$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: pRWPAo3sL17mell2i4Clmq3cN2Z9dQ09CkrNyqGJEiY= Subject key identifier: CE:B4:8B:DC:33:07:55:77:81:62:DE:7B:F6:E6:9F:6A:4C:21:2C:7F Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 3A3C415D8A8510E502EA49ABA038C5933C976330 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 09:19:08 +0000 Manifest this update: Mon 02 Nov 2026 09:14:08 +0000 Manifest next update: Tue 03 Nov 2026 09:55:08 +0000 Files and hashes: 1: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 2: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) 3: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) 4: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: sKfb9devzinOk6VhDoQoToWDkZKP8mrlbzrhTl/op4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3c:41:5d:8a:85:10:e5:02:ea:49:ab:a0:38:c5:93:3c:97:63:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Nov 2 09:14:08 2026 GMT Not After : Nov 3 09:55:08 2026 GMT Subject: CN=CEB48BDC330755778162DE7BF6E69F6A4C212C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:3b:fa:13:23:db:0e:95:73:81:cd:b5:09: c5:cd:40:2e:8e:62:d0:b7:ec:50:a2:89:bf:ca:72: 9a:81:31:cd:8d:d4:77:1d:23:c4:26:42:be:1b:b4: 20:36:6e:8d:74:03:37:6a:86:bf:cd:da:42:b5:3c: 39:d6:59:63:77:2b:af:ea:7e:27:2e:6b:b5:70:b2: 52:b7:63:06:70:56:c5:75:d3:4f:78:98:a3:9e:7e: dd:0e:43:d7:53:55:2d:01:4f:61:0d:5d:c6:57:bd: de:7a:ae:90:c1:54:3a:57:0d:ac:6e:eb:fd:9d:f4: 97:78:d7:92:42:b9:a1:89:2d:6f:b4:fc:69:46:32: 34:79:d7:61:75:30:97:54:d2:63:15:a3:c6:16:1f: c8:60:fa:e8:c7:51:42:a0:91:09:ed:bc:cf:bc:17: 23:df:4b:77:97:27:9b:d9:12:cb:68:a3:36:5b:c4: 38:74:c7:4c:16:42:2d:b3:b3:fc:04:05:15:06:7e: 56:4f:1e:92:b2:d0:e3:14:7a:c2:f7:f0:4f:ed:09: 98:de:db:b2:45:aa:ef:22:95:0f:1b:e8:f2:56:c9: 3f:6d:28:49:66:38:65:e4:06:1e:31:d0:a3:eb:a3: 5e:d4:d2:19:85:79:4b:42:08:b3:37:c4:64:58:5e: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B4:8B:DC:33:07:55:77:81:62:DE:7B:F6:E6:9F:6A:4C:21:2C:7F X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:03:45:4d:b7:cf:02:87:10:46:9c:69:f2:17:e3:9f:30:42: 37:2c:88:00:27:6d:e7:5c:fd:63:35:f8:48:23:18:e9:62:5e: 0c:a2:86:e0:d1:23:02:5f:b0:3f:5a:c4:9b:72:c6:51:45:85: 7b:31:76:44:c0:d7:61:ac:91:60:7c:ee:a8:ca:4f:0e:a8:41: f5:e9:fc:a5:42:20:b5:ea:07:93:c7:a0:58:0a:af:5a:65:9c: a6:bc:d0:58:e1:c8:4d:65:34:19:e8:7b:d1:ff:7c:06:33:11: 81:a4:d2:2c:ba:aa:8b:ba:85:5b:ba:28:4b:9f:c3:32:be:5d: af:3c:30:6a:75:76:a1:cf:3a:ef:69:06:48:a9:7d:02:1b:9d: 79:bc:c1:d7:18:d6:ab:6e:78:0e:db:44:e2:0f:a9:a7:00:3b: 29:d2:ca:bf:b0:df:26:05:8a:1d:aa:32:23:99:29:95:8e:b0: a2:c2:6e:e8:d9:10:63:99:db:81:a4:d9:19:10:e4:cb:7e:b2: fd:2e:7a:e5:6e:f0:13:8f:e3:ae:8e:f3:5a:e3:d6:ab:a1:7e: a0:02:4d:0b:8d:88:fd:32:61:c9:20:da:11:b8:fd:4d:16:cd: 02:df:7f:3c:22:b4:96:30:75:cb:cc:0c:12:87:db:86:80:5a: c9:6c:8f:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjxBXYqFEOUC6kmroDjFkzyXYzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjExMDIwOTE0MDhaFw0yNjExMDMwOTU1MDhaMDMxMTAvBgNV BAMTKENFQjQ4QkRDMzMwNzU1Nzc4MTYyREU3QkY2RTY5RjZBNEMyMTJDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQTv6EyPbDpVzgc21CcXNQC6O YtC37FCiib/KcpqBMc2N1HcdI8QmQr4btCA2bo10Azdqhr/N2kK1PDnWWWN3K6/q ficua7VwslK3YwZwVsV10094mKOeft0OQ9dTVS0BT2ENXcZXvd56rpDBVDpXDaxu 6/2d9Jd415JCuaGJLW+0/GlGMjR512F1MJdU0mMVo8YWH8hg+ujHUUKgkQntvM+8 FyPfS3eXJ5vZEstoozZbxDh0x0wWQi2zs/wEBRUGflZPHpKy0OMUesL38E/tCZje 27JFqu8ilQ8b6PJWyT9tKElmOGXkBh4x0KPro17U0hmFeUtCCLM3xGRYXlC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrSL3DMHVXeBYt579uafakwhLH8wHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADADRU23zwKHEEacafIX458wQjcsiAAnbedc /WM1+EgjGOliXgyihuDRIwJfsD9axJtyxlFFhXsxdkTA12GskWB87qjKTw6oQfXp /KVCILXqB5PHoFgKr1plnKa80FjhyE1lNBnoe9H/fAYzEYGk0iy6qou6hVu6KEuf wzK+Xa88MGp1dqHPOu9pBkipfQIbnXm8wdcY1qtueA7bROIPqacAOynSyr+w3yYF ih2qMiOZKZWOsKLCbujZEGOZ24Gk2RkQ5Mt+sv0ueuVu8BOP466O81rj1quhfqAC TQuNiP0yYckg2hG4/U0WzQLffzwitJYwdcvMDBKH24aAWslsj+8= -----END CERTIFICATE-----Generated at Mon Nov 2 20:21:14 2026 by rpki-client