$ rpki-client -vvvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft File: 484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json) Hash identifier: eO5V+tNRLwSigQp1ZH3w5IB1FPyC2qHtlNVo6Gomq0g= Subject key identifier: F9:69:81:BF:2F:FD:52:73:8B:30:63:E1:FB:B7:F4:11:12:E4:7A:20 Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A Certificate issuer: /CN=484F335D7E0307C0F7FF120F455566A5DD73933A Certificate serial: 22752AFF74EAF0BBD112D2643F4DB64CE4048F53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft Manifest number: EB Signing time: Sat 24 Oct 2026 13:00:16 +0000 Manifest this update: Sat 24 Oct 2026 12:55:16 +0000 Manifest next update: Sun 25 Oct 2026 16:38:16 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=) 2: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: hvOKKcfBjoAUA5fI2UGqBBdmRO+J6iywyHrvir7k0yQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:75:2a:ff:74:ea:f0:bb:d1:12:d2:64:3f:4d:b6:4c:e4:04:8f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A Validity Not Before: Oct 24 12:55:16 2026 GMT Not After : Oct 25 16:38:16 2026 GMT Subject: CN=F96981BF2FFD52738B3063E1FBB7F41112E47A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:83:ef:82:ba:74:b5:71:cd:71:4a:1f:d6: 27:3f:d4:53:6a:29:6d:9b:5c:66:23:2a:94:74:8a: 00:98:8a:60:8f:93:05:42:d5:0b:ae:77:68:d1:d6: e0:2c:45:4d:19:74:7c:f1:3b:0e:24:45:3c:19:40: 4b:ad:14:83:fc:72:fa:16:30:a4:e3:fb:61:36:0c: 71:45:4c:8a:c1:b0:ab:5f:73:22:16:46:b5:c8:31: a5:6f:10:ac:12:b7:a8:98:64:c7:01:32:19:81:13: 6e:4b:c8:95:f0:30:3f:17:2e:2b:a1:55:5a:f9:19: 66:f4:cd:a3:3c:c3:b0:d0:66:18:91:a1:4e:29:fc: 39:6f:45:d3:54:7a:47:34:21:13:0c:e9:3c:22:a6: 7f:5a:b2:a6:aa:6a:72:51:00:fd:30:92:0e:cf:10: 54:5d:63:74:a7:1b:3e:0f:84:9d:17:b0:93:7d:5d: b1:38:54:15:46:d5:a3:1c:c5:0e:be:85:b5:87:95: a0:b7:6d:88:4c:9a:f5:72:16:7f:a1:0b:f5:e2:e0: ab:40:72:4e:86:85:3c:7a:28:d7:ec:c0:fe:04:c0: c5:28:12:29:bb:97:f1:87:4b:ef:66:43:1e:61:c5: fc:1e:e2:65:c1:5d:08:c1:b9:e3:85:73:50:f2:d5: 23:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:69:81:BF:2F:FD:52:73:8B:30:63:E1:FB:B7:F4:11:12:E4:7A:20 X509v3 Authority Key Identifier: keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:92:0c:e8:a4:95:72:ac:4d:99:cc:bd:5f:01:d0:48:5f:89: 4e:56:ec:fb:df:b7:3f:e2:27:7c:29:ab:c2:67:47:e8:08:0d: 46:fd:0d:51:60:ba:4c:e1:7c:03:17:f5:99:d4:e9:9f:0b:74: cc:b4:27:bb:c5:c6:6a:1a:40:49:66:35:9a:8f:29:fa:b0:88: b5:b3:f5:2c:25:f4:55:b6:c3:c0:40:7d:c4:44:d5:06:97:8f: d1:74:50:be:a1:ea:94:be:b4:1a:a3:cf:b7:a0:bb:4f:1f:ce: 4a:a1:70:9e:c4:05:e2:cb:50:45:95:1a:63:6f:14:04:c9:f0: 8a:78:62:ff:b9:2b:20:c8:72:dc:4c:60:81:6a:cd:14:d8:8d: 75:a9:56:7a:d2:e7:f6:15:b8:35:f1:c3:eb:de:24:0f:45:6c: 63:76:92:d1:88:aa:7d:71:37:75:36:82:0a:23:21:d7:f0:87: f8:a2:92:0b:a8:f7:26:81:31:18:8f:d2:fe:4c:d9:21:13:e3: ca:34:b4:12:91:72:d4:de:22:7a:b7:9b:5f:17:61:92:af:3e: 9c:94:04:3a:12:bd:c2:9d:a8:80:f7:9c:bd:f0:41:1f:94:e3: b9:e7:c3:c1:21:06:94:b3:bb:ca:58:d4:30:10:e0:77:36:91: 6f:89:6e:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInUq/3Tq8LvREtJkP022TOQEj1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0RjMzNUQ3RTAzMDdDMEY3RkYxMjBGNDU1NTY2QTVE RDczOTMzQTAeFw0yNjEwMjQxMjU1MTZaFw0yNjEwMjUxNjM4MTZaMDMxMTAvBgNV BAMTKEY5Njk4MUJGMkZGRDUyNzM4QjMwNjNFMUZCQjdGNDExMTJFNDdBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jIPvgrp0tXHNcUof1ic/1FNq KW2bXGYjKpR0igCYimCPkwVC1Quud2jR1uAsRU0ZdHzxOw4kRTwZQEutFIP8cvoW MKTj+2E2DHFFTIrBsKtfcyIWRrXIMaVvEKwSt6iYZMcBMhmBE25LyJXwMD8XLiuh VVr5GWb0zaM8w7DQZhiRoU4p/DlvRdNUekc0IRMM6Twipn9asqaqanJRAP0wkg7P EFRdY3SnGz4PhJ0XsJN9XbE4VBVG1aMcxQ6+hbWHlaC3bYhMmvVyFn+hC/Xi4KtA ck6GhTx6KNfswP4EwMUoEim7l/GHS+9mQx5hxfwe4mXBXQjBueOFc1Dy1SMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+WmBvy/9UnOLMGPh+7f0ERLkeiAwHwYDVR0j BBgwFoAUSE8zXX4DB8D3/xIPRVVmpd1zkzowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE3YzhjMDEtNGFmNy00MWIwLTg1YTMtOWQxZmE0ZWI5ZmJhLzAvNDg0RjMzNUQ3 RTAzMDdDMEY3RkYxMjBGNDU1NTY2QTVERDczOTMzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODRGMzM1RDdFMDMwN0MwRjdGRjEyMEY0NTU1NjZBNURENzM5 MzNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNDg0RjMzNUQ3RTAzMDdDMEY3RkYxMjBGNDU1NTY2 QTVERDczOTMzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaSDOiklXKsTZnMvV8B0EhfiU5W7Pvftz/i J3wpq8JnR+gIDUb9DVFgukzhfAMX9ZnU6Z8LdMy0J7vFxmoaQElmNZqPKfqwiLWz 9Swl9FW2w8BAfcRE1QaXj9F0UL6h6pS+tBqjz7egu08fzkqhcJ7EBeLLUEWVGmNv FATJ8Ip4Yv+5KyDIctxMYIFqzRTYjXWpVnrS5/YVuDXxw+veJA9FbGN2ktGIqn1x N3U2ggojIdfwh/iikguo9yaBMRiP0v5M2SET48o0tBKRctTeInq3m18XYZKvPpyU BDoSvcKdqID3nL3wQR+U47nnw8EhBpSzu8pY1DAQ4Hc2kW+Jbmc= -----END CERTIFICATE-----Generated at Sun Oct 25 10:42:19 2026 by rpki-client