86:78:77:32:fa:e7:67:1b:7a:76:fe:ee:c1:af:99: 6e:56:54:c5:4c:4b:7e:b4:ee:53:93:0c:38:07:75: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DB:E5:21:7C:62:B0:76:2A:B2:56:11:92:0D:7C:1C:92:27:33:2F X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c2:81:7f:6a:44:0c:d1:28:ce:c9:af:9d:e5:f3:c4:0a:c4: 71:80:af:fc:8f:ca:81:47:b2:03:4e:6d:61:ab:66:ef:44:ac: b5:19:6c:46:42:1a:a7:59:c6:65:b0:f1:0c:6f:d1:d6:45:c7: 86:c6:f9:c5:df:83:a6:62:9c:8d:fa:80:71:34:b5:81:82:1a: 44:9b:78:dd:d5:c1:d4:55:40:ff:34:c3:d5:29:b1:4c:3d:74: 26:5f:bd:45:b2:ab:fc:6f:c3:7d:b4:06:10:bf:69:54:ad:79: f2:0e:5a:c9:93:b1:01:4b:1e:70:5c:47:46:64:83:42:3e:71: df:9e:26:44:59:ad:8a:17:d2:96:31:9a:c3:10:51:22:34:fb: e6:a6:ed:48:e1:81:6f:4f:2f:69:73:a3:aa:00:ed:08:6b:16: 60:9f:fa:0d:48:63:7a:ce:bb:a0:dd:e4:43:2a:ca:62:02:b9: db:e0:b7:1d:51:ab:0e:fd:02:a6:c0:2f:68:6d:b4:97:c9:8a: 24:04:2b:83:45:04:2e:f3:e1:8a:c8:6d:d1:06:02:4f:24:1d: a6:ac:21:e8:57:b2:e0:29:20:e4:96:ef:43:91:f1:f7:a7:00: 2b:47:8e:d0:ff:1a:12:2e:a1:ed:f0:32:71:a4:bd:a4:1a:5d: 24:17:73:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfu1QPFwU/eF6mnpcFou4b6U0XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjExMDIxMTI3MTdaFw0yNjExMDMxNTIzMTdaMDMxMTAvBgNV BAMTKDc5REJFNTIxN0M2MkIwNzYyQUIyNTYxMTkyMEQ3QzFDOTIyNzMzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMzh1Uh0o3mAGszaTSx7wdbjn OQicPdrUpJRHM5hsTlHu4WJqqb5RKapNgse3VV8X9Be6SDOVecVqEwpfZmDLVTRj hj1N5pk3+r4qiABOwnoW736zAsRr5sodbdQd18WbQswgI4bMtVUkKmy7NXrU7R8k YttuegGHJJQXceSdjEusic0nNBMdyEq1jcihVIV+j61BR/J7hqPIeT6pT2/0vXTw IvEWa17yPQDRT0Xx5lGoXxb/b+IoKlK6BhN/ETgM8BAdUcCoA42kXMrragcKHvJA 7NDMyI6qikg8vMYJE4Z4dzL652cbenb+7sGvmW5WVMVMS3607lOTDDgHdVN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedvlIXxisHYqslYRkg18HJInMy8wHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETCgX9qRAzRKM7Jr53l88QKxHGAr/yPyoFH sgNObWGrZu9ErLUZbEZCGqdZxmWw8Qxv0dZFx4bG+cXfg6ZinI36gHE0tYGCGkSb eN3VwdRVQP80w9UpsUw9dCZfvUWyq/xvw320BhC/aVStefIOWsmTsQFLHnBcR0Zk g0I+cd+eJkRZrYoX0pYxmsMQUSI0++am7UjhgW9PL2lzo6oA7QhrFmCf+g1IY3rO u6Dd5EMqymICudvgtx1Rqw79AqbAL2httJfJiiQEK4NFBC7z4YrIbdEGAk8kHaas IehXsuApIOSW70OR8fenACtHjtD/GhIuoe3wMnGkvaQaXSQXc2c= -----END CERTIFICATE-----Generated at Mon Nov 2 17:17:07 2026 by rpki-client