$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft File: 4DD279AECD518B9CE764AE03708B711A40048A1E.mft (raw, json) Hash identifier: Oi+gjBmyXRhED/puVW9V43VWVogtfTiVhbNLPpVdw1o= Subject key identifier: D0:A2:5D:56:4F:23:EA:4A:1D:2D:C1:7E:03:52:7D:A2:34:DD:2B:E5 Authority key identifier: 4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E Certificate issuer: /CN=4DD279AECD518B9CE764AE03708B711A40048A1E Certificate serial: 2EB2D17B7DB997536210488B65AAFA723F14FA04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft Manifest number: E8 Signing time: Fri 23 Oct 2026 15:38:27 +0000 Manifest this update: Fri 23 Oct 2026 15:33:27 +0000 Manifest next update: Sat 24 Oct 2026 15:57:27 +0000 Files and hashes: 1: 4DD279AECD518B9CE764AE03708B711A40048A1E.crl (hash: JmcMjM7AhTr3loVvIZixJf/MRVfdCSiP13AVRzjRCeA=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: mxXusZGfsr98abkNgqk3JfvCjZTqoXMC9/o99feBr+E=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: 6Laf+3GLGNpNAkhIsFH3maUJ3BnydIt6ABswzC07SLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 15:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b2:d1:7b:7d:b9:97:53:62:10:48:8b:65:aa:fa:72:3f:14:fa:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD279AECD518B9CE764AE03708B711A40048A1E Validity Not Before: Oct 23 15:33:27 2026 GMT Not After : Oct 24 15:57:27 2026 GMT Subject: CN=D0A25D564F23EA4A1D2DC17E03527DA234DD2BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:ff:3e:6e:c7:d2:86:b1:3b:90:07:a8:6f: 56:45:83:ac:99:d3:b0:e3:da:2a:42:85:a7:f0:90: a3:be:7c:3d:8b:f3:03:6b:d8:07:1c:aa:fb:f2:99: a6:5c:4c:a5:e3:41:fc:2a:c4:97:5c:42:18:4f:64: 32:89:79:b0:ac:c4:f8:7f:ad:cc:cd:3a:58:71:b4: e8:3a:52:b3:60:d9:b0:bf:dc:7a:c0:ba:d8:9d:9b: 64:99:7f:0b:82:fa:cc:f6:d6:1d:1c:f2:f0:06:73: 50:81:43:de:2a:f7:cf:32:5e:f2:10:93:63:ab:2e: c5:03:67:47:dd:4c:e4:10:17:c6:d5:c5:ee:24:6f: 76:8a:04:b3:60:77:8b:7b:35:e2:f6:28:4c:a7:30: 55:cb:e2:50:50:95:2d:01:8f:ab:e2:0f:74:38:8d: 6c:57:3c:00:7b:d4:82:0e:e9:9f:3e:0e:83:ea:50: 8f:22:84:d6:1e:f0:ae:92:fa:85:f6:0a:d1:de:3a: 60:8b:91:58:d8:4b:26:09:bf:59:e7:56:75:55:47: a3:ab:55:5e:a7:d3:e7:d1:3d:93:44:83:95:b7:34: db:a2:da:57:33:9c:3e:57:b7:e2:09:34:f7:08:0b: ef:40:ee:27:7a:93:62:95:4c:bd:ee:cf:7c:bc:20: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:5D:56:4F:23:EA:4A:1D:2D:C1:7E:03:52:7D:A2:34:DD:2B:E5 X509v3 Authority Key Identifier: keyid:4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:85:68:79:ad:a2:72:f1:21:4e:f1:8b:60:b1:d3:c3:96: 18:db:e7:b6:b2:d4:dd:1a:7b:09:a4:20:5c:f6:ac:85:6f:61: 0f:98:84:0c:09:21:32:88:f0:2b:3c:6a:f6:9b:31:4e:5b:48: 8f:9d:3c:0c:4b:19:a1:87:f6:08:89:19:fd:90:47:bd:35:4b: 54:92:f7:39:79:34:96:8d:45:7d:59:2e:c3:7d:84:32:9c:c5: 80:9d:2e:5b:f1:cc:8e:48:99:0f:3a:d0:f4:73:42:40:6d:20: 70:c5:50:1b:79:94:8a:9b:00:7c:03:7e:2f:aa:bb:7d:fd:c6: c4:77:45:39:7e:ce:77:1d:2c:6c:dd:14:33:0f:5f:ff:75:6c: 6e:7f:e3:a4:84:69:ba:9c:4e:8e:7c:fc:46:20:d3:2c:87:3b: 42:91:57:29:93:c5:c2:53:6f:b0:a3:07:c4:c0:c8:bb:7c:8e: 9b:d3:b9:3f:8f:53:bc:48:68:44:8b:aa:2a:d1:29:8f:14:9c: 3c:85:c5:3f:96:bf:f8:a8:a0:a4:8d:cd:e2:ee:d3:77:62:5a: da:b9:b8:44:1f:0d:4f:40:82:dd:51:45:4c:2f:77:ae:fe:2b: b6:ad:86:6e:ee:fc:32:32:47:0f:70:a0:97:d5:f0:8f:4b:15: 16:83:36:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrLRe325l1NiEEiLZar6cj8U+gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0 MDA0OEExRTAeFw0yNjEwMjMxNTMzMjdaFw0yNjEwMjQxNTU3MjdaMDMxMTAvBgNV BAMTKEQwQTI1RDU2NEYyM0VBNEExRDJEQzE3RTAzNTI3REEyMzRERDJCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodv8+bsfShrE7kAeob1ZFg6yZ 07Dj2ipChafwkKO+fD2L8wNr2AccqvvymaZcTKXjQfwqxJdcQhhPZDKJebCsxPh/ rczNOlhxtOg6UrNg2bC/3HrAutidm2SZfwuC+sz21h0c8vAGc1CBQ94q988yXvIQ k2OrLsUDZ0fdTOQQF8bVxe4kb3aKBLNgd4t7NeL2KEynMFXL4lBQlS0Bj6viD3Q4 jWxXPAB71IIO6Z8+DoPqUI8ihNYe8K6S+oX2CtHeOmCLkVjYSyYJv1nnVnVVR6Or VV6n0+fRPZNEg5W3NNui2lcznD5Xt+IJNPcIC+9A7id6k2KVTL3uz3y8ILEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0KJdVk8j6kodLcF+A1J9ojTdK+UwHwYDVR0j BBgwFoAUTdJ5rs1Ri5znZK4DcItxGkAEih4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3MTQ2NjUtYzY3MC00NTFlLWJkY2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVD RDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0MDA0OEExRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQyNzlBRUNENTE4QjlDRTc2NEFFMDM3MDhCNzExQTQwMDQ4 QTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4Qjcx MUE0MDA0OEExRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTahWh5raJy8SFO8YtgsdPDlhjb57ay1N0a ewmkIFz2rIVvYQ+YhAwJITKI8Cs8avabMU5bSI+dPAxLGaGH9giJGf2QR701S1SS 9zl5NJaNRX1ZLsN9hDKcxYCdLlvxzI5ImQ860PRzQkBtIHDFUBt5lIqbAHwDfi+q u339xsR3RTl+zncdLGzdFDMPX/91bG5/46SEabqcTo58/EYg0yyHO0KRVymTxcJT b7CjB8TAyLt8jpvTuT+PU7xIaESLqirRKY8UnDyFxT+Wv/iooKSNzeLu03diWtq5 uEQfDU9Agt1RRUwvd67+K7athm7u/DIyRw9woJfV8I9LFRaDNoc= -----END CERTIFICATE-----Generated at Sat Oct 24 07:08:26 2026 by rpki-client