$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: f4tspfumoFKbcpRjmwBoFNFfBcIkhU6ZvAFOzPGIIio= Subject key identifier: DA:C7:71:A3:FC:94:53:4A:3C:F6:64:22:B7:25:0D:7E:91:78:BF:E4 Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 4FAAA6B45B2E892D6834065EB7530E8DDE98244F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 20:33:14 +0000 Manifest this update: Tue 03 Nov 2026 20:28:14 +0000 Manifest next update: Wed 04 Nov 2026 21:15:14 +0000 Files and hashes: 1: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) 2: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: t3SEiD4gl6vb9IKiSxWjQz18oBpSWtfEzqm2D3xLRXI=) 3: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:aa:a6:b4:5b:2e:89:2d:68:34:06:5e:b7:53:0e:8d:de:98:24:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Nov 3 20:28:14 2026 GMT Not After : Nov 4 21:15:14 2026 GMT Subject: CN=DAC771A3FC94534A3CF66422B7250D7E9178BFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:7e:dc:45:77:5c:60:e8:1c:79:c0:66:a3: d4:53:a0:47:25:10:4d:96:4d:57:2b:6f:b4:02:41: 37:1e:29:44:1b:33:45:8e:de:38:c5:4d:89:f9:d4: 62:41:98:13:b0:b8:69:dc:d1:9d:96:1c:02:32:5a: 2d:85:a7:55:54:2f:dc:9e:79:69:cd:b1:51:58:53: 25:cf:04:92:19:2b:8f:70:fa:84:2d:50:1a:55:f7: a4:af:be:cc:60:ac:16:fb:ac:63:d8:fa:2f:bb:43: c5:01:2e:d3:fd:17:eb:fc:5f:50:bd:72:ad:66:71: c6:5d:38:80:0e:c9:d5:84:11:05:8c:57:8f:51:c2: 8a:26:fb:ff:25:bd:4c:6e:57:27:5a:5a:26:44:32: c3:69:3f:3b:00:b4:c2:66:a8:26:6b:1e:0f:a0:ad: 59:28:c3:91:27:13:e5:33:6b:6a:9d:0a:1b:64:ee: 21:20:01:b1:31:6a:5c:c9:1c:c6:30:76:e1:18:6a: 1a:59:4e:da:64:13:9a:ba:b2:af:2d:b5:33:a3:df: b3:e5:6a:53:7d:38:2b:00:09:ca:ce:a9:6e:32:bd: 24:45:4d:00:98:cd:d9:1b:13:67:be:76:48:de:85: d5:c8:3d:6c:b6:78:65:ca:a2:02:ec:07:ff:3c:16: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:71:A3:FC:94:53:4A:3C:F6:64:22:B7:25:0D:7E:91:78:BF:E4 X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1c:04:48:b9:1b:6c:df:2b:7c:3d:a6:18:cf:99:ff:4e:92: 81:ff:e0:18:a2:9c:6a:48:d6:bc:71:4b:11:51:41:4c:26:d2: 2d:97:bb:e5:a4:7b:80:ab:18:30:80:31:8f:86:38:5c:28:b0: 86:c1:2c:f2:f4:1a:77:27:30:9c:02:be:f3:95:38:4a:67:68: fb:d0:04:36:c2:c9:e5:0c:43:f2:03:22:e2:a9:e5:3f:14:8d: ad:11:1e:de:e2:57:d4:c7:51:70:31:ee:a1:01:a3:e0:56:c2: 77:26:ac:79:d6:bb:20:c2:68:fb:73:f3:82:6f:4e:6b:85:3c: ca:b7:6b:6f:d0:f9:48:50:23:6f:2b:67:11:61:9f:1b:c5:f6: 0e:c8:ad:de:b2:c4:42:3d:29:60:8f:ba:e5:cf:17:5e:41:6c: b2:26:a4:54:d4:74:f7:d4:5e:d2:54:74:79:90:62:fb:7f:0b: 16:92:e1:a6:97:5b:a5:8d:2b:67:1a:15:99:11:55:57:80:97: 8b:cf:82:09:95:1b:26:07:cb:bc:d6:a7:13:37:1b:72:5b:c3: 21:04:32:22:88:23:40:7e:3c:7c:d5:7c:35:77:83:30:a1:f1: eb:f6:1f:c3:f7:28:2f:01:71:e0:c5:6f:b9:d8:07:b1:23:00: e5:00:a8:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6qmtFsuiS1oNAZet1MOjd6YJE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjExMDMyMDI4MTRaFw0yNjExMDQyMTE1MTRaMDMxMTAvBgNV BAMTKERBQzc3MUEzRkM5NDUzNEEzQ0Y2NjQyMkI3MjUwRDdFOTE3OEJGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsX7cRXdcYOgcecBmo9RToEcl EE2WTVcrb7QCQTceKUQbM0WO3jjFTYn51GJBmBOwuGnc0Z2WHAIyWi2Fp1VUL9ye eWnNsVFYUyXPBJIZK49w+oQtUBpV96SvvsxgrBb7rGPY+i+7Q8UBLtP9F+v8X1C9 cq1mccZdOIAOydWEEQWMV49Rwoom+/8lvUxuVydaWiZEMsNpPzsAtMJmqCZrHg+g rVkow5EnE+Uza2qdChtk7iEgAbExalzJHMYwduEYahpZTtpkE5q6sq8ttTOj37Pl alN9OCsACcrOqW4yvSRFTQCYzdkbE2e+dkjehdXIPWy2eGXKogLsB/88FvjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sdxo/yUU0o89mQityUNfpF4v+QwHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwcBEi5G2zfK3w9phjPmf9OkoH/4BiinGpI 1rxxSxFRQUwm0i2Xu+Wke4CrGDCAMY+GOFwosIbBLPL0GncnMJwCvvOVOEpnaPvQ BDbCyeUMQ/IDIuKp5T8Uja0RHt7iV9THUXAx7qEBo+BWwncmrHnWuyDCaPtz84Jv TmuFPMq3a2/Q+UhQI28rZxFhnxvF9g7Ird6yxEI9KWCPuuXPF15BbLImpFTUdPfU XtJUdHmQYvt/CxaS4aaXW6WNK2caFZkRVVeAl4vPggmVGyYHy7zWpxM3G3JbwyEE MiKII0B+PHzVfDV3gzCh8ev2H8P3KC8BceDFb7nYB7EjAOUAqPg= -----END CERTIFICATE-----Generated at Wed Nov 4 05:51:05 2026 by rpki-client