$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: Oo774uLSYb2J21mstvF/iuHsvMTBN0+kZjwpBMPTReM= Subject key identifier: 38:6E:1B:AF:07:F3:EB:6F:76:FA:38:3D:DA:0A:57:35:6A:92:13:54 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 0952A9EBBC3C37FC2FE7FB45050B57FD210D1495 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: EC Signing time: Sun 25 Oct 2026 03:23:07 +0000 Manifest this update: Sun 25 Oct 2026 03:18:07 +0000 Manifest next update: Mon 26 Oct 2026 05:20:07 +0000 Files and hashes: 1: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 3: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 4: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: bBbYf84OY3oBPdaXBtE4gzX0Th8ZPxZPvcmb9Y6QGOM=) 5: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:52:a9:eb:bc:3c:37:fc:2f:e7:fb:45:05:0b:57:fd:21:0d:14:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Oct 25 03:18:07 2026 GMT Not After : Oct 26 05:20:07 2026 GMT Subject: CN=386E1BAF07F3EB6F76FA383DDA0A57356A921354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:6f:d8:a2:c2:52:61:b5:a6:64:40:00:16: c8:1e:6a:96:e6:e0:93:63:4e:db:84:6f:95:b3:c6: 9f:be:78:76:50:56:4d:69:72:27:b5:b3:e6:f9:29: 32:70:f6:9c:d8:de:cc:da:3d:ec:29:96:d8:9f:ba: cf:b0:ef:d8:ed:3c:1e:9d:f3:66:6c:f6:15:35:94: 09:e6:49:d9:7e:48:2d:40:f6:e0:56:4d:75:b1:25: c2:df:db:df:fe:86:af:38:74:54:c8:25:44:94:58: 2c:87:6b:1f:8d:96:ea:e9:03:be:5a:02:07:ed:f7: 2f:6a:aa:d5:bf:79:e7:90:70:90:f5:b2:c6:87:6b: 0e:b5:8e:0e:a6:45:7b:dd:b4:e7:6d:70:c9:03:38: 37:4b:95:51:f8:93:eb:cd:69:e6:93:28:39:d1:4a: a3:ac:29:86:48:c3:0c:71:0e:f0:e4:af:d8:11:05: 1f:c1:30:9a:f7:59:2c:58:8c:43:e5:5a:0d:58:d9: ab:80:86:af:1a:61:95:4a:34:8c:ad:b3:72:0b:69: 04:66:a4:6a:a9:14:c6:ad:c6:d2:a8:f6:b5:27:d2: e2:27:f1:24:e2:04:52:b4:51:b3:70:b9:37:e2:97: 56:ef:93:ca:b1:e8:b5:4c:fb:72:fb:27:65:5f:f8: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:1B:AF:07:F3:EB:6F:76:FA:38:3D:DA:0A:57:35:6A:92:13:54 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cc:73:bc:30:92:cf:1f:9c:f5:84:1a:52:40:d8:35:13:b3: d7:e4:a5:18:74:3a:d0:cf:05:87:ac:69:57:85:60:b7:7d:ab: 96:ef:cc:00:34:17:92:1f:2c:29:95:40:de:dd:b2:9f:34:15: 7f:00:28:71:30:60:cd:e5:c0:59:18:45:78:ca:de:0d:aa:e2: 2d:df:f1:11:29:01:de:25:1f:94:75:04:b2:50:18:20:fa:a4: 03:95:c6:54:fa:91:15:1a:81:01:35:79:fb:10:db:10:4e:25: 80:07:19:a9:8b:79:5c:ef:e2:10:a0:14:db:35:e4:55:1d:f0: c0:a9:20:4f:bd:79:4c:bb:0f:66:e4:bb:be:30:1a:fe:54:4e: 5b:b4:29:14:da:fe:c8:bc:85:d9:6c:7e:3b:9a:25:21:3a:d4: 08:33:15:3c:2c:68:d1:5c:7a:78:f4:59:11:54:74:aa:86:23: f8:0e:62:6e:05:96:8f:54:52:58:d4:6a:00:8a:d3:10:34:1b: 41:a7:23:51:2d:2a:e2:49:be:79:6a:98:98:49:e7:5e:c5:3e: 32:42:c1:e1:4e:2d:9e:8b:1e:1d:24:29:5a:10:e6:ce:fc:43: b7:60:c3:df:93:ac:4d:0d:a9:60:e1:e0:ab:f4:cc:d8:00:3d: af:8d:15:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVKp67w8N/wv5/tFBQtX/SENFJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjEwMjUwMzE4MDdaFw0yNjEwMjYwNTIwMDdaMDMxMTAvBgNV BAMTKDM4NkUxQkFGMDdGM0VCNkY3NkZBMzgzRERBMEE1NzM1NkE5MjEzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevm/YosJSYbWmZEAAFsgeapbm 4JNjTtuEb5Wzxp++eHZQVk1pcie1s+b5KTJw9pzY3szaPewpltifus+w79jtPB6d 82Zs9hU1lAnmSdl+SC1A9uBWTXWxJcLf29/+hq84dFTIJUSUWCyHax+NlurpA75a Agft9y9qqtW/eeeQcJD1ssaHaw61jg6mRXvdtOdtcMkDODdLlVH4k+vNaeaTKDnR SqOsKYZIwwxxDvDkr9gRBR/BMJr3WSxYjEPlWg1Y2auAhq8aYZVKNIyts3ILaQRm pGqpFMatxtKo9rUn0uIn8STiBFK0UbNwuTfil1bvk8qx6LVM+3L7J2Vf+IPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOG4brwfz6292+jg92gpXNWqSE1QwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjMc7wwks8fnPWEGlJA2DUTs9fkpRh0OtDP BYesaVeFYLd9q5bvzAA0F5IfLCmVQN7dsp80FX8AKHEwYM3lwFkYRXjK3g2q4i3f 8REpAd4lH5R1BLJQGCD6pAOVxlT6kRUagQE1efsQ2xBOJYAHGamLeVzv4hCgFNs1 5FUd8MCpIE+9eUy7D2bku74wGv5UTlu0KRTa/si8hdlsfjuaJSE61AgzFTwsaNFc enj0WRFUdKqGI/gOYm4Flo9UUljUagCK0xA0G0GnI1EtKuJJvnlqmJhJ517FPjJC weFOLZ6LHh0kKVoQ5s78Q7dgw9+TrE0NqWDh4Kv0zNgAPa+NFQY= -----END CERTIFICATE-----Generated at Sun Oct 25 23:29:11 2026 by rpki-client