$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: EwVgkEvbl0JEIqAKBvc+zu/Xle1G/r/a8r+MnskXRT8= Subject key identifier: 8E:AC:0C:FC:46:B1:A4:C3:41:99:EB:6C:6B:38:28:1D:4C:B3:9D:78 Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 34C31E8BC321CDB2EE2E1F527CF263A8D79E163F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 12:44:07 +0000 Manifest this update: Wed 04 Nov 2026 12:39:07 +0000 Manifest next update: Thu 05 Nov 2026 13:14:07 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) 2: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: Ya6Ft7nLpgD2HfCk63csOPG0cm/qAoXiKsdHtQ3daYw=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c3:1e:8b:c3:21:cd:b2:ee:2e:1f:52:7c:f2:63:a8:d7:9e:16:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Nov 4 12:39:07 2026 GMT Not After : Nov 5 13:14:07 2026 GMT Subject: CN=8EAC0CFC46B1A4C34199EB6C6B38281D4CB39D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:44:54:98:3e:34:5e:cb:e3:77:9c:bb:fb: 4d:7f:0f:8e:f6:09:74:b9:6c:41:25:f1:0b:6e:97: 04:80:0b:09:91:9e:a0:48:78:43:aa:b2:48:55:14: 57:6b:d9:16:9c:8c:b7:94:de:2a:6b:32:53:4d:c6: 9d:25:65:08:28:ca:32:11:1f:5f:b5:59:0a:6f:28: b9:17:8c:ec:c5:d0:8a:ef:9d:18:0a:49:59:41:59: 69:94:08:c1:e0:56:2a:ab:42:f3:bf:e0:60:84:09: 09:11:78:8e:73:70:44:20:ac:a9:30:96:3b:73:c9: 99:4c:38:00:c6:f6:23:a5:42:3f:2a:f4:0f:2f:26: ef:b3:5a:f2:66:42:f1:dd:72:5e:55:82:4a:fe:2d: ca:35:60:c4:4c:1e:c4:1f:f9:58:91:e9:5d:d8:03: 65:b5:01:d1:2d:df:4d:fb:6c:56:2d:20:a3:a7:88: 92:5a:78:77:f7:d9:ff:b4:e7:b3:8c:2d:67:d5:62: c3:e7:ca:3f:44:ad:e6:94:df:6d:c5:78:50:38:ab: c1:84:97:30:5f:6c:f8:7b:b8:87:0c:32:d3:eb:82: fa:fb:39:be:8d:c0:2b:ea:36:f8:ea:fc:78:ff:a6: ac:9a:90:07:db:ce:98:d2:a5:fc:21:7f:87:c3:c5: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:0C:FC:46:B1:A4:C3:41:99:EB:6C:6B:38:28:1D:4C:B3:9D:78 X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:93:d0:ef:f7:4a:1a:1e:23:a5:51:63:9c:c1:93:85:bf:4a: 9c:31:09:00:a2:67:55:be:c5:a3:37:68:77:96:c6:fb:fd:6e: 7e:27:98:c9:a5:74:96:9a:42:76:b8:77:cd:0e:1a:2f:09:f8: 9e:5a:c0:17:22:bf:bf:22:ec:e8:97:da:d2:3c:66:b4:9b:c8: 24:18:84:94:94:a2:99:c8:ea:29:99:40:77:99:54:0b:b0:8d: 55:a1:25:b1:6e:a8:a3:61:7c:a7:00:45:81:ad:fe:e1:06:8b: 5b:a1:56:aa:c4:a2:82:58:3d:da:80:41:28:02:7c:b7:36:ce: 96:2a:6e:7c:3c:02:62:f8:85:56:5c:85:36:6a:9e:46:ee:fc: 6e:49:73:d0:92:7a:3c:ae:13:1c:ee:5f:09:0f:f1:57:a2:af: ef:5d:d3:8c:ed:d5:42:96:2e:3e:cf:f9:93:00:ac:cc:76:a2: 3b:27:06:32:53:bb:d0:08:bf:c5:18:64:35:df:40:22:1c:f0: 55:36:a6:0c:e1:c7:63:1e:d4:36:e5:9e:5e:94:3d:98:07:05: 14:41:bc:cd:35:6c:78:0c:50:40:b2:45:a1:66:be:30:b3:e0: 16:7e:f5:39:6b:e3:a9:00:f9:b7:6f:0a:7f:5e:aa:b5:60:b6: 4a:ce:ef:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMMei8MhzbLuLh9SfPJjqNeeFj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjExMDQxMjM5MDdaFw0yNjExMDUxMzE0MDdaMDMxMTAvBgNV BAMTKDhFQUMwQ0ZDNDZCMUE0QzM0MTk5RUI2QzZCMzgyODFENENCMzlENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFckRUmD40Xsvjd5y7+01/D472 CXS5bEEl8QtulwSACwmRnqBIeEOqskhVFFdr2RacjLeU3iprMlNNxp0lZQgoyjIR H1+1WQpvKLkXjOzF0IrvnRgKSVlBWWmUCMHgViqrQvO/4GCECQkReI5zcEQgrKkw ljtzyZlMOADG9iOlQj8q9A8vJu+zWvJmQvHdcl5Vgkr+Lco1YMRMHsQf+ViR6V3Y A2W1AdEt3037bFYtIKOniJJaeHf32f+057OMLWfVYsPnyj9EreaU323FeFA4q8GE lzBfbPh7uIcMMtPrgvr7Ob6NwCvqNvjq/Hj/pqyakAfbzpjSpfwhf4fDxW6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjqwM/EaxpMNBmetsazgoHUyznXgwHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeT0O/3ShoeI6VRY5zBk4W/SpwxCQCiZ1W+ xaM3aHeWxvv9bn4nmMmldJaaQna4d80OGi8J+J5awBciv78i7OiX2tI8ZrSbyCQY hJSUopnI6imZQHeZVAuwjVWhJbFuqKNhfKcARYGt/uEGi1uhVqrEooJYPdqAQSgC fLc2zpYqbnw8AmL4hVZchTZqnkbu/G5Jc9CSejyuExzuXwkP8Veir+9d04zt1UKW Lj7P+ZMArMx2ojsnBjJTu9AIv8UYZDXfQCIc8FU2pgzhx2Me1Dblnl6UPZgHBRRB vM01bHgMUECyRaFmvjCz4BZ+9Tlr46kA+bdvCn9eqrVgtkrO77c= -----END CERTIFICATE-----Generated at Thu Nov 5 01:17:11 2026 by rpki-client