$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json) Hash identifier: qPjESI6+bAmqcH9e2tKeQVbxcqHmTXBVj0sEUJzr+hM= Subject key identifier: FF:38:9E:C2:C1:6C:DB:2F:49:5A:1C:AD:A0:00:BE:9A:0A:94:58:84 Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Certificate serial: 27238D37FBAA612D525E7726A0EDFB308A41AF32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 13:29:56 +0000 Manifest this update: Mon 02 Nov 2026 13:24:56 +0000 Manifest next update: Tue 03 Nov 2026 15:50:56 +0000 Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=) 2: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: LRGHi2HARqyGZrpR43hb2CcigabyL7SYdtf+GRbMC90=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:23:8d:37:fb:aa:61:2d:52:5e:77:26:a0:ed:fb:30:8a:41:af:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B Validity Not Before: Nov 2 13:24:56 2026 GMT Not After : Nov 3 15:50:56 2026 GMT Subject: CN=FF389EC2C16CDB2F495A1CADA000BE9A0A945884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:74:0f:8c:58:13:44:b0:36:40:ef:7f:e3: 9f:70:90:a0:24:f7:bf:5c:89:c6:a9:b3:f3:d5:fe: 05:71:a4:86:14:ee:7f:02:e7:e0:26:fb:20:b4:a0: bd:e9:6b:56:6d:b5:32:81:e5:69:c7:34:9f:c7:1c: 4c:e1:94:13:74:f3:9b:77:35:e3:f9:1b:52:6c:38: 00:27:82:79:3e:f4:70:74:dc:6a:21:f5:58:1a:b6: d4:25:2e:47:84:98:57:5a:3b:ad:44:84:1c:07:a1: e3:60:e6:fa:19:a2:7a:fc:d5:55:c7:69:ff:0c:a5: 69:0a:0c:47:4d:d6:87:8c:d1:66:8b:39:b5:d5:a6: ad:81:5e:dc:74:a8:34:41:53:ee:a8:10:4e:26:cf: 4b:d8:15:91:d0:ce:ca:63:9d:cd:1b:d3:7d:c6:a2: c9:17:db:9c:ed:c6:0d:50:75:25:a7:79:a5:9e:fa: e5:b2:3c:5d:65:75:df:cc:28:e1:51:f6:14:17:98: b3:f0:0b:a2:4a:87:12:cf:f4:fe:9c:59:8e:5e:0a: 54:6f:fc:dd:c3:7a:f0:fa:84:d9:6a:d4:1a:06:1d: 7b:2c:04:83:ee:90:e3:de:6c:17:a5:a3:13:c7:6b: f3:0d:b2:c2:7b:e9:49:b8:f8:a2:e6:36:5a:9c:d2: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:38:9E:C2:C1:6C:DB:2F:49:5A:1C:AD:A0:00:BE:9A:0A:94:58:84 X509v3 Authority Key Identifier: keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b4:d6:5d:b8:d2:58:76:38:86:b5:d8:a3:fd:0f:76:3a:18: 74:01:3f:3c:26:81:09:4c:11:00:fc:b9:26:b8:0b:ac:42:fc: e8:49:0c:ad:e2:45:cb:dc:eb:ef:70:b0:05:8f:a4:88:2a:33: 02:38:85:43:a0:39:5a:55:da:13:57:74:2c:81:fe:4d:45:3b: 6a:68:61:2b:54:85:f5:b5:80:8e:df:f2:ac:6a:92:a4:ff:85: 91:4e:80:91:a3:8d:f5:81:2f:cd:cc:8c:cf:a7:94:31:89:f7: 0a:2e:61:15:ef:61:eb:2a:88:f1:c4:fa:d0:95:1a:3b:c2:0c: 0a:8b:28:77:fe:1d:07:b8:8a:8e:db:60:d0:4d:24:d3:ad:9d: 05:5e:88:91:c8:17:69:fe:af:b2:c2:fd:85:c1:4f:38:be:39: b8:4d:c5:4e:92:1d:6f:36:11:19:35:8a:e8:b4:b9:01:f2:38: 84:1e:39:ff:32:64:7a:4d:c1:7a:31:5d:2a:b2:31:29:ab:4d: 5a:2a:2e:b1:df:84:40:53:d9:07:a0:f9:4b:58:53:c4:89:0f: 42:50:57:19:28:5e:86:07:bf:ef:4f:85:9d:8f:13:de:f1:d0: a6:b5:24:84:27:2f:fe:89:c1:e9:2b:71:42:1c:2b:5b:2b:37: 16:17:06:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyONN/uqYS1SXncmoO37MIpBrzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx RTFGQkUwQjAeFw0yNjExMDIxMzI0NTZaFw0yNjExMDMxNTUwNTZaMDMxMTAvBgNV BAMTKEZGMzg5RUMyQzE2Q0RCMkY0OTVBMUNBREEwMDBCRTlBMEE5NDU4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GXQPjFgTRLA2QO9/459wkKAk 979cicaps/PV/gVxpIYU7n8C5+Am+yC0oL3pa1ZttTKB5WnHNJ/HHEzhlBN085t3 NeP5G1JsOAAngnk+9HB03Goh9VgattQlLkeEmFdaO61EhBwHoeNg5voZonr81VXH af8MpWkKDEdN1oeM0WaLObXVpq2BXtx0qDRBU+6oEE4mz0vYFZHQzspjnc0b033G oskX25ztxg1QdSWneaWe+uWyPF1ldd/MKOFR9hQXmLPwC6JKhxLP9P6cWY5eClRv /N3DevD6hNlq1BoGHXssBIPukOPebBeloxPHa/MNssJ76Um4+KLmNlqc0rZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ziewsFs2y9JWhytoAC+mgqUWIQwHwYDVR0j BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0 RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO01l240lh2OIa12KP9D3Y6GHQBPzwmgQlM EQD8uSa4C6xC/OhJDK3iRcvc6+9wsAWPpIgqMwI4hUOgOVpV2hNXdCyB/k1FO2po YStUhfW1gI7f8qxqkqT/hZFOgJGjjfWBL83MjM+nlDGJ9wouYRXvYesqiPHE+tCV GjvCDAqLKHf+HQe4io7bYNBNJNOtnQVeiJHIF2n+r7LC/YXBTzi+ObhNxU6SHW82 ERk1iui0uQHyOIQeOf8yZHpNwXoxXSqyMSmrTVoqLrHfhEBT2Qeg+UtYU8SJD0JQ VxkoXoYHv+9PhZ2PE97x0Ka1JIQnL/6JwekrcUIcK1srNxYXBvU= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:13 2026 by rpki-client