$ rpki-client -vvvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft File: 883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json) Hash identifier: oSSDfdUJwy7Ur0J77n/7XML6F4BtKqvQ7pWuz7TfnHg= Subject key identifier: A4:46:6F:FB:39:35:C3:FD:5D:16:97:0F:12:AB:77:9F:D4:83:2E:94 Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Certificate serial: 4E3CFC887D8A6F546D46713705A4A578486FA4B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft Manifest number: EB Signing time: Sat 24 Oct 2026 16:04:04 +0000 Manifest this update: Sat 24 Oct 2026 15:59:04 +0000 Manifest next update: Sun 25 Oct 2026 17:23:04 +0000 Files and hashes: 1: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=) 2: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=) 3: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=) 4: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: cT5WEwqe3YEfC+VteaTZjEuYGSQq23ZF4rXhE5YYszQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3c:fc:88:7d:8a:6f:54:6d:46:71:37:05:a4:a5:78:48:6f:a4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Validity Not Before: Oct 24 15:59:04 2026 GMT Not After : Oct 25 17:23:04 2026 GMT Subject: CN=A4466FFB3935C3FD5D16970F12AB779FD4832E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:18:38:da:58:f3:f4:13:e1:5d:82:2f:42: 77:5f:78:b6:13:dd:a7:14:c1:d1:4b:b1:81:16:f0: e7:5d:28:db:2c:f3:ec:e5:f7:f6:9b:10:35:36:3e: 9b:0f:72:42:64:e5:7a:9f:be:02:7f:c8:9b:5b:95: 3f:81:dc:aa:51:da:6d:60:00:0b:1e:d4:14:99:fd: 76:fb:a3:49:26:17:0d:57:24:a0:7e:8d:6c:9f:82: cd:c1:ee:84:cd:c9:a9:dc:a9:fb:7e:1c:bb:42:f4: d6:c3:77:f5:8f:a2:ae:cb:37:6d:7c:bd:50:36:f5: 60:89:bd:8a:4c:f1:01:54:33:75:91:b2:58:a1:99: b3:63:7c:31:39:70:2e:85:d0:59:48:a6:11:c6:36: c7:00:17:a9:84:11:68:e0:5e:b4:94:d7:63:68:79: c6:89:dc:69:35:25:c5:9d:7c:e0:26:f8:d0:b9:4b: 5f:3e:61:d9:29:79:a3:29:0e:2d:24:73:cc:8d:be: 2b:89:8a:63:ca:de:71:bb:e8:1e:73:c4:14:56:08: 42:02:4b:5c:39:df:4d:06:ee:0f:64:34:33:c6:90: f7:cf:6a:03:34:01:8f:03:c6:59:ee:81:30:37:b8: 9b:cc:05:86:48:69:ea:a0:df:2e:40:91:7e:7f:af: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:46:6F:FB:39:35:C3:FD:5D:16:97:0F:12:AB:77:9F:D4:83:2E:94 X509v3 Authority Key Identifier: keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a7:9d:85:bd:6c:54:90:1b:06:e0:41:89:fc:e4:35:50:42: dd:3f:18:dd:88:98:ec:c1:cb:cb:35:97:b6:63:74:e2:58:cf: 52:48:9e:be:09:3d:db:4c:71:60:ef:c1:fd:a8:e2:50:f3:10: 23:4b:f4:3f:f6:7a:56:2e:c0:b6:99:31:a4:57:7a:d9:11:01: 1d:3a:f5:94:b5:5b:2f:7e:2d:8b:34:79:81:c8:3d:9e:9b:25: 21:23:af:c0:07:5c:01:ac:57:97:b5:f3:2d:d6:f6:8e:61:3b: ec:cf:a0:db:08:bd:f6:75:38:9b:80:e9:f8:d3:a3:40:b1:d6: fc:f8:59:46:bf:72:90:cc:2a:12:ce:67:71:fd:a4:a1:b3:99: a5:96:ad:18:6b:ad:ac:7f:ef:da:57:ad:a0:e7:17:5b:ed:82: 85:53:9d:e6:ae:d1:15:7f:68:92:21:aa:d8:e8:41:8f:c1:0a: 37:8c:7a:57:20:07:ac:76:da:fd:5e:09:c9:41:af:fe:cc:b8: d1:5b:74:85:58:4a:e0:07:d4:4b:63:6a:dd:3d:34:ff:53:de: 99:30:ca:4a:a9:17:49:69:2b:92:44:7c:af:0e:09:cd:c9:f6: 30:ab:70:a0:fc:3e:e3:d4:0c:83:78:a5:b0:45:25:b9:c0:0b: b2:31:7a:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjz8iH2Kb1RtRnE3BaSleEhvpLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4 MkIzQjFBNzAeFw0yNjEwMjQxNTU5MDRaFw0yNjEwMjUxNzIzMDRaMDMxMTAvBgNV BAMTKEE0NDY2RkZCMzkzNUMzRkQ1RDE2OTcwRjEyQUI3NzlGRDQ4MzJFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfRg42ljz9BPhXYIvQndfeLYT 3acUwdFLsYEW8OddKNss8+zl9/abEDU2PpsPckJk5XqfvgJ/yJtblT+B3KpR2m1g AAse1BSZ/Xb7o0kmFw1XJKB+jWyfgs3B7oTNyancqft+HLtC9NbDd/WPoq7LN218 vVA29WCJvYpM8QFUM3WRslihmbNjfDE5cC6F0FlIphHGNscAF6mEEWjgXrSU12No ecaJ3Gk1JcWdfOAm+NC5S18+YdkpeaMpDi0kc8yNviuJimPK3nG76B5zxBRWCEIC S1w5300G7g9kNDPGkPfPagM0AY8DxlnugTA3uJvMBYZIaeqg3y5AkX5/r7QdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpEZv+zk1w/1dFpcPEqt3n9SDLpQwHwYDVR0j BBgwFoAUiDZk2mE8kGfIFVQ2aTrvGoKzsacwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1ZmE5OGYtMWU4NS00NjM4LWJiOWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2 MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4MkIzQjFBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODM2NjREQTYxM0M5MDY3QzgxNTU0MzY2OTNBRUYxQTgyQjNC MUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVG MUE4MkIzQjFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIennYW9bFSQGwbgQYn85DVQQt0/GN2ImOzB y8s1l7ZjdOJYz1JInr4JPdtMcWDvwf2o4lDzECNL9D/2elYuwLaZMaRXetkRAR06 9ZS1Wy9+LYs0eYHIPZ6bJSEjr8AHXAGsV5e18y3W9o5hO+zPoNsIvfZ1OJuA6fjT o0Cx1vz4WUa/cpDMKhLOZ3H9pKGzmaWWrRhrrax/79pXraDnF1vtgoVTneau0RV/ aJIhqtjoQY/BCjeMelcgB6x22v1eCclBr/7MuNFbdIVYSuAH1Etjat09NP9T3pkw ykqpF0lpK5JEfK8OCc3J9jCrcKD8PuPUDIN4pbBFJbnAC7Ixepw= -----END CERTIFICATE-----Generated at Sun Oct 25 06:28:18 2026 by rpki-client