$ rpki-client -vvvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft File: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json) Hash identifier: RIUucfjBkt9Bzbr1Zocue32ecMTxUkDlvWcGAfWaP34= Subject key identifier: 7A:BC:0E:B6:31:97:E4:65:CB:D8:2D:10:9D:56:E7:4E:56:92:EE:02 Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Certificate serial: 1FE7E7D1E62674D0F4447ED197645E5DE44D819D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft Manifest number: F4 Signing time: Sat 31 Oct 2026 18:15:18 +0000 Manifest this update: Sat 31 Oct 2026 18:10:18 +0000 Manifest next update: Sun 01 Nov 2026 21:05:18 +0000 Files and hashes: 1: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: pgcCf2SZINt5umrLtmWJcoxScvPui+0P1E5Cnmvrrm4=) 2: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=) 3: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=) 4: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=) 5: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=) 6: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=) 7: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=) 8: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=) 9: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=) 10: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 21:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e7:e7:d1:e6:26:74:d0:f4:44:7e:d1:97:64:5e:5d:e4:4d:81:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Validity Not Before: Oct 31 18:10:18 2026 GMT Not After : Nov 1 21:05:18 2026 GMT Subject: CN=7ABC0EB63197E465CBD82D109D56E74E5692EE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:69:01:87:45:b2:4d:25:7e:9a:d9:d3:94: dc:ed:ed:4a:ce:f0:fc:dc:00:49:db:99:2a:7a:b2: 5a:65:ef:b4:ad:8b:0a:13:78:27:d4:79:c4:03:2b: f0:19:7f:73:21:57:33:a0:55:49:a7:5b:b2:66:8f: 59:fc:de:b4:7f:55:74:6b:1e:b6:a7:8a:d2:ef:cf: cc:df:2b:32:44:af:fc:99:32:56:77:6d:f9:94:e8: a3:a5:d3:09:83:3a:f9:c5:1d:22:b6:27:93:e8:72: f4:28:02:0b:cd:e8:62:09:32:b9:10:7b:e5:8c:73: d1:5b:a3:4e:bc:41:f4:d0:15:8d:8f:22:30:5b:d0: af:cc:d5:87:5d:c8:5c:b9:30:b0:13:f5:4f:16:b5: 6c:e3:e0:8f:e3:a3:1a:19:ae:9d:a2:01:1c:2a:e0: 0e:d9:2d:5c:67:7d:36:6a:fe:84:c7:aa:6d:9e:38: f1:c4:7f:3b:54:ef:5e:ea:79:10:98:58:b7:56:61: 23:02:c1:7c:29:5c:53:6c:48:e6:07:d1:d6:d9:bb: 5f:8d:c5:15:bf:c4:d8:1e:d4:5b:26:02:40:2e:06: c2:25:d7:25:1d:b1:25:af:26:29:54:21:0e:3d:d1: d5:66:ca:af:35:a1:5c:b2:3d:42:79:f2:25:5d:df: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BC:0E:B6:31:97:E4:65:CB:D8:2D:10:9D:56:E7:4E:56:92:EE:02 X509v3 Authority Key Identifier: keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:de:95:56:5b:a3:c1:26:18:ee:6c:33:7a:9f:72:a8:9f:22: f9:9d:88:26:69:8f:0a:62:99:2f:ac:5a:b4:db:95:5f:79:11: 14:bc:f4:27:6b:c7:de:41:a6:f7:11:49:42:95:23:35:fe:4d: 77:4f:37:9d:9e:5d:c9:96:7f:48:4f:be:f3:db:db:4a:56:e9: 9e:ee:88:22:4d:28:a4:2f:8e:cc:36:4a:13:68:cd:a8:bb:14: 15:c6:ae:12:60:ec:b5:7a:31:bb:f9:ea:1f:11:7d:9d:38:4b: 96:82:b9:9e:31:ef:91:98:51:7e:4f:02:2b:57:e7:72:85:72: d0:9d:2e:91:b6:ce:6c:28:7d:42:69:95:b4:d5:e5:6c:77:e2: ac:c3:c8:e2:5d:1c:f6:7c:ad:2c:52:64:69:73:37:45:40:73: 9f:37:02:fd:e2:f0:b7:b2:04:2c:16:ed:ec:b9:ce:d9:0b:a9: e6:ce:6b:18:81:31:45:56:cf:25:84:ae:a3:5d:0f:fe:19:1f: 42:3d:0c:50:72:fb:f1:6c:46:8f:08:0f:ac:72:e8:c1:8f:84: a9:25:67:53:70:c0:48:92:2e:e2:74:f8:57:7f:84:48:ba:2a: 1e:04:3e:0f:04:12:d9:af:f1:fa:bb:c9:7e:22:da:ea:b7:3e: 5b:9a:73:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+fn0eYmdND0RH7Rl2ReXeRNgZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC MTMyNEFCOTAeFw0yNjEwMzExODEwMThaFw0yNjExMDEyMTA1MThaMDMxMTAvBgNV BAMTKDdBQkMwRUI2MzE5N0U0NjVDQkQ4MkQxMDlENTZFNzRFNTY5MkVFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/WkBh0WyTSV+mtnTlNzt7UrO 8PzcAEnbmSp6slpl77StiwoTeCfUecQDK/AZf3MhVzOgVUmnW7Jmj1n83rR/VXRr HranitLvz8zfKzJEr/yZMlZ3bfmU6KOl0wmDOvnFHSK2J5PocvQoAgvN6GIJMrkQ e+WMc9Fbo068QfTQFY2PIjBb0K/M1YddyFy5MLAT9U8WtWzj4I/joxoZrp2iARwq 4A7ZLVxnfTZq/oTHqm2eOPHEfztU717qeRCYWLdWYSMCwXwpXFNsSOYH0dbZu1+N xRW/xNge1FsmAkAuBsIl1yUdsSWvJilUIQ490dVmyq81oVyyPUJ58iVd30DHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerwOtjGX5GXL2C0QnVbnTlaS7gIwHwYDVR0j BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzelVZbo8EmGO5sM3qfcqifIvmdiCZpjwpi mS+sWrTblV95ERS89Cdrx95BpvcRSUKVIzX+TXdPN52eXcmWf0hPvvPb20pW6Z7u iCJNKKQvjsw2ShNozai7FBXGrhJg7LV6Mbv56h8RfZ04S5aCuZ4x75GYUX5PAitX 53KFctCdLpG2zmwofUJplbTV5Wx34qzDyOJdHPZ8rSxSZGlzN0VAc583Av3i8Ley BCwW7ey5ztkLqebOaxiBMUVWzyWErqNdD/4ZH0I9DFBy+/FsRo8ID6xy6MGPhKkl Z1NwwEiSLuJ0+Fd/hEi6Kh4EPg8EEtmv8fq7yX4i2uq3PluacyI= -----END CERTIFICATE-----Generated at Sun Nov 1 10:54:54 2026 by rpki-client