$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json) Hash identifier: zR1MEX7uMtk4OM1R508jwydENk4JIC+n1OZbSeN8WGc= Subject key identifier: EB:7B:9D:1E:09:A8:23:59:FB:94:E5:8F:FC:F4:E3:23:4D:A8:EC:3B Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Certificate serial: 57FDDC38DE3B34C8AD5441BACF2662DE0F3C16E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 02:42:29 +0000 Manifest this update: Sat 24 Oct 2026 02:37:29 +0000 Manifest next update: Sun 25 Oct 2026 06:29:29 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=) 2: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: DrwlHDqv6aWBwVfg7W8exALXxeZipfqujna0B7h9guw=) 3: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fd:dc:38:de:3b:34:c8:ad:54:41:ba:cf:26:62:de:0f:3c:16:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4 Validity Not Before: Oct 24 02:37:29 2026 GMT Not After : Oct 25 06:29:29 2026 GMT Subject: CN=EB7B9D1E09A82359FB94E58FFCF4E3234DA8EC3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:5d:d4:8a:1e:c6:31:f0:aa:07:d7:8a:da: f6:6c:da:22:a7:54:cf:bc:5a:ed:37:a6:ea:33:85: 2f:5a:8b:be:40:c5:2e:eb:3e:d6:9e:90:d2:82:b6: 45:cc:ef:93:0e:f0:c9:81:c7:0a:21:45:f0:97:61: 47:e5:7f:c0:ef:24:37:f9:a1:ab:23:e3:2b:d5:fa: b1:b5:c9:e8:d9:c5:ac:94:e9:a6:4f:65:f1:72:da: 28:f1:9f:70:fe:9f:31:6d:77:32:a7:76:7c:b7:00: 59:12:08:63:a5:cf:db:72:bf:9e:4b:96:36:d9:32: b5:01:74:82:e5:2b:58:54:ad:a9:eb:ee:04:d5:54: ae:92:d6:ba:fb:94:df:2b:df:34:cb:1b:60:9f:53: bd:39:cc:73:fd:7f:c8:fa:7a:8d:be:bb:05:20:1b: 27:4b:1b:4f:be:b1:ad:4f:d7:67:51:42:2d:18:5b: 0c:0e:db:d1:a9:30:17:d4:9b:d2:8d:0b:c3:20:c9: ab:c8:e4:80:5c:69:31:20:4f:bf:45:36:e4:7e:b4: ff:49:6d:7d:27:5d:66:94:2b:5c:c1:16:38:ee:85: b7:dc:c2:be:91:fc:fc:94:6f:93:6c:51:49:08:2c: db:2f:d5:94:43:bc:cb:54:47:96:79:fc:6e:6e:42: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7B:9D:1E:09:A8:23:59:FB:94:E5:8F:FC:F4:E3:23:4D:A8:EC:3B X509v3 Authority Key Identifier: keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8d:cf:63:dc:d3:f2:11:0a:6f:fd:f4:e0:78:fc:e5:ac:78: 85:79:e8:3b:fd:1b:48:9f:05:59:86:b7:60:ef:1d:fd:74:c0: ad:30:81:88:94:34:1b:b0:b1:85:81:32:37:b4:ef:58:d9:9f: 92:7a:22:81:dd:03:f5:b9:02:1a:ef:68:63:31:7c:90:37:98: 8d:10:2b:2f:48:93:b7:88:fe:e2:2e:42:8f:16:1d:17:79:3a: 20:50:85:c8:76:8d:2b:36:44:d5:de:29:d9:59:a0:86:f0:f6: c7:83:cc:20:91:96:1a:e9:78:ba:99:a1:89:bd:8a:1e:88:e0: 0f:98:93:9c:23:ff:80:24:4f:49:4f:65:ba:53:1a:05:c9:05: 47:6c:31:26:4a:36:f5:20:37:44:04:f7:0f:ba:f8:ec:bf:6f: 7a:30:ad:10:78:ed:d1:61:a1:4b:c1:3e:5a:a2:ff:7f:01:78: 2d:0b:00:e2:65:16:4e:3f:40:8e:19:93:4f:ed:60:0c:f3:b4: f6:ab:07:d7:a0:8b:c2:d6:26:cd:00:36:c6:2d:cd:05:bf:d1: 5c:9b:5b:42:42:20:6e:46:03:43:93:76:c2:e3:46:9b:03:dc: 76:90:14:77:cd:17:47:3a:8c:28:32:98:fb:f3:e5:b1:cc:be: 5f:37:2a:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/3cON47NMitVEG6zyZi3g88FukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIx RkYyQzVDNDAeFw0yNjEwMjQwMjM3MjlaFw0yNjEwMjUwNjI5MjlaMDMxMTAvBgNV BAMTKEVCN0I5RDFFMDlBODIzNTlGQjk0RTU4RkZDRjRFMzIzNERBOEVDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dV3Uih7GMfCqB9eK2vZs2iKn VM+8Wu03puozhS9ai75AxS7rPtaekNKCtkXM75MO8MmBxwohRfCXYUflf8DvJDf5 oasj4yvV+rG1yejZxayU6aZPZfFy2ijxn3D+nzFtdzKndny3AFkSCGOlz9tyv55L ljbZMrUBdILlK1hUranr7gTVVK6S1rr7lN8r3zTLG2CfU705zHP9f8j6eo2+uwUg GydLG0++sa1P12dRQi0YWwwO29GpMBfUm9KNC8MgyavI5IBcaTEgT79FNuR+tP9J bX0nXWaUK1zBFjjuhbfcwr6R/PyUb5NsUUkILNsv1ZRDvMtUR5Z5/G5uQuK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63udHgmoI1n7lOWP/PTjI02o7DswHwYDVR0j BBgwFoAUSztU9KEgPZ316AlCKMkfwh/yxcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWExZTBiZDctMjgxYS00ZWJhLWI5OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRB MTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIxRkYyQzVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QjNCNTRGNEExMjAzRDlERjVFODA5NDIyOEM5MUZDMjFGRjJD NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFG QzIxRkYyQzVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGNz2Pc0/IRCm/99OB4/OWseIV56Dv9G0if BVmGt2DvHf10wK0wgYiUNBuwsYWBMje071jZn5J6IoHdA/W5AhrvaGMxfJA3mI0Q Ky9Ik7eI/uIuQo8WHRd5OiBQhch2jSs2RNXeKdlZoIbw9seDzCCRlhrpeLqZoYm9 ih6I4A+Yk5wj/4AkT0lPZbpTGgXJBUdsMSZKNvUgN0QE9w+6+Oy/b3owrRB47dFh oUvBPlqi/38BeC0LAOJlFk4/QI4Zk0/tYAzztParB9egi8LWJs0ANsYtzQW/0Vyb W0JCIG5GA0OTdsLjRpsD3HaQFHfNF0c6jCgymPvz5bHMvl83KuM= -----END CERTIFICATE-----Generated at Sat Oct 24 07:20:52 2026 by rpki-client