$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft File: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft (raw, json) Hash identifier: PeVPG4+DtIkS4g8wewM4VDp9aKlyJ+1wW2RZr7r+rBU= Subject key identifier: D0:71:A3:B8:F5:59:77:94:B2:2F:50:59:F4:BC:48:DD:61:4B:B3:AB Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Certificate serial: 5AAE8C77BF16F45FCD9D1885B6BA0AD295BB497B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft Manifest number: EC Signing time: Sun 25 Oct 2026 10:09:15 +0000 Manifest this update: Sun 25 Oct 2026 10:04:15 +0000 Manifest next update: Mon 26 Oct 2026 13:27:15 +0000 Files and hashes: 1: 4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl (hash: s0yXnOffInHM/xbQh8Rn0n79eAUcCr2Qdw/A/WP3DKQ=) 2: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: IVSxWqHfsbpgTjNP8RzLROF59WJoZKS7+db35QQ4pHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ae:8c:77:bf:16:f4:5f:cd:9d:18:85:b6:ba:0a:d2:95:bb:49:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2 Validity Not Before: Oct 25 10:04:15 2026 GMT Not After : Oct 26 13:27:15 2026 GMT Subject: CN=D071A3B8F5597794B22F5059F4BC48DD614BB3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:f3:31:04:c4:3a:09:0f:df:d0:64:ed:47: 83:9b:39:db:71:b1:8b:c0:76:58:0b:a6:cd:d9:70: 39:3a:47:3c:31:98:1f:43:c8:3d:eb:d2:ef:98:0a: 2c:18:e2:6b:00:ec:56:6d:61:39:dc:e5:1a:81:c3: ab:03:43:25:48:6d:a5:16:ff:5f:b7:af:c7:95:dc: e6:6d:30:cc:3b:00:c1:f9:07:ed:56:03:e8:b2:a8: 5b:8e:df:7c:eb:6e:4b:37:19:74:22:70:b6:77:c0: 67:aa:78:53:12:b8:e2:14:a5:f9:99:5d:e5:b8:09: 6e:42:ce:f0:a7:4f:1f:26:d2:e1:18:c2:5d:b7:55: 6d:ca:45:a8:69:98:40:2a:7a:99:d2:7a:15:b7:93: 2d:4d:ba:94:f5:c1:d5:70:7b:aa:db:f7:d1:84:22: 7a:e6:91:69:4b:1c:4f:b1:de:15:c4:4b:68:e8:79: 1d:92:ab:26:31:81:34:10:03:a9:9e:fa:f4:77:c9: 45:07:96:1a:8c:bb:4f:83:61:96:e2:28:59:67:19: ff:a0:b8:d3:47:04:d4:11:15:7d:16:a6:ce:b1:7f: 35:6a:57:49:d6:f4:98:96:be:47:7a:68:0c:60:5d: 5a:42:e1:e9:8e:21:29:68:47:66:2c:3a:2f:37:dc: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:71:A3:B8:F5:59:77:94:B2:2F:50:59:F4:BC:48:DD:61:4B:B3:AB X509v3 Authority Key Identifier: keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b6:da:db:f5:ca:07:84:a5:b9:58:60:75:4b:77:c3:9d:3b: 7e:cb:07:75:41:26:72:1e:89:c7:c0:56:5e:51:05:8d:34:65: 22:35:d3:32:5b:f8:96:ad:16:31:29:02:4f:7d:c4:dd:63:f2: f2:10:b3:0b:60:87:0b:55:0c:e6:ef:51:b4:59:45:a5:ba:60: 01:72:ce:41:3c:bc:60:43:24:b0:0c:8b:ec:5f:ff:bc:28:7b: ed:43:d3:9d:c8:0e:79:5e:25:18:0f:0d:ed:95:7c:9e:3e:09: 95:37:1d:62:95:2e:f3:bf:04:17:e9:16:75:42:11:d9:dd:42: 2a:96:60:e8:36:9f:29:05:f0:ec:91:de:e2:3e:21:6e:de:2c: 43:c2:62:8e:be:8a:ff:bc:53:ac:ed:e2:d6:3e:d6:13:02:22: 54:41:f3:4e:71:b2:e2:83:f8:8e:8d:43:11:37:fa:af:2a:76: ac:7a:be:85:b1:1f:58:ed:5f:9e:0f:51:31:ae:ee:29:d7:13: 60:88:9f:ed:b0:b5:9d:5d:b6:16:b0:d0:1f:5a:fc:dc:5c:53: ca:0b:12:cb:b0:ca:a6:5e:4a:5a:e7:34:66:57:f6:02:aa:c8: ca:fe:bb:a9:b0:31:03:71:ba:56:30:dd:83:a1:d8:66:de:04: 9c:ec:5e:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWq6Md78W9F/NnRiFtroK0pW7SXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFFMzEx OTAwNzFGMjAeFw0yNjEwMjUxMDA0MTVaFw0yNjEwMjYxMzI3MTVaMDMxMTAvBgNV BAMTKEQwNzFBM0I4RjU1OTc3OTRCMjJGNTA1OUY0QkM0OERENjE0QkIzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeqPMxBMQ6CQ/f0GTtR4ObOdtx sYvAdlgLps3ZcDk6RzwxmB9DyD3r0u+YCiwY4msA7FZtYTnc5RqBw6sDQyVIbaUW /1+3r8eV3OZtMMw7AMH5B+1WA+iyqFuO33zrbks3GXQicLZ3wGeqeFMSuOIUpfmZ XeW4CW5CzvCnTx8m0uEYwl23VW3KRahpmEAqepnSehW3ky1NupT1wdVwe6rb99GE InrmkWlLHE+x3hXES2joeR2SqyYxgTQQA6me+vR3yUUHlhqMu0+DYZbiKFlnGf+g uNNHBNQRFX0Wps6xfzVqV0nW9JiWvkd6aAxgXVpC4emOISloR2YsOi833KljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HGjuPVZd5SyL1BZ9LxI3WFLs6swHwYDVR0j BBgwFoAUTXFd5uJbdLOmd7rtfOgeMRkAcfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRhYWEyZjEtNjNhOS00MjgxLTg5NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZF MjVCNzRCM0E2NzdCQUVEN0NFODFFMzExOTAwNzFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDcxNURFNkUyNUI3NEIzQTY3N0JBRUQ3Q0U4MUUzMTE5MDA3 MUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvNEQ3MTVERTZFMjVCNzRCM0E2NzdCQUVEN0NFODFF MzExOTAwNzFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI222tv1ygeEpblYYHVLd8OdO37LB3VBJnIe icfAVl5RBY00ZSI10zJb+JatFjEpAk99xN1j8vIQswtghwtVDObvUbRZRaW6YAFy zkE8vGBDJLAMi+xf/7woe+1D053IDnleJRgPDe2VfJ4+CZU3HWKVLvO/BBfpFnVC EdndQiqWYOg2nykF8OyR3uI+IW7eLEPCYo6+iv+8U6zt4tY+1hMCIlRB805xsuKD +I6NQxE3+q8qdqx6voWxH1jtX54PUTGu7inXE2CIn+2wtZ1dthaw0B9a/NxcU8oL EsuwyqZeSlrnNGZX9gKqyMr+u6mwMQNxulYw3YOh2GbeBJzsXhk= -----END CERTIFICATE-----Generated at Sun Oct 25 19:45:51 2026 by rpki-client