$ rpki-client -vvvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json) Hash identifier: 5QUiIQTxX762hoJxzT7PAZACqvFFN7Xzc1T8i7KnlU0= Subject key identifier: A8:92:C1:82:D4:3B:4C:88:64:56:02:FC:45:D9:E3:E1:6C:19:78:13 Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Certificate serial: 1886ED58A6D440BA01BBF2FF289A4C95CB3924CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft Manifest number: EB Signing time: Sun 25 Oct 2026 10:50:02 +0000 Manifest this update: Sun 25 Oct 2026 10:45:02 +0000 Manifest next update: Mon 26 Oct 2026 11:43:02 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=) 2: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: wowst/2D8dMTn1upGFYzAdkS70Mkc+BYF1EUUEtonXQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:86:ed:58:a6:d4:40:ba:01:bb:f2:ff:28:9a:4c:95:cb:39:24:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Validity Not Before: Oct 25 10:45:02 2026 GMT Not After : Oct 26 11:43:02 2026 GMT Subject: CN=A892C182D43B4C88645602FC45D9E3E16C197813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:87:d0:8e:6d:b4:34:31:e1:2b:23:6f:22: 48:b9:60:f6:0d:a3:9b:3c:1b:ad:d4:d1:65:3f:fc: ef:b1:3c:b0:0d:9e:32:c9:ec:f3:e8:3d:c7:b5:01: b4:3f:ef:c2:7f:c4:25:3b:8d:73:8b:9a:13:4b:69: ac:f4:1a:ae:33:b7:6d:6c:40:e5:1c:b3:51:0a:6b: 99:4c:c4:4b:1e:46:6f:4f:da:02:1e:34:4f:f2:84: 02:35:23:16:c9:3c:ee:dd:4c:a8:5f:91:8d:8b:10: ae:eb:35:b6:6b:57:74:7f:fe:92:33:69:e5:6d:ec: 94:80:d5:75:d3:9a:f8:b4:a9:9e:56:b8:e7:f0:77: 45:51:84:a0:14:d9:cf:e8:7d:42:d8:0e:58:4d:51: 43:db:26:0e:62:65:d0:87:51:f1:d1:19:3e:7e:11: 6c:af:74:84:71:fe:e8:98:b6:37:f4:04:10:34:02: e3:fe:6e:8b:01:44:99:24:bf:ce:56:be:ff:a9:4e: 61:50:af:eb:95:1e:2f:e9:3d:0e:d4:69:6a:d6:14: dc:ad:06:3a:2e:1f:15:29:a1:1f:69:b0:f2:19:83: df:a7:e7:01:65:50:b4:2f:78:a3:30:fb:1e:8d:52: 0b:a1:02:bd:f1:d1:24:8c:2a:1b:c0:5a:c8:1e:7b: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:92:C1:82:D4:3B:4C:88:64:56:02:FC:45:D9:E3:E1:6C:19:78:13 X509v3 Authority Key Identifier: keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ed:e3:c0:7e:a5:16:55:66:e3:3c:44:65:b0:a8:de:5c:4e: 31:6f:f2:0c:73:29:fd:ee:5a:7e:8e:94:2f:70:db:7f:a3:23: 06:27:6d:19:43:b3:9a:7d:4a:a6:7b:23:a5:2e:31:1a:8f:06: aa:c2:3c:64:79:3e:d1:e1:d2:d2:bf:da:f8:15:0b:66:71:91: 46:ec:d2:f6:4c:a6:fb:98:34:36:de:59:5e:7e:49:2c:06:a7: 2b:3d:e3:31:bb:34:36:0f:74:33:66:a9:38:c0:3a:df:3e:14: 6a:3f:69:a2:66:88:9d:b1:5b:9e:db:3e:56:b3:45:67:51:c6: f6:87:5d:5c:0d:7b:4e:47:78:ac:88:d9:e5:0f:d4:8c:3e:13: d5:7b:cf:e8:0b:42:a2:c0:6b:0f:06:76:d8:1c:45:1e:95:bf: 99:39:df:a2:9d:32:40:04:6f:54:2f:3b:da:9c:18:60:77:1d: 32:f6:24:70:60:9b:81:46:59:4b:cb:39:fe:b1:58:cc:ea:98: f5:9b:60:55:63:c8:08:01:8d:5f:5e:c8:b8:57:48:25:a2:4a: 53:b7:49:ad:42:44:7e:e3:e6:a2:6c:e1:5b:52:af:5d:b9:da: a8:99:14:df:45:54:28:03:c4:b5:b1:e0:ca:b4:1a:43:47:74: bc:d5:20:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIbtWKbUQLoBu/L/KJpMlcs5JMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3 RDEwQ0NBNjAeFw0yNjEwMjUxMDQ1MDJaFw0yNjEwMjYxMTQzMDJaMDMxMTAvBgNV BAMTKEE4OTJDMTgyRDQzQjRDODg2NDU2MDJGQzQ1RDlFM0UxNkMxOTc4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvj4fQjm20NDHhKyNvIki5YPYN o5s8G63U0WU//O+xPLANnjLJ7PPoPce1AbQ/78J/xCU7jXOLmhNLaaz0Gq4zt21s QOUcs1EKa5lMxEseRm9P2gIeNE/yhAI1IxbJPO7dTKhfkY2LEK7rNbZrV3R//pIz aeVt7JSA1XXTmvi0qZ5WuOfwd0VRhKAU2c/ofULYDlhNUUPbJg5iZdCHUfHRGT5+ EWyvdIRx/uiYtjf0BBA0AuP+bosBRJkkv85Wvv+pTmFQr+uVHi/pPQ7UaWrWFNyt BjouHxUpoR9psPIZg9+n5wFlULQveKMw+x6NUguhAr3x0SSMKhvAWsgee47/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqJLBgtQ7TIhkVgL8Rdnj4WwZeBMwHwYDVR0j BBgwFoAUR5uSjb7pABuZsh/Dygul830QzKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQzZjI5ZWEtODc0YS00ZDFhLWFiY2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERC RUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3RDEwQ0NBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzlCOTI4REJFRTkwMDFCOTlCMjFGQzNDQTBCQTVGMzdEMTBD Q0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1 RjM3RDEwQ0NBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTt48B+pRZVZuM8RGWwqN5cTjFv8gxzKf3u Wn6OlC9w23+jIwYnbRlDs5p9SqZ7I6UuMRqPBqrCPGR5PtHh0tK/2vgVC2ZxkUbs 0vZMpvuYNDbeWV5+SSwGpys94zG7NDYPdDNmqTjAOt8+FGo/aaJmiJ2xW57bPlaz RWdRxvaHXVwNe05HeKyI2eUP1Iw+E9V7z+gLQqLAaw8GdtgcRR6Vv5k536KdMkAE b1QvO9qcGGB3HTL2JHBgm4FGWUvLOf6xWMzqmPWbYFVjyAgBjV9eyLhXSCWiSlO3 Sa1CRH7j5qJs4VtSr1252qiZFN9FVCgDxLWx4Mq0GkNHdLzVIFU= -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:35 2026 by rpki-client