$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft File: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft (raw, json) Hash identifier: /beXq+VPlTaGN/iULYtiDt2ZAivwXi6xAJGzsgzKb3o= Subject key identifier: 11:F5:26:D7:48:A8:D9:85:50:F2:16:FB:51:93:63:6E:E2:24:38:77 Authority key identifier: C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2 Certificate issuer: /CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2 Certificate serial: 07E0C1F29F75E4E69754E77F1F5BF33EBB837EF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft Manifest number: DA Signing time: Mon 12 Oct 2026 06:30:04 +0000 Manifest this update: Mon 12 Oct 2026 06:25:04 +0000 Manifest next update: Tue 13 Oct 2026 09:49:04 +0000 Files and hashes: 1: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 9sxhuASFKHOXbj0DOd/0uIHrTBma/ztKpCl/pA1bt+4=) 2: C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl (hash: qnJ7NGjQG3EvujRrm7G85TbqJDL39LYkBELzKA3Xqrg=) 3: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: mCuIl3B+Pq3Irur4J3MaaMeyRxcQ7JCNDx31iNrLDkc=) 4: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: 3Y+Wkuip7kYwTNZB3EWxSZVFtVvvUlonF/rrTJ0WSdE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e0:c1:f2:9f:75:e4:e6:97:54:e7:7f:1f:5b:f3:3e:bb:83:7e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2 Validity Not Before: Oct 12 06:25:04 2026 GMT Not After : Oct 13 09:49:04 2026 GMT Subject: CN=11F526D748A8D98550F216FB5193636EE2243877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:3b:83:be:a3:78:5c:3b:fb:8c:e8:69:52: 25:a0:6d:30:40:f8:4b:22:32:3c:4c:3a:01:5e:e6: 43:e2:b0:c2:b5:f5:57:9b:37:1a:f0:b6:99:83:09: 7b:91:25:69:75:1a:90:71:a6:90:5b:2b:fd:0c:d4: ed:40:36:bf:0e:61:57:9b:aa:91:32:77:3b:07:42: 1f:f7:4f:46:53:f5:ff:03:27:53:88:fc:31:f6:51: 9b:36:f8:12:26:b8:b0:ae:44:00:39:20:4f:27:0a: c8:77:b9:68:8b:dd:e4:3f:20:ed:ee:19:ab:df:67: 05:a2:65:88:e3:0e:00:32:14:d7:30:8a:3c:0f:78: 15:fa:67:d8:10:8e:16:10:12:52:d6:30:66:a8:67: a7:a1:6d:e6:20:8b:45:1f:74:c2:92:ca:d0:26:76: de:25:86:19:1b:9b:e1:e6:73:9f:61:bd:37:d6:a8: a7:1e:32:3d:47:a0:55:51:a2:e5:52:96:50:a8:7f: c2:b1:07:80:45:3a:c0:fc:a0:d5:0f:91:ef:fb:1f: 38:89:e0:af:d3:ad:39:6e:fc:7e:4d:a6:9f:88:7b: a9:21:0f:e6:88:95:b5:a2:10:36:c5:78:5e:e1:71: d7:b0:c7:e3:c4:dd:28:57:16:82:7d:b5:ec:83:10: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:26:D7:48:A8:D9:85:50:F2:16:FB:51:93:63:6E:E2:24:38:77 X509v3 Authority Key Identifier: keyid:C4:60:5A:0F:B7:F0:E2:C2:D0:54:43:3A:9E:4F:CB:C4:F1:5E:A4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/C4605A0FB7F0E2C2D054433A9E4FCBC4F15EA4F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c9:85:76:9c:65:c6:0c:5c:e4:47:73:a3:2d:63:40:6a:d1: e9:1c:7a:04:d3:04:22:03:d1:50:a2:86:44:6c:4f:73:b0:b2: 89:22:24:55:32:d6:f9:dd:fb:06:7c:49:4b:84:30:bb:c4:b6: 48:09:ec:c3:5e:b1:4f:ee:41:e8:5d:88:f5:a1:67:32:a9:9e: 60:f8:5c:4d:cc:aa:91:34:8e:e1:43:79:04:70:8f:bb:db:29: b0:8a:c3:17:49:bd:68:d3:92:a7:8c:96:b8:80:f4:37:31:9e: 10:98:4b:8f:97:df:eb:76:dd:85:b5:6b:dc:ba:d0:13:38:b7: 45:f4:45:44:1b:69:b7:0b:ab:ad:b0:0a:c0:91:40:da:f5:4b: 76:97:95:76:2f:25:73:da:c1:32:d2:47:a5:55:b4:a5:8b:a9: ab:e1:16:b4:7e:6e:1f:08:28:a6:a3:0f:f8:67:91:2d:fb:65: ae:f4:58:30:99:3b:43:d4:4d:83:27:7f:8a:49:ab:d4:a0:c8: 83:d3:3d:d1:be:0e:42:4c:14:67:cd:90:ad:2f:be:ac:57:92: ef:a6:4e:39:7b:38:3b:30:ef:69:55:dc:10:a2:29:59:35:3b: 45:c4:6e:03:2f:25:27:2b:8d:c2:8d:6c:3a:0b:dd:a4:89:f7: 70:b7:19:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+DB8p915OaXVOd/H1vzPruDfvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRG MTVFQTRGMjAeFw0yNjEwMTIwNjI1MDRaFw0yNjEwMTMwOTQ5MDRaMDMxMTAvBgNV BAMTKDExRjUyNkQ3NDhBOEQ5ODU1MEYyMTZGQjUxOTM2MzZFRTIyNDM4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsTuDvqN4XDv7jOhpUiWgbTBA +EsiMjxMOgFe5kPisMK19VebNxrwtpmDCXuRJWl1GpBxppBbK/0M1O1ANr8OYVeb qpEydzsHQh/3T0ZT9f8DJ1OI/DH2UZs2+BImuLCuRAA5IE8nCsh3uWiL3eQ/IO3u GavfZwWiZYjjDgAyFNcwijwPeBX6Z9gQjhYQElLWMGaoZ6ehbeYgi0UfdMKSytAm dt4lhhkbm+Hmc59hvTfWqKceMj1HoFVRouVSllCof8KxB4BFOsD8oNUPke/7HziJ 4K/TrTlu/H5Npp+Ie6khD+aIlbWiEDbFeF7hcdewx+PE3ShXFoJ9teyDELuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEfUm10io2YVQ8hb7UZNjbuIkOHcwHwYDVR0j BBgwFoAUxGBaD7fw4sLQVEM6nk/LxPFepPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMWM1MjktNjI0NC00NTAzLWFmNTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZC N0YwRTJDMkQwNTQ0MzNBOUU0RkNCQzRGMTVFQTRGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDYwNUEwRkI3RjBFMkMyRDA1NDQzM0E5RTRGQ0JDNEYxNUVB NEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQzQ2MDVBMEZCN0YwRTJDMkQwNTQ0MzNBOUU0RkNC QzRGMTVFQTRGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnJhXacZcYMXORHc6MtY0Bq0ekcegTTBCID 0VCihkRsT3OwsokiJFUy1vnd+wZ8SUuEMLvEtkgJ7MNesU/uQehdiPWhZzKpnmD4 XE3MqpE0juFDeQRwj7vbKbCKwxdJvWjTkqeMlriA9DcxnhCYS4+X3+t23YW1a9y6 0BM4t0X0RUQbabcLq62wCsCRQNr1S3aXlXYvJXPawTLSR6VVtKWLqavhFrR+bh8I KKajD/hnkS37Za70WDCZO0PUTYMnf4pJq9SgyIPTPdG+DkJMFGfNkK0vvqxXku+m Tjl7ODsw72lV3BCiKVk1O0XEbgMvJScrjcKNbDoL3aSJ93C3Ga8= -----END CERTIFICATE-----Generated at Tue Oct 13 01:34:19 2026 by rpki-client