$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: suMUzWKpxEAsAYWnEjyQStE7wqsbnDcROCFI+S0Gm44= Subject key identifier: 4C:AF:86:0F:3E:1C:92:99:0A:CE:41:1D:68:04:85:2D:F1:A3:42:C3 Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 57E7159685EEFB05AD2E166C4F5FCE02C62A13CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: EA Signing time: Sat 24 Oct 2026 18:32:16 +0000 Manifest this update: Sat 24 Oct 2026 18:27:16 +0000 Manifest next update: Sun 25 Oct 2026 20:45:16 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) 3: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: i3ALcCIhnd0r2p93LvCeM9WUHNQzAouwhvuXLMsduRM=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e7:15:96:85:ee:fb:05:ad:2e:16:6c:4f:5f:ce:02:c6:2a:13:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Oct 24 18:27:16 2026 GMT Not After : Oct 25 20:45:16 2026 GMT Subject: CN=4CAF860F3E1C92990ACE411D6804852DF1A342C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:af:73:7b:7b:3c:79:2d:1b:8d:13:00:47: db:79:49:f9:39:ab:a0:c2:28:a2:d0:66:36:f2:b0: aa:5b:54:e6:0a:86:45:76:77:2d:ec:b0:13:9e:4d: 14:88:fd:bb:76:54:48:16:d9:48:3b:75:d5:78:22: 60:71:30:c3:2c:98:bc:45:4e:5a:91:5a:de:c7:13: 1b:f4:81:9e:af:45:87:8b:69:5c:11:18:66:74:1f: f3:74:9d:8b:52:59:94:37:8f:2c:9f:4e:98:62:87: 68:09:a6:47:35:8b:c7:39:b2:52:ff:ee:25:99:c5: fd:c0:fe:f7:0e:c8:c5:13:ee:73:94:cd:45:f0:14: 9f:e5:81:4f:9c:1d:01:59:b0:94:a9:af:3e:6e:e1: d5:8c:dd:eb:95:83:c9:0a:3b:c2:ef:34:a0:a5:73: 32:42:bb:7a:d7:64:dd:8e:ae:cd:c3:5b:29:84:19: 79:9c:86:0a:44:1b:6b:26:78:ac:a5:4c:c6:68:46: 7f:38:4a:d1:aa:8a:f5:c1:63:54:86:f3:6e:18:fc: 25:eb:9d:43:39:b9:8c:a2:fe:b4:2f:21:e6:93:71: 09:95:59:64:72:0b:d3:f1:14:ac:7b:28:ff:4d:50: 35:44:97:b9:d9:d5:e3:45:07:15:6f:35:64:01:dc: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AF:86:0F:3E:1C:92:99:0A:CE:41:1D:68:04:85:2D:F1:A3:42:C3 X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b6:16:ab:4b:02:7b:fb:e6:ad:5d:84:3f:af:97:95:8e:79: db:30:bd:9e:df:7a:3d:34:49:e2:32:dd:a5:cd:6c:24:9e:af: cf:32:ac:3b:f7:99:1d:d4:ad:b6:8c:3c:e6:a4:6e:92:4c:eb: 9f:8a:f7:02:b4:cc:da:af:d3:fe:ce:ca:e3:97:19:05:3d:59: 81:8f:9a:3e:38:88:33:7e:8d:7a:11:a9:dc:b2:80:68:fd:ba: 83:47:79:07:8c:2f:8a:31:95:da:b0:d4:a9:81:50:b3:a1:22: 4d:21:51:cf:14:70:61:11:b0:0d:d5:7f:3b:f3:73:97:7d:d7: 6b:00:63:fb:f4:cd:c5:c3:54:c4:30:15:e1:5a:cc:9f:2b:26: fe:1c:4a:df:4c:d3:96:8f:53:55:c9:45:2e:8d:84:c0:4a:a7: 73:0a:2a:7c:d0:33:d5:72:d9:c1:e2:83:98:60:ed:0e:70:dc: da:b4:0b:4b:52:17:68:52:10:41:39:25:99:ab:f6:99:19:29: c8:8e:41:71:a3:68:e5:ce:0f:40:4e:f8:2c:36:7c:1f:89:b0: 19:a0:20:b7:8d:0e:15:ca:d7:a1:7c:f9:0d:48:a6:d1:ee:1a: 6f:da:9c:63:9e:39:28:d8:43:23:01:b4:c7:ae:ca:1d:0a:a2: 0b:2b:6d:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+cVloXu+wWtLhZsT1/OAsYqE8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjEwMjQxODI3MTZaFw0yNjEwMjUyMDQ1MTZaMDMxMTAvBgNV BAMTKDRDQUY4NjBGM0UxQzkyOTkwQUNFNDExRDY4MDQ4NTJERjFBMzQyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrK9ze3s8eS0bjRMAR9t5Sfk5 q6DCKKLQZjbysKpbVOYKhkV2dy3ssBOeTRSI/bt2VEgW2Ug7ddV4ImBxMMMsmLxF TlqRWt7HExv0gZ6vRYeLaVwRGGZ0H/N0nYtSWZQ3jyyfTphih2gJpkc1i8c5slL/ 7iWZxf3A/vcOyMUT7nOUzUXwFJ/lgU+cHQFZsJSprz5u4dWM3euVg8kKO8LvNKCl czJCu3rXZN2Ors3DWymEGXmchgpEG2smeKylTMZoRn84StGqivXBY1SG824Y/CXr nUM5uYyi/rQvIeaTcQmVWWRyC9PxFKx7KP9NUDVEl7nZ1eNFBxVvNWQB3O3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTK+GDz4ckpkKzkEdaASFLfGjQsMwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu2FqtLAnv75q1dhD+vl5WOedswvZ7fej00 SeIy3aXNbCSer88yrDv3mR3UrbaMPOakbpJM65+K9wK0zNqv0/7OyuOXGQU9WYGP mj44iDN+jXoRqdyygGj9uoNHeQeML4oxldqw1KmBULOhIk0hUc8UcGERsA3Vfzvz c5d912sAY/v0zcXDVMQwFeFazJ8rJv4cSt9M05aPU1XJRS6NhMBKp3MKKnzQM9Vy 2cHig5hg7Q5w3Nq0C0tSF2hSEEE5JZmr9pkZKciOQXGjaOXOD0BO+Cw2fB+JsBmg ILeNDhXK16F8+Q1IptHuGm/anGOeOSjYQyMBtMeuyh0KogsrbUU= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:58 2026 by rpki-client