$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft File: B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft (raw, json) Hash identifier: Yjn6XjHuygjGDGU9nDAs1SQVq7HBR1ynwaR+Uh79Kpg= Subject key identifier: 2F:A1:A3:E5:05:59:6B:F0:AF:AB:8F:98:33:69:37:B4:25:37:93:A4 Authority key identifier: B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79 Certificate issuer: /CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279 Certificate serial: 5AD33B46A480F16F9E2057E787D6F9867EFF9F96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 00:38:49 +0000 Manifest this update: Wed 04 Nov 2026 00:33:49 +0000 Manifest next update: Thu 05 Nov 2026 01:17:49 +0000 Files and hashes: 1: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: W3BqOyBvgv9ZGlE75nq9UMAZmqS7PmSAhfmH8SJpDVI=) 2: B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl (hash: 1rA81oQYAFxvBBiWbDI8b6Q4Z2rRpYOJqh/hkGlXKRw=) 3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: D5q5bTHq8BQ04TyBnr4PuuXdKyx0oQAzkOAr8cWDZtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d3:3b:46:a4:80:f1:6f:9e:20:57:e7:87:d6:f9:86:7e:ff:9f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279 Validity Not Before: Nov 4 00:33:49 2026 GMT Not After : Nov 5 01:17:49 2026 GMT Subject: CN=2FA1A3E505596BF0AFAB8F98336937B4253793A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:e1:b6:7e:79:c5:df:e0:b8:25:55:32:fe: 51:e4:1a:61:e9:7e:6f:89:68:80:f6:5e:67:74:dc: 22:35:89:6d:ea:7c:9a:6d:64:d8:d8:54:a1:6f:fd: 3a:67:b1:da:2b:17:f9:8b:d8:2b:8d:b6:5c:c1:5a: 40:12:dd:97:bd:85:46:c2:76:ad:7f:cb:53:fe:b6: c0:46:19:19:02:af:1b:d6:ed:7b:3f:a0:87:c4:f8: c4:38:68:2d:47:fc:78:5e:e6:de:95:54:37:5b:dc: 53:4e:53:00:31:e0:30:37:4e:70:9d:33:c1:f6:de: 4c:e6:d4:df:21:bc:78:9d:d7:1c:45:d3:03:e7:f6: 57:8b:f1:d2:1e:48:62:f5:63:b3:4e:ec:74:54:9f: e0:a7:d3:27:b8:1e:f9:45:0e:e8:70:62:b6:2f:2a: e8:3a:e9:54:3f:f3:57:01:30:5d:57:d7:24:c9:84: 13:11:92:a4:f7:cd:ab:fe:6f:4c:15:1a:e9:1c:54: ad:dd:3a:95:5c:9a:92:60:95:22:dc:5d:64:3a:0d: 94:97:01:8a:48:97:50:f0:72:45:0a:82:86:3e:2b: 66:53:af:a8:dd:75:95:1f:89:04:5b:cf:be:be:67: 6b:4d:29:c6:82:aa:9a:93:e7:df:e4:c4:0e:d3:ab: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A1:A3:E5:05:59:6B:F0:AF:AB:8F:98:33:69:37:B4:25:37:93:A4 X509v3 Authority Key Identifier: keyid:B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:09:1f:de:83:51:cc:6b:b4:12:28:32:49:38:79:ce:27:12: 1e:7f:49:d1:83:c2:3a:e9:a0:6a:0a:6b:8d:40:69:60:41:66: 4c:ea:c4:3d:a4:40:ef:73:6f:68:17:c3:de:d8:e4:9e:8d:cd: 40:08:6b:8e:21:06:84:9f:9a:2e:f9:49:0a:4f:43:bf:56:30: 93:05:2a:6d:40:1c:3d:93:41:26:75:dc:c7:c7:48:82:cb:11: 7c:0b:62:85:25:5c:82:28:4e:36:77:bf:79:29:0f:2b:85:43: e1:7e:ba:f4:ea:76:0c:13:4a:d8:9e:f5:a1:31:54:59:c9:1d: b8:4a:ec:70:c9:79:ad:db:71:d6:26:a0:a0:45:b5:c3:f7:5d: a9:78:55:8a:57:1b:a2:5e:6c:17:20:12:ac:db:33:6a:30:ca: cb:05:96:3a:67:97:b9:f0:6f:f1:a8:ab:1a:03:1c:8b:58:e7: 15:47:2e:90:0c:54:af:d7:a4:5f:d3:a8:54:48:96:f0:bf:1c: ba:0a:c5:09:9c:d9:32:ad:af:36:e1:51:50:1e:f1:f9:7b:f2: b5:df:d1:65:b1:52:cb:46:4c:df:0b:59:17:a2:76:5d:9c:5b: 4a:f6:df:5f:12:da:e4:bb:e6:c2:bb:3d:bf:cd:a7:aa:ef:1a: c0:83:b0:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtM7RqSA8W+eIFfnh9b5hn7/n5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRFQTkxQTZBQjgyNDc4OThBQkU1RjZBOTczQUM4M0My RDk4MTI3OTAeFw0yNjExMDQwMDMzNDlaFw0yNjExMDUwMTE3NDlaMDMxMTAvBgNV BAMTKDJGQTFBM0U1MDU1OTZCRjBBRkFCOEY5ODMzNjkzN0I0MjUzNzkzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1+G2fnnF3+C4JVUy/lHkGmHp fm+JaID2Xmd03CI1iW3qfJptZNjYVKFv/TpnsdorF/mL2CuNtlzBWkAS3Ze9hUbC dq1/y1P+tsBGGRkCrxvW7Xs/oIfE+MQ4aC1H/Hhe5t6VVDdb3FNOUwAx4DA3TnCd M8H23kzm1N8hvHid1xxF0wPn9leL8dIeSGL1Y7NO7HRUn+Cn0ye4HvlFDuhwYrYv Kug66VQ/81cBMF1X1yTJhBMRkqT3zav+b0wVGukcVK3dOpVcmpJglSLcXWQ6DZSX AYpIl1DwckUKgoY+K2ZTr6jddZUfiQRbz76+Z2tNKcaCqpqT59/kxA7Tq2v3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL6Gj5QVZa/Cvq4+YM2k3tCU3k6QwHwYDVR0j BBgwFoAUtOqRpquCR4mKvl9qlzrIPC2YEnkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTczNDE5YjktNTQyMi00ZmMyLWEzZTAtYzQ5YThhYTA3ZjczLzAvQjRFQTkxQTZB QjgyNDc4OThBQkU1RjZBOTczQUM4M0MyRDk4MTI3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNEVBOTFBNkFCODI0Nzg5OEFCRTVGNkE5NzNBQzgzQzJEOTgx Mjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvQjRFQTkxQTZBQjgyNDc4OThBQkU1RjZBOTczQUM4 M0MyRDk4MTI3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAJH96DUcxrtBIoMkk4ec4nEh5/SdGDwjrp oGoKa41AaWBBZkzqxD2kQO9zb2gXw97Y5J6NzUAIa44hBoSfmi75SQpPQ79WMJMF Km1AHD2TQSZ13MfHSILLEXwLYoUlXIIoTjZ3v3kpDyuFQ+F+uvTqdgwTStie9aEx VFnJHbhK7HDJea3bcdYmoKBFtcP3Xal4VYpXG6JebBcgEqzbM2owyssFljpnl7nw b/GoqxoDHItY5xVHLpAMVK/XpF/TqFRIlvC/HLoKxQmc2TKtrzbhUVAe8fl78rXf 0WWxUstGTN8LWReidl2cW0r2318S2uS75sK7Pb/Np6rvGsCDsAQ= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:46 2026 by rpki-client