$ rpki-client -vvvf rpki-rsync.idnic.net/repo/161c097a-0672-4e96-afd5-9a08b69281a0/0/4F0034166A2C4A9080152C24F8EE38D3FF78741A.mft File: 4F0034166A2C4A9080152C24F8EE38D3FF78741A.mft (raw, json) Hash identifier: ODuQ/xQru1A83LWXBlBbIGCTygovQNH5dbT03UXf1W0= Subject key identifier: 58:29:60:9A:39:4A:92:F5:EF:49:5C:2D:78:E3:B8:A7:16:F0:8F:0F Authority key identifier: 4F:00:34:16:6A:2C:4A:90:80:15:2C:24:F8:EE:38:D3:FF:78:74:1A Certificate issuer: /CN=4F0034166A2C4A9080152C24F8EE38D3FF78741A Certificate serial: 1795C00A31870B48FB4D6BFF0A5835226E15ACDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F0034166A2C4A9080152C24F8EE38D3FF78741A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/161c097a-0672-4e96-afd5-9a08b69281a0/0/4F0034166A2C4A9080152C24F8EE38D3FF78741A.mft Manifest number: 1A Signing time: Sat 24 Oct 2026 06:52:22 +0000 Manifest this update: Sat 24 Oct 2026 06:47:22 +0000 Manifest next update: Sun 25 Oct 2026 09:57:22 +0000 Files and hashes: 1: 4F0034166A2C4A9080152C24F8EE38D3FF78741A.crl (hash: BpkpMojJjCnEOK1qMrdXX/B+s8MiM3EqSx7GpG71b14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/161c097a-0672-4e96-afd5-9a08b69281a0/0/4F0034166A2C4A9080152C24F8EE38D3FF78741A.crl rsync://rpki-rsync.idnic.net/repo/161c097a-0672-4e96-afd5-9a08b69281a0/0/4F0034166A2C4A9080152C24F8EE38D3FF78741A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F0034166A2C4A9080152C24F8EE38D3FF78741A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:95:c0:0a:31:87:0b:48:fb:4d:6b:ff:0a:58:35:22:6e:15:ac:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F0034166A2C4A9080152C24F8EE38D3FF78741A Validity Not Before: Oct 24 06:47:22 2026 GMT Not After : Oct 25 09:57:22 2026 GMT Subject: CN=5829609A394A92F5EF495C2D78E3B8A716F08F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:64:12:13:99:e9:12:41:2c:46:55:b1:c5: 09:ee:65:19:2c:a7:8a:3e:57:7f:e2:f7:95:84:98: c3:68:d0:6b:3f:bb:05:3f:be:03:4f:da:30:ad:29: 36:e8:ab:29:f3:fc:93:45:e4:54:23:63:ca:75:f5: 0f:2f:85:3b:91:66:75:35:10:46:98:e6:79:c0:e5: 9c:af:6d:15:96:9f:00:bf:44:f4:ab:7d:06:9a:ec: 6a:61:26:a5:29:0e:97:64:fa:75:6c:ef:7c:f0:7b: ad:0c:49:98:f5:48:fd:6e:8c:64:8e:9f:e3:1f:02: e6:7c:ad:72:7a:e4:0d:33:5b:72:4c:2c:63:2c:86: 74:16:64:2e:c6:21:82:14:30:4e:2d:52:5d:2c:c4: ca:1d:e2:95:cf:c4:1a:7a:4d:35:01:da:13:b8:9b: 5e:cd:d7:05:c6:b7:7d:91:65:9b:ac:82:cd:52:96: 36:06:1a:c7:f5:b8:48:96:37:cc:2d:4a:96:0b:30: 3f:a3:b9:c2:ab:7d:52:66:d7:e0:7b:44:d7:50:a5: fc:ee:fb:e2:08:96:3d:93:b2:20:27:e6:4c:da:96: 82:35:31:c5:39:9f:18:24:df:88:6e:32:2d:36:78: 69:41:ca:b2:b4:11:98:ed:21:e5:2d:fa:18:e4:57: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:29:60:9A:39:4A:92:F5:EF:49:5C:2D:78:E3:B8:A7:16:F0:8F:0F X509v3 Authority Key Identifier: keyid:4F:00:34:16:6A:2C:4A:90:80:15:2C:24:F8:EE:38:D3:FF:78:74:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/161c097a-0672-4e96-afd5-9a08b69281a0/0/4F0034166A2C4A9080152C24F8EE38D3FF78741A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F0034166A2C4A9080152C24F8EE38D3FF78741A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/161c097a-0672-4e96-afd5-9a08b69281a0/0/4F0034166A2C4A9080152C24F8EE38D3FF78741A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9c:13:b4:9b:c1:e9:4f:da:ef:ab:f4:cc:39:c1:03:3d:02: 69:f1:9f:6c:8e:8e:1f:29:64:e4:a5:19:2e:4a:cc:22:ca:cb: 3a:b6:ff:2b:fc:1a:71:f8:3b:de:08:64:32:3b:99:92:4c:1b: d7:e1:ee:bb:42:6f:6c:8b:04:21:26:37:44:9d:ce:24:65:85: 87:51:e9:b3:3c:b2:7a:2f:02:10:99:6a:5d:71:d9:8d:c9:61: ba:ae:7e:b9:36:ad:cc:3e:7f:5d:60:b2:92:15:2c:4a:de:d6: c6:cf:1f:59:b8:c0:49:56:fd:fe:3f:8c:de:93:6d:8b:e1:c2: a8:03:e4:7d:6b:6c:30:d9:b3:4f:56:71:d5:78:e2:c9:4d:f8: 09:71:07:5e:79:f5:76:66:9a:4b:ec:c0:3b:48:9b:9a:b6:88: 5d:d3:7d:5f:8f:8a:82:95:94:20:8d:33:dc:b3:2f:77:85:4d: 4f:99:ed:8b:9b:03:58:1b:9b:01:18:40:0b:3a:5b:fb:fe:55: 5e:35:f5:ed:e4:38:04:d9:c2:a0:aa:8a:69:7e:0e:90:94:df: c3:38:c6:17:c1:e5:d1:c2:2b:56:a7:12:12:8b:eb:ae:0b:5c: c2:f3:a0:6c:e2:9f:93:f3:c0:ae:e5:06:c4:59:40:b2:1e:78: c9:9d:25:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5XACjGHC0j7TWv/Clg1Im4VrN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMDM0MTY2QTJDNEE5MDgwMTUyQzI0RjhFRTM4RDNG Rjc4NzQxQTAeFw0yNjEwMjQwNjQ3MjJaFw0yNjEwMjUwOTU3MjJaMDMxMTAvBgNV BAMTKDU4Mjk2MDlBMzk0QTkyRjVFRjQ5NUMyRDc4RTNCOEE3MTZGMDhGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHGQSE5npEkEsRlWxxQnuZRks p4o+V3/i95WEmMNo0Gs/uwU/vgNP2jCtKTboqynz/JNF5FQjY8p19Q8vhTuRZnU1 EEaY5nnA5ZyvbRWWnwC/RPSrfQaa7GphJqUpDpdk+nVs73zwe60MSZj1SP1ujGSO n+MfAuZ8rXJ65A0zW3JMLGMshnQWZC7GIYIUME4tUl0sxMod4pXPxBp6TTUB2hO4 m17N1wXGt32RZZusgs1SljYGGsf1uEiWN8wtSpYLMD+jucKrfVJm1+B7RNdQpfzu ++IIlj2TsiAn5kzaloI1McU5nxgk34huMi02eGlByrK0EZjtIeUt+hjkV4LDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWClgmjlKkvXvSVwteOO4pxbwjw8wHwYDVR0j BBgwFoAUTwA0FmosSpCAFSwk+O440/94dBowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYxYzA5N2EtMDY3Mi00ZTk2LWFmZDUtOWEwOGI2OTI4MWEwLzAvNEYwMDM0MTY2 QTJDNEE5MDgwMTUyQzI0RjhFRTM4RDNGRjc4NzQxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjAwMzQxNjZBMkM0QTkwODAxNTJDMjRGOEVFMzhEM0ZGNzg3 NDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYxYzA5N2EtMDY3Mi00ZTk2LWFm ZDUtOWEwOGI2OTI4MWEwLzAvNEYwMDM0MTY2QTJDNEE5MDgwMTUyQzI0RjhFRTM4 RDNGRjc4NzQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALycE7SbwelP2u+r9Mw5wQM9Amnxn2yOjh8p ZOSlGS5KzCLKyzq2/yv8GnH4O94IZDI7mZJMG9fh7rtCb2yLBCEmN0SdziRlhYdR 6bM8snovAhCZal1x2Y3JYbqufrk2rcw+f11gspIVLEre1sbPH1m4wElW/f4/jN6T bYvhwqgD5H1rbDDZs09WcdV44slN+AlxB1559XZmmkvswDtIm5q2iF3TfV+PioKV lCCNM9yzL3eFTU+Z7YubA1gbmwEYQAs6W/v+VV419e3kOATZwqCqiml+DpCU38M4 xhfB5dHCK1anEhKL664LXMLzoGzin5PzwK7lBsRZQLIeeMmdJXg= -----END CERTIFICATE-----Generated at Sat Oct 24 10:11:07 2026 by rpki-client