$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft File: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft (raw, json) Hash identifier: BnDp/QS7EeizFeZyc4+LPpC67TFiVS8N8cxFzgQrrz8= Subject key identifier: E3:50:8F:94:C3:18:A8:0E:1F:55:50:5E:3E:FF:EE:0B:2D:72:22:33 Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B Certificate issuer: /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Certificate serial: E7C96FD2ACEDF4BB9C96E83E6B7127C91A798C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 11:28:17 +0000 Manifest this update: Sat 24 Oct 2026 11:23:17 +0000 Manifest next update: Sun 25 Oct 2026 12:19:17 +0000 Files and hashes: 1: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: S+rOrm27Es7W6Om8mBBRTFySKu0A8+vu3LzCH/NnAfQ=) 2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=) 3: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl (hash: 2hRwHjZ4Aa1U90s2Y6DltFbTFIm3pfVHnEhRDqGbmvw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 12:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e7:c9:6f:d2:ac:ed:f4:bb:9c:96:e8:3e:6b:71:27:c9:1a:79:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B Validity Not Before: Oct 24 11:23:17 2026 GMT Not After : Oct 25 12:19:17 2026 GMT Subject: CN=E3508F94C318A80E1F55505E3EFFEE0B2D722233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:59:fd:9b:7a:f1:15:97:f5:39:18:82:3c: 7b:1a:4f:be:5b:da:18:0d:1e:46:76:33:04:06:c6: 74:25:63:11:df:f3:28:bb:e9:3a:9d:d8:0d:6f:66: c5:b8:29:9f:64:6a:df:23:ee:7e:a8:fd:14:bd:bc: 9f:1a:ec:a7:7c:ee:ad:d1:ea:8f:34:f6:3f:1d:90: b2:00:29:02:9e:bc:76:72:8f:d0:a2:3e:20:85:ac: 9a:34:b1:53:2f:f4:0a:24:74:cc:32:81:67:5f:e4: 9d:36:da:e9:90:b7:dc:0c:9f:d9:16:8e:c5:6b:f0: ed:29:dd:93:39:2e:88:c7:81:83:0b:7c:45:63:2c: 82:1c:08:ea:01:1b:80:f8:bf:e6:f4:60:56:f8:c5: 26:21:59:7a:d9:b9:26:10:c6:2a:42:36:1b:25:9e: 49:1c:7d:c6:7c:1d:96:fc:c0:0f:49:c7:6e:82:17: f0:49:89:ed:27:fb:d3:b8:26:f4:68:ee:89:33:b9: dc:e5:bb:8e:c0:c3:44:9b:b8:45:05:58:6b:9c:57: b8:09:96:32:d0:b0:7a:92:a0:51:86:35:57:30:29: 07:eb:0e:63:2d:0e:f8:e4:b6:89:33:fa:95:a4:f0: 31:0f:50:2f:2a:0d:8a:db:7c:ce:1d:01:62:e0:bc: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:50:8F:94:C3:18:A8:0E:1F:55:50:5E:3E:FF:EE:0B:2D:72:22:33 X509v3 Authority Key Identifier: keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e8:b8:f5:54:dd:ed:cf:6b:79:73:7b:c8:72:81:fe:c2:fe: a7:17:09:7e:23:14:76:e7:cf:81:7f:69:aa:5d:04:69:a9:47: 05:7a:3e:6a:f5:64:82:17:09:16:55:e8:f6:dd:e5:23:96:c4: 9e:06:1b:6b:48:b2:3f:f1:00:b1:e0:42:4c:26:f0:7a:17:fc: d0:61:dc:6b:80:4d:80:bd:60:85:d9:5c:cd:24:b2:ac:c9:e3: 2d:f8:07:5a:ce:7f:19:c8:d6:ba:cd:12:20:a7:4c:c7:65:c6: 7b:d1:25:a7:b9:24:65:e7:35:73:cf:4e:8e:e0:70:01:43:7a: db:7b:78:1d:64:16:e1:8c:06:b0:69:27:87:62:e0:79:7c:22: d0:dd:31:cd:05:7a:ca:cf:4e:67:bb:7a:bb:92:b4:66:0f:46: c4:e7:0f:e1:1e:39:3d:ac:63:c5:3d:4d:2e:b2:4d:ef:54:6f: 82:01:b7:6a:7d:e7:d9:a6:64:27:11:48:25:cc:59:40:f5:92: 78:4e:16:51:39:d4:50:27:38:47:f6:96:8b:bb:4e:cf:23:0d: 91:eb:6f:64:4b:b9:b6:09:e4:e9:93:29:59:42:35:fa:ea:e0: 9e:6d:72:3d:46:ec:a8:6d:18:70:08:fc:c5:ec:25:57:6b:b0: 7c:61:a3:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOfJb9Ks7fS7nJboPmtxJ8kaeYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD MTk4NzA0QjAeFw0yNjEwMjQxMTIzMTdaFw0yNjEwMjUxMjE5MTdaMDMxMTAvBgNV BAMTKEUzNTA4Rjk0QzMxOEE4MEUxRjU1NTA1RTNFRkZFRTBCMkQ3MjIyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Xln9m3rxFZf1ORiCPHsaT75b 2hgNHkZ2MwQGxnQlYxHf8yi76Tqd2A1vZsW4KZ9kat8j7n6o/RS9vJ8a7Kd87q3R 6o809j8dkLIAKQKevHZyj9CiPiCFrJo0sVMv9AokdMwygWdf5J022umQt9wMn9kW jsVr8O0p3ZM5LojHgYMLfEVjLIIcCOoBG4D4v+b0YFb4xSYhWXrZuSYQxipCNhsl nkkcfcZ8HZb8wA9Jx26CF/BJie0n+9O4JvRo7okzudzlu47Aw0SbuEUFWGucV7gJ ljLQsHqSoFGGNVcwKQfrDmMtDvjktokz+pWk8DEPUC8qDYrbfM4dAWLgvFxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41CPlMMYqA4fVVBePv/uCy1yIjMwHwYDVR0j BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2 Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3 MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0Ex MjlDMTk4NzA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvouPVU3e3Pa3lze8hygf7C/qcXCX4jFHbn z4F/aapdBGmpRwV6Pmr1ZIIXCRZV6Pbd5SOWxJ4GG2tIsj/xALHgQkwm8HoX/NBh 3GuATYC9YIXZXM0ksqzJ4y34B1rOfxnI1rrNEiCnTMdlxnvRJae5JGXnNXPPTo7g cAFDett7eB1kFuGMBrBpJ4di4Hl8ItDdMc0FesrPTme7eruStGYPRsTnD+EeOT2s Y8U9TS6yTe9Ub4IBt2p959mmZCcRSCXMWUD1knhOFlE51FAnOEf2lou7Ts8jDZHr b2RLubYJ5OmTKVlCNfrq4J5tcj1G7KhtGHAI/MXsJVdrsHxho94= -----END CERTIFICATE-----Generated at Sun Oct 25 03:07:04 2026 by rpki-client