$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: xm6zYlwvN3QUPal/+8uiWlbNqkSaAv1RCOjegHQiKjk= Subject key identifier: 0D:48:DF:18:D4:B2:7E:56:38:25:61:21:52:A8:45:F3:97:6B:59:4B Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 29D42123D4AE1D8D4C33F37583E69370178C430B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: F0 Signing time: Tue 27 Oct 2026 01:57:42 +0000 Manifest this update: Tue 27 Oct 2026 01:52:42 +0000 Manifest next update: Wed 28 Oct 2026 03:17:42 +0000 Files and hashes: 1: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: rQcF+WVbgbtd24ET3ZQbexa6DHUAi+Sr4xG4st3BXhw=) 2: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 3: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) 4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 03:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d4:21:23:d4:ae:1d:8d:4c:33:f3:75:83:e6:93:70:17:8c:43:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Oct 27 01:52:42 2026 GMT Not After : Oct 28 03:17:42 2026 GMT Subject: CN=0D48DF18D4B27E563825612152A845F3976B594B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:9a:00:ec:2c:51:fd:9b:c2:bc:08:ac:0f: f9:51:b5:90:3d:ac:3f:63:cd:80:2a:b1:1b:4a:c9: 46:48:14:5f:24:13:ba:5e:33:f5:d9:f1:75:1b:24: 61:a0:98:0e:b6:47:8b:d0:1e:b4:d0:d8:fd:10:2d: a7:d8:cd:7f:73:0c:fa:28:0a:49:2f:76:11:75:e8: b7:21:78:de:2f:a1:71:54:0d:33:6a:39:7b:06:5a: 83:0f:41:3d:01:8b:1e:aa:a0:37:01:0a:87:af:d1: e6:95:9b:0e:39:dd:fd:e0:22:eb:cd:30:af:4b:dd: a1:e0:ea:61:8e:84:fe:5a:4f:dc:44:66:a7:97:bf: d4:f7:20:b7:d8:36:68:ad:2c:cf:54:56:08:9e:34: d2:9e:cb:4e:12:94:d6:5c:a4:b5:58:b6:59:0f:5a: 19:ee:d6:a3:ca:14:c5:d5:43:58:33:cf:ee:8f:5f: bf:71:a4:59:4a:d7:ec:a7:59:45:65:14:ae:0b:19: 4e:4d:d7:45:05:f9:39:8f:c4:13:5c:05:b3:a8:59: 43:01:ac:6e:88:97:79:c9:68:5e:bf:d9:4f:aa:18: fe:72:ff:a6:a7:45:cb:83:8d:4c:a1:38:16:10:1f: 52:21:ab:00:66:14:ca:cc:81:a7:46:67:a9:2c:f1: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:DF:18:D4:B2:7E:56:38:25:61:21:52:A8:45:F3:97:6B:59:4B X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:4a:c6:a6:b1:ba:16:4a:b8:79:ba:8a:e7:07:2e:c0:89: e9:da:43:14:44:dd:b6:6d:58:02:45:e5:bd:ef:21:cf:04:a2: 49:f6:df:3f:5a:f3:c2:49:7b:06:a9:09:8c:45:49:36:ab:43: 83:fe:85:6c:a8:ad:68:fa:e3:19:cb:4f:73:62:cf:97:c8:0f: da:9d:e5:7a:f8:c9:3a:d0:f6:4d:58:4c:a8:16:88:a7:c7:86: ea:6e:00:31:da:78:c0:31:07:53:20:33:28:ce:1a:4c:e6:84: 4b:46:c3:34:46:ec:d9:ae:84:10:ab:6d:f6:6c:3b:eb:0e:3d: 9a:04:ba:9d:7b:9b:60:df:a9:82:37:cb:38:08:92:13:b8:c8: ef:fd:c0:e0:a0:62:9b:60:ca:d8:99:ce:ca:a9:de:28:5b:43: f0:67:4f:66:ce:bf:d5:b9:88:66:c3:71:9e:5d:eb:7a:27:d3: 58:93:26:49:78:4d:d3:6a:1d:b4:59:fc:a6:5a:b1:b6:b4:3c: e3:c4:e0:a4:cf:ec:4e:1c:b4:a9:b8:f9:b3:85:4b:16:87:ce: 9a:85:a6:80:f8:c1:54:5e:ab:52:23:c0:8b:a4:97:f2:68:f6: 17:b7:1d:a2:55:9a:73:f3:bb:96:b2:e5:f0:de:1d:ac:4e:db: a2:a9:b7:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdQhI9SuHY1MM/N1g+aTcBeMQwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjEwMjcwMTUyNDJaFw0yNjEwMjgwMzE3NDJaMDMxMTAvBgNV BAMTKDBENDhERjE4RDRCMjdFNTYzODI1NjEyMTUyQTg0NUYzOTc2QjU5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDW5oA7CxR/ZvCvAisD/lRtZA9 rD9jzYAqsRtKyUZIFF8kE7peM/XZ8XUbJGGgmA62R4vQHrTQ2P0QLafYzX9zDPoo CkkvdhF16LcheN4voXFUDTNqOXsGWoMPQT0Bix6qoDcBCoev0eaVmw453f3gIuvN MK9L3aHg6mGOhP5aT9xEZqeXv9T3ILfYNmitLM9UVgieNNKey04SlNZcpLVYtlkP Whnu1qPKFMXVQ1gzz+6PX79xpFlK1+ynWUVlFK4LGU5N10UF+TmPxBNcBbOoWUMB rG6Il3nJaF6/2U+qGP5y/6anRcuDjUyhOBYQH1IhqwBmFMrMgadGZ6ks8arjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDUjfGNSyflY4JWEhUqhF85drWUswHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhuSsamsboWSrh5uornBy7AienaQxRE3bZt WAJF5b3vIc8Eokn23z9a88JJewapCYxFSTarQ4P+hWyorWj64xnLT3Niz5fID9qd 5Xr4yTrQ9k1YTKgWiKfHhupuADHaeMAxB1MgMyjOGkzmhEtGwzRG7NmuhBCrbfZs O+sOPZoEup17m2DfqYI3yzgIkhO4yO/9wOCgYptgytiZzsqp3ihbQ/BnT2bOv9W5 iGbDcZ5d63on01iTJkl4TdNqHbRZ/KZasba0POPE4KTP7E4ctKm4+bOFSxaHzpqF poD4wVReq1IjwIukl/Jo9he3HaJVmnPzu5ay5fDeHaxO26Kpt+I= -----END CERTIFICATE-----Generated at Tue Oct 27 15:37:29 2026 by rpki-client