$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft File: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft (raw, json) Hash identifier: JBZIsWgHFdht/P/+CPdgLC0eYXl00jpXIg+zktpul1Y= Subject key identifier: 36:14:DC:6F:D2:51:0A:B9:ED:79:FB:C4:16:66:03:5B:15:FE:2A:3A Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Certificate serial: 0DB072973DAEE500260C79497A8BBEB6E8FEE613 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 04:58:44 +0000 Manifest this update: Mon 02 Nov 2026 04:53:44 +0000 Manifest next update: Tue 03 Nov 2026 06:30:44 +0000 Files and hashes: 1: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=) 2: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=) 3: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: CaktXeTtnkylUI+n1xZGKMIR5SWqXLjJULrGhcPeRfc=) 4: 4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl (hash: LG6UzLrtQZ5qs0YE2DhNBeCtyKCjCdauBjL7+6Tjwfs=) 5: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: h0Ywdp2xV/0uaBG2V+ZPA5ElWunEb3BnR0JL9D5MtcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b0:72:97:3d:ae:e5:00:26:0c:79:49:7a:8b:be:b6:e8:fe:e6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE Validity Not Before: Nov 2 04:53:44 2026 GMT Not After : Nov 3 06:30:44 2026 GMT Subject: CN=3614DC6FD2510AB9ED79FBC41666035B15FE2A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:92:b8:9f:39:73:b1:82:76:24:ae:4e:92: c2:ed:9b:e0:02:23:00:3b:71:c0:96:69:b1:6d:e3: 9c:e8:ff:d5:21:08:75:09:14:38:ac:8f:31:25:cc: a4:b1:03:ca:41:ca:7c:3b:3b:78:12:a3:a2:cd:37: 05:18:1a:39:f4:38:12:11:55:3f:1a:8e:6e:5e:85: d5:04:8d:bd:d7:c4:79:2f:31:24:ca:8d:7b:61:ab: 7b:f8:3a:3e:44:c7:2a:aa:c1:b2:f7:53:a7:c6:fa: fa:3e:4a:99:42:59:d8:8f:c9:ff:ec:1c:29:b4:08: c0:75:81:56:d0:64:bc:aa:12:cd:a1:9d:07:35:b3: 27:6a:c1:d4:be:7c:17:26:85:be:ac:b3:29:55:c3: 4d:e4:6a:ba:83:22:5f:d1:9b:fc:d2:e0:35:9b:ae: 9a:55:7b:66:4f:71:94:e7:5d:bc:84:7c:3b:e3:a9: 7c:8f:b1:df:85:93:d0:af:1f:86:83:c1:fb:ad:22: 50:8b:d5:65:97:de:86:f3:92:9e:ea:f1:21:a1:8f: b7:66:9b:12:ab:83:dd:21:ec:fd:9e:04:43:13:3a: 02:03:92:c8:f8:69:4a:87:89:aa:8e:20:3e:ec:da: 76:7e:69:30:55:4c:c3:f8:d9:1f:f2:c5:83:fd:fb: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:DC:6F:D2:51:0A:B9:ED:79:FB:C4:16:66:03:5B:15:FE:2A:3A X509v3 Authority Key Identifier: keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:dd:25:d6:9b:7e:05:2f:ca:89:30:e8:13:98:ce:0f:1f:e3: 24:60:33:75:ab:e8:be:dc:e6:56:83:22:65:a2:9a:a8:aa:e0: f1:65:78:84:7f:0b:3a:7a:ec:0c:b6:da:3c:f2:13:70:2b:f8: c3:a4:af:6e:1d:cf:bf:5b:f9:ab:d3:1c:c6:07:41:80:a2:d2: b6:05:61:f1:bb:26:87:a0:4f:39:62:d7:ac:19:ea:61:e9:4a: 70:85:ae:9e:fd:5e:5f:93:4d:d3:db:86:b8:6e:6d:80:e5:85: 73:6b:b2:13:88:75:8c:ae:e0:c4:55:f0:33:c5:bc:93:ed:30: ae:6f:d9:e6:05:d9:f7:cc:90:4b:88:50:30:08:c8:31:e0:31: e2:ce:d4:f5:b9:ff:a7:d7:4d:2d:29:2d:4f:db:08:6f:d3:3b: 03:ed:ff:67:f7:c8:2e:00:53:0b:ae:42:c1:86:a4:6c:3e:68: c7:6d:58:31:a6:88:90:db:35:cd:b7:82:ab:ed:91:ea:3a:f0: e0:3f:f6:87:38:4c:57:5c:33:23:9f:1b:51:90:21:8e:d6:3e: da:55:2e:9b:33:34:d1:86:24:3e:16:fb:29:9d:1d:19:90:3a: 96:fc:f6:9b:03:ae:28:ba:32:40:ba:02:ce:9a:b6:06:12:66: 8f:99:91:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbBylz2u5QAmDHlJeou+tuj+5hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG Q0Q5QThBRTAeFw0yNjExMDIwNDUzNDRaFw0yNjExMDMwNjMwNDRaMDMxMTAvBgNV BAMTKDM2MTREQzZGRDI1MTBBQjlFRDc5RkJDNDE2NjYwMzVCMTVGRTJBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUnZK4nzlzsYJ2JK5OksLtm+AC IwA7ccCWabFt45zo/9UhCHUJFDisjzElzKSxA8pBynw7O3gSo6LNNwUYGjn0OBIR VT8ajm5ehdUEjb3XxHkvMSTKjXthq3v4Oj5ExyqqwbL3U6fG+vo+SplCWdiPyf/s HCm0CMB1gVbQZLyqEs2hnQc1sydqwdS+fBcmhb6ssylVw03karqDIl/Rm/zS4DWb rppVe2ZPcZTnXbyEfDvjqXyPsd+Fk9CvH4aDwfutIlCL1WWX3obzkp7q8SGhj7dm mxKrg90h7P2eBEMTOgIDksj4aUqHiaqOID7s2nZ+aTBVTMP42R/yxYP9+0TPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhTcb9JRCrntefvEFmYDWxX+KjowHwYDVR0j BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB OEFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhF NkNGQ0Q5QThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABndJdabfgUvyokw6BOYzg8f4yRgM3Wr6L7c 5laDImWimqiq4PFleIR/Czp67Ay22jzyE3Ar+MOkr24dz79b+avTHMYHQYCi0rYF YfG7JoegTzli16wZ6mHpSnCFrp79Xl+TTdPbhrhubYDlhXNrshOIdYyu4MRV8DPF vJPtMK5v2eYF2ffMkEuIUDAIyDHgMeLO1PW5/6fXTS0pLU/bCG/TOwPt/2f3yC4A UwuuQsGGpGw+aMdtWDGmiJDbNc23gqvtkeo68OA/9oc4TFdcMyOfG1GQIY7WPtpV LpszNNGGJD4W+ymdHRmQOpb89psDrii6MkC6As6atgYSZo+ZkR8= -----END CERTIFICATE-----Generated at Mon Nov 2 10:06:11 2026 by rpki-client