$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft File: 01B748FE9E379A963DF80DAA39E554231A002AB4.mft (raw, json) Hash identifier: yg/Ol2ZD2eUCfvJfXOwIcvmOFTPhjDjoBY1EvuGRjVM= Subject key identifier: 08:5D:86:F2:1B:60:E5:EE:F6:AF:21:78:FC:18:3E:66:BB:8C:F4:FA Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 Certificate issuer: /CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Certificate serial: 40DA33CAE3030C0D912FE0F5E57BA94C0AC75C65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 03:42:19 +0000 Manifest this update: Tue 03 Nov 2026 03:37:19 +0000 Manifest next update: Wed 04 Nov 2026 04:43:19 +0000 Files and hashes: 1: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=) 2: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=) 3: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: OUi2dWqVUs4mn5PgnV5FjoZyNlm2gHfbdDmeMNM+lt0=) 4: 01B748FE9E379A963DF80DAA39E554231A002AB4.crl (hash: Qm9V2pJFtJRIrMjQe3P7ChKg9lqd1Jd9uei2maBmogk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:da:33:ca:e3:03:0c:0d:91:2f:e0:f5:e5:7b:a9:4c:0a:c7:5c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Validity Not Before: Nov 3 03:37:19 2026 GMT Not After : Nov 4 04:43:19 2026 GMT Subject: CN=085D86F21B60E5EEF6AF2178FC183E66BB8CF4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:12:9b:c2:83:88:ce:a5:04:a7:c5:97:6c: 68:6f:20:a5:bd:86:17:56:e0:64:e3:3c:39:97:30: 6c:27:59:dd:91:b8:7c:d9:49:66:a9:41:c0:d6:38: b0:21:74:e8:0d:39:fd:71:bb:e0:d5:c8:15:b7:13: a7:76:64:c3:f5:a2:40:31:46:00:d2:48:99:6f:19: 1a:fa:43:ca:7d:84:f2:f9:ca:dd:00:53:f5:cd:b8: e4:04:c7:1f:1c:d8:53:43:d6:4e:c8:4d:d2:ec:e5: 76:ba:48:66:ca:b1:ab:c3:9e:6a:4d:4a:3b:22:dc: 06:97:71:82:a3:f8:73:df:8e:5f:b0:4f:03:f3:96: 43:63:ad:2d:b6:92:9c:71:e4:f6:6b:03:c6:b7:6e: 8d:3e:a6:b2:48:f5:8d:7f:5b:2e:c1:31:70:61:c1: ea:e6:f2:ef:20:4c:f0:bf:8b:93:8c:8c:b7:7d:0b: 3a:8a:b4:bb:7d:95:aa:eb:ea:cc:0d:25:ea:18:ba: 52:f6:4e:60:1a:42:75:8c:33:8d:e6:a3:cf:be:a8: f8:89:bf:48:68:dc:6b:25:71:2d:ff:d7:f1:af:bf: d6:d9:29:3b:88:a7:8a:fa:a7:9e:1a:f0:55:b6:59: 9a:f7:22:f4:7b:fd:6d:5d:72:7a:5c:5d:97:3d:27: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5D:86:F2:1B:60:E5:EE:F6:AF:21:78:FC:18:3E:66:BB:8C:F4:FA X509v3 Authority Key Identifier: keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0e:31:9c:ce:4a:52:ea:8f:68:a9:ab:64:41:57:e3:00:c8: 1d:94:6d:1b:48:1a:00:66:5f:22:d0:a3:59:47:b6:ab:74:c9: b6:9c:a5:3e:b1:4b:0e:95:f8:3f:82:63:1b:0c:76:c2:df:eb: 21:98:99:4f:9b:fe:af:b0:e1:2a:08:44:b4:22:60:73:82:4f: ab:1b:eb:45:65:73:13:ad:10:a1:e3:1b:13:3f:0f:ab:d4:6a: ae:5d:30:38:47:00:02:c1:97:8d:d9:de:81:26:ca:18:f2:df: 1f:06:96:ad:01:ad:f3:81:01:af:03:9c:bc:fa:87:3d:ac:6e: b9:8f:79:8d:c5:9f:eb:71:68:94:c5:27:c0:ba:44:2c:c7:2e: 49:72:a8:30:c1:ad:a4:44:d6:d5:67:a8:aa:84:de:09:7d:13: d1:17:fb:6e:ae:d0:80:c6:aa:44:3b:bc:10:a0:a0:cd:0a:1f: 9b:98:a9:9c:3d:21:b2:74:35:0e:26:5a:01:cd:3b:32:0a:fb: ac:1d:1d:3f:5a:3d:36:8c:33:c8:8d:1b:b3:f1:b2:d3:36:2b: dd:8c:1f:cb:5e:a9:1e:f6:15:7e:4f:36:b0:c3:75:9b:c0:23: 1f:91:9e:24:0e:05:82:da:1f:74:df:06:67:25:ab:53:9c:e0: dc:af:95:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNozyuMDDA2RL+D15XupTArHXGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0MjMx QTAwMkFCNDAeFw0yNjExMDMwMzM3MTlaFw0yNjExMDQwNDQzMTlaMDMxMTAvBgNV BAMTKDA4NUQ4NkYyMUI2MEU1RUVGNkFGMjE3OEZDMTgzRTY2QkI4Q0Y0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/BKbwoOIzqUEp8WXbGhvIKW9 hhdW4GTjPDmXMGwnWd2RuHzZSWapQcDWOLAhdOgNOf1xu+DVyBW3E6d2ZMP1okAx RgDSSJlvGRr6Q8p9hPL5yt0AU/XNuOQExx8c2FND1k7ITdLs5Xa6SGbKsavDnmpN Sjsi3AaXcYKj+HPfjl+wTwPzlkNjrS22kpxx5PZrA8a3bo0+prJI9Y1/Wy7BMXBh werm8u8gTPC/i5OMjLd9CzqKtLt9larr6swNJeoYulL2TmAaQnWMM43mo8++qPiJ v0ho3GslcS3/1/Gvv9bZKTuIp4r6p54a8FW2WZr3IvR7/W1dcnpcXZc9J4yXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCF2G8htg5e72ryF4/Bg+ZruM9PowHwYDVR0j BBgwFoAUAbdI/p43mpY9+A2qOeVUIxoAKrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM1MDVjYjMtYjU1ZS00MGU0LWFjNzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5 RTM3OUE5NjNERjgwREFBMzlFNTU0MjMxQTAwMkFCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUI3NDhGRTlFMzc5QTk2M0RGODBEQUEzOUU1NTQyMzFBMDAy QUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0 MjMxQTAwMkFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEOMZzOSlLqj2ipq2RBV+MAyB2UbRtIGgBm XyLQo1lHtqt0ybacpT6xSw6V+D+CYxsMdsLf6yGYmU+b/q+w4SoIRLQiYHOCT6sb 60VlcxOtEKHjGxM/D6vUaq5dMDhHAALBl43Z3oEmyhjy3x8Glq0BrfOBAa8DnLz6 hz2sbrmPeY3Fn+txaJTFJ8C6RCzHLklyqDDBraRE1tVnqKqE3gl9E9EX+26u0IDG qkQ7vBCgoM0KH5uYqZw9IbJ0NQ4mWgHNOzIK+6wdHT9aPTaMM8iNG7PxstM2K92M H8teqR72FX5PNrDDdZvAIx+RniQOBYLaH3TfBmclq1Oc4NyvlZ8= -----END CERTIFICATE-----Generated at Tue Nov 3 13:55:52 2026 by rpki-client