$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json) Hash identifier: JxV28PM0SsuX3aGz0Rm0PmfuuEEW0LyTJ2pfx0WMG8M= Subject key identifier: 4F:C9:B3:E6:E6:D5:03:2D:F5:3D:86:36:BE:7C:EC:8B:F6:EC:E4:DA Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Certificate serial: 4CCDE0D6821B11FF131FA162188F4642DF2D8F3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft Manifest number: E6 Signing time: Thu 22 Oct 2026 18:06:17 +0000 Manifest this update: Thu 22 Oct 2026 18:01:17 +0000 Manifest next update: Fri 23 Oct 2026 19:26:17 +0000 Files and hashes: 1: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: jaVBhdkeLY5dOJwst/Dr7tVmus7YnJhf+KD4vv8SCO0=) 2: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=) 3: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=) 4: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 13:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cd:e0:d6:82:1b:11:ff:13:1f:a1:62:18:8f:46:42:df:2d:8f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Validity Not Before: Oct 22 18:01:17 2026 GMT Not After : Oct 23 19:26:17 2026 GMT Subject: CN=4FC9B3E6E6D5032DF53D8636BE7CEC8BF6ECE4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:ad:e1:14:be:97:c2:e7:fd:fa:67:32:28: db:9a:0a:a4:69:fc:7f:e0:94:0e:62:73:68:19:d1: bb:a4:a2:09:39:01:41:ab:4d:21:77:e4:08:77:db: a0:94:37:7d:46:2c:8e:32:ac:89:bc:bf:5b:17:7c: 6d:0b:13:45:54:dc:d6:1c:d4:56:54:c1:14:60:07: 90:48:db:96:dd:bc:a2:62:64:e4:9b:d2:30:02:a6: dc:64:69:b5:72:98:4b:1c:0e:8b:70:66:5e:d1:e5: 44:4f:fe:56:37:e7:2f:61:d0:08:9c:43:dc:43:80: 0b:2f:18:cf:91:cc:be:02:18:b9:77:9d:ca:8b:b3: 35:27:ed:38:34:55:2a:b6:d0:c3:42:44:ad:f4:e3: 60:04:1a:f2:ba:29:a2:8c:9f:7e:79:c7:74:0d:26: 90:28:fc:77:2f:da:31:a9:84:4e:70:55:d0:90:6e: 01:d3:6b:18:88:be:b9:ed:8a:17:88:60:f9:ba:b4: 90:5f:9a:16:73:99:92:fd:4e:31:28:13:1e:48:8f: b5:c0:23:11:5d:99:95:1c:3e:b6:b1:de:cf:92:5b: 77:81:87:7c:9b:76:48:dd:0b:2f:ad:d3:dc:35:c0: 1d:92:01:09:d0:7e:60:7a:66:f9:dd:d4:74:9a:f5: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C9:B3:E6:E6:D5:03:2D:F5:3D:86:36:BE:7C:EC:8B:F6:EC:E4:DA X509v3 Authority Key Identifier: keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:26:d0:00:a4:3f:c1:43:cd:a1:c1:54:ac:df:f6:3c:f5:9b: 37:fd:f2:06:94:2f:6b:ab:42:f7:d8:c3:4a:f0:22:da:fa:90: bc:f5:64:92:ae:96:4c:c1:14:fe:05:78:b1:82:9f:52:11:53: 85:f0:b5:a8:fd:b8:1e:5b:19:ef:ba:34:d0:a4:f9:91:a6:2b: cd:62:26:f6:d4:02:76:3b:12:95:36:16:49:49:27:2f:25:e6: 15:6c:41:70:cb:8e:6d:27:8a:d1:33:28:b3:f1:47:6d:e6:af: 17:a3:26:69:b8:47:14:4b:dd:ec:bc:ee:6a:2d:f1:5c:63:81: 3d:05:49:cf:c7:8f:2a:98:92:ac:40:03:86:91:b0:8f:f9:59: 7a:d0:91:93:d2:0b:51:40:85:12:03:c6:56:83:c6:b4:ea:e5: a5:44:db:9e:19:0d:c9:c0:ea:50:70:95:ca:90:b0:3d:1d:e6: 57:e9:a6:c9:76:d0:f7:31:bb:0c:82:5e:24:4b:19:ca:20:0f: f6:b5:08:8c:40:b5:d4:c0:3f:fc:47:b4:08:85:9d:73:38:24: f4:d8:6a:bd:76:1e:69:79:8c:a6:77:d9:80:1f:5a:c2:19:9f: bd:43:70:6a:1e:74:4e:f5:8d:6d:22:55:da:4a:fd:8b:cd:8e: 32:6d:75:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTM3g1oIbEf8TH6FiGI9GQt8tjz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5 NTMyOTZBNjAeFw0yNjEwMjIxODAxMTdaFw0yNjEwMjMxOTI2MTdaMDMxMTAvBgNV BAMTKDRGQzlCM0U2RTZENTAzMkRGNTNEODYzNkJFN0NFQzhCRjZFQ0U0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgK3hFL6Xwuf9+mcyKNuaCqRp /H/glA5ic2gZ0bukogk5AUGrTSF35Ah326CUN31GLI4yrIm8v1sXfG0LE0VU3NYc 1FZUwRRgB5BI25bdvKJiZOSb0jACptxkabVymEscDotwZl7R5URP/lY35y9h0Aic Q9xDgAsvGM+RzL4CGLl3ncqLszUn7Tg0VSq20MNCRK3042AEGvK6KaKMn355x3QN JpAo/Hcv2jGphE5wVdCQbgHTaxiIvrntiheIYPm6tJBfmhZzmZL9TjEoEx5Ij7XA IxFdmZUcPrax3s+SW3eBh3ybdkjdCy+t09w1wB2SAQnQfmB6Zvnd1HSa9cnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8mz5ubVAy31PYY2vnzsi/bs5NowHwYDVR0j BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3 N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5 NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0m0ACkP8FDzaHBVKzf9jz1mzf98gaUL2ur QvfYw0rwItr6kLz1ZJKulkzBFP4FeLGCn1IRU4Xwtaj9uB5bGe+6NNCk+ZGmK81i JvbUAnY7EpU2FklJJy8l5hVsQXDLjm0nitEzKLPxR23mrxejJmm4RxRL3ey87mot 8VxjgT0FSc/HjyqYkqxAA4aRsI/5WXrQkZPSC1FAhRIDxlaDxrTq5aVE254ZDcnA 6lBwlcqQsD0d5lfppsl20PcxuwyCXiRLGcogD/a1CIxAtdTAP/xHtAiFnXM4JPTY ar12Hml5jKZ32YAfWsIZn71DcGoedE71jW0iVdpK/YvNjjJtdRc= -----END CERTIFICATE-----Generated at Fri Oct 23 06:07:52 2026 by rpki-client