$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: /lC8YfnDXbPUyjWBWryy70tkXBq/K7tdvPhFL1w6qQ0= Subject key identifier: 4C:B0:78:2A:06:86:30:57:C2:20:AD:C3:BF:15:1E:8E:2A:32:07:95 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 572A5060C3FBE55F62FDE0B593BEBB23064909BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 07:02:04 +0000 Manifest this update: Wed 04 Nov 2026 06:57:04 +0000 Manifest next update: Thu 05 Nov 2026 07:41:04 +0000 Files and hashes: 1: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: l8ohCx5KKe6vzZ2nSmEm+DdG5SAkylYhzhF5xRn+cHM=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) 3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2a:50:60:c3:fb:e5:5f:62:fd:e0:b5:93:be:bb:23:06:49:09:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Nov 4 06:57:04 2026 GMT Not After : Nov 5 07:41:04 2026 GMT Subject: CN=4CB0782A06863057C220ADC3BF151E8E2A320795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:62:4c:af:54:63:f9:ee:d9:12:b5:6a:12: 34:5a:c9:68:56:3d:17:5b:7e:38:34:cc:fc:28:6f: ef:64:40:7b:f7:eb:e0:9e:68:bd:dc:e6:75:30:82: be:93:8e:8c:2d:fd:26:4f:ea:fd:3a:1c:7c:e3:50: 8b:17:7c:5e:53:50:4f:91:7a:a3:2d:d5:be:ce:24: f3:67:c5:79:15:54:4f:22:7d:92:63:ef:99:5d:b6: b6:a1:ba:b2:33:8e:24:33:5c:c2:d2:75:ab:9a:78: 71:4b:4d:e6:1e:f4:60:44:b3:8d:4f:b8:a2:58:d2: 7f:06:64:47:f2:1b:e9:d6:56:27:cd:88:fd:eb:8b: 53:b1:18:73:23:32:b6:65:d7:f9:ce:82:1f:6d:be: 69:08:bd:26:9c:cd:6e:48:f8:d1:be:6a:b9:cd:b8: 33:7f:5d:ef:cf:45:b6:c1:4f:d3:f5:cf:48:c0:8a: 87:1a:52:71:1d:84:4b:84:e8:30:99:72:9a:42:08: 54:74:cc:57:05:a2:73:66:bf:66:81:ee:b1:6f:92: ed:db:57:3a:31:3e:77:9e:e8:4c:20:bd:9d:2d:c2: 3d:de:38:3b:bb:5e:d0:b0:6d:a1:91:4b:ce:dd:f1: 51:9a:42:fe:3d:14:45:af:fa:b7:bc:73:85:45:bd: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:78:2A:06:86:30:57:C2:20:AD:C3:BF:15:1E:8E:2A:32:07:95 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:32:c0:bb:a1:f5:d0:17:58:dd:e9:f5:81:6c:3e:63:c4:61: 28:5d:f5:8e:a0:38:87:d2:0a:1c:a7:47:3d:a9:76:cc:8b:dc: 43:39:67:e3:2c:92:35:33:1d:03:b3:bf:82:b5:75:eb:29:06: a7:c4:8f:6d:6e:2a:63:d3:05:94:43:23:80:7f:65:ed:82:87: 21:7b:f4:03:02:25:d1:0b:84:5d:43:2b:99:3f:72:6b:49:75: 10:4a:70:17:10:97:26:05:21:12:03:3b:a9:d7:77:ae:d1:30: bc:08:92:f7:aa:26:1a:95:1a:9a:ab:b8:59:6c:eb:ed:63:31: 5b:e1:72:cd:cb:4b:e7:5c:f0:17:4c:65:48:66:f9:9a:4f:b6: bc:46:01:96:d5:14:db:7c:29:bf:ac:c9:60:d3:59:f8:f5:2a: b8:a8:5f:c7:be:ac:c0:24:b1:e2:f9:bc:d6:ba:07:67:35:c9: 77:7c:5a:08:15:2e:aa:d6:20:94:1a:4e:c2:8d:18:1c:a4:5a: ba:35:36:24:17:7a:94:e0:c8:dd:63:e3:78:eb:eb:fb:a0:7b: 63:3b:6f:8c:ea:06:40:4a:32:a2:a2:84:b9:b8:16:2d:2e:8c: d6:68:80:d1:0d:6d:c0:69:3f:b5:45:27:0e:95:0d:b4:40:14: e6:d3:9b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVypQYMP75V9i/eC1k767IwZJCb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjExMDQwNjU3MDRaFw0yNjExMDUwNzQxMDRaMDMxMTAvBgNV BAMTKDRDQjA3ODJBMDY4NjMwNTdDMjIwQURDM0JGMTUxRThFMkEzMjA3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZxGJMr1Rj+e7ZErVqEjRayWhW PRdbfjg0zPwob+9kQHv36+CeaL3c5nUwgr6Tjowt/SZP6v06HHzjUIsXfF5TUE+R eqMt1b7OJPNnxXkVVE8ifZJj75ldtrahurIzjiQzXMLSdauaeHFLTeYe9GBEs41P uKJY0n8GZEfyG+nWVifNiP3ri1OxGHMjMrZl1/nOgh9tvmkIvSaczW5I+NG+arnN uDN/Xe/PRbbBT9P1z0jAiocaUnEdhEuE6DCZcppCCFR0zFcFonNmv2aB7rFvku3b VzoxPnee6EwgvZ0twj3eODu7XtCwbaGRS87d8VGaQv49FEWv+re8c4VFvYU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLB4KgaGMFfCIK3DvxUejioyB5UwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8ywLuh9dAXWN3p9YFsPmPEYShd9Y6gOIfS ChynRz2pdsyL3EM5Z+MskjUzHQOzv4K1despBqfEj21uKmPTBZRDI4B/Ze2ChyF7 9AMCJdELhF1DK5k/cmtJdRBKcBcQlyYFIRIDO6nXd67RMLwIkveqJhqVGpqruFls 6+1jMVvhcs3LS+dc8BdMZUhm+ZpPtrxGAZbVFNt8Kb+syWDTWfj1KrioX8e+rMAk seL5vNa6B2c1yXd8WggVLqrWIJQaTsKNGBykWro1NiQXepTgyN1j43jr6/uge2M7 b4zqBkBKMqKihLm4Fi0ujNZogNENbcBpP7VFJw6VDbRAFObTmxU= -----END CERTIFICATE-----Generated at Thu Nov 5 01:16:49 2026 by rpki-client