$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: XieGS6hzrNKkJ0GN/kWl53R/cPq3VjLptP3qRx2AzrI= Subject key identifier: 5D:12:4D:CC:F8:3E:AA:6D:2F:FF:2B:E7:C5:B7:A3:48:5B:69:95:BC Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 60BDFF2B51FE6DCEBCC6C6ED3D40559AFEBAAD6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 17:49:53 +0000 Manifest this update: Tue 03 Nov 2026 17:44:53 +0000 Manifest next update: Wed 04 Nov 2026 18:38:53 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: ZqwKdKopgiFyO0f1vY5T/hz3N3DbOfjC39jrYEbsmMg=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:bd:ff:2b:51:fe:6d:ce:bc:c6:c6:ed:3d:40:55:9a:fe:ba:ad:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Nov 3 17:44:53 2026 GMT Not After : Nov 4 18:38:53 2026 GMT Subject: CN=5D124DCCF83EAA6D2FFF2BE7C5B7A3485B6995BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:08:cf:4b:1f:9b:88:92:00:d4:ce:82:6f: 50:55:1a:18:69:88:12:c0:61:70:cb:02:43:5a:e8: 47:ff:f5:99:94:61:a6:84:b9:82:61:14:5a:3b:ff: bb:29:f7:d6:b7:93:8e:76:20:33:3e:c8:2f:ba:22: 77:a0:22:76:e2:1a:6e:5f:c5:dc:6e:a4:85:bb:10: 4d:57:00:0b:06:42:fd:35:0b:fe:0c:c8:6c:d0:39: 80:b5:6e:91:f6:07:d9:e1:f3:8d:7c:88:a7:24:2b: de:02:0a:24:77:a9:85:88:16:bf:cb:8d:47:c7:df: f1:8e:03:64:d7:3a:5e:70:b4:d5:5d:17:5b:35:f6: 73:94:f5:ae:6c:4f:a6:39:ec:23:3a:5f:da:6b:8c: 11:b8:9a:ff:92:6b:e9:64:42:23:c4:04:39:e4:6d: 2d:f4:68:81:9d:ed:3a:8a:ad:69:0e:e6:4b:fa:74: 55:4e:2e:09:45:48:05:c6:17:81:c3:80:a5:f3:32: 42:95:20:ac:ce:e5:98:d0:4c:99:b5:c2:5d:2f:f5: ed:3e:a0:b0:4f:5f:4f:db:ec:95:9b:00:bf:bd:27: 44:09:87:0a:c8:35:88:59:74:63:cc:cb:1d:6d:b5: 3a:3e:e8:99:ec:f8:8e:70:ef:44:9e:28:90:ef:dc: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:12:4D:CC:F8:3E:AA:6D:2F:FF:2B:E7:C5:B7:A3:48:5B:69:95:BC X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:2e:e0:74:48:d6:f8:d5:ab:13:8f:54:d6:06:1c:98:07: 3b:76:16:b9:9d:6a:eb:74:ef:af:00:30:b6:d2:65:ee:08:6f: 2e:c1:6d:e3:ef:49:66:77:93:f7:15:48:17:09:a2:53:be:98: d4:86:ef:f0:2b:3c:d0:d4:b8:cc:e5:87:42:94:1f:f3:a5:2c: 4a:d0:19:66:0b:63:a2:53:5f:53:c4:29:c8:d4:5f:cc:c6:57: 1c:17:91:bd:20:67:fc:ed:44:e1:94:16:f4:6b:5e:2c:a9:59: 53:86:2c:8c:69:31:ad:66:d1:20:c3:7e:2d:8b:9b:6d:bc:39: 71:1d:f6:94:ed:7d:95:43:1a:3e:ab:08:b7:75:99:89:14:48: 30:c2:97:ce:4d:eb:a8:35:d4:36:72:b4:e3:37:27:d9:57:1d: 7e:6b:5d:94:4a:3b:53:b3:83:8e:99:64:13:93:8c:b5:d6:34: 06:8d:86:00:25:3e:a7:c8:44:06:86:ba:5b:d2:10:c8:9f:e3: c0:a9:ca:5f:1a:2a:1c:2c:52:d4:92:96:51:e1:33:6d:1a:1d: e8:1f:c0:f5:bc:f7:dd:0b:3a:97:72:ab:aa:d1:d5:70:f2:22: 5f:1d:a1:22:5b:b5:12:34:aa:e2:95:cf:20:f4:06:8f:d0:cb: 1c:97:db:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYL3/K1H+bc68xsbtPUBVmv66rW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjExMDMxNzQ0NTNaFw0yNjExMDQxODM4NTNaMDMxMTAvBgNV BAMTKDVEMTI0RENDRjgzRUFBNkQyRkZGMkJFN0M1QjdBMzQ4NUI2OTk1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRAjPSx+biJIA1M6Cb1BVGhhp iBLAYXDLAkNa6Ef/9ZmUYaaEuYJhFFo7/7sp99a3k452IDM+yC+6InegInbiGm5f xdxupIW7EE1XAAsGQv01C/4MyGzQOYC1bpH2B9nh8418iKckK94CCiR3qYWIFr/L jUfH3/GOA2TXOl5wtNVdF1s19nOU9a5sT6Y57CM6X9prjBG4mv+Sa+lkQiPEBDnk bS30aIGd7TqKrWkO5kv6dFVOLglFSAXGF4HDgKXzMkKVIKzO5ZjQTJm1wl0v9e0+ oLBPX0/b7JWbAL+9J0QJhwrINYhZdGPMyx1ttTo+6Jns+I5w70SeKJDv3JF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRJNzPg+qm0v/yvnxbejSFtplbwwHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3jLuB0SNb41asTj1TWBhyYBzt2Frmdaut0 768AMLbSZe4Iby7BbePvSWZ3k/cVSBcJolO+mNSG7/ArPNDUuMzlh0KUH/OlLErQ GWYLY6JTX1PEKcjUX8zGVxwXkb0gZ/ztROGUFvRrXiypWVOGLIxpMa1m0SDDfi2L m228OXEd9pTtfZVDGj6rCLd1mYkUSDDCl85N66g11DZytOM3J9lXHX5rXZRKO1Oz g46ZZBOTjLXWNAaNhgAlPqfIRAaGulvSEMif48Cpyl8aKhwsUtSSllHhM20aHegf wPW8990LOpdyq6rR1XDyIl8doSJbtRI0quKVzyD0Bo/QyxyX2/k= -----END CERTIFICATE-----Generated at Wed Nov 4 05:29:03 2026 by rpki-client