$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft File: 4263490508EE6D5873ACA7B620F66196D4A2AE63.mft (raw, json) Hash identifier: Jsiq1cryWr2Onxjc8dat+OUyjqftbGGOs3YT4PPNBZk= Subject key identifier: 9B:61:35:1E:38:1B:B9:28:5D:02:2F:B5:DA:A7:C5:2A:F5:7F:A6:EC Authority key identifier: 42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63 Certificate issuer: /CN=4263490508EE6D5873ACA7B620F66196D4A2AE63 Certificate serial: 23CFB962CD77D64C563DA9458FB87C1C8AE526DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 09:30:00 +0000 Manifest this update: Tue 03 Nov 2026 09:25:00 +0000 Manifest next update: Wed 04 Nov 2026 11:46:00 +0000 Files and hashes: 1: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: iHApH4ig54MvTMEQeKGAbjPzbWKAy8vcZBqwYCxZPjg=) 2: 4263490508EE6D5873ACA7B620F66196D4A2AE63.crl (hash: I60v5tu4lnUgxIv4fSm7M9cElGzO3QLBcRpsSfyrUmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cf:b9:62:cd:77:d6:4c:56:3d:a9:45:8f:b8:7c:1c:8a:e5:26:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263490508EE6D5873ACA7B620F66196D4A2AE63 Validity Not Before: Nov 3 09:25:00 2026 GMT Not After : Nov 4 11:46:00 2026 GMT Subject: CN=9B61351E381BB9285D022FB5DAA7C52AF57FA6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:13:c1:8e:43:9b:3a:5b:8d:78:0f:f6:b5: 59:58:57:ef:06:52:15:57:d0:a4:0e:dd:e7:7b:5f: ea:24:db:50:4a:df:0d:6d:b3:87:f6:02:8e:f9:67: ed:c9:1f:35:2f:83:c6:1d:55:7e:78:76:fc:30:b7: a6:76:3c:c6:3a:fc:50:1d:91:d6:8b:a4:e1:6a:d7: a6:40:49:56:bd:2d:b6:01:3b:76:84:56:14:14:3c: 29:57:00:f9:06:41:ea:a9:2b:81:9a:12:00:18:ee: 06:0e:18:81:ac:75:1a:4d:9d:56:ad:a3:de:21:32: b1:cb:c8:66:77:34:ba:8e:f9:dc:f8:bf:f1:76:44: a3:d4:40:51:c2:a7:8f:32:d0:11:06:bd:8c:d7:e2: fe:ba:8e:54:b9:ea:bb:07:e8:a8:fa:55:2c:5c:85: 66:25:3e:85:c3:4e:1c:f5:1e:ec:3f:ca:66:c7:0b: 29:d3:9d:7f:96:7f:31:a7:48:86:34:0c:02:12:9e: 1a:15:42:2a:63:11:10:9c:71:c1:7f:89:61:4e:6f: 43:cd:10:76:81:c4:fb:7a:ca:5d:16:61:82:0d:05: c7:7e:9b:62:8b:ae:48:11:cd:e9:98:88:d1:56:b3: 10:54:b4:5d:84:09:12:ab:7c:d2:04:ed:81:03:bd: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:35:1E:38:1B:B9:28:5D:02:2F:B5:DA:A7:C5:2A:F5:7F:A6:EC X509v3 Authority Key Identifier: keyid:42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:52:92:fc:d8:be:35:7c:72:11:c9:16:cc:5a:77:26:b0:f6: b6:6b:57:50:f5:7e:cc:45:d8:e6:ec:cf:8d:de:29:74:da:bf: 65:57:b2:6d:f6:42:62:df:9e:be:76:19:f3:cc:75:61:70:96: 28:45:58:d0:58:03:d3:14:50:c2:f1:c5:79:de:a5:01:75:20: 0e:d3:08:69:c0:87:d3:af:b7:6d:15:00:64:f4:f4:48:7e:3d: 0a:3c:f8:cc:1c:90:0f:62:de:6e:74:d8:e6:c2:ca:8f:c1:17: e2:80:4f:0b:6f:94:de:8c:9f:88:84:54:61:59:10:96:84:97: 11:d5:32:ad:39:9b:31:c4:2d:fc:a5:51:34:c2:b4:ac:5e:ac: 52:b5:c5:7b:94:95:9a:7f:59:9a:49:2b:cc:ad:d3:bd:90:23: 9a:a7:f8:4f:de:36:07:9e:07:31:50:5e:82:36:fb:ea:69:66: 78:5a:b0:0b:b4:ad:c9:f7:28:75:ef:1c:02:44:32:98:1b:32: 01:1b:95:31:5c:11:9f:f8:73:0f:78:ae:fa:39:2f:2f:50:ce: 03:f2:0d:8f:02:c0:37:12:30:e0:be:4f:d9:86:f8:0f:04:76: 35:85:85:ec:2c:19:8b:3a:5d:54:b1:40:67:b7:b9:0c:ad:53: 72:fd:f3:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8+5Ys131kxWPalFj7h8HIrlJt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI2MzQ5MDUwOEVFNkQ1ODczQUNBN0I2MjBGNjYxOTZE NEEyQUU2MzAeFw0yNjExMDMwOTI1MDBaFw0yNjExMDQxMTQ2MDBaMDMxMTAvBgNV BAMTKDlCNjEzNTFFMzgxQkI5Mjg1RDAyMkZCNURBQTdDNTJBRjU3RkE2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsBPBjkObOluNeA/2tVlYV+8G UhVX0KQO3ed7X+ok21BK3w1ts4f2Ao75Z+3JHzUvg8YdVX54dvwwt6Z2PMY6/FAd kdaLpOFq16ZASVa9LbYBO3aEVhQUPClXAPkGQeqpK4GaEgAY7gYOGIGsdRpNnVat o94hMrHLyGZ3NLqO+dz4v/F2RKPUQFHCp48y0BEGvYzX4v66jlS56rsH6Kj6VSxc hWYlPoXDThz1Huw/ymbHCynTnX+WfzGnSIY0DAISnhoVQipjERCcccF/iWFOb0PN EHaBxPt6yl0WYYINBcd+m2KLrkgRzemYiNFWsxBUtF2ECRKrfNIE7YEDvX/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2E1HjgbuShdAi+12qfFKvV/puwwHwYDVR0j BBgwFoAUQmNJBQjubVhzrKe2IPZhltSirmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzEvNDI2MzQ5MDUw OEVFNkQ1ODczQUNBN0I2MjBGNjYxOTZENEEyQUU2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjYzNDkwNTA4RUU2RDU4NzNBQ0E3QjYyMEY2NjE5NkQ0QTJB RTYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzEvNDI2MzQ5MDUwOEVFNkQ1ODczQUNBN0I2MjBGNjYx OTZENEEyQUU2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1SkvzYvjV8chHJFsxadyaw9rZrV1D1fsxF 2Obsz43eKXTav2VXsm32QmLfnr52GfPMdWFwlihFWNBYA9MUUMLxxXnepQF1IA7T CGnAh9Ovt20VAGT09Eh+PQo8+MwckA9i3m502ObCyo/BF+KATwtvlN6Mn4iEVGFZ EJaElxHVMq05mzHELfylUTTCtKxerFK1xXuUlZp/WZpJK8yt072QI5qn+E/eNgee BzFQXoI2++ppZnhasAu0rcn3KHXvHAJEMpgbMgEblTFcEZ/4cw94rvo5Ly9QzgPy DY8CwDcSMOC+T9mG+A8EdjWFhewsGYs6XVSxQGe3uQytU3L988E= -----END CERTIFICATE-----Generated at Tue Nov 3 15:27:11 2026 by rpki-client