$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: T2SgvG6n60e+knwNKzn/Y1HONgopP/MqEYxlJQVi07I= Subject key identifier: 7E:ED:1D:E0:8C:55:DB:0A:7D:E9:DE:30:56:60:D2:EB:28:8F:C7:81 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 1572CCBB20D416A54E5CC39265DF859D8E4D9ED4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 05:19:10 +0000 Manifest this update: Mon 02 Nov 2026 05:14:10 +0000 Manifest next update: Tue 03 Nov 2026 05:57:10 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 3: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: ztXaR5y3pI1Z7fyC0nwBtXO2OymQMx17XKQFxwBq1YE=) 4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:72:cc:bb:20:d4:16:a5:4e:5c:c3:92:65:df:85:9d:8e:4d:9e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Nov 2 05:14:10 2026 GMT Not After : Nov 3 05:57:10 2026 GMT Subject: CN=7EED1DE08C55DB0A7DE9DE305660D2EB288FC781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:e0:c4:0a:fc:58:94:7c:4e:84:26:5e:75: 57:a8:79:0e:e4:36:d9:88:92:a9:c6:df:8f:55:df: 57:c9:d4:09:a3:f4:68:d7:73:aa:c4:87:db:91:77: e3:2a:f4:f9:37:10:58:83:78:d9:d3:96:e0:53:bb: 09:5c:a2:48:e1:23:e0:bb:23:94:42:4e:0f:b3:6c: 14:96:60:00:57:3e:90:77:ed:cf:0b:ee:d4:3a:4d: 01:47:cc:c8:4c:9a:77:b3:59:84:1e:8d:38:fc:b9: d0:b4:1b:82:4a:ee:5f:6d:c2:70:dc:89:d9:8e:b6: 6c:d5:e8:11:a0:79:30:27:d3:22:ce:e1:34:f6:78: cc:bd:12:bd:c8:89:b7:b7:f7:0d:01:ca:b3:b4:77: 0a:fd:12:4a:28:3e:af:f8:3d:20:7e:a8:c1:27:f2: f9:7c:24:c6:b4:79:e3:68:d7:c6:ae:9c:4e:7d:a7: 5b:5f:8a:be:c0:6a:84:65:f6:2b:b5:c9:a5:55:9b: cc:4a:ba:2f:39:67:5a:00:63:3e:a4:2a:f4:ec:21: ca:f4:f6:c4:4a:f2:29:95:8e:00:12:55:83:90:e7: c7:0c:11:50:a7:2b:eb:e3:2a:57:b4:89:4a:fe:2f: 8f:7c:69:c4:a4:a7:6c:2f:8d:03:3b:6c:cd:5d:31: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:ED:1D:E0:8C:55:DB:0A:7D:E9:DE:30:56:60:D2:EB:28:8F:C7:81 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:26:17:7b:68:ca:f3:f9:a8:b7:b8:bc:bd:5d:2c:fb:9a:b6: ba:9b:a2:0d:83:b8:ca:f2:5d:d2:6f:7d:23:df:47:9a:81:87: a1:93:31:74:e5:2c:0d:60:00:2d:09:b4:9b:e2:44:87:10:95: 39:1e:1a:4b:5f:0f:5d:5c:ef:ff:7c:8b:0e:a5:c6:32:29:b5: 57:ef:19:57:d0:9e:dc:f8:36:61:1c:bf:72:0d:fe:72:77:74: 6b:01:ae:1d:eb:d2:95:80:54:cd:1b:4c:a7:3f:78:c8:df:f0: 9b:91:c3:b5:d8:24:c9:00:f0:57:df:cb:e7:7e:0b:c4:78:68: a5:3f:14:78:47:a4:76:4b:63:f8:8f:7c:6b:b7:58:89:c3:82: 4b:99:94:65:8c:8c:ed:dc:74:d6:d8:e6:92:7b:ec:73:08:ac: 58:50:ac:b3:0f:98:5b:b0:20:8f:a9:a5:e6:e3:c5:ff:2e:9d: b6:8d:26:16:84:c1:e9:b1:4e:17:fe:17:9a:e2:d4:96:b0:28: 10:a0:26:c9:d4:a5:dd:39:02:86:b1:57:6a:bb:32:26:fd:bd: b2:be:ea:61:1b:ac:09:c0:86:e5:d1:e1:69:f7:28:69:2a:00: 24:47:5e:87:5f:9f:66:22:10:99:87:3e:1a:d9:99:9b:f3:78: fb:91:9c:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXLMuyDUFqVOXMOSZd+FnY5NntQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjExMDIwNTE0MTBaFw0yNjExMDMwNTU3MTBaMDMxMTAvBgNV BAMTKDdFRUQxREUwOEM1NURCMEE3REU5REUzMDU2NjBEMkVCMjg4RkM3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGODECvxYlHxOhCZedVeoeQ7k NtmIkqnG349V31fJ1Amj9GjXc6rEh9uRd+Mq9Pk3EFiDeNnTluBTuwlcokjhI+C7 I5RCTg+zbBSWYABXPpB37c8L7tQ6TQFHzMhMmnezWYQejTj8udC0G4JK7l9twnDc idmOtmzV6BGgeTAn0yLO4TT2eMy9Er3Iibe39w0ByrO0dwr9EkooPq/4PSB+qMEn 8vl8JMa0eeNo18aunE59p1tfir7AaoRl9iu1yaVVm8xKui85Z1oAYz6kKvTsIcr0 9sRK8imVjgASVYOQ58cMEVCnK+vjKle0iUr+L498acSkp2wvjQM7bM1dMeL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfu0d4IxV2wp96d4wVmDS6yiPx4EwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgmF3toyvP5qLe4vL1dLPuatrqbog2DuMry XdJvfSPfR5qBh6GTMXTlLA1gAC0JtJviRIcQlTkeGktfD11c7/98iw6lxjIptVfv GVfQntz4NmEcv3IN/nJ3dGsBrh3r0pWAVM0bTKc/eMjf8JuRw7XYJMkA8Fffy+d+ C8R4aKU/FHhHpHZLY/iPfGu3WInDgkuZlGWMjO3cdNbY5pJ77HMIrFhQrLMPmFuw II+ppebjxf8unbaNJhaEwemxThf+F5ri1JawKBCgJsnUpd05AoaxV2q7Mib9vbK+ 6mEbrAnAhuXR4Wn3KGkqACRHXodfn2YiEJmHPhrZmZvzePuRnEQ= -----END CERTIFICATE-----Generated at Mon Nov 2 21:20:25 2026 by rpki-client