$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft File: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft (raw, json) Hash identifier: Hbv7L7juUI2zMYBiY8Ws2Stl3jibLrLCBLQ72gzku6U= Subject key identifier: AF:60:1A:A1:2D:72:21:BC:16:43:6C:90:8E:70:E7:BD:EF:C6:1E:57 Authority key identifier: 4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 Certificate issuer: /CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Certificate serial: 196397F42C0C660A95E0B5C7223861FC7A74EB13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft Manifest number: EA Signing time: Sat 24 Oct 2026 02:42:32 +0000 Manifest this update: Sat 24 Oct 2026 02:37:31 +0000 Manifest next update: Sun 25 Oct 2026 04:09:31 +0000 Files and hashes: 1: 4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl (hash: ecb/1NplGbgyfA2PCArvLLwBsta+4+77T6jTGO/wymo=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: ic2hBdRaZAyBk1MlONf57Uzem8Aq/501RDCs5wnZzAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 04:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:63:97:f4:2c:0c:66:0a:95:e0:b5:c7:22:38:61:fc:7a:74:eb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2 Validity Not Before: Oct 24 02:37:31 2026 GMT Not After : Oct 25 04:09:31 2026 GMT Subject: CN=AF601AA12D7221BC16436C908E70E7BDEFC61E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:6b:b0:60:91:f9:eb:0c:22:6a:20:06:43: 2c:81:f5:85:76:9c:57:a5:c4:5c:db:48:4b:85:dd: 50:86:b4:42:09:64:ec:2b:12:d7:f2:7d:f0:33:93: 48:9e:54:f1:21:71:6d:b0:86:41:a5:c9:07:e3:f4: 51:f6:e8:89:9d:df:a7:5d:3b:93:74:e5:48:41:36: 9c:a4:1e:30:cc:e6:56:85:14:0a:c0:67:7c:aa:8b: 96:10:d3:d5:ad:6c:a3:47:6d:ff:14:f7:13:ed:d7: 7a:e2:fe:00:2a:c9:ad:bd:e6:15:24:1c:97:b5:c1: 78:7c:30:0a:ce:8d:49:43:60:a8:7e:fc:cf:26:d0: 8d:da:18:03:1e:78:8b:de:55:92:01:80:d9:fd:7b: 12:3f:c5:1e:ca:bb:6a:bf:ce:77:d7:ea:0d:7d:5e: 9d:36:ff:a8:a7:ee:5c:da:2c:81:72:cd:2d:ff:2a: 50:d6:6a:3c:5d:e7:14:6a:83:33:cf:22:34:76:69: a6:b3:3d:3c:1b:21:a9:5c:ad:d1:cb:5c:ac:6d:bd: c4:e7:36:9d:1e:ad:5e:ce:c6:52:c0:71:c7:13:ce: 96:ec:0a:a6:dc:03:b6:ce:2b:97:3e:0f:7c:09:1c: de:a6:63:bb:6d:de:1f:89:ce:1a:92:64:19:e5:17: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:60:1A:A1:2D:72:21:BC:16:43:6C:90:8E:70:E7:BD:EF:C6:1E:57 X509v3 Authority Key Identifier: keyid:4C:3B:BD:86:83:DD:42:C4:70:F4:E3:F8:30:B1:FA:BF:89:F4:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/4C3BBD8683DD42C470F4E3F830B1FABF89F4B5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f1:f6:04:b4:b0:2b:30:7d:33:73:7d:65:f7:1b:af:33:ae: 3c:53:35:0a:91:1a:bb:5c:24:0d:2e:71:b0:73:3e:d8:1a:3e: a3:46:10:60:f1:fd:1b:ca:d0:a3:6a:39:95:2c:a8:5b:34:2b: 3e:12:bd:b7:9d:38:19:e1:d9:64:78:cc:56:c3:b5:97:3c:f8: 99:34:44:d3:89:13:47:50:cc:4e:5a:51:a8:c7:df:d9:52:db: 77:46:10:2f:ec:74:be:83:a8:aa:e2:82:1f:da:bf:9d:7f:23: 6d:21:90:25:35:40:4d:3b:e7:95:ef:2d:c9:61:21:22:f2:ec: d3:dc:25:e2:d7:49:ef:1d:4e:fe:a3:b3:d0:fe:e3:46:34:91: 37:cc:b4:bc:2d:87:44:6e:bf:e9:8c:7f:eb:d6:c2:86:e6:ea: 35:8a:32:a7:b2:4b:5c:42:4d:85:66:4f:7c:cb:aa:83:4f:45: a5:9d:7e:9a:de:f0:bc:9d:72:cc:26:ec:56:67:19:1a:1e:f3: 79:53:2f:4d:56:e6:eb:18:2d:8f:5a:73:cf:21:50:f3:37:b7: e2:ad:7f:0a:f6:72:c3:73:b5:0c:3d:7c:67:6b:eb:75:15:70: e8:9c:dc:0c:33:de:26:6f:c4:ba:a7:b3:ad:f0:b8:85:c5:26: 1d:e6:8f:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWOX9CwMZgqV4LXHIjhh/Hp06xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4 OUY0QjVGMjAeFw0yNjEwMjQwMjM3MzFaFw0yNjEwMjUwNDA5MzFaMDMxMTAvBgNV BAMTKEFGNjAxQUExMkQ3MjIxQkMxNjQzNkM5MDhFNzBFN0JERUZDNjFFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeGuwYJH56wwiaiAGQyyB9YV2 nFelxFzbSEuF3VCGtEIJZOwrEtfyffAzk0ieVPEhcW2whkGlyQfj9FH26Imd36dd O5N05UhBNpykHjDM5laFFArAZ3yqi5YQ09WtbKNHbf8U9xPt13ri/gAqya295hUk HJe1wXh8MArOjUlDYKh+/M8m0I3aGAMeeIveVZIBgNn9exI/xR7Ku2q/znfX6g19 Xp02/6in7lzaLIFyzS3/KlDWajxd5xRqgzPPIjR2aaazPTwbIalcrdHLXKxtvcTn Np0erV7OxlLAcccTzpbsCqbcA7bOK5c+D3wJHN6mY7tt3h+JzhqSZBnlFy0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2AaoS1yIbwWQ2yQjnDnve/GHlcwHwYDVR0j BBgwFoAUTDu9hoPdQsRw9OP4MLH6v4n0tfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA2NDljNDctZGZjMy00YTIwLWI1YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4 M0RENDJDNDcwRjRFM0Y4MzBCMUZBQkY4OUY0QjVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzNCQkQ4NjgzREQ0MkM0NzBGNEUzRjgzMEIxRkFCRjg5RjRC NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvNEMzQkJEODY4M0RENDJDNDcwRjRFM0Y4MzBCMUZB QkY4OUY0QjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/x9gS0sCswfTNzfWX3G68zrjxTNQqRGrtc JA0ucbBzPtgaPqNGEGDx/RvK0KNqOZUsqFs0Kz4SvbedOBnh2WR4zFbDtZc8+Jk0 RNOJE0dQzE5aUajH39lS23dGEC/sdL6DqKrigh/av51/I20hkCU1QE0755XvLclh ISLy7NPcJeLXSe8dTv6js9D+40Y0kTfMtLwth0Ruv+mMf+vWwobm6jWKMqeyS1xC TYVmT3zLqoNPRaWdfpre8Lydcswm7FZnGRoe83lTL01W5usYLY9ac88hUPM3t+Kt fwr2csNztQw9fGdr63UVcOic3Awz3iZvxLqns63wuIXFJh3mjyA= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:44 2026 by rpki-client