$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json) Hash identifier: WApJCUL1svd1tqQkcS4/UFhvBkeGO9RY3gCoHDFmtg8= Subject key identifier: 11:65:C0:5B:92:9C:D8:CF:63:ED:C0:E3:6A:DC:5B:DA:4B:20:1A:1C Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Certificate serial: 4F31DAE69D3EFD05F4A32995895353996F2DCF43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft Manifest number: FA Signing time: Thu 05 Nov 2026 04:14:15 +0000 Manifest this update: Thu 05 Nov 2026 04:09:15 +0000 Manifest next update: Fri 06 Nov 2026 05:33:15 +0000 Files and hashes: 1: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: UlANh4C4DmWSqsoMqaKiHI5YyaKRwQndMY41UXJKjlE=) 2: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=) 3: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 05:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:31:da:e6:9d:3e:fd:05:f4:a3:29:95:89:53:53:99:6f:2d:cf:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA Validity Not Before: Nov 5 04:09:15 2026 GMT Not After : Nov 6 05:33:15 2026 GMT Subject: CN=1165C05B929CD8CF63EDC0E36ADC5BDA4B201A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:a5:40:e7:6e:89:e9:f6:7b:96:65:95:cc: d1:e8:e2:d9:ae:9d:99:37:ba:78:58:16:ac:20:2a: 45:27:69:f7:99:41:d6:13:07:7b:e2:82:a5:bf:18: 94:4e:71:9b:ed:c8:5b:db:b4:5b:f2:23:c3:22:a5: 69:32:b1:4a:0d:36:c0:9f:22:77:3d:76:81:fd:e1: 01:c5:d0:e7:6f:17:19:08:56:28:41:3a:60:43:a8: f5:37:48:aa:a2:d8:d1:2b:92:56:35:dc:41:dd:f8: 70:cc:44:52:ed:48:51:59:14:38:54:74:60:a4:da: d2:6c:ed:20:9d:f6:27:96:82:27:50:26:ea:49:34: a2:aa:4e:72:60:5a:b5:16:e1:84:09:08:28:43:f2: 94:90:a9:2e:6b:03:79:6b:1e:17:54:a8:bf:7e:14: c7:c2:a8:3b:f2:81:e3:ec:d7:cb:97:b1:ee:58:ae: c4:bf:9b:86:85:3c:30:dc:15:02:9b:b4:f0:1a:99: 5e:f4:69:27:32:b4:45:cd:ed:ca:73:f6:41:13:87: f1:5d:46:46:d5:8e:d8:52:15:4d:08:c6:43:ef:bf: a2:be:de:1f:20:51:53:9a:28:87:b2:70:ea:52:71: b2:ce:d5:87:1d:1a:ec:e8:02:d9:08:97:c6:00:77: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:65:C0:5B:92:9C:D8:CF:63:ED:C0:E3:6A:DC:5B:DA:4B:20:1A:1C X509v3 Authority Key Identifier: keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:b1:c7:54:63:39:8b:f8:de:15:67:1d:52:18:4e:5d:82:66: 64:ad:8a:ab:73:ec:4c:73:8f:17:cb:d9:5d:b1:18:fd:39:fc: 66:14:31:4d:4b:3b:d2:d5:95:74:d9:98:66:4b:4f:35:2d:b9: 90:d2:9d:d0:3c:9f:15:f3:cc:24:87:fc:df:d1:46:73:c9:a6: 7b:ae:69:ac:28:3f:5a:67:8a:21:1b:76:f0:40:fa:1b:87:75: fd:f6:0d:c4:bc:f9:dd:1f:8b:9e:15:2f:97:13:12:94:65:7e: 43:ef:70:e6:9d:19:27:1d:58:40:bd:1d:4c:d1:aa:dc:88:59: ec:f3:31:3b:5a:47:37:81:51:09:07:1c:d1:a1:b1:c8:18:f3: 00:24:08:3d:47:b1:99:ba:76:60:1d:85:1f:d7:fb:c8:56:88: b7:af:bc:d1:29:d8:bc:f2:c3:6c:61:bb:b5:72:d1:59:86:b1: fd:12:7d:93:56:63:93:4f:ec:43:1b:c4:36:c0:4e:70:e1:fc: 4b:87:24:c3:40:88:23:ea:4c:64:1c:99:6d:a9:b7:23:71:1b: d6:d4:a9:5d:fe:b5:00:35:f1:af:fa:c2:cb:80:f4:6e:2d:88: 95:a9:8a:81:5a:10:0f:91:8f:1f:af:b6:79:e3:cc:0a:74:bf: 40:07:ad:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzHa5p0+/QX0oymViVNTmW8tz0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVBQkRG OUM3NzZGQTAeFw0yNjExMDUwNDA5MTVaFw0yNjExMDYwNTMzMTVaMDMxMTAvBgNV BAMTKDExNjVDMDVCOTI5Q0Q4Q0Y2M0VEQzBFMzZBREM1QkRBNEIyMDFBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/O6VA526J6fZ7lmWVzNHo4tmu nZk3unhYFqwgKkUnafeZQdYTB3vigqW/GJROcZvtyFvbtFvyI8MipWkysUoNNsCf Inc9doH94QHF0OdvFxkIVihBOmBDqPU3SKqi2NErklY13EHd+HDMRFLtSFFZFDhU dGCk2tJs7SCd9ieWgidQJupJNKKqTnJgWrUW4YQJCChD8pSQqS5rA3lrHhdUqL9+ FMfCqDvygePs18uXse5YrsS/m4aFPDDcFQKbtPAamV70aScytEXN7cpz9kETh/Fd RkbVjthSFU0IxkPvv6K+3h8gUVOaKIeycOpScbLO1YcdGuzoAtkIl8YAd2sRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWXAW5Kc2M9j7cDjatxb2ksgGhwwHwYDVR0j BBgwFoAUT8SN1KBNbzmTGvHo3uNavfnHdvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IwMWM5NjctOTlkMC00YzIxLTk2NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRB MDRENkYzOTkzMUFGMUU4REVFMzVBQkRGOUM3NzZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkM0OERENEEwNEQ2RjM5OTMxQUYxRThERUUzNUFCREY5Qzc3 NkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvNEZDNDhERDRBMDRENkYzOTkzMUFGMUU4REVFMzVB QkRGOUM3NzZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOmxx1RjOYv43hVnHVIYTl2CZmStiqtz7Exz jxfL2V2xGP05/GYUMU1LO9LVlXTZmGZLTzUtuZDSndA8nxXzzCSH/N/RRnPJpnuu aawoP1pniiEbdvBA+huHdf32DcS8+d0fi54VL5cTEpRlfkPvcOadGScdWEC9HUzR qtyIWezzMTtaRzeBUQkHHNGhscgY8wAkCD1HsZm6dmAdhR/X+8hWiLevvNEp2Lzy w2xhu7Vy0VmGsf0SfZNWY5NP7EMbxDbATnDh/EuHJMNAiCPqTGQcmW2ptyNxG9bU qV3+tQA18a/6wsuA9G4tiJWpioFaEA+Rjx+vtnnjzAp0v0AHrYM= -----END CERTIFICATE-----Generated at Thu Nov 5 17:38:24 2026 by rpki-client