$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json) Hash identifier: uV6Mu8ijnsmmqVc2nRxxU+imMOYkxL8Wqeeg2BX6+KE= Subject key identifier: 66:B8:07:A2:96:D0:AB:6D:B0:69:B1:FA:88:E5:88:5F:25:2B:1B:DD Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0 Certificate serial: DEE2127FA480159B8424F6AA529B8ABFEDA4E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 13:29:53 +0000 Manifest this update: Mon 02 Nov 2026 13:24:53 +0000 Manifest next update: Tue 03 Nov 2026 14:38:53 +0000 Files and hashes: 1: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: FundSVHg+/6UAlsnrogMT9L04ZKLVFMUEE/C+WH5hy0=) 2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=) 3: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=) 4: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=) 5: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 14:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: de:e2:12:7f:a4:80:15:9b:84:24:f6:aa:52:9b:8a:bf:ed:a4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0 Validity Not Before: Nov 2 13:24:53 2026 GMT Not After : Nov 3 14:38:53 2026 GMT Subject: CN=66B807A296D0AB6DB069B1FA88E5885F252B1BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e4:3d:9b:a5:41:85:57:3e:f0:51:f0:b1:e7: 64:81:84:ca:d7:f6:c4:fe:a1:03:3f:f3:0f:11:37: b7:7e:24:a0:47:64:4f:e3:4e:62:cc:b2:c1:07:d2: 3e:27:e0:6a:9d:07:13:bb:72:6a:46:e0:df:99:25: f1:f2:ce:87:7a:32:bf:b0:ed:69:d4:cf:e4:fe:5b: 8a:8b:42:6a:33:3d:00:c6:28:83:63:84:26:24:86: 55:9b:62:bb:34:d9:d0:cf:b9:21:c5:3f:f0:c4:a6: ad:db:54:d2:38:7f:c6:3c:3a:b4:d1:35:15:e3:36: bc:5d:e8:af:3e:0a:e5:86:a5:11:d6:e1:65:33:8f: 41:35:c3:58:28:8c:fa:c2:79:5c:6e:75:b1:36:ff: a2:9a:82:2c:b1:fa:40:2f:1e:3e:52:2a:07:18:72: 4a:e1:ff:76:ee:24:58:42:76:cf:05:70:d1:b0:f8: 23:e3:ab:50:b2:e1:78:9e:6e:1c:ea:2a:ea:b2:54: c5:cc:f7:25:59:3c:8f:32:68:35:55:2e:dc:4c:70: e6:98:ef:49:12:1c:89:bc:73:77:04:0b:d0:43:45: 74:6b:1f:0f:08:20:fa:67:1b:79:c0:9a:1c:f0:35: 1f:c1:f7:5e:a7:f8:a4:75:6c:2c:01:c7:dc:45:8b: 08:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B8:07:A2:96:D0:AB:6D:B0:69:B1:FA:88:E5:88:5F:25:2B:1B:DD X509v3 Authority Key Identifier: keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a6:a5:e0:16:f0:9a:ca:61:48:37:c6:a3:51:21:ae:1a:6c: 29:21:ec:a2:33:da:9b:a7:32:8a:6a:c7:a3:3c:26:24:36:c3: d6:ff:41:95:38:70:18:41:ad:48:5a:bd:73:ad:a4:72:56:99: f1:80:d7:14:0c:16:d1:2e:27:92:48:0f:af:cc:e9:58:81:05: c9:14:01:34:36:a7:c1:da:d6:71:b6:f8:9f:5c:3a:b6:2b:6d: 09:a2:2b:05:50:64:dd:52:89:13:6d:ef:df:73:41:e4:1e:e1: 3c:41:c8:e7:81:cf:6f:43:44:86:f9:08:45:aa:92:a1:e4:dd: 07:d2:2b:54:df:ed:21:97:b7:06:37:70:08:97:20:58:ea:13: e0:08:e9:84:40:cf:04:56:c8:e1:b9:6a:69:a1:fe:6e:3a:da: 76:fd:4d:ea:ab:ee:64:c3:aa:66:27:81:4b:7d:ca:5d:af:d6: 76:26:f8:17:ab:d7:8e:58:ec:38:1e:15:c9:56:fe:76:86:4e: f9:7b:d3:72:37:2c:8d:5d:87:08:ac:1f:64:e3:dc:bd:b1:6c: da:9d:8e:9d:d1:08:8a:8f:74:a9:63:99:3a:25:74:29:18:3c: ff:59:ec:04:e0:02:ab:59:65:42:4e:59:9a:ed:50:c2:f5:bf: fd:93:7c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAN7iEn+kgBWbhCT2qlKbir/tpOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3 MTc2NjZFMDAeFw0yNjExMDIxMzI0NTNaFw0yNjExMDMxNDM4NTNaMDMxMTAvBgNV BAMTKDY2QjgwN0EyOTZEMEFCNkRCMDY5QjFGQTg4RTU4ODVGMjUyQjFCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5D2bpUGFVz7wUfCx52SBhMrX 9sT+oQM/8w8RN7d+JKBHZE/jTmLMssEH0j4n4GqdBxO7cmpG4N+ZJfHyzod6Mr+w 7WnUz+T+W4qLQmozPQDGKINjhCYkhlWbYrs02dDPuSHFP/DEpq3bVNI4f8Y8OrTR NRXjNrxd6K8+CuWGpRHW4WUzj0E1w1gojPrCeVxudbE2/6Kagiyx+kAvHj5SKgcY ckrh/3buJFhCds8FcNGw+CPjq1Cy4XiebhzqKuqyVMXM9yVZPI8yaDVVLtxMcOaY 70kSHIm8c3cEC9BDRXRrHw8IIPpnG3nAmhzwNR/B916n+KR1bCwBx9xFiwiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrgHopbQq22wabH6iOWIXyUrG90wHwYDVR0j BBgwFoAUSfRhFTZevfWIbn8s8TnmBnF2ZuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE0MTkzYzQtNGFiZC00ZTJjLWExZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUz NjVFQkRGNTg4NkU3RjJDRjEzOUU2MDY3MTc2NjZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OUY0NjExNTM2NUVCREY1ODg2RTdGMkNGMTM5RTYwNjcxNzY2 NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvNDlGNDYxMTUzNjVFQkRGNTg4NkU3RjJDRjEzOUU2 MDY3MTc2NjZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqmpeAW8JrKYUg3xqNRIa4abCkh7KIz2pun Mopqx6M8JiQ2w9b/QZU4cBhBrUhavXOtpHJWmfGA1xQMFtEuJ5JID6/M6ViBBckU ATQ2p8Ha1nG2+J9cOrYrbQmiKwVQZN1SiRNt799zQeQe4TxByOeBz29DRIb5CEWq kqHk3QfSK1Tf7SGXtwY3cAiXIFjqE+AI6YRAzwRWyOG5ammh/m462nb9Teqr7mTD qmYngUt9yl2v1nYm+Ber145Y7DgeFclW/naGTvl703I3LI1dhwisH2Tj3L2xbNqd jp3RCIqPdKljmToldCkYPP9Z7ATgAqtZZUJOWZrtUML1v/2TfIM= -----END CERTIFICATE-----Generated at Tue Nov 3 08:29:04 2026 by rpki-client