$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json) Hash identifier: Ly4x7XjXKE/TjF2B9ikaHZ4+xRVHR9x/5v9lE3zywZE= Subject key identifier: 06:8B:BA:FE:68:B1:59:3B:D3:5C:22:C9:7A:6E:A6:71:96:79:E4:8C Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Certificate serial: 43BB34549F0C8A6172F10458E0F32B1AC8643EDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 03:27:27 +0000 Manifest this update: Wed 04 Nov 2026 03:22:27 +0000 Manifest next update: Thu 05 Nov 2026 05:53:27 +0000 Files and hashes: 1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=) 2: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: 7U3YOBfTu9pqbkX0VtcfrxeB5/3lrnnz14Tv18rgsEM=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bb:34:54:9f:0c:8a:61:72:f1:04:58:e0:f3:2b:1a:c8:64:3e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5 Validity Not Before: Nov 4 03:22:27 2026 GMT Not After : Nov 5 05:53:27 2026 GMT Subject: CN=068BBAFE68B1593BD35C22C97A6EA6719679E48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:38:35:e8:94:19:ab:c4:b3:bb:a1:dd:b7: 4f:1d:2d:22:00:d1:71:8f:10:ac:2c:3c:a4:f5:be: 13:b8:2d:bf:d1:4e:78:69:bb:d3:d6:cb:8c:e0:83: 40:a1:37:c8:be:c7:19:47:ea:07:c1:6b:35:32:0b: 9e:d8:92:07:c0:19:36:98:a0:67:06:cf:92:5a:9a: 53:17:10:3c:ee:cc:7e:43:6a:88:26:91:96:3c:fd: 69:ab:5a:89:66:08:99:9a:65:4b:e5:78:41:da:6c: b8:66:f9:7e:3f:e9:94:e6:af:fa:a8:57:80:c8:30: e7:a0:91:69:2e:cf:ed:b1:39:a7:fa:77:c3:bf:53: 4f:5d:01:e6:a7:3a:a6:4e:e4:10:c5:36:e7:a1:3b: 28:f4:1b:b7:70:e6:f7:6e:17:f4:eb:17:b9:a7:d3: 76:6d:95:a6:e9:07:ef:2c:79:c9:d9:e4:e5:a9:21: 36:e1:65:93:87:cc:b8:22:92:cd:d8:d4:a2:1d:aa: 18:9e:48:fc:27:59:ea:65:b9:54:f6:76:b2:56:76: de:19:53:c2:a8:b9:78:1f:2d:0d:c6:81:73:bc:67: 62:ad:2e:7c:27:89:86:7a:7d:e3:a3:ba:3c:91:18: a1:c8:1c:d9:02:a0:53:ed:14:3b:58:b7:d2:db:91: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8B:BA:FE:68:B1:59:3B:D3:5C:22:C9:7A:6E:A6:71:96:79:E4:8C X509v3 Authority Key Identifier: keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8f:fc:ab:fd:b0:cb:41:ba:9c:c0:18:d3:23:4a:ba:a8:8a: f4:5b:97:7a:1b:c3:c2:b6:d0:25:09:82:2b:a1:40:fd:76:71: 97:4c:9a:b0:06:c0:9e:4a:a0:a8:48:73:0a:3a:cd:24:2e:54: 88:94:26:00:a9:1e:d7:7a:eb:ad:1e:f9:d5:79:f5:17:cd:ee: e4:bc:a9:84:6a:bf:56:14:b0:ed:58:f0:82:a4:95:b8:ce:4c: 7e:ee:e8:54:76:5a:23:f3:a9:ae:0c:5b:1b:b5:8e:d3:50:ef: fc:17:f4:c8:58:ea:c9:bc:e9:a7:f5:d8:6c:a9:2b:6c:ca:d7: b0:75:75:07:04:bb:2f:3e:af:a7:f5:e2:04:be:a7:c0:1b:62: ac:fa:06:d7:1c:d8:a4:46:d5:33:30:56:bb:99:ac:c7:33:3c: d0:07:f4:23:ad:53:ab:90:9f:11:2a:5f:10:5a:9a:72:d0:bd: a4:da:d6:ed:b5:c2:e4:b9:c5:c8:32:cd:ce:04:7e:a1:16:5e: 8f:8e:2a:5c:9c:77:08:e5:60:51:50:cb:ff:0d:70:c9:bd:cd: 78:98:f8:30:a6:f8:26:ab:55:11:a8:7b:08:03:37:8c:3d:ba: ad:87:76:fb:32:d1:90:97:80:45:b1:78:1c:79:26:54:34:c9: 71:4b:a7:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7s0VJ8MimFy8QRY4PMrGshkPt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG MEYzRTZGNTAeFw0yNjExMDQwMzIyMjdaFw0yNjExMDUwNTUzMjdaMDMxMTAvBgNV BAMTKDA2OEJCQUZFNjhCMTU5M0JEMzVDMjJDOTdBNkVBNjcxOTY3OUU0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFTg16JQZq8Szu6Hdt08dLSIA 0XGPEKwsPKT1vhO4Lb/RTnhpu9PWy4zgg0ChN8i+xxlH6gfBazUyC57YkgfAGTaY oGcGz5JamlMXEDzuzH5DaogmkZY8/WmrWolmCJmaZUvleEHabLhm+X4/6ZTmr/qo V4DIMOegkWkuz+2xOaf6d8O/U09dAeanOqZO5BDFNuehOyj0G7dw5vduF/TrF7mn 03ZtlabpB+8secnZ5OWpITbhZZOHzLgiks3Y1KIdqhieSPwnWepluVT2drJWdt4Z U8KouXgfLQ3GgXO8Z2KtLnwniYZ6feOjujyRGKHIHNkCoFPtFDtYt9LbkTRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBou6/mixWTvTXCLJem6mcZZ55IwwHwYDVR0j BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4 M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaP/Kv9sMtBupzAGNMjSrqoivRbl3obw8K2 0CUJgiuhQP12cZdMmrAGwJ5KoKhIcwo6zSQuVIiUJgCpHtd6660e+dV59RfN7uS8 qYRqv1YUsO1Y8IKklbjOTH7u6FR2WiPzqa4MWxu1jtNQ7/wX9MhY6sm86af12Gyp K2zK17B1dQcEuy8+r6f14gS+p8AbYqz6Btcc2KRG1TMwVruZrMczPNAH9COtU6uQ nxEqXxBamnLQvaTa1u21wuS5xcgyzc4EfqEWXo+OKlycdwjlYFFQy/8NcMm9zXiY +DCm+CarVRGoewgDN4w9uq2Hdvsy0ZCXgEWxeBx5JlQ0yXFLp4E= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:23 2026 by rpki-client