$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json) Hash identifier: PX1J4DfsmHwLATbKW4dNNKafR3yx5XyQtoF/+B6fRsI= Subject key identifier: 8D:50:E7:D4:D6:BA:2C:CD:B7:22:10:0C:81:19:8D:C7:D5:57:7E:0A Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 2CEC410C32D114BF38329293DA3062FCB4D26940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft Manifest number: E4 Signing time: Tue 20 Oct 2026 01:41:15 +0000 Manifest this update: Tue 20 Oct 2026 01:36:15 +0000 Manifest next update: Wed 21 Oct 2026 03:11:15 +0000 Files and hashes: 1: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=) 2: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: 1+8Bn9WfYIjTPnVncHq2F4ih9VRs+jF3muZQgmUxv/0=) 3: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 03:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ec:41:0c:32:d1:14:bf:38:32:92:93:da:30:62:fc:b4:d2:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: Oct 20 01:36:15 2026 GMT Not After : Oct 21 03:11:15 2026 GMT Subject: CN=8D50E7D4D6BA2CCDB722100C81198DC7D5577E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:1f:25:83:2d:95:65:79:f6:b6:6b:58:05: 55:b2:4b:32:81:28:44:59:50:1e:c4:07:b0:ca:68: cc:39:a7:6a:31:69:ce:9a:84:49:48:43:c3:f0:fe: fb:3b:1e:7d:56:10:a5:c4:30:33:87:c2:7b:89:19: e3:40:d1:95:a4:b4:e3:36:8c:42:b1:91:bc:84:55: c8:eb:ab:ba:82:19:40:14:74:57:b7:bd:0e:f8:a7: 0c:59:78:cd:7f:b7:f7:9c:a9:08:7a:d1:ff:3d:3c: 78:9e:cb:a0:71:ca:35:31:4c:91:f6:3f:95:3b:23: b8:05:29:71:41:6a:ff:19:f7:98:f8:05:b4:8a:97: ba:17:38:bb:6c:3d:f8:39:78:fa:9f:3e:ff:95:60: 1e:9e:cb:30:2e:cc:31:4a:e1:fc:e9:28:23:8f:70: 01:f9:94:70:a0:84:13:1d:db:65:a0:62:9d:86:6d: 96:ff:b2:70:94:24:62:22:66:5b:9b:ef:9f:0c:4a: 7e:7c:27:ae:fe:61:cc:96:cd:32:23:99:dc:49:c5: 37:03:4c:0a:19:a6:b5:d6:27:34:9a:4c:f7:88:a0: e2:9d:ae:69:96:e2:a7:29:1e:4a:35:33:28:b2:79: e3:ac:e3:8c:4e:0d:d9:c7:26:16:0e:af:91:28:72: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:E7:D4:D6:BA:2C:CD:B7:22:10:0C:81:19:8D:C7:D5:57:7E:0A X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ab:6b:c5:19:d9:dc:c3:40:d2:40:e8:d5:d4:c2:cc:cb:98: d0:79:24:f8:91:1b:06:93:e2:37:b0:dc:f8:35:71:2c:7d:c9: 19:23:3d:9e:63:43:9c:f4:f8:4a:e1:9d:29:56:11:7a:24:94: 49:0b:6c:1b:c4:99:d1:f1:a9:11:09:5f:8e:ca:8b:56:20:92: 88:4a:3d:f4:1d:a1:50:e7:c0:f5:0d:5f:a4:3b:1a:fa:f0:26: 89:17:b6:51:6e:c2:a8:b7:7e:d0:87:7d:28:99:60:26:18:5a: e0:2b:56:9a:74:56:9d:12:4b:cb:e1:e9:6f:70:b2:b2:4f:84: e3:fa:f8:4c:95:44:69:c9:05:de:ec:a8:2b:68:ce:df:0e:9a: 5d:d5:de:5d:21:bf:5f:a6:fb:39:aa:76:54:08:b4:91:36:47: e1:35:e7:91:e0:9a:de:c5:87:10:16:9c:28:d9:0d:38:6c:c2: 4c:2b:a1:ba:24:66:b9:53:b8:db:35:f7:c2:03:84:b2:48:cf: 8f:37:44:1b:69:f0:6f:51:1a:8c:75:82:32:8b:e8:8e:aa:2d: 4f:5d:7b:d7:b1:d5:67:f2:7d:a9:4b:4a:95:8b:a4:7c:29:8f: e0:19:af:12:72:0e:7d:d8:96:1c:2e:93:42:31:26:1c:ab:ac: e1:e2:5c:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOxBDDLRFL84MpKT2jBi/LTSaUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjEwMjAwMTM2MTVaFw0yNjEwMjEwMzExMTVaMDMxMTAvBgNV BAMTKDhENTBFN0Q0RDZCQTJDQ0RCNzIyMTAwQzgxMTk4REM3RDU1NzdFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YB8lgy2VZXn2tmtYBVWySzKB KERZUB7EB7DKaMw5p2oxac6ahElIQ8Pw/vs7Hn1WEKXEMDOHwnuJGeNA0ZWktOM2 jEKxkbyEVcjrq7qCGUAUdFe3vQ74pwxZeM1/t/ecqQh60f89PHiey6BxyjUxTJH2 P5U7I7gFKXFBav8Z95j4BbSKl7oXOLtsPfg5ePqfPv+VYB6eyzAuzDFK4fzpKCOP cAH5lHCghBMd22WgYp2GbZb/snCUJGIiZlub758MSn58J67+YcyWzTIjmdxJxTcD TAoZprXWJzSaTPeIoOKdrmmW4qcpHko1MyiyeeOs44xODdnHJhYOr5EocuP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjVDn1Na6LM23IhAMgRmNx9VXfgowHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqra8UZ2dzDQNJA6NXUwszLmNB5JPiRGwaT 4jew3Pg1cSx9yRkjPZ5jQ5z0+ErhnSlWEXoklEkLbBvEmdHxqREJX47Ki1YgkohK PfQdoVDnwPUNX6Q7GvrwJokXtlFuwqi3ftCHfSiZYCYYWuArVpp0Vp0SS8vh6W9w srJPhOP6+EyVRGnJBd7sqCtozt8Oml3V3l0hv1+m+zmqdlQItJE2R+E155Hgmt7F hxAWnCjZDThswkwrobokZrlTuNs198IDhLJIz483RBtp8G9RGox1gjKL6I6qLU9d e9ex1WfyfalLSpWLpHwpj+AZrxJyDn3Ylhwuk0IxJhyrrOHiXFc= -----END CERTIFICATE-----Generated at Tue Oct 20 09:19:18 2026 by rpki-client