$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft File: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft (raw, json) Hash identifier: QPXH0lgkzmzkwxoVXgQPLt/rz7a4cU8N6Qgi9SDjoaQ= Subject key identifier: 47:C6:1C:05:0C:CE:54:55:45:52:DD:F2:53:89:1E:3E:DD:39:72:66 Authority key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C Certificate issuer: /CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Certificate serial: 32EF0C880A3399AC6AF568548BE84C8E42445C76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft Manifest number: EB Signing time: Sun 25 Oct 2026 11:56:20 +0000 Manifest this update: Sun 25 Oct 2026 11:51:20 +0000 Manifest next update: Mon 26 Oct 2026 13:33:20 +0000 Files and hashes: 1: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: zDvSDZMoY6Znb5y3IJOyYf9v6rjB8P6HkgrYk/e4IOY=) 2: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl (hash: yddX2H7wV/qA5Wti5LrVF2yN0m5hT26dpTa4LsahfT0=) 3: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: EOraKN7NbhJxKTOduQMxHR15n6cFJJTiK2diztwSbic=) 4: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: Xlw4ZgOA9dxklZxuwsm7BdQVTv81WEpzZ+FyUCbJp8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ef:0c:88:0a:33:99:ac:6a:f5:68:54:8b:e8:4c:8e:42:44:5c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Validity Not Before: Oct 25 11:51:20 2026 GMT Not After : Oct 26 13:33:20 2026 GMT Subject: CN=47C61C050CCE54554552DDF253891E3EDD397266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:b4:ef:d3:c8:1b:d6:a0:80:97:49:00:2a: ee:2c:71:6e:88:57:5c:2c:f3:32:3a:fd:81:81:92: 39:67:07:dd:92:5e:32:6e:5e:98:7a:ca:6a:b9:55: a2:39:3a:2a:ae:1b:8b:0d:86:7a:76:d8:20:68:ff: 9e:2e:29:d0:de:2a:2d:b9:da:3f:ee:e7:3e:2d:43: 0d:2d:d1:a7:d5:fe:51:e3:c3:3f:01:03:ee:05:45: b3:23:8d:86:76:ca:04:7d:15:21:77:bf:87:09:d5: 62:39:47:0b:55:48:68:3c:62:6a:7f:e0:62:32:69: 36:e5:6c:cf:5f:5f:16:45:be:0b:6f:f8:72:da:af: ee:c3:ca:97:2f:84:7a:93:3c:ba:e9:68:93:8b:70: ec:5e:5c:91:a8:90:52:99:be:31:86:17:df:30:05: c4:d3:3d:07:b9:ef:3c:cf:a1:d9:fe:f9:ae:db:aa: f6:b7:1d:9a:44:73:08:37:8f:11:12:e3:51:f9:0b: 04:8f:e8:25:08:4e:05:55:f4:38:11:61:da:71:e9: 35:03:b9:07:74:e0:b6:04:31:eb:e0:3c:e4:11:9e: d1:93:6a:e7:b0:4e:24:f4:09:ec:2a:84:ba:67:51: f9:96:31:4b:af:5a:9d:04:eb:f5:93:52:7b:22:31: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C6:1C:05:0C:CE:54:55:45:52:DD:F2:53:89:1E:3E:DD:39:72:66 X509v3 Authority Key Identifier: keyid:B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:86:3d:75:23:b9:9f:86:98:ee:2b:eb:a3:7c:8b:bc:fa:8e: 1b:7e:1b:96:6f:45:95:ca:48:8f:97:39:a5:45:38:09:41:7b: ff:2e:b4:a1:fe:12:98:a6:74:0a:62:f1:07:ce:a0:41:b2:b0: fd:67:30:b4:a3:86:e6:06:2b:42:72:00:bd:88:28:5a:4d:a3: 9d:c6:df:b5:f0:df:4c:86:18:1b:c2:4e:3e:04:ae:ea:cb:ab: e0:f3:c5:01:1a:d8:23:10:c9:f1:57:5b:c0:02:21:2f:2f:ec: 9a:f1:f2:9b:41:d1:4a:31:c1:da:9e:92:d4:57:69:23:3c:bf: 01:78:02:73:18:55:ae:fa:d5:58:6d:45:c2:fe:e4:3a:0d:02: 98:2b:51:3f:a8:23:df:87:1f:fa:4b:d1:91:00:7f:71:b9:fe: 4a:b3:9f:67:de:53:77:0c:52:a8:39:51:29:1a:21:82:25:c3: f0:d4:fa:5b:1f:4a:72:cc:ae:a4:3d:d7:8f:fe:aa:fa:fc:33: 98:a9:39:b3:2f:19:55:17:90:ea:92:19:2f:06:ba:6b:9d:4f: 09:dd:1f:70:9c:a4:ac:bf:46:58:59:62:33:d4:04:e2:93:55: 2a:c8:73:28:a7:29:a4:d8:f0:9a:24:64:51:d3:e5:76:4e:1d: 39:76:ad:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMu8MiAozmaxq9WhUi+hMjkJEXHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQzMkYw QzAyODk3QzAeFw0yNjEwMjUxMTUxMjBaFw0yNjEwMjYxMzMzMjBaMDMxMTAvBgNV BAMTKDQ3QzYxQzA1MENDRTU0NTU0NTUyRERGMjUzODkxRTNFREQzOTcyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/7Tv08gb1qCAl0kAKu4scW6I V1ws8zI6/YGBkjlnB92SXjJuXph6ymq5VaI5OiquG4sNhnp22CBo/54uKdDeKi25 2j/u5z4tQw0t0afV/lHjwz8BA+4FRbMjjYZ2ygR9FSF3v4cJ1WI5RwtVSGg8Ymp/ 4GIyaTblbM9fXxZFvgtv+HLar+7DypcvhHqTPLrpaJOLcOxeXJGokFKZvjGGF98w BcTTPQe57zzPodn++a7bqva3HZpEcwg3jxES41H5CwSP6CUITgVV9DgRYdpx6TUD uQd04LYEMevgPOQRntGTauewTiT0CewqhLpnUfmWMUuvWp0E6/WTUnsiMXjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8YcBQzOVFVFUt3yU4kePt05cmYwHwYDVR0j BBgwFoAUtjtUrQ52TbUlDOfxLttDLwwCiXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwNDc5M2MtYzIwOS00NjlhLThlM2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQw RTc2NERCNTI1MENFN0YxMkVEQjQzMkYwQzAyODk3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjNCNTRBRDBFNzY0REI1MjUwQ0U3RjEyRURCNDMyRjBDMDI4 OTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQz MkYwQzAyODk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCGPXUjuZ+GmO4r66N8i7z6jht+G5ZvRZXK SI+XOaVFOAlBe/8utKH+EpimdApi8QfOoEGysP1nMLSjhuYGK0JyAL2IKFpNo53G 37Xw30yGGBvCTj4ErurLq+DzxQEa2CMQyfFXW8ACIS8v7Jrx8ptB0UoxwdqektRX aSM8vwF4AnMYVa761VhtRcL+5DoNApgrUT+oI9+HH/pL0ZEAf3G5/kqzn2feU3cM Uqg5USkaIYIlw/DU+lsfSnLMrqQ914/+qvr8M5ipObMvGVUXkOqSGS8GumudTwnd H3CcpKy/RlhZYjPUBOKTVSrIcyinKaTY8JokZFHT5XZOHTl2reA= -----END CERTIFICATE-----Generated at Mon Oct 26 00:53:23 2026 by rpki-client