$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft File: 4D687A8309B055D62F3035664A59E96297B81009.mft (raw, json) Hash identifier: EgldNFds7wfza/rs2zRFXuxxjnepE2pD70HN162seNM= Subject key identifier: 67:C7:66:06:BA:DE:AD:B1:EC:C1:A9:66:09:6E:A9:EC:10:D5:56:6A Authority key identifier: 4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 Certificate issuer: /CN=4D687A8309B055D62F3035664A59E96297B81009 Certificate serial: 6250BE3798769A5DA9073FCCA4668DD59B47645F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 06:41:20 +0000 Manifest this update: Tue 03 Nov 2026 06:36:20 +0000 Manifest next update: Wed 04 Nov 2026 10:10:20 +0000 Files and hashes: 1: 4D687A8309B055D62F3035664A59E96297B81009.crl (hash: gs6c2FRjCc+iAauZObjAeLfyX1OxU9COK/ANOeNd8Qs=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: qwKrohM8yd0iJN/MCZ42zzEDzwWYAIoaAZk2ayeImcw=) 3: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: tjAZ37II5WIJfFalAyrLUGpbSIz9sgJWYsOEq442hNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:50:be:37:98:76:9a:5d:a9:07:3f:cc:a4:66:8d:d5:9b:47:64:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D687A8309B055D62F3035664A59E96297B81009 Validity Not Before: Nov 3 06:36:20 2026 GMT Not After : Nov 4 10:10:20 2026 GMT Subject: CN=67C76606BADEADB1ECC1A966096EA9EC10D5566A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4b:e4:b4:21:22:2b:9e:64:7b:6b:19:5a:fa: 23:cf:e2:69:ba:05:57:f7:03:8a:ef:dd:cf:79:fa: dd:19:18:43:2d:f0:d7:35:07:e4:c8:3c:e8:f9:06: 18:ba:65:7c:56:8b:1e:4e:cd:fe:27:e4:96:82:94: 84:0d:63:04:29:38:bc:78:9b:2b:04:92:5e:76:aa: aa:90:99:5a:7d:4c:d9:d7:7b:ef:ec:82:c9:45:77: 70:66:93:5c:e3:22:e6:54:de:d3:39:a2:89:2e:fd: 11:1d:14:c5:bc:27:6c:51:6c:15:4d:d7:9a:31:8c: b2:d2:7c:0c:57:45:e3:2e:77:95:e9:05:c7:9e:86: 4b:ff:1c:48:12:82:eb:ef:d2:b6:aa:ad:09:95:26: a6:7c:dd:8c:72:be:92:a0:f2:a9:f7:3f:6e:dd:82: e8:80:36:af:fe:50:34:2c:49:a4:e4:dc:04:a8:72: 27:92:9e:c9:e2:19:0e:61:a4:e3:56:e4:b5:39:83: 6c:85:b6:80:b8:fb:de:b1:0b:7b:c7:3b:9a:23:48: d6:01:6f:ab:18:81:ce:3e:e3:58:6e:04:9d:a5:1f: c5:b3:2f:40:b3:a8:97:dd:0b:ff:fb:ca:de:48:aa: 0d:b5:24:09:e2:79:ca:8d:ff:e0:16:51:f3:80:01: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:66:06:BA:DE:AD:B1:EC:C1:A9:66:09:6E:A9:EC:10:D5:56:6A X509v3 Authority Key Identifier: keyid:4D:68:7A:83:09:B0:55:D6:2F:30:35:66:4A:59:E9:62:97:B8:10:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4D687A8309B055D62F3035664A59E96297B81009.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/4D687A8309B055D62F3035664A59E96297B81009.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ea:7c:62:42:78:55:03:38:b9:9f:a6:cf:47:92:61:8b:e9: 38:ed:f3:f6:49:30:52:1b:34:00:66:61:ac:b0:9f:a0:98:10: bc:4d:c1:a0:46:9e:f1:49:bc:e9:ea:e9:80:29:26:04:fd:e4: 9e:24:e8:86:ab:15:17:bf:c1:eb:34:c5:75:45:cc:57:6f:ea: d1:b3:72:da:95:63:cf:32:95:20:f8:61:95:36:1a:43:19:e7: 1c:3e:44:91:45:f1:9d:f4:f8:d3:29:47:df:96:6c:06:d6:47: 6c:62:99:8d:e5:d1:24:5e:d1:8b:ba:58:8e:5d:ec:41:dd:c2: 77:95:d5:ca:0d:2a:b0:7c:87:d2:b9:69:12:c0:68:5d:d3:68: 85:50:a0:fa:7d:6a:b5:98:a8:58:d7:fa:e9:38:c3:29:18:00: 05:43:8d:e3:ad:87:bc:06:f6:04:10:25:51:86:8b:da:75:15: b6:99:ce:af:81:e1:36:7f:08:b7:32:7e:bd:04:69:81:c6:5e: b7:9d:05:63:b0:c3:56:5c:52:ea:0c:52:d5:2d:c3:0a:88:fe: 5f:6c:e4:e9:3b:7f:41:0b:aa:cb:92:29:6b:92:88:80:02:f8: fd:2c:60:62:b0:15:12:1e:ae:d1:ea:36:52:c9:c9:e4:13:38: 98:8b:1e:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlC+N5h2ml2pBz/MpGaN1ZtHZF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5 N0I4MTAwOTAeFw0yNjExMDMwNjM2MjBaFw0yNjExMDQxMDEwMjBaMDMxMTAvBgNV BAMTKDY3Qzc2NjA2QkFERUFEQjFFQ0MxQTk2NjA5NkVBOUVDMTBENTU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwS+S0ISIrnmR7axla+iPP4mm6 BVf3A4rv3c95+t0ZGEMt8Nc1B+TIPOj5Bhi6ZXxWix5Ozf4n5JaClIQNYwQpOLx4 mysEkl52qqqQmVp9TNnXe+/sgslFd3Bmk1zjIuZU3tM5ooku/REdFMW8J2xRbBVN 15oxjLLSfAxXReMud5XpBceehkv/HEgSguvv0raqrQmVJqZ83YxyvpKg8qn3P27d guiANq/+UDQsSaTk3ASocieSnsniGQ5hpONW5LU5g2yFtoC4+96xC3vHO5ojSNYB b6sYgc4+41huBJ2lH8WzL0CzqJfdC//7yt5Iqg21JAniecqN/+AWUfOAAUJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ8dmBrrerbHswalmCW6p7BDVVmowHwYDVR0j BBgwFoAUTWh6gwmwVdYvMDVmSlnpYpe4EAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg5MTM4OTMtNWY2NC00YTVlLWE4ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMw OUIwNTVENjJGMzAzNTY2NEE1OUU5NjI5N0I4MTAwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80RDY4N0E4MzA5QjA1NUQ2MkYzMDM1NjY0QTU5RTk2Mjk3Qjgx MDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvNEQ2ODdBODMwOUIwNTVENjJGMzAzNTY2NEE1OUU5 NjI5N0I4MTAwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPqfGJCeFUDOLmfps9HkmGL6Tjt8/ZJMFIb NABmYaywn6CYELxNwaBGnvFJvOnq6YApJgT95J4k6IarFRe/wes0xXVFzFdv6tGz ctqVY88ylSD4YZU2GkMZ5xw+RJFF8Z30+NMpR9+WbAbWR2ximY3l0SRe0Yu6WI5d 7EHdwneV1coNKrB8h9K5aRLAaF3TaIVQoPp9arWYqFjX+uk4wykYAAVDjeOth7wG 9gQQJVGGi9p1FbaZzq+B4TZ/CLcyfr0EaYHGXredBWOww1ZcUuoMUtUtwwqI/l9s 5Ok7f0ELqsuSKWuSiIAC+P0sYGKwFRIertHqNlLJyeQTOJiLHmA= -----END CERTIFICATE-----Generated at Tue Nov 3 12:12:15 2026 by rpki-client