$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: KF5QpewmdC6q342kPTQ7iCk8/aXuiwnKh8/P1/1HSiA= Subject key identifier: 05:C0:AA:31:F1:4E:58:B2:DF:63:65:C9:50:24:EF:3F:89:B5:1E:12 Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 309F0D49E7AAB67CBEE795D9585CFC98EFD0A1BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: EC Signing time: Sun 25 Oct 2026 07:10:17 +0000 Manifest this update: Sun 25 Oct 2026 07:05:17 +0000 Manifest next update: Mon 26 Oct 2026 08:25:17 +0000 Files and hashes: 1: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: LDGqz18hgVJ1QP0XGilVqGWsASEs5+QguH0woXvjidI=) 2: 3130332e3138382e3137322e302f32332d3233203d3e20313439373336.roa (hash: i7/UT3YcH1KnN8ZKGHTJm6kNrXY+Ng3CBCiwy2+npQ8=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) 4: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 6: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9f:0d:49:e7:aa:b6:7c:be:e7:95:d9:58:5c:fc:98:ef:d0:a1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Oct 25 07:05:17 2026 GMT Not After : Oct 26 08:25:17 2026 GMT Subject: CN=05C0AA31F14E58B2DF6365C95024EF3F89B51E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f5:da:f0:a5:97:49:eb:51:90:13:99:da:91: 50:8b:bb:5d:5e:30:de:e2:bd:d5:f7:6e:df:48:0c: ab:88:4d:79:cd:86:3b:95:83:b9:db:11:29:8d:50: 3c:9b:f2:68:b2:04:68:37:fd:68:26:a5:4e:e7:fa: 27:f0:15:0b:4c:5d:96:2e:df:ac:ab:bb:a6:cf:e8: 66:63:c8:35:d5:2d:8b:95:14:f2:05:fb:02:4e:74: 1b:26:d6:d0:5f:48:8f:e3:74:e1:e0:1b:5e:52:cc: 02:20:16:16:6b:f9:53:0d:20:6a:9e:00:40:cb:89: 71:25:70:9c:e1:d7:35:8b:dd:a0:f7:73:e9:8d:f7: 81:01:b5:c0:12:0f:7f:da:5f:79:02:ea:4b:b3:15: 25:b8:0d:46:ea:26:b1:41:8b:0b:ec:ed:24:bd:27: cc:b1:30:62:84:5c:95:bc:86:63:f4:c3:26:f6:25: a4:de:97:95:9a:a0:cd:d7:8e:21:79:91:d1:6f:c2: 8e:c7:92:33:d4:1c:5f:36:3f:83:79:50:8a:d6:e4: ca:82:20:44:82:22:41:dd:54:d1:fa:6d:22:b1:34: 7b:4b:31:5e:f8:d9:14:10:95:d7:f5:e7:4e:03:e9: 11:b9:a3:fb:45:8b:ff:40:72:3b:95:70:da:e8:dc: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C0:AA:31:F1:4E:58:B2:DF:63:65:C9:50:24:EF:3F:89:B5:1E:12 X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b1:09:08:45:e6:14:06:cb:0b:c4:74:11:a5:86:5a:1f:24: f5:6a:2b:17:0e:75:42:4a:ad:d7:4d:4b:72:ee:cf:1d:e4:a1: dd:eb:7b:3e:0a:34:78:44:7a:c4:a7:bb:94:eb:5d:4c:c1:b8: c1:3c:f2:a8:84:9c:a0:5e:4e:f1:d7:c8:ce:e4:ef:ee:05:1e: d5:f0:4b:e0:dd:92:68:69:b9:10:89:6d:78:91:98:f0:bb:86: 0b:28:5d:6a:6a:04:cc:fb:cd:f7:c7:f6:bd:7c:e4:f8:2d:1a: e2:a6:ad:bc:c2:70:d5:13:93:50:f6:d7:a7:d6:64:85:c6:be: fa:a2:d1:8e:dd:aa:29:06:31:70:5f:82:ab:8d:dd:7f:72:9b: 35:95:05:25:4c:d9:59:f8:34:c6:89:02:d2:46:17:49:0b:09: 0f:27:97:8d:7e:c5:4f:64:84:78:26:ee:e1:f6:6d:3f:4a:a6: 26:27:ad:a6:2c:2f:1d:3a:a1:ee:08:66:14:39:b4:d6:67:0e: b1:16:8f:d9:5f:bc:27:39:c6:61:54:8c:ad:d8:df:17:3c:f5: b5:15:df:ca:e7:84:45:60:7e:4e:90:dc:d6:36:d6:1f:e7:9a: df:28:58:5f:e8:0e:e2:79:4a:ea:ca:fe:5a:26:95:70:b1:82: 38:e9:6f:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJ8NSeeqtny+55XZWFz8mO/Qob8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjEwMjUwNzA1MTdaFw0yNjEwMjYwODI1MTdaMDMxMTAvBgNV BAMTKDA1QzBBQTMxRjE0RTU4QjJERjYzNjVDOTUwMjRFRjNGODlCNTFFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx9drwpZdJ61GQE5nakVCLu11e MN7ivdX3bt9IDKuITXnNhjuVg7nbESmNUDyb8miyBGg3/WgmpU7n+ifwFQtMXZYu 36yru6bP6GZjyDXVLYuVFPIF+wJOdBsm1tBfSI/jdOHgG15SzAIgFhZr+VMNIGqe AEDLiXElcJzh1zWL3aD3c+mN94EBtcASD3/aX3kC6kuzFSW4DUbqJrFBiwvs7SS9 J8yxMGKEXJW8hmP0wyb2JaTel5WaoM3XjiF5kdFvwo7HkjPUHF82P4N5UIrW5MqC IESCIkHdVNH6bSKxNHtLMV742RQQldf1504D6RG5o/tFi/9AcjuVcNro3BUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcCqMfFOWLLfY2XJUCTvP4m1HhIwHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+xCQhF5hQGywvEdBGlhlofJPVqKxcOdUJK rddNS3Luzx3kod3rez4KNHhEesSnu5TrXUzBuME88qiEnKBeTvHXyM7k7+4FHtXw S+DdkmhpuRCJbXiRmPC7hgsoXWpqBMz7zffH9r185PgtGuKmrbzCcNUTk1D216fW ZIXGvvqi0Y7dqikGMXBfgquN3X9ymzWVBSVM2Vn4NMaJAtJGF0kLCQ8nl41+xU9k hHgm7uH2bT9KpiYnraYsLx06oe4IZhQ5tNZnDrEWj9lfvCc5xmFUjK3Y3xc89bUV 38rnhEVgfk6Q3NY21h/nmt8oWF/oDuJ5SurK/lomlXCxgjjpb4s= -----END CERTIFICATE-----Generated at Mon Oct 26 00:45:59 2026 by rpki-client