$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json) Hash identifier: CKdw4UYxNJ9RxvTv3If+0yNYnbzCSmRIKQZUHtJ0sfI= Subject key identifier: 9C:D9:71:2D:C0:D1:34:E3:E9:D4:35:6D:0F:0D:8E:30:EF:08:A3:12 Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Certificate serial: 4D772C16A1A862EA7D91C3A1BB555941297B623C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft Manifest number: EC Signing time: Sun 25 Oct 2026 21:33:39 +0000 Manifest this update: Sun 25 Oct 2026 21:28:39 +0000 Manifest next update: Tue 27 Oct 2026 01:18:39 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=) 2: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=) 3: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=) 5: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: DStG14QDV6RTlhMRtWGsrKoW89POsGgFRSqDfGiLpvE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:77:2c:16:a1:a8:62:ea:7d:91:c3:a1:bb:55:59:41:29:7b:62:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB Validity Not Before: Oct 25 21:28:39 2026 GMT Not After : Oct 27 01:18:39 2026 GMT Subject: CN=9CD9712DC0D134E3E9D4356D0F0D8E30EF08A312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:d1:58:a4:2d:f5:af:29:ce:60:33:85:79: 2a:5c:ea:4e:6c:10:b6:46:e8:e4:be:3f:98:d0:06: 9d:1a:82:19:48:f7:ff:bb:27:01:20:2b:91:eb:dc: db:0d:40:7a:cc:e1:ec:b7:dd:f9:b3:92:86:e9:d0: cc:a1:48:2f:0f:7b:8a:40:fa:60:d0:db:0d:7d:a7: 51:a8:f7:a6:5a:ee:49:8a:a6:10:86:8b:d7:90:e6: 8e:f7:c0:03:93:04:58:64:11:b3:45:8f:2d:4f:45: 4c:ca:78:73:f6:f8:ef:7b:a5:1e:78:5c:4d:cb:6a: 2a:ee:02:f5:30:4e:5a:64:e7:ba:0f:1b:94:4a:b6: 4a:9e:f4:15:86:65:03:78:bb:93:92:e2:c9:1a:5d: 6e:ec:4d:2e:4b:6c:ff:9f:53:3f:0a:b1:34:d8:a7: ee:6e:07:5c:1b:e1:64:b6:55:21:b5:54:23:fb:0d: 3c:0c:65:95:17:ce:b8:00:a9:d9:a2:d4:da:89:d7: e3:86:63:56:84:78:10:b7:15:f6:05:db:ca:b3:a1: 7e:d6:d3:70:43:da:1d:ac:44:19:72:5f:28:4f:4e: 33:cd:ff:0d:9a:b1:7a:dd:d9:66:36:ef:de:b9:f6: fa:77:58:d4:b7:27:86:84:f0:ca:07:fd:01:1e:47: db:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D9:71:2D:C0:D1:34:E3:E9:D4:35:6D:0F:0D:8E:30:EF:08:A3:12 X509v3 Authority Key Identifier: keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:3f:d5:f6:fc:e7:1e:ff:cb:a1:16:24:90:5a:b8:07:fe:0d: f3:83:19:0a:fc:17:ab:e2:71:72:bf:46:60:aa:a0:f8:db:3f: 33:e4:a5:82:24:b7:37:01:72:a0:db:a0:65:2c:09:54:ef:40: 35:67:d2:81:a3:f2:ba:9d:1f:d0:69:58:eb:39:b8:2e:d8:b9: 50:d1:d0:60:c5:37:65:ba:59:e8:23:59:3b:16:e6:87:1f:d2: 8b:0f:7c:8f:bf:5d:85:72:be:ec:1e:bc:56:1a:ee:ee:5b:5e: 9f:22:4d:ce:0e:58:83:52:4a:54:43:2a:d7:f7:30:cc:c3:6e: 80:64:5d:55:66:7b:98:38:25:6e:2b:57:aa:7f:3c:90:51:9e: f8:76:71:3e:cd:2b:37:30:76:59:b9:20:64:00:cb:93:e1:13: 95:01:33:e1:2c:9b:43:5a:3e:06:83:55:02:9e:9c:79:83:97: 23:eb:6c:98:2c:23:d9:5c:12:8a:23:91:dc:05:5d:ce:e3:2e: d5:4d:0f:89:a1:aa:06:b3:7b:b5:c2:ad:11:18:85:ec:f4:a7: 82:ff:07:61:d3:ab:be:dd:54:60:77:4c:3a:be:a7:bf:66:d0: fe:80:76:5d:4c:c9:9e:82:d2:06:3c:04:a2:ca:85:25:37:31: d5:3f:1e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXcsFqGoYup9kcOhu1VZQSl7YjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0 OUIyRjdBQjAeFw0yNjEwMjUyMTI4MzlaFw0yNjEwMjcwMTE4MzlaMDMxMTAvBgNV BAMTKDlDRDk3MTJEQzBEMTM0RTNFOUQ0MzU2RDBGMEQ4RTMwRUYwOEEzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZNFYpC31rynOYDOFeSpc6k5s ELZG6OS+P5jQBp0aghlI9/+7JwEgK5Hr3NsNQHrM4ey33fmzkobp0MyhSC8Pe4pA +mDQ2w19p1Go96Za7kmKphCGi9eQ5o73wAOTBFhkEbNFjy1PRUzKeHP2+O97pR54 XE3LairuAvUwTlpk57oPG5RKtkqe9BWGZQN4u5OS4skaXW7sTS5LbP+fUz8KsTTY p+5uB1wb4WS2VSG1VCP7DTwMZZUXzrgAqdmi1NqJ1+OGY1aEeBC3FfYF28qzoX7W 03BD2h2sRBlyXyhPTjPN/w2asXrd2WY279659vp3WNS3J4aE8MoH/QEeR9spAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNlxLcDRNOPp1DVtDw2OMO8IoxIwHwYDVR0j BBgwFoAUJHm+zXnYeXLS5kp1gYBE6kmy96swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMDhlYjMtOTM3ZC00MzA0LTkxNjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3 OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0RUE0OUIyRjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDc5QkVDRDc5RDg3OTcyRDJFNjRBNzU4MTgwNDRFQTQ5QjJG N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMjQ3OUJFQ0Q3OUQ4Nzk3MkQyRTY0QTc1ODE4MDQ0 RUE0OUIyRjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANI/1fb85x7/y6EWJJBauAf+DfODGQr8F6vi cXK/RmCqoPjbPzPkpYIktzcBcqDboGUsCVTvQDVn0oGj8rqdH9BpWOs5uC7YuVDR 0GDFN2W6WegjWTsW5ocf0osPfI+/XYVyvuwevFYa7u5bXp8iTc4OWINSSlRDKtf3 MMzDboBkXVVme5g4JW4rV6p/PJBRnvh2cT7NKzcwdlm5IGQAy5PhE5UBM+Esm0Na PgaDVQKenHmDlyPrbJgsI9lcEoojkdwFXc7jLtVND4mhqgaze7XCrREYhez0p4L/ B2HTq77dVGB3TDq+p79m0P6Adl1MyZ6C0gY8BKLKhSU3MdU/HnY= -----END CERTIFICATE-----Generated at Mon Oct 26 05:49:41 2026 by rpki-client