$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json) Hash identifier: T746+chBiSliPTDOoFPIxNAwtD/iYhnigoXGvWWxpp4= Subject key identifier: A3:F7:3C:9D:53:A0:5A:40:8D:8F:0A:04:B5:45:60:F2:E4:C3:E8:9F Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC Certificate serial: 6C2998BF21F5DA1221E9E94B3E8DC6614D41BEB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft Manifest number: EE Signing time: Tue 27 Oct 2026 22:22:48 +0000 Manifest this update: Tue 27 Oct 2026 22:17:48 +0000 Manifest next update: Thu 29 Oct 2026 00:28:48 +0000 Files and hashes: 1: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=) 2: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: uq4U18YTp66KejsDnCnuR3V7qYLyHlgOc7sQ3sUCgpk=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:29:98:bf:21:f5:da:12:21:e9:e9:4b:3e:8d:c6:61:4d:41:be:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC Validity Not Before: Oct 27 22:17:48 2026 GMT Not After : Oct 29 00:28:48 2026 GMT Subject: CN=A3F73C9D53A05A408D8F0A04B54560F2E4C3E89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:fe:85:ba:d4:7a:ff:fa:e4:67:62:5a:e1: b1:94:ec:d5:e3:31:50:e5:fc:27:7c:06:3f:5a:b9: d4:e7:19:4d:4d:54:5e:31:78:7d:89:45:10:de:a7: 00:f6:f0:50:c5:16:89:5d:11:07:20:be:e1:14:86: 84:20:c7:9d:f9:88:51:1e:db:6c:e7:b3:36:42:c9: a1:95:b0:4a:8a:d2:dc:eb:37:d7:f8:4b:ed:7f:bd: 56:d8:ee:b7:36:ab:30:2d:94:15:19:85:9d:3a:fa: d4:4c:c5:23:8b:ff:98:37:c7:c7:c6:a5:3a:c4:55: 44:df:22:61:66:02:4c:cc:fc:05:79:d6:b1:a1:f5: b9:1f:0f:16:dd:38:cb:bc:cc:aa:cc:e8:c6:ce:d5: 0e:a3:9c:c6:cf:e9:a5:02:5f:bc:b4:4d:fb:f3:b9: 05:28:95:26:d4:4c:a8:a1:32:72:84:dd:b1:75:17: 2d:0c:21:eb:0c:1c:40:1d:9d:9a:43:0e:de:a6:b5: 07:a2:89:52:cf:dd:34:a2:d4:fe:af:5e:73:40:36: 1e:67:1e:80:4d:d6:6f:6d:87:b5:7c:ff:f2:fc:1c: d3:a4:f0:c6:0c:05:b8:6c:87:cf:6e:ac:43:34:4a: 26:3e:20:da:06:99:ca:0b:e4:89:f0:88:d9:1a:ec: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:3C:9D:53:A0:5A:40:8D:8F:0A:04:B5:45:60:F2:E4:C3:E8:9F X509v3 Authority Key Identifier: keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4d:03:53:40:2a:63:c5:a4:77:98:45:e6:46:54:17:7b:e5: 24:be:58:f6:04:96:85:1e:56:40:7f:82:6b:b6:af:f7:4c:b1: 05:e7:c0:6c:d4:38:12:5c:5f:64:4d:2b:43:02:44:d3:3d:d7: 67:bb:6f:51:ba:0a:74:77:8f:10:51:69:a0:ea:83:d6:26:20: f2:ff:fb:55:0b:6d:e3:b4:96:1d:1a:cd:49:63:27:49:45:06: d5:de:c8:17:30:c9:5a:99:df:cb:5f:ef:80:97:d6:87:49:e7: 9a:b7:31:ba:29:6f:c6:67:61:0d:7e:32:9e:94:94:0f:27:a8: a5:cd:a1:d4:d0:60:57:e9:2d:81:b4:5e:af:30:8d:40:d0:48: 06:63:72:64:ff:d6:d1:2e:ed:f4:98:15:40:cf:ec:e8:14:da: be:94:3e:b5:f3:92:58:9f:9b:56:49:c2:94:a4:11:04:ae:b5: 59:ec:6d:a5:aa:3d:ab:50:a7:ab:78:09:ab:00:33:65:3b:af: 3e:ae:80:fc:d0:cf:d1:91:b2:ee:a3:ed:74:89:80:03:b9:ee: 4b:64:05:cd:d7:a4:af:9f:7d:e8:2a:0f:be:66:9c:4a:84:4a: b3:88:3c:08:1a:01:6b:18:40:44:c9:ab:21:9e:13:4c:6e:da: c2:cf:3c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCmYvyH12hIh6elLPo3GYU1BvrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5 NEM2NzBBQzAeFw0yNjEwMjcyMjE3NDhaFw0yNjEwMjkwMDI4NDhaMDMxMTAvBgNV BAMTKEEzRjczQzlENTNBMDVBNDA4RDhGMEEwNEI1NDU2MEYyRTRDM0U4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfv6FutR6//rkZ2Ja4bGU7NXj MVDl/Cd8Bj9audTnGU1NVF4xeH2JRRDepwD28FDFFoldEQcgvuEUhoQgx535iFEe 22znszZCyaGVsEqK0tzrN9f4S+1/vVbY7rc2qzAtlBUZhZ06+tRMxSOL/5g3x8fG pTrEVUTfImFmAkzM/AV51rGh9bkfDxbdOMu8zKrM6MbO1Q6jnMbP6aUCX7y0Tfvz uQUolSbUTKihMnKE3bF1Fy0MIesMHEAdnZpDDt6mtQeiiVLP3TSi1P6vXnNANh5n HoBN1m9th7V8//L8HNOk8MYMBbhsh89urEM0SiY+INoGmcoL5InwiNka7ExRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/c8nVOgWkCNjwoEtUVg8uTD6J8wHwYDVR0j BBgwFoAUS+83O8U3ENE2tA2fkoxIXJTGcKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNhZGU5YzAtY2RlMS00N2YwLTljZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JD NTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5NEM2NzBBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QkVGMzczQkM1MzcxMEQxMzZCNDBEOUY5MjhDNDg1Qzk0QzY3 MEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4 NUM5NEM2NzBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhNA1NAKmPFpHeYReZGVBd75SS+WPYEloUe VkB/gmu2r/dMsQXnwGzUOBJcX2RNK0MCRNM912e7b1G6CnR3jxBRaaDqg9YmIPL/ +1ULbeO0lh0azUljJ0lFBtXeyBcwyVqZ38tf74CX1odJ55q3Mbopb8ZnYQ1+Mp6U lA8nqKXNodTQYFfpLYG0Xq8wjUDQSAZjcmT/1tEu7fSYFUDP7OgU2r6UPrXzklif m1ZJwpSkEQSutVnsbaWqPatQp6t4CasAM2U7rz6ugPzQz9GRsu6j7XSJgAO57ktk Bc3XpK+ffegqD75mnEqESrOIPAgaAWsYQETJqyGeE0xu2sLPPGM= -----END CERTIFICATE-----Generated at Wed Oct 28 16:29:39 2026 by rpki-client