$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: tegrBxmV3RyPufWryNzkn5i5PExgICXkXGfvsyLiq0I= Subject key identifier: 7F:B2:D3:A9:B3:3E:1E:E1:C1:98:52:58:46:F9:18:29:4D:0E:17:FF Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 3989F94A4A2CD207699DE39AF4E37F0C2B744046 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: F5 Signing time: Sat 24 Oct 2026 02:57:49 +0000 Manifest this update: Sat 24 Oct 2026 02:52:49 +0000 Manifest next update: Sun 25 Oct 2026 04:19:49 +0000 Files and hashes: 1: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 2: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) 3: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 4: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: ZclIVnayjzhDqKKY+b0lc2mOSzgScRV/w6om5N+Y7PY=) 5: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) 6: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 7: 3230322e35312e35362e302f32322d3232203d3e20313431383938.roa (hash: j/I/kKhkDUX9RuARCCcFlNxkkx+PA3hT+ZcJu48tmMM=) 8: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 9: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:89:f9:4a:4a:2c:d2:07:69:9d:e3:9a:f4:e3:7f:0c:2b:74:40:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: Oct 24 02:52:49 2026 GMT Not After : Oct 25 04:19:49 2026 GMT Subject: CN=7FB2D3A9B33E1EE1C198525846F918294D0E17FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:6d:16:4e:31:4d:0a:47:34:39:92:28:9c: f0:26:4a:76:df:c8:73:61:e4:91:43:b7:a6:e1:27: 55:f1:77:13:ef:4b:b1:80:43:e5:d9:84:d6:e2:c3: 16:5c:7a:e5:8c:d7:4a:9e:32:f7:b6:c9:04:ac:27: 95:7c:f8:b9:28:68:7d:aa:8f:05:6b:22:d1:a1:10: b1:c2:f3:48:63:84:6a:c8:84:19:35:ec:74:9c:84: 12:18:c7:d4:a2:15:ea:ab:cc:f7:40:9f:26:99:ca: 98:61:1f:4a:6f:8b:f7:98:70:fb:71:e9:fd:62:d4: 1b:84:70:39:02:f3:ce:91:e0:3b:29:6c:a8:c2:67: cb:26:7c:5e:a4:4d:c1:a4:15:fd:4c:3d:0c:73:83: 8a:e2:99:e7:04:35:91:99:2b:c0:d1:a2:dd:3b:81: fc:0d:ad:fc:1c:55:6c:ee:11:ab:53:bc:f9:bd:d3: 89:4a:d0:eb:d3:ff:4c:fb:fe:21:16:39:da:37:ab: 5d:83:8c:7f:ff:2f:d5:30:a4:e1:3d:de:86:04:f5: da:b6:14:c9:1e:ae:47:89:8e:62:f0:8b:60:f0:40: a6:32:2e:61:45:e2:93:fb:26:36:d6:9b:bb:da:a3: a6:b4:98:7b:61:2e:cc:8b:05:79:52:69:84:42:5b: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:D3:A9:B3:3E:1E:E1:C1:98:52:58:46:F9:18:29:4D:0E:17:FF X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:28:ed:e5:00:0a:78:c9:23:ef:80:6d:a5:ac:17:7b:1d:d8: a9:90:b0:cb:a3:df:c4:93:01:d3:e1:d8:94:f5:ec:82:55:5e: 3e:80:3d:b0:dd:88:47:7d:d5:31:a0:4b:5b:d5:b5:0d:f0:ac: bd:91:3f:9d:9e:88:60:0a:95:3f:64:0b:35:84:43:05:00:02: a8:76:ec:04:d7:49:4f:76:82:cb:18:ec:e7:0e:06:29:4f:c8: 17:4c:22:a8:20:69:33:71:f5:5a:52:5f:6e:1b:ba:66:5a:9a: f8:5b:a5:a3:24:12:aa:67:e3:09:f7:90:c2:00:a9:a5:cc:bf: 5a:c7:dd:f3:8e:aa:d6:42:43:bd:2d:18:16:45:08:24:bd:bc: 29:f3:86:64:92:a0:c8:b9:a1:59:dd:15:ac:f4:e0:ea:ab:43: ff:bc:ef:ec:f4:e3:0d:14:89:f1:1d:91:5b:d2:83:1e:cd:d7: 6d:6f:a9:24:03:97:f9:c3:6c:f1:85:ed:5d:45:38:8b:f9:97: 6c:b5:fe:01:7a:38:99:f8:df:fe:67:6a:00:27:f6:af:81:12: 02:bc:84:e5:3a:2c:a9:b4:f5:44:ae:93:5c:24:3e:70:0e:68: 63:bb:19:df:69:43:4f:28:e6:4c:59:6b:23:1f:5c:72:8c:d4: fd:75:4d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYn5Skos0gdpneOa9ON/DCt0QEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjEwMjQwMjUyNDlaFw0yNjEwMjUwNDE5NDlaMDMxMTAvBgNV BAMTKDdGQjJEM0E5QjMzRTFFRTFDMTk4NTI1ODQ2RjkxODI5NEQwRTE3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpW0WTjFNCkc0OZIonPAmSnbf yHNh5JFDt6bhJ1XxdxPvS7GAQ+XZhNbiwxZceuWM10qeMve2yQSsJ5V8+LkoaH2q jwVrItGhELHC80hjhGrIhBk17HSchBIYx9SiFeqrzPdAnyaZyphhH0pvi/eYcPtx 6f1i1BuEcDkC886R4DspbKjCZ8smfF6kTcGkFf1MPQxzg4rimecENZGZK8DRot07 gfwNrfwcVWzuEatTvPm904lK0OvT/0z7/iEWOdo3q12DjH//L9UwpOE93oYE9dq2 FMkerkeJjmLwi2DwQKYyLmFF4pP7JjbWm7vao6a0mHthLsyLBXlSaYRCWzoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7LTqbM+HuHBmFJYRvkYKU0OF/8wHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEko7eUACnjJI++AbaWsF3sd2KmQsMuj38ST AdPh2JT17IJVXj6APbDdiEd91TGgS1vVtQ3wrL2RP52eiGAKlT9kCzWEQwUAAqh2 7ATXSU92gssY7OcOBilPyBdMIqggaTNx9VpSX24bumZamvhbpaMkEqpn4wn3kMIA qaXMv1rH3fOOqtZCQ70tGBZFCCS9vCnzhmSSoMi5oVndFaz04OqrQ/+87+z04w0U ifEdkVvSgx7N121vqSQDl/nDbPGF7V1FOIv5l2y1/gF6OJn43/5nagAn9q+BEgK8 hOU6LKm09USuk1wkPnAOaGO7Gd9pQ08o5kxZayMfXHKM1P11Tdg= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:41 2026 by rpki-client