$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json) Hash identifier: LQVqWP5kNZnGDkE+8YT/0OdJAepsceSnGINIzaXeC80= Subject key identifier: DB:48:DC:B3:B3:87:64:F7:60:A2:6A:90:75:B9:79:19:ED:55:E2:EA Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Certificate serial: 5DB298E1A2F7C96D3FFC6C910C4AD77CCB8D3DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft Manifest number: ED Signing time: Sun 25 Oct 2026 20:37:36 +0000 Manifest this update: Sun 25 Oct 2026 20:32:36 +0000 Manifest next update: Mon 26 Oct 2026 23:22:36 +0000 Files and hashes: 1: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=) 2: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: QPrro4A/njTWLLulGM1QNiiuOYc2dWx+F8TRMhFc01s=) 3: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=) 4: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=) 5: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b2:98:e1:a2:f7:c9:6d:3f:fc:6c:91:0c:4a:d7:7c:cb:8d:3d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454 Validity Not Before: Oct 25 20:32:36 2026 GMT Not After : Oct 26 23:22:36 2026 GMT Subject: CN=DB48DCB3B38764F760A26A9075B97919ED55E2EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e0:6d:96:fe:e6:7d:c2:79:56:b7:d0:43:4e: ad:26:32:8c:a4:32:2f:0d:a8:ff:aa:07:49:59:e2: 72:c7:65:fe:89:74:22:fe:f8:e3:42:2b:a8:8b:6e: cd:36:f8:ad:8b:eb:5a:5f:0d:3f:74:42:cd:c3:9d: de:f8:92:92:1b:c4:12:35:13:62:86:9a:4d:20:1a: 0a:8c:d2:45:ae:a5:fb:f7:95:aa:6d:73:af:d0:ba: d9:d4:72:51:bd:b1:9c:22:20:c5:1a:8d:cd:ac:d6: 26:0a:c4:2a:c4:38:46:28:73:27:4a:66:95:45:d7: b4:37:76:db:b4:2d:fb:ac:e5:b7:0a:1a:c3:2c:19: bc:78:cb:7f:58:79:ef:48:48:4e:52:cd:47:3d:e3: 28:e4:20:32:f5:eb:a9:bc:76:e2:a2:b7:94:e9:81: bd:c0:3b:8b:e9:96:c9:51:d7:db:18:e9:e8:d9:5d: 22:33:cf:c1:68:85:ea:06:23:44:c0:26:b1:1a:1f: 67:ba:65:80:a6:e1:92:d9:30:fa:17:56:6b:e6:cb: 55:8d:d3:b9:ec:c8:18:7f:63:4f:3d:83:b8:9a:5e: 7e:b9:fb:e8:7c:e3:6c:a5:57:74:b2:bc:3a:cd:14: 44:3c:4d:68:88:20:a4:e6:10:71:31:71:15:2b:cd: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:DC:B3:B3:87:64:F7:60:A2:6A:90:75:B9:79:19:ED:55:E2:EA X509v3 Authority Key Identifier: keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:84:02:60:64:55:8e:09:1f:ca:e2:53:3f:bc:44:d3:a9: fa:1d:b5:07:eb:9e:48:64:4d:f8:7d:15:37:54:41:4f:b2:7d: 72:64:bd:01:11:75:93:99:e8:af:19:89:c4:0a:c3:34:a7:23: e4:1a:58:78:b9:7c:7b:b3:1e:24:51:55:9c:11:2e:2f:d4:83: 86:51:31:bb:57:02:27:91:6e:23:fd:78:e0:44:52:79:bd:84: 62:70:89:ec:40:27:5c:3c:d3:8f:4d:89:5c:a4:2e:56:0f:4f: 29:36:6f:93:ba:16:a4:f2:b0:b4:1f:45:81:4c:79:ba:12:1a: 30:30:ad:40:8c:1d:d3:73:53:9e:70:1f:cd:e9:3e:f6:6d:77: 2c:77:95:bc:f2:c9:f3:aa:6d:dd:c2:30:92:44:2f:b1:67:89: cb:41:82:08:b3:59:d6:1b:25:aa:d7:29:52:a8:cf:07:f4:fa: e9:12:4f:e8:0e:55:bc:13:e8:48:44:e2:75:3e:e3:cd:22:1f: 4c:1f:7d:63:94:23:f5:07:36:d0:82:0f:69:bc:ca:21:96:d4: 1c:8d:0b:df:d8:85:61:e6:3f:9b:f9:80:86:9f:a9:81:a4:44: a2:3b:15:2a:47:1c:4b:23:79:ab:24:7b:30:87:a1:62:f4:4c: e7:6c:a8:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbKY4aL3yW0//GyRDErXfMuNPdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2 RThBODQ1NDAeFw0yNjEwMjUyMDMyMzZaFw0yNjEwMjYyMzIyMzZaMDMxMTAvBgNV BAMTKERCNDhEQ0IzQjM4NzY0Rjc2MEEyNkE5MDc1Qjk3OTE5RUQ1NUUyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy4G2W/uZ9wnlWt9BDTq0mMoyk Mi8NqP+qB0lZ4nLHZf6JdCL++ONCK6iLbs02+K2L61pfDT90Qs3Dnd74kpIbxBI1 E2KGmk0gGgqM0kWupfv3laptc6/QutnUclG9sZwiIMUajc2s1iYKxCrEOEYocydK ZpVF17Q3dtu0Lfus5bcKGsMsGbx4y39Yee9ISE5SzUc94yjkIDL166m8duKit5Tp gb3AO4vplslR19sY6ejZXSIzz8FoheoGI0TAJrEaH2e6ZYCm4ZLZMPoXVmvmy1WN 07nsyBh/Y089g7iaXn65++h842ylV3SyvDrNFEQ8TWiIIKTmEHExcRUrzd/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20jcs7OHZPdgomqQdbl5Ge1V4uowHwYDVR0j BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2 RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4 NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3 MjI2RThBODQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvOhAJgZFWOCR/K4lM/vETTqfodtQfrnkhk Tfh9FTdUQU+yfXJkvQERdZOZ6K8ZicQKwzSnI+QaWHi5fHuzHiRRVZwRLi/Ug4ZR MbtXAieRbiP9eOBEUnm9hGJwiexAJ1w8049NiVykLlYPTyk2b5O6FqTysLQfRYFM eboSGjAwrUCMHdNzU55wH83pPvZtdyx3lbzyyfOqbd3CMJJEL7FnictBggizWdYb JarXKVKozwf0+ukST+gOVbwT6EhE4nU+480iH0wffWOUI/UHNtCCD2m8yiGW1ByN C9/YhWHmP5v5gIafqYGkRKI7FSpHHEsjeaskezCHoWL0TOdsqBA= -----END CERTIFICATE-----Generated at Mon Oct 26 02:30:58 2026 by rpki-client