$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: 1qWQJEK1kjUQBekQp2ir2Rz4vxj0j4SYh16tHR0kcBw= Subject key identifier: 70:BC:26:CC:E7:A6:30:2B:12:32:15:47:82:DA:9D:03:91:4A:C7:38 Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 6A100C9AE0B68C37E1B4D6B8F11ACBA2C60007A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 18:16:52 +0000 Manifest this update: Sun 15 Nov 2026 18:11:52 +0000 Manifest next update: Mon 16 Nov 2026 21:08:52 +0000 Files and hashes: 1: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: M80OUGkOtoQIeajfRlrShBR2Zq0ZD2W6q9UHWEAEu50=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:10:0c:9a:e0:b6:8c:37:e1:b4:d6:b8:f1:1a:cb:a2:c6:00:07:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: Nov 15 18:11:52 2026 GMT Not After : Nov 16 21:08:52 2026 GMT Subject: CN=70BC26CCE7A6302B1232154782DA9D03914AC738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:50:87:ca:71:d0:f1:ae:be:a4:09:c2:5c: 8a:f5:c9:fd:27:39:66:15:13:46:7f:25:66:ac:7d: 82:56:e5:67:58:8f:f1:35:70:06:17:7f:74:8a:47: d5:e4:ee:1f:f7:65:4e:f3:7c:3a:cb:2a:c8:35:93: db:ab:a2:38:d3:a8:1d:d9:38:73:42:e6:ea:b2:a9: bb:bf:95:55:10:5e:78:3e:2c:ac:45:8a:33:3c:ad: fc:6f:a4:a0:d7:23:8c:a0:21:66:1c:17:19:4e:f0: cd:38:d2:eb:65:1c:17:0d:c4:3c:8b:53:0a:76:37: 30:47:97:db:90:d2:1f:72:57:09:84:63:91:b4:b2: 60:d3:35:8f:cb:ea:4c:f8:2b:d8:75:09:9c:d4:06: ae:39:1f:27:a6:48:da:52:7a:61:7f:2b:3d:ea:af: 3f:1e:3a:bc:c9:c7:3b:da:93:f0:00:cc:8a:f2:29: b0:ab:14:56:cb:07:a5:c1:79:36:da:c8:60:53:92: f8:14:e5:53:c2:fd:83:39:1a:99:26:94:8b:78:fb: 12:39:c9:a1:1e:00:d8:e5:2c:2b:01:00:1c:57:ef: 84:c5:46:e5:72:49:61:44:d4:55:18:97:bb:96:cf: 0a:29:f2:df:28:7e:37:7a:92:04:2e:c2:f7:a5:0c: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BC:26:CC:E7:A6:30:2B:12:32:15:47:82:DA:9D:03:91:4A:C7:38 X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c5:e6:c0:45:81:ef:b9:42:94:3b:d0:40:1f:f0:93:9f:8e: 5f:45:4b:f3:38:e4:66:0f:30:c4:67:52:25:03:32:94:d2:5f: 1e:2b:a0:c4:b3:00:7a:f0:6f:dd:16:5f:11:83:00:a0:0b:cb: 82:ea:94:ef:bc:fe:63:9c:df:be:0e:2f:a4:31:50:87:32:5e: 7f:fc:fa:86:95:fc:f7:42:d0:43:fc:87:39:f2:32:25:ad:af: 27:2a:60:54:8c:26:f8:02:58:70:c7:5a:a9:a0:df:02:eb:c5: 90:43:69:6f:28:38:36:34:32:19:d1:0c:22:56:f4:32:e8:79: 45:22:de:eb:6b:51:c6:86:2a:35:58:24:f7:5b:2f:40:b3:05: 8b:24:1a:c0:66:ef:fb:e8:b6:39:79:68:b9:0c:ba:90:41:33: 7a:f4:3e:6e:f9:7f:3b:6f:59:7d:4a:0e:33:bc:63:27:58:94: bd:e0:ed:ea:dc:21:a2:7a:73:23:57:d2:30:0d:44:61:7f:47: c9:7c:eb:8b:ab:2e:a2:b6:84:7a:75:85:49:c7:6b:49:43:fb: 8e:ff:91:37:ea:3a:8d:1d:b7:e7:0a:6c:23:b5:68:fb:5a:88: b4:ba:7a:c6:4e:b6:a7:d8:f7:35:40:38:fb:28:d8:4a:3f:64: 3d:1a:72:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahAMmuC2jDfhtNa48RrLosYAB6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjExMTUxODExNTJaFw0yNjExMTYyMTA4NTJaMDMxMTAvBgNV BAMTKDcwQkMyNkNDRTdBNjMwMkIxMjMyMTU0NzgyREE5RDAzOTE0QUM3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCValCHynHQ8a6+pAnCXIr1yf0n OWYVE0Z/JWasfYJW5WdYj/E1cAYXf3SKR9Xk7h/3ZU7zfDrLKsg1k9urojjTqB3Z OHNC5uqyqbu/lVUQXng+LKxFijM8rfxvpKDXI4ygIWYcFxlO8M040utlHBcNxDyL Uwp2NzBHl9uQ0h9yVwmEY5G0smDTNY/L6kz4K9h1CZzUBq45HyemSNpSemF/Kz3q rz8eOrzJxzvak/AAzIryKbCrFFbLB6XBeTbayGBTkvgU5VPC/YM5GpkmlIt4+xI5 yaEeANjlLCsBABxX74TFRuVySWFE1FUYl7uWzwop8t8ofjd6kgQuwvelDEgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLwmzOemMCsSMhVHgtqdA5FKxzgwHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXF5sBFge+5QpQ70EAf8JOfjl9FS/M45GYP MMRnUiUDMpTSXx4roMSzAHrwb90WXxGDAKALy4LqlO+8/mOc374OL6QxUIcyXn/8 +oaV/PdC0EP8hznyMiWtrycqYFSMJvgCWHDHWqmg3wLrxZBDaW8oODY0MhnRDCJW 9DLoeUUi3utrUcaGKjVYJPdbL0CzBYskGsBm7/votjl5aLkMupBBM3r0Pm75fztv WX1KDjO8YydYlL3g7ercIaJ6cyNX0jANRGF/R8l864urLqK2hHp1hUnHa0lD+47/ kTfqOo0dt+cKbCO1aPtaiLS6esZOtqfY9zVAOPso2Eo/ZD0acg8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:53:31 2026 by rpki-client