$ rpki-client -vvvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft File: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft (raw, json) Hash identifier: Pikc6o92De3ID5Ii6zRgzK1+ETj7s7T25xfgD1awGjI= Subject key identifier: BC:A1:8C:9E:B9:CB:9B:EE:62:92:FE:71:61:A1:AD:BB:7F:CE:F4:59 Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 Certificate issuer: /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Certificate serial: 5E865B9DE15AEDB13B89317FDD08EFDD2AACD230 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft Manifest number: EB Signing time: Sun 25 Oct 2026 09:59:05 +0000 Manifest this update: Sun 25 Oct 2026 09:54:05 +0000 Manifest next update: Mon 26 Oct 2026 12:00:05 +0000 Files and hashes: 1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: 6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=) 2: 4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl (hash: JAXvbmK2WbusJJTwfuEdUoR3r42bsk/rXAfeSSNx1kc=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: k64Gbl+KVZNgSNBLh88ZvPWQiWwa2C0VFUdGvst00Zw=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: GvESsWLLWyGR/dTKAI2ZEQUDQyTILXzxCsEPsqKRlPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:86:5b:9d:e1:5a:ed:b1:3b:89:31:7f:dd:08:ef:dd:2a:ac:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4 Validity Not Before: Oct 25 09:54:05 2026 GMT Not After : Oct 26 12:00:05 2026 GMT Subject: CN=BCA18C9EB9CB9BEE6292FE7161A1ADBB7FCEF459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:25:2c:05:72:1d:0f:16:5c:65:7a:62:ee: e9:3a:f3:ea:e2:31:45:c1:60:7f:77:b2:0d:ec:7b: 88:98:2f:9f:6e:27:88:84:d0:f6:98:77:b2:be:b9: dc:80:85:b0:bd:4a:74:64:0c:8e:97:23:b9:cd:3d: 72:74:1f:3a:1b:14:cf:27:9f:a0:26:fb:38:8d:1d: d8:b8:ff:8d:9e:d8:d9:05:87:dc:4d:d9:ca:57:7a: 71:0a:4c:a7:da:91:67:f7:c4:6e:96:45:a4:49:a3: e2:db:2c:b2:6f:7c:20:d7:0a:b8:11:49:76:5c:f3: 58:9b:ab:1d:fd:3f:51:f5:56:97:26:c0:87:2a:63: d3:03:91:91:e5:26:22:02:ac:fb:c8:6d:2f:a9:96: ab:ca:6d:7b:83:f3:50:43:e9:bc:a5:2d:ea:ef:17: c3:c2:3b:4e:da:23:6f:aa:34:21:4f:72:38:ef:22: c9:64:fa:0d:42:4b:2d:d5:1b:59:5e:4d:1c:f2:b2: 46:52:84:52:80:ac:7e:b0:3c:e6:89:76:30:fa:a1: 80:14:25:a6:9a:e4:2f:81:0b:d7:05:3f:ef:d0:33: bf:72:5f:64:3e:77:83:61:16:48:a1:4e:91:e4:5c: f7:40:1d:fe:dd:a4:68:9a:9e:bc:f8:de:43:30:cb: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A1:8C:9E:B9:CB:9B:EE:62:92:FE:71:61:A1:AD:BB:7F:CE:F4:59 X509v3 Authority Key Identifier: keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c2:bf:5b:1c:4d:d2:fc:f4:45:b2:9c:5a:f4:6e:25:08:78: b6:53:d3:8d:04:ef:9e:f5:d7:de:4e:9e:26:31:75:78:57:ca: 42:d3:48:ae:80:d5:77:5f:ea:36:1e:bf:f5:c8:a0:f7:87:10: dc:f5:65:47:f1:a9:81:cd:18:34:2f:1c:04:db:ea:e2:71:fd: 78:01:24:90:ea:f9:dc:4b:3b:26:fa:a7:03:22:1f:ea:af:0e: 71:19:21:b8:08:5b:bf:d3:ab:57:20:79:75:72:b0:ed:bf:0e: 43:d6:ee:44:7d:38:c4:17:4d:77:0f:b8:96:3f:be:f0:34:4f: e8:b8:4f:e0:24:c1:59:df:58:3a:6d:63:57:c8:77:01:b7:a3: f5:13:b2:d7:79:c0:bd:60:62:af:64:36:dd:ce:07:72:90:a8: 03:14:e9:45:5e:34:ce:bd:75:20:f2:04:85:b7:e7:60:10:c1: 34:2d:0b:3f:2e:8b:73:af:56:60:1b:1a:fc:8f:55:b7:23:63: 9f:21:aa:8b:98:32:e4:67:bc:cd:e5:04:94:5f:13:f4:38:16: 8b:54:3f:bc:26:8a:20:80:e2:a0:62:a3:bd:f9:4c:e2:6b:1f: 50:82:06:91:db:9a:ec:49:80:a4:96:63:21:22:d1:45:d8:82: dc:a4:db:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXoZbneFa7bE7iTF/3Qjv3Sqs0jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4 NjFEQ0ZCNDAeFw0yNjEwMjUwOTU0MDVaFw0yNjEwMjYxMjAwMDVaMDMxMTAvBgNV BAMTKEJDQTE4QzlFQjlDQjlCRUU2MjkyRkU3MTYxQTFBREJCN0ZDRUY0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfACUsBXIdDxZcZXpi7uk68+ri MUXBYH93sg3se4iYL59uJ4iE0PaYd7K+udyAhbC9SnRkDI6XI7nNPXJ0HzobFM8n n6Am+ziNHdi4/42e2NkFh9xN2cpXenEKTKfakWf3xG6WRaRJo+LbLLJvfCDXCrgR SXZc81ibqx39P1H1VpcmwIcqY9MDkZHlJiICrPvIbS+plqvKbXuD81BD6bylLerv F8PCO07aI2+qNCFPcjjvIslk+g1CSy3VG1leTRzyskZShFKArH6wPOaJdjD6oYAU Jaaa5C+BC9cFP+/QM79yX2Q+d4NhFkihTpHkXPdAHf7dpGianrz43kMwy05xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvKGMnrnLm+5ikv5xYaGtu3/O9FkwHwYDVR0j BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhF NTA4NjFEQ0ZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfCv1scTdL89EWynFr0biUIeLZT040E7571 195OniYxdXhXykLTSK6A1Xdf6jYev/XIoPeHENz1ZUfxqYHNGDQvHATb6uJx/XgB JJDq+dxLOyb6pwMiH+qvDnEZIbgIW7/Tq1cgeXVysO2/DkPW7kR9OMQXTXcPuJY/ vvA0T+i4T+AkwVnfWDptY1fIdwG3o/UTstd5wL1gYq9kNt3OB3KQqAMU6UVeNM69 dSDyBIW352AQwTQtCz8ui3OvVmAbGvyPVbcjY58hqouYMuRnvM3lBJRfE/Q4FotU P7wmiiCA4qBio735TOJrH1CCBpHbmuxJgKSWYyEi0UXYgtyk20E= -----END CERTIFICATE-----Generated at Sun Oct 25 19:46:10 2026 by rpki-client