$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft File: 4C020B9A7E561E4B66C4D84205960DF774E08E45.mft (raw, json) Hash identifier: VAJEGCwsx4omfzi2akn5gMslKQnaLZOA8ewymcvlwtU= Subject key identifier: 0B:EE:AD:7C:F5:EA:8F:25:77:8F:F0:6D:D0:AC:48:5A:57:BE:57:3B Authority key identifier: 4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 Certificate issuer: /CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Certificate serial: 1ACCF82AB0C0237AE2D63DEA4527700AB7540EFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft Manifest number: 2E Signing time: Sat 24 Oct 2026 21:10:25 +0000 Manifest this update: Sat 24 Oct 2026 21:05:25 +0000 Manifest next update: Sun 25 Oct 2026 23:56:25 +0000 Files and hashes: 1: 4C020B9A7E561E4B66C4D84205960DF774E08E45.crl (hash: DDy3UhI4pVScFjtPU6cPVDdM2/PieaGoczcGXXP1DNY=) 2: 3130332e31362e37382e302f32342d3234203d3e20313331373732.roa (hash: 3WQZvx1XPymzc9soyj43moQO8cyr3834Rj6M7pO3c1Q=) 3: 3130332e3231302e3230392e302f32342d3234203d3e20313331373732.roa (hash: XNmF0uoNuKq1Ux6VEndyF0UUR7z6WY99ugSnYwqThWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cc:f8:2a:b0:c0:23:7a:e2:d6:3d:ea:45:27:70:0a:b7:54:0e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C020B9A7E561E4B66C4D84205960DF774E08E45 Validity Not Before: Oct 24 21:05:25 2026 GMT Not After : Oct 25 23:56:25 2026 GMT Subject: CN=0BEEAD7CF5EA8F25778FF06DD0AC485A57BE573B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:d5:f2:dd:f9:f5:7f:d2:49:05:a6:ca:5a: 9f:bc:c0:1b:a9:8d:3e:8c:e6:bc:07:b0:10:b6:d5: 45:be:78:7d:ee:2f:23:a0:7a:9e:e2:ca:5f:58:f7: b1:fb:e9:c8:82:56:3b:4e:e5:bb:bc:d9:a0:8a:2f: 57:ce:51:45:3f:09:ec:39:96:49:85:e4:67:5f:14: 79:10:8c:af:d1:0e:22:21:0e:85:6a:65:21:84:c0: 44:f5:84:31:7b:43:a3:6e:ff:47:4e:f7:53:92:6b: d9:c3:21:d7:c1:05:87:88:67:de:d7:7b:e8:08:07: 66:05:ca:2e:13:4e:f7:00:8b:1c:28:33:82:48:76: 88:9f:5f:d0:bb:54:10:e2:3d:ba:8c:ac:71:50:ad: b0:6f:c7:1d:1e:d9:bc:e0:b7:79:8a:39:b7:86:f1: 61:3d:27:b6:66:59:5d:b8:5f:5d:49:a4:c8:e2:26: 27:dc:74:83:fb:e5:dc:15:b3:49:55:6d:95:0e:ec: 14:74:45:a8:8c:2a:6e:9a:dc:0c:eb:3c:87:51:73: f4:a9:15:7a:21:ab:40:fc:ee:e4:a7:0b:3a:4d:30: 73:7e:24:e6:2e:4b:4d:af:08:eb:d9:05:8c:05:ae: 71:a9:b9:d8:61:f3:7d:d1:98:37:bd:8a:5f:2d:b1: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EE:AD:7C:F5:EA:8F:25:77:8F:F0:6D:D0:AC:48:5A:57:BE:57:3B X509v3 Authority Key Identifier: keyid:4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7d:82:41:6f:97:64:9d:cf:10:5e:6a:e9:77:1f:fe:d5:de: 8a:7e:a8:25:87:46:29:f9:69:c9:8c:29:14:c1:e7:8a:f3:22: 47:31:78:09:ea:31:0c:98:9c:73:49:0d:59:86:cd:2a:40:cc: c8:8f:ba:38:35:14:72:26:fb:ea:2e:3a:68:97:72:4a:45:5c: ca:49:ea:81:3d:c0:cf:cd:79:bd:22:5b:98:c4:48:81:4f:0e: 83:b4:9c:04:cd:29:c7:43:da:14:a1:2b:de:6a:72:dd:4e:e8: 0f:26:1d:f4:95:20:53:c8:82:fe:0e:7d:0f:3a:08:62:07:1d: 3c:15:99:73:44:d1:1e:dd:13:0f:be:22:84:e6:bb:60:dd:ce: e0:b7:ec:90:eb:e1:4d:dd:2a:fe:74:51:54:58:af:eb:17:44: 63:f2:23:1f:4b:03:87:be:02:50:a0:fc:8f:31:bc:d7:4e:6b: 4c:25:6b:01:17:9c:9c:20:20:87:91:b5:00:9f:0d:5b:64:a3: cc:ed:a3:51:74:a5:ed:77:6e:79:78:db:b3:b5:e3:64:1c:c5: 49:e5:13:81:ad:01:7d:c1:dd:60:3e:9e:c3:a9:54:66:a9:40: 36:17:04:41:c5:cf:6b:b9:66:12:e0:46:dd:64:eb:42:62:e0: d5:2f:0d:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsz4KrDAI3ri1j3qRSdwCrdUDvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwMjBCOUE3RTU2MUU0QjY2QzREODQyMDU5NjBERjc3 NEUwOEU0NTAeFw0yNjEwMjQyMTA1MjVaFw0yNjEwMjUyMzU2MjVaMDMxMTAvBgNV BAMTKDBCRUVBRDdDRjVFQThGMjU3NzhGRjA2REQwQUM0ODVBNTdCRTU3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9tXy3fn1f9JJBabKWp+8wBup jT6M5rwHsBC21UW+eH3uLyOgep7iyl9Y97H76ciCVjtO5bu82aCKL1fOUUU/Cew5 lkmF5GdfFHkQjK/RDiIhDoVqZSGEwET1hDF7Q6Nu/0dO91OSa9nDIdfBBYeIZ97X e+gIB2YFyi4TTvcAixwoM4JIdoifX9C7VBDiPbqMrHFQrbBvxx0e2bzgt3mKObeG 8WE9J7ZmWV24X11JpMjiJifcdIP75dwVs0lVbZUO7BR0RaiMKm6a3AzrPIdRc/Sp FXohq0D87uSnCzpNMHN+JOYuS02vCOvZBYwFrnGpudhh833RmDe9il8tscLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+6tfPXqjyV3j/Bt0KxIWle+VzswHwYDVR0j BBgwFoAUTAILmn5WHktmxNhCBZYN93TgjkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcwMWYxNjEtMDgwOC00YWI0LTk2MDgtNjUwMzhmMWVlYjNhLzAvNEMwMjBCOUE3 RTU2MUU0QjY2QzREODQyMDU5NjBERjc3NEUwOEU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzAyMEI5QTdFNTYxRTRCNjZDNEQ4NDIwNTk2MERGNzc0RTA4 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcwMWYxNjEtMDgwOC00YWI0LTk2 MDgtNjUwMzhmMWVlYjNhLzAvNEMwMjBCOUE3RTU2MUU0QjY2QzREODQyMDU5NjBE Rjc3NEUwOEU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF9gkFvl2SdzxBeaul3H/7V3op+qCWHRin5 acmMKRTB54rzIkcxeAnqMQyYnHNJDVmGzSpAzMiPujg1FHIm++ouOmiXckpFXMpJ 6oE9wM/Neb0iW5jESIFPDoO0nATNKcdD2hShK95qct1O6A8mHfSVIFPIgv4OfQ86 CGIHHTwVmXNE0R7dEw++IoTmu2DdzuC37JDr4U3dKv50UVRYr+sXRGPyIx9LA4e+ AlCg/I8xvNdOa0wlawEXnJwgIIeRtQCfDVtko8zto1F0pe13bnl427O142QcxUnl E4GtAX3B3WA+nsOpVGapQDYXBEHFz2u5ZhLgRt1k60Ji4NUvDTI= -----END CERTIFICATE-----Generated at Sun Oct 25 06:47:25 2026 by rpki-client