$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json) Hash identifier: DONxQLkKLfVva0jcFLhUJcgAmMPwXXfV3koIbcgK+XY= Subject key identifier: A9:07:3A:75:A5:FA:CE:C7:32:69:AE:38:5B:AD:F1:87:49:0A:89:42 Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 0E890F564E540E7726F6B45A258CBE629F3D6FC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 15:58:49 +0000 Manifest this update: Fri 23 Oct 2026 15:53:49 +0000 Manifest next update: Sat 24 Oct 2026 16:41:49 +0000 Files and hashes: 1: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=) 2: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=) 3: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=) 4: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=) 5: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=) 6: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=) 7: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: aWYbHUiS71JK0PeebbxXRD83RAnak3lhyDxWKC2G8GI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 16:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:89:0f:56:4e:54:0e:77:26:f6:b4:5a:25:8c:be:62:9f:3d:6f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: Oct 23 15:53:49 2026 GMT Not After : Oct 24 16:41:49 2026 GMT Subject: CN=A9073A75A5FACEC73269AE385BADF187490A8942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:39:d1:a0:2f:cc:ea:f1:b7:dc:b9:6c:3e:bc: 41:c6:ce:2c:80:5e:30:24:24:91:89:ed:f8:d8:d6: 98:04:82:34:31:80:c3:43:a1:3c:6a:16:76:a4:50: 7f:aa:fc:1f:8e:2e:82:0a:04:64:f6:e6:95:74:45: 4b:48:f5:d8:d0:ff:be:e4:9d:47:d0:63:72:26:2f: 5a:67:96:fd:15:5c:76:a6:55:d2:cb:3e:b6:52:a0: 0d:a0:bf:58:aa:c7:3c:b1:d9:03:a4:85:24:84:7b: e0:ae:11:6f:85:d3:fb:d4:2a:55:74:0b:fc:95:e3: 2e:2a:09:9a:db:71:88:44:87:f2:de:a8:25:4d:6f: df:24:94:cd:6d:56:45:56:26:89:d7:5e:73:18:a2: f8:8b:7c:14:46:a6:2d:7f:a4:e7:7b:c0:6e:31:fb: 2b:5e:8f:58:15:30:bf:08:31:a7:53:39:7c:6a:89: a5:cd:30:70:a1:3c:f6:08:0b:a9:ea:38:26:05:65: d6:a9:8a:23:97:eb:32:c6:c0:8d:ab:25:4b:a7:29: 4c:ec:39:1a:ab:ba:38:fa:8c:8f:b0:b6:c4:ee:db: aa:34:2e:ed:90:2e:a4:05:f2:3a:aa:3d:7d:0a:31: fa:02:54:ca:57:ee:2a:05:cd:b9:5f:fc:cb:19:ee: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:07:3A:75:A5:FA:CE:C7:32:69:AE:38:5B:AD:F1:87:49:0A:89:42 X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:17:7f:b6:9a:69:83:53:45:ec:82:06:23:bb:05:22:82:2c: b0:54:a6:62:ff:eb:f3:66:84:53:32:69:3a:5e:84:90:89:a2: 61:45:5b:1c:ba:f0:14:38:2b:77:c5:13:ea:76:c1:61:d7:ea: 9a:e5:fb:0e:1b:1c:ef:a0:d5:e4:24:91:30:6d:37:a6:bc:46: 9d:f5:a4:cc:32:01:b1:8e:72:2d:ed:de:6f:99:41:56:26:09: 39:7f:24:df:cc:73:b2:d9:8c:a4:e3:a1:28:fb:5c:61:58:2c: 68:8d:0f:ae:37:0b:60:03:76:6c:df:55:7d:48:44:b1:7e:e0: 7d:60:50:8a:61:67:f6:7d:40:fd:c3:0a:01:8e:5a:d3:69:2c: 25:27:01:a8:e9:aa:ef:ee:53:85:92:d4:16:36:2d:b6:e4:72: dc:d8:96:af:a2:dd:2a:eb:50:5a:ac:5c:e2:b3:75:e5:cb:5c: 8c:08:55:ee:39:15:49:7a:43:2a:85:23:9f:26:01:43:13:d5: 4a:8d:12:53:5b:62:b8:10:34:a2:b3:7b:e3:c7:97:2d:a9:50: e7:23:8c:56:e5:dc:ae:88:05:e1:71:d8:42:cf:4d:7b:79:62: 1c:d6:3b:8a:80:96:37:56:9c:59:ba:2a:41:04:7e:72:c3:aa: 72:b0:77:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDokPVk5UDncm9rRaJYy+Yp89b8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjEwMjMxNTUzNDlaFw0yNjEwMjQxNjQxNDlaMDMxMTAvBgNV BAMTKEE5MDczQTc1QTVGQUNFQzczMjY5QUUzODVCQURGMTg3NDkwQTg5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9OdGgL8zq8bfcuWw+vEHGziyA XjAkJJGJ7fjY1pgEgjQxgMNDoTxqFnakUH+q/B+OLoIKBGT25pV0RUtI9djQ/77k nUfQY3ImL1pnlv0VXHamVdLLPrZSoA2gv1iqxzyx2QOkhSSEe+CuEW+F0/vUKlV0 C/yV4y4qCZrbcYhEh/LeqCVNb98klM1tVkVWJonXXnMYoviLfBRGpi1/pOd7wG4x +ytej1gVML8IMadTOXxqiaXNMHChPPYIC6nqOCYFZdapiiOX6zLGwI2rJUunKUzs ORqrujj6jI+wtsTu26o0Lu2QLqQF8jqqPX0KMfoCVMpX7ioFzblf/MsZ7oi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQc6daX6zscyaa44W63xh0kKiUIwHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsXf7aaaYNTReyCBiO7BSKCLLBUpmL/6/Nm hFMyaTpehJCJomFFWxy68BQ4K3fFE+p2wWHX6prl+w4bHO+g1eQkkTBtN6a8Rp31 pMwyAbGOci3t3m+ZQVYmCTl/JN/Mc7LZjKTjoSj7XGFYLGiND643C2ADdmzfVX1I RLF+4H1gUIphZ/Z9QP3DCgGOWtNpLCUnAajpqu/uU4WS1BY2LbbkctzYlq+i3Srr UFqsXOKzdeXLXIwIVe45FUl6QyqFI58mAUMT1UqNElNbYrgQNKKze+PHly2pUOcj jFbl3K6IBeFx2ELPTXt5YhzWO4qAljdWnFm6KkEEfnLDqnKwdzQ= -----END CERTIFICATE-----Generated at Sat Oct 24 10:12:22 2026 by rpki-client