$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json) Hash identifier: dW8zCIxk25MwxYspt3xHNovqzE7SWIzL3il7EHCvJmY= Subject key identifier: C6:8B:6B:E4:64:68:76:12:84:44:CA:BA:6A:55:09:F7:CD:A1:83:46 Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Certificate serial: 29675FA2CA927AFF01FD68801D8A23431A515BB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 07:26:56 +0000 Manifest this update: Sun 01 Nov 2026 07:21:56 +0000 Manifest next update: Mon 02 Nov 2026 09:16:56 +0000 Files and hashes: 1: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: 94yBtmtK/gA6Wu1AOlRjIZKd5+BAUwJ1Th3k2nQV4d8=) 2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 09:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:5f:a2:ca:92:7a:ff:01:fd:68:80:1d:8a:23:43:1a:51:5b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5 Validity Not Before: Nov 1 07:21:56 2026 GMT Not After : Nov 2 09:16:56 2026 GMT Subject: CN=C68B6BE4646876128444CABA6A5509F7CDA18346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:26:a4:f4:12:42:5d:a3:46:df:0b:76:07: 89:68:15:9c:ea:aa:97:ed:d3:98:d3:df:7d:43:02: bc:60:8c:6b:75:b7:b3:d5:ec:bd:57:fc:3f:fc:34: 64:de:68:c2:10:b1:ec:f6:e2:87:5d:42:91:80:f6: d5:7a:71:b7:31:99:ea:c6:0d:95:90:3d:9d:c4:dc: 87:c3:d6:52:a6:4c:40:d3:05:0b:02:1b:f1:9f:9c: f9:45:4a:28:e1:aa:34:62:fd:ff:52:e1:1e:4c:e0: 10:3a:23:9c:dc:de:a1:79:02:89:9d:d9:14:31:77: 4a:d3:18:03:c8:5a:4b:d0:20:67:92:70:eb:6b:e6: 08:3e:7e:c1:43:27:bd:f2:61:1a:e2:89:df:d4:b3: ea:ed:49:93:6c:d9:70:7b:30:b1:9a:44:9e:16:43: 5f:84:99:a1:90:53:a8:7b:82:cb:e2:f0:94:34:42: 42:37:3a:ba:ee:23:30:b1:91:fe:bc:cb:97:57:ae: d2:9d:9a:ec:0d:bf:58:3e:20:f0:75:24:f4:67:be: 7a:1a:1f:e2:b4:12:fa:58:f9:42:d1:d7:1f:b5:d1: fe:7a:ec:b0:da:61:a7:a6:32:7e:a8:ba:ab:35:42: 03:fc:9e:75:43:1a:76:31:69:9d:47:d7:c0:58:e9: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:6B:E4:64:68:76:12:84:44:CA:BA:6A:55:09:F7:CD:A1:83:46 X509v3 Authority Key Identifier: keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:e5:fb:b1:81:5b:b7:11:50:0b:95:88:4f:5d:e8:be:59: a2:a4:26:7a:2f:1f:72:1b:7f:a3:5e:b0:4f:4b:f8:80:ca:aa: bd:61:a1:71:79:83:d5:ae:aa:b1:f0:b6:39:90:f3:18:d2:90: a8:da:a9:32:7a:0f:16:0e:34:79:0f:32:19:54:11:68:c8:35: db:9e:31:64:e2:ee:59:6b:d5:01:2d:c2:7a:fc:67:5b:fe:42: 8f:8b:b6:99:d4:00:2a:a8:7b:28:4f:22:10:c6:8e:87:8f:d4: 36:3a:08:17:41:28:a6:65:30:9f:9f:00:85:15:be:34:73:a5: 62:6e:77:49:63:1f:7c:1e:d2:e8:9f:16:8f:1a:25:92:a8:52: f2:eb:d5:48:a7:ee:53:21:ba:1f:d6:b8:0c:02:a4:c0:5b:2b: 96:8a:4f:8b:14:2e:1b:86:b8:5d:30:4d:01:2e:3d:7a:ff:c9: eb:02:96:93:ba:09:42:38:67:92:b2:86:49:88:03:46:6d:8f: 16:1d:09:60:0e:e7:fc:d2:81:ac:65:f1:4a:81:05:b2:f2:de: fb:e3:17:2c:78:57:65:4e:75:13:e7:0a:dd:4d:97:5e:29:fa: 85:66:bd:50:24:2b:23:7e:27:1d:42:f5:e3:09:c2:ed:56:a6: 76:c1:6d:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWdfosqSev8B/WiAHYojQxpRW7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3 MDQ0Q0VCNTAeFw0yNjExMDEwNzIxNTZaFw0yNjExMDIwOTE2NTZaMDMxMTAvBgNV BAMTKEM2OEI2QkU0NjQ2ODc2MTI4NDQ0Q0FCQTZBNTUwOUY3Q0RBMTgzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiSak9BJCXaNG3wt2B4loFZzq qpft05jT331DArxgjGt1t7PV7L1X/D/8NGTeaMIQsez24oddQpGA9tV6cbcxmerG DZWQPZ3E3IfD1lKmTEDTBQsCG/GfnPlFSijhqjRi/f9S4R5M4BA6I5zc3qF5Aomd 2RQxd0rTGAPIWkvQIGeScOtr5gg+fsFDJ73yYRriid/Us+rtSZNs2XB7MLGaRJ4W Q1+EmaGQU6h7gsvi8JQ0QkI3OrruIzCxkf68y5dXrtKdmuwNv1g+IPB1JPRnvnoa H+K0EvpY+ULR1x+10f567LDaYaemMn6ouqs1QgP8nnVDGnYxaZ1H18BY6UpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxotr5GRodhKERMq6alUJ982hg0YwHwYDVR0j BBgwFoAUTZjDauQU3ir6umJcYBGIM3BEzrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNmQ4NmItZTNkZi00ZTJmLTkzNmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFF NDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3MDQ0Q0VCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDk4QzM2QUU0MTRERTJBRkFCQTYyNUM2MDExODgzMzcwNDRD RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4 MzM3MDQ0Q0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIU5fuxgVu3EVALlYhPXei+WaKkJnovH3Ib f6NesE9L+IDKqr1hoXF5g9WuqrHwtjmQ8xjSkKjaqTJ6DxYONHkPMhlUEWjINdue MWTi7llr1QEtwnr8Z1v+Qo+LtpnUACqoeyhPIhDGjoeP1DY6CBdBKKZlMJ+fAIUV vjRzpWJud0ljH3we0uifFo8aJZKoUvLr1Uin7lMhuh/WuAwCpMBbK5aKT4sULhuG uF0wTQEuPXr/yesClpO6CUI4Z5KyhkmIA0ZtjxYdCWAO5/zSgaxl8UqBBbLy3vvj Fyx4V2VOdRPnCt1Nl14p+oVmvVAkKyN+Jx1C9eMJwu1WpnbBbYg= -----END CERTIFICATE-----Generated at Sun Nov 1 21:05:17 2026 by rpki-client