$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: KErLGvrgUBUO7tTvN0kM6uqOmVIpojk0kUsPISSpVlA= Subject key identifier: E8:94:3E:0F:5D:7C:76:FE:A5:B9:B8:A1:E1:25:82:37:9B:4E:13:9C Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 6BE217FA1BE0C4A5C840FD7781BF3E0BF74D04D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 23:00:41 +0000 Manifest this update: Wed 07 Oct 2026 22:55:41 +0000 Manifest next update: Fri 09 Oct 2026 00:56:41 +0000 Files and hashes: 1: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: u2CqFaz3X/j0fIdY1+hsxq/OAuwOogDdPVgp4v7EDGw=) 2: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 00:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e2:17:fa:1b:e0:c4:a5:c8:40:fd:77:81:bf:3e:0b:f7:4d:04:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Oct 7 22:55:41 2026 GMT Not After : Oct 9 00:56:41 2026 GMT Subject: CN=E8943E0F5D7C76FEA5B9B8A1E12582379B4E139C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:e7:7a:3d:1a:7b:06:27:ed:e5:e8:08:57: e8:15:a1:d2:61:ef:e4:50:e2:4f:e0:65:9b:f8:5d: a5:73:da:c5:fb:d0:e6:ad:9b:2e:c9:79:03:de:28: b8:6f:7d:b8:d7:3b:8c:9f:77:88:ef:dd:cb:82:7e: d2:9c:45:71:bc:1a:07:f8:4c:7a:88:d8:a0:fe:f6: 0e:c5:71:f9:cd:b9:89:78:41:cc:a8:ab:8e:a8:0f: 87:56:bd:d9:41:db:21:9a:8d:df:7c:fc:27:16:cd: 50:17:0f:a0:6b:44:9c:1b:6f:a0:ff:6b:2a:a8:40: 98:0e:c9:63:ee:7e:80:e2:55:16:b2:db:6a:d1:aa: 0f:f0:c1:cf:e0:51:2e:e3:8e:9a:ce:70:bd:8a:9c: 69:4d:e8:ed:d9:c8:a7:f5:f6:90:a5:a5:9c:34:b8: b5:7e:59:f7:64:72:87:88:17:1b:d7:f9:aa:71:ae: 04:33:43:5c:61:ab:a6:67:87:e3:b0:67:27:ab:da: 62:80:5c:d8:79:50:0b:51:66:7f:99:9b:83:1a:54: 10:4f:93:eb:c3:39:21:8b:2c:01:1b:3f:46:e6:1a: 03:93:99:66:da:b6:72:a6:12:84:d6:21:82:4d:75: ec:8e:76:d5:39:be:bf:27:25:56:75:3e:1c:65:4c: da:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:94:3E:0F:5D:7C:76:FE:A5:B9:B8:A1:E1:25:82:37:9B:4E:13:9C X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:2f:ae:2e:72:2a:2f:f7:dc:a7:0e:56:58:bc:4e:12:cc:3d: 48:14:ab:a8:ed:24:bf:40:4d:dd:1e:fb:65:e5:5b:f1:8e:d4: b0:4a:42:a8:63:61:d0:b8:dd:a4:71:30:55:ff:85:47:bc:fb: d5:bf:57:96:a4:cb:16:67:02:ab:9e:24:5c:2e:70:1d:eb:fe: 11:9c:ba:4b:46:65:84:aa:72:74:28:59:0e:1f:35:63:c6:4e: be:18:5d:9a:a6:fa:25:bf:83:8f:62:83:7b:7d:79:91:f2:a6: c9:57:71:86:00:7c:de:75:3a:e3:17:f6:20:ed:dd:3e:f7:c2: 09:95:cc:b9:e5:e6:17:ea:0b:60:93:8f:1b:08:8c:65:21:ed: 8d:21:61:59:cd:88:be:5e:a5:b6:e2:20:e6:96:67:04:4a:18: 3d:a3:8d:52:10:7b:a7:46:03:33:c4:48:4e:c1:5e:4c:c2:0b: c2:ae:b3:0c:95:ec:67:25:32:79:16:a5:ec:b8:ca:01:0a:b7: ba:e9:a2:85:f8:4d:74:cb:ef:92:3d:5e:54:20:9e:6b:54:fe: 18:91:17:87:e6:44:03:22:66:13:d7:b6:4c:69:c7:3b:d5:35: f4:98:16:22:c1:d1:60:36:ee:af:2e:a4:8d:72:7c:95:5f:ce: 2b:83:93:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+IX+hvgxKXIQP13gb8+C/dNBNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjEwMDcyMjU1NDFaFw0yNjEwMDkwMDU2NDFaMDMxMTAvBgNV BAMTKEU4OTQzRTBGNUQ3Qzc2RkVBNUI5QjhBMUUxMjU4MjM3OUI0RTEzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtud6PRp7Bift5egIV+gVodJh 7+RQ4k/gZZv4XaVz2sX70Oatmy7JeQPeKLhvfbjXO4yfd4jv3cuCftKcRXG8Ggf4 THqI2KD+9g7FcfnNuYl4Qcyoq46oD4dWvdlB2yGajd98/CcWzVAXD6BrRJwbb6D/ ayqoQJgOyWPufoDiVRay22rRqg/wwc/gUS7jjprOcL2KnGlN6O3ZyKf19pClpZw0 uLV+WfdkcoeIFxvX+apxrgQzQ1xhq6Znh+OwZyer2mKAXNh5UAtRZn+Zm4MaVBBP k+vDOSGLLAEbP0bmGgOTmWbatnKmEoTWIYJNdeyOdtU5vr8nJVZ1PhxlTNrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6JQ+D118dv6lubih4SWCN5tOE5wwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIvri5yKi/33KcOVli8ThLMPUgUq6jtJL9A Td0e+2XlW/GO1LBKQqhjYdC43aRxMFX/hUe8+9W/V5akyxZnAqueJFwucB3r/hGc uktGZYSqcnQoWQ4fNWPGTr4YXZqm+iW/g49ig3t9eZHypslXcYYAfN51OuMX9iDt 3T73wgmVzLnl5hfqC2CTjxsIjGUh7Y0hYVnNiL5epbbiIOaWZwRKGD2jjVIQe6dG AzPESE7BXkzCC8KuswyV7GclMnkWpey4ygEKt7rpooX4TXTL75I9XlQgnmtU/hiR F4fmRAMiZhPXtkxpxzvVNfSYFiLB0WA27q8upI1yfJVfziuDk5c= -----END CERTIFICATE-----Generated at Thu Oct 8 14:06:21 2026 by rpki-client