$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json) Hash identifier: 9ilZbnLW/ydCMd0kPVZ3xrolQfSh+fwRDgzpS1uIXCM= Subject key identifier: C3:6D:9A:85:FA:E8:EC:00:AB:54:F8:F7:A7:B9:FF:07:D8:B8:D7:94 Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Certificate serial: 499B01EEEE8B573DB39B0790258B7D1453D940FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft Manifest number: EF Signing time: Tue 27 Oct 2026 08:51:16 +0000 Manifest this update: Tue 27 Oct 2026 08:46:16 +0000 Manifest next update: Wed 28 Oct 2026 09:55:16 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=) 2: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: VZVCG2eJ01oBqpHzCG15kFo/Smja4M3jk6P2rcl71t0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 09:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9b:01:ee:ee:8b:57:3d:b3:9b:07:90:25:8b:7d:14:53:d9:40:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Validity Not Before: Oct 27 08:46:16 2026 GMT Not After : Oct 28 09:55:16 2026 GMT Subject: CN=C36D9A85FAE8EC00AB54F8F7A7B9FF07D8B8D794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:05:9d:61:47:85:53:00:8e:f3:fd:90:2a: 7d:c2:9e:67:dd:ce:3b:2f:30:4a:b2:03:78:bd:7a: 79:fe:d8:4a:be:11:52:ed:8b:01:23:2b:9a:0c:4a: 9c:13:70:e1:6b:b2:0a:e1:ac:02:ab:fd:27:64:24: bc:55:62:ab:4e:86:67:48:ed:60:03:16:7a:2d:54: 8b:36:9a:1f:b2:57:1b:ba:ae:d2:4a:5f:4f:5f:1a: a7:5f:d2:96:69:6b:af:57:73:fc:49:eb:46:1e:c0: 58:87:79:fa:fb:2d:40:22:5a:3a:6a:82:cd:9c:55: 63:c6:ac:c3:36:12:d3:9b:8e:20:b9:7d:b7:c0:7f: fe:14:4e:ce:34:1a:39:15:a2:f5:0d:e8:3c:1f:ee: 89:42:6c:f6:e8:4b:54:08:66:e3:a9:5b:b1:68:40: 6c:17:fa:42:db:69:51:60:7a:61:80:b5:3f:de:e0: d3:ba:db:52:90:32:eb:c5:9d:e5:73:ae:93:75:c7: 25:d0:ce:01:fa:5b:8b:e0:52:06:e8:ca:37:2a:97: de:bf:51:9c:00:d5:df:7e:c7:e7:ed:65:7a:87:d8: 24:ef:cf:4a:8b:31:fa:ca:e9:14:20:cc:25:d3:cd: be:15:d1:4c:1e:52:64:93:b6:1f:35:02:8a:92:24: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6D:9A:85:FA:E8:EC:00:AB:54:F8:F7:A7:B9:FF:07:D8:B8:D7:94 X509v3 Authority Key Identifier: keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:05:5b:a9:15:68:ec:26:ad:64:a8:6f:3f:d6:0b:86:66:11: e7:eb:3f:a2:3f:df:79:cc:de:64:c9:b3:07:6c:68:f2:6d:e0: cd:1c:94:b0:dc:eb:95:ba:be:5d:25:73:42:a1:85:49:e0:b1: 7c:f1:71:56:12:47:ce:46:7a:bc:c1:95:80:00:8b:9e:3f:dd: 9f:f8:b4:83:05:5c:82:fd:7a:88:ee:63:c2:5e:04:01:6b:58: 4e:8a:80:66:fd:fe:ef:bd:63:6f:3d:bc:89:9f:1a:85:b7:62: 93:ba:0d:26:af:a8:fa:55:60:41:e9:ea:ce:91:26:f9:21:45: b2:eb:a9:d0:82:20:09:65:f9:fb:d6:ea:17:55:f5:0c:98:03: 5d:3d:b7:6e:e7:d3:8f:56:0c:81:36:01:d8:f4:29:73:4d:c0: 30:13:ba:2c:c2:af:31:6d:94:1a:5a:41:3b:9c:6d:aa:cf:2b: 41:96:8a:38:bf:4f:22:e4:38:65:35:1e:08:46:bb:28:c2:cc: 97:e0:a6:c9:63:1b:82:6b:47:ab:f3:74:5e:ce:5d:94:dd:ae: be:6f:a6:0c:51:ec:90:8c:46:fc:06:a4:78:4d:a6:71:2f:ad: f0:d5:16:f0:85:b6:3e:28:ee:07:8f:2a:92:e9:9f:54:46:de: 66:43:6d:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZsB7u6LVz2zmweQJYt9FFPZQP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx RkRFMjc0ODAeFw0yNjEwMjcwODQ2MTZaFw0yNjEwMjgwOTU1MTZaMDMxMTAvBgNV BAMTKEMzNkQ5QTg1RkFFOEVDMDBBQjU0RjhGN0E3QjlGRjA3RDhCOEQ3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWdwWdYUeFUwCO8/2QKn3Cnmfd zjsvMEqyA3i9enn+2Eq+EVLtiwEjK5oMSpwTcOFrsgrhrAKr/SdkJLxVYqtOhmdI 7WADFnotVIs2mh+yVxu6rtJKX09fGqdf0pZpa69Xc/xJ60YewFiHefr7LUAiWjpq gs2cVWPGrMM2EtObjiC5fbfAf/4UTs40GjkVovUN6Dwf7olCbPboS1QIZuOpW7Fo QGwX+kLbaVFgemGAtT/e4NO621KQMuvFneVzrpN1xyXQzgH6W4vgUgboyjcql96/ UZwA1d9+x+ftZXqH2CTvz0qLMfrK6RQgzCXTzb4V0UweUmSTth81AoqSJGqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw22ahfro7ACrVPj3p7n/B9i415QwHwYDVR0j BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMFW6kVaOwmrWSobz/WC4ZmEefrP6I/33nM 3mTJswdsaPJt4M0clLDc65W6vl0lc0KhhUngsXzxcVYSR85GerzBlYAAi54/3Z/4 tIMFXIL9eojuY8JeBAFrWE6KgGb9/u+9Y289vImfGoW3YpO6DSavqPpVYEHp6s6R JvkhRbLrqdCCIAll+fvW6hdV9QyYA109t27n049WDIE2Adj0KXNNwDATuizCrzFt lBpaQTucbarPK0GWiji/TyLkOGU1HghGuyjCzJfgpsljG4JrR6vzdF7OXZTdrr5v pgxR7JCMRvwGpHhNpnEvrfDVFvCFtj4o7gePKpLpn1RG3mZDbU0= -----END CERTIFICATE-----Generated at Tue Oct 27 17:28:10 2026 by rpki-client