$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json) Hash identifier: 5dEckCBGZ6HvzdhD41N7XUhHdi57Q/NqRT5UDx35WZA= Subject key identifier: DE:DF:99:D8:A9:3E:D1:9A:E2:00:FF:21:92:1D:59:72:37:6A:A0:C4 Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A Certificate serial: A827A2D5072A8B8792F8F40EC5F2C086D2E0E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft Manifest number: EF Signing time: Wed 28 Oct 2026 04:10:12 +0000 Manifest this update: Wed 28 Oct 2026 04:05:12 +0000 Manifest next update: Thu 29 Oct 2026 05:15:12 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=) 3: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: JRhVxj41gJuVil9MhDhwsJhRGP9syfjtrs+tSZOtInE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 05:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a8:27:a2:d5:07:2a:8b:87:92:f8:f4:0e:c5:f2:c0:86:d2:e0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A Validity Not Before: Oct 28 04:05:12 2026 GMT Not After : Oct 29 05:15:12 2026 GMT Subject: CN=DEDF99D8A93ED19AE200FF21921D5972376AA0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:8f:b2:24:a4:7d:ef:9f:77:07:75:d1:32: 98:31:75:2d:30:39:01:3c:09:d2:a9:d1:d0:4f:06: 10:9e:ad:cc:be:f5:c5:63:25:25:2b:70:2f:19:fc: 24:dc:46:25:b8:a7:7f:ec:d6:71:ed:8c:2c:fe:e7: 8b:bc:94:eb:bd:43:a4:96:a5:bd:14:97:29:c8:a9: 74:bd:ca:b4:05:f4:c8:de:2c:64:3f:55:10:e0:10: db:ab:eb:2c:9f:14:9a:19:fb:89:85:f6:e9:19:c6: 8d:65:58:f4:1e:cf:82:52:40:72:63:6b:cb:1c:11: 61:0f:ae:94:12:e5:93:e8:05:4b:71:9d:6e:a0:23: 33:1a:a7:b0:72:ce:f9:58:0a:33:ba:3c:25:df:b7: 02:40:60:79:9e:60:d8:56:b0:5f:53:7e:27:0d:a9: 27:db:b0:ef:f8:cd:17:0d:90:f9:8c:71:6b:b9:13: 29:62:3c:13:cb:70:5f:7e:6d:a5:9b:d8:6d:ce:6a: 71:f1:1f:fb:01:34:38:ea:ac:39:48:92:03:5b:e6: 6d:2e:51:07:f4:cb:87:54:9f:cf:55:1f:c3:db:cd: b9:c1:a6:a4:2a:98:cf:4f:32:11:a3:22:43:1e:0c: bd:9d:f7:50:d9:4a:46:07:1b:d7:0f:06:d8:1e:97: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DF:99:D8:A9:3E:D1:9A:E2:00:FF:21:92:1D:59:72:37:6A:A0:C4 X509v3 Authority Key Identifier: keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0e:17:b6:57:a4:85:3c:73:e3:ef:f3:d6:74:ac:f4:a8:b0: 01:7c:b2:92:32:33:52:a3:fe:38:c1:55:aa:3e:42:95:1c:ca: 37:98:b0:30:4e:3b:20:61:98:42:c3:b3:bf:47:57:f4:6d:a0: a8:74:9a:e9:42:da:b4:21:af:4c:9c:ad:16:65:da:34:a1:ed: 7a:42:cf:57:27:80:c1:38:c1:94:63:5e:dd:53:73:7f:f6:78: 72:38:be:c5:30:5c:e4:a0:c5:00:92:8f:8d:30:3b:55:66:9b: 03:a2:31:80:92:04:b6:cc:f9:e1:f8:3d:56:cf:cf:35:3f:bf: 0f:a1:5a:19:1d:ae:10:9b:55:bd:6c:31:52:83:1c:1b:00:f0: 1e:9e:48:1c:9c:7a:eb:7d:df:27:e5:46:9d:4c:e0:96:db:82: 72:e2:36:0d:92:c9:fe:0f:fa:e6:1b:29:6e:98:6b:54:f6:fc: be:df:b1:72:df:80:04:4d:ae:d0:e9:1a:7b:40:76:1f:45:dc: 89:5a:ed:31:fd:a0:a6:c7:5e:69:a0:68:38:88:9e:a6:a6:34: 72:61:ef:15:cc:70:e2:d8:f1:86:fc:1a:3d:21:1e:2b:1e:29: 50:d5:96:2b:24:16:d2:2f:7a:17:49:87:e8:70:a0:ba:dc:51: 1d:5c:2c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKgnotUHKouHkvj0DsXywIbS4OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIw MTRGMjA1QTAeFw0yNjEwMjgwNDA1MTJaFw0yNjEwMjkwNTE1MTJaMDMxMTAvBgNV BAMTKERFREY5OUQ4QTkzRUQxOUFFMjAwRkYyMTkyMUQ1OTcyMzc2QUEwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQo+yJKR97593B3XRMpgxdS0w OQE8CdKp0dBPBhCercy+9cVjJSUrcC8Z/CTcRiW4p3/s1nHtjCz+54u8lOu9Q6SW pb0UlynIqXS9yrQF9MjeLGQ/VRDgENur6yyfFJoZ+4mF9ukZxo1lWPQez4JSQHJj a8scEWEPrpQS5ZPoBUtxnW6gIzMap7ByzvlYCjO6PCXftwJAYHmeYNhWsF9TficN qSfbsO/4zRcNkPmMcWu5EyliPBPLcF9+baWb2G3OanHxH/sBNDjqrDlIkgNb5m0u UQf0y4dUn89VH8PbzbnBpqQqmM9PMhGjIkMeDL2d91DZSkYHG9cPBtgel8i1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3t+Z2Kk+0ZriAP8hkh1ZcjdqoMQwHwYDVR0j BBgwFoAUxOnURpgockk2yuY6QXwN4gFPIFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU4MmZjYTktMzIyMi00NWI2LWI0MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5 ODI4NzI0OTM2Q0FFNjNBNDE3QzBERTIwMTRGMjA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNEU5RDQ0Njk4Mjg3MjQ5MzZDQUU2M0E0MTdDMERFMjAxNEYy MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvQzRFOUQ0NDY5ODI4NzI0OTM2Q0FFNjNBNDE3QzBE RTIwMTRGMjA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAOF7ZXpIU8c+Pv89Z0rPSosAF8spIyM1Kj /jjBVao+QpUcyjeYsDBOOyBhmELDs79HV/RtoKh0mulC2rQhr0ycrRZl2jSh7XpC z1cngME4wZRjXt1Tc3/2eHI4vsUwXOSgxQCSj40wO1VmmwOiMYCSBLbM+eH4PVbP zzU/vw+hWhkdrhCbVb1sMVKDHBsA8B6eSByceut93yflRp1M4JbbgnLiNg2Syf4P +uYbKW6Ya1T2/L7fsXLfgARNrtDpGntAdh9F3Ila7TH9oKbHXmmgaDiInqamNHJh 7xXMcOLY8Yb8Gj0hHiseKVDVliskFtIvehdJh+hwoLrcUR1cLMQ= -----END CERTIFICATE-----Generated at Wed Oct 28 11:35:33 2026 by rpki-client