$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft File: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft (raw, json) Hash identifier: gbMTAS6Uife+fpi3DRiPNJNmmUVkQWQ6CETrw56tJkc= Subject key identifier: E4:BD:B0:AD:71:C6:A8:52:B4:84:61:10:E6:A3:7E:B2:E9:AD:43:84 Authority key identifier: 4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F Certificate issuer: /CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Certificate serial: 54A7F0EC36E4F2219024BF43E4D33436C3C3AA7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 04:48:38 +0000 Manifest this update: Thu 08 Oct 2026 04:43:38 +0000 Manifest next update: Fri 09 Oct 2026 06:38:38 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 7y1kc2AMpxx6evn2aDQV63VxhXeky0gM842l022bSD4=) 2: 4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl (hash: Bi3lgasX8t8NNKBREJ7bFkqE2T29gGLcPn5I827nvVY=) 3: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: 5Ssmm5grz5Tl3MtkZw82jMEzuLc9usDz6SBlVHYxN7U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 06:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a7:f0:ec:36:e4:f2:21:90:24:bf:43:e4:d3:34:36:c3:c3:aa:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F Validity Not Before: Oct 8 04:43:38 2026 GMT Not After : Oct 9 06:38:38 2026 GMT Subject: CN=E4BDB0AD71C6A852B4846110E6A37EB2E9AD4384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:e9:90:83:a0:9c:e6:f0:d0:fb:f7:1e:ed: d7:f4:85:74:50:c4:32:81:57:47:42:20:bd:23:88: 3f:cc:fb:2e:f9:5b:bf:f1:84:7d:38:63:a2:8f:f7: 35:20:3c:81:60:c4:0a:12:eb:cb:e5:2c:a7:89:e5: df:3a:70:6b:ff:e6:09:02:3d:f7:94:3a:72:19:5c: a9:07:c9:f1:63:a9:30:ff:29:5e:ea:73:d2:ce:b5: 4f:d0:9b:ad:2f:29:11:85:33:ec:43:fd:79:e8:55: 05:9b:15:fa:75:56:1d:b8:c3:65:fe:09:0d:5f:bc: 7f:90:53:a2:a4:b5:90:ce:86:0a:89:cf:a7:55:1a: 4f:b5:8d:f5:5f:8b:ff:c7:d3:62:e5:aa:da:40:08: 1c:e8:f3:4e:0d:dc:a9:31:05:fd:83:42:d3:59:1b: 82:01:79:42:7a:43:aa:0e:4b:18:8b:5f:d8:49:33: 7c:8c:0c:b2:bf:1e:cc:4b:42:96:73:45:c9:6c:3d: 7c:be:45:4a:57:6e:e0:ff:02:8d:06:1d:d0:dd:d5: 61:26:e1:fb:34:a8:94:3b:ae:f9:7c:65:d6:f7:57: f8:a7:2e:f9:be:54:a0:38:3f:f0:2e:d4:f2:44:a3: f5:23:72:e2:10:5b:55:8b:40:84:60:96:21:b4:1f: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BD:B0:AD:71:C6:A8:52:B4:84:61:10:E6:A3:7E:B2:E9:AD:43:84 X509v3 Authority Key Identifier: keyid:4A:CA:AD:0A:28:A6:50:A9:BD:65:B0:A6:E1:90:57:F4:7B:DB:94:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/4ACAAD0A28A650A9BD65B0A6E19057F47BDB942F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:76:b2:89:b4:96:68:d2:8e:e5:6f:b1:fe:91:b0:2f:15:11: 18:56:9d:26:bf:4c:ce:29:55:83:b1:1e:9a:d0:a0:d2:5f:8a: c6:b9:23:f0:e2:7c:48:32:bb:f8:ce:f6:96:62:42:78:c5:b8: c9:7d:21:47:d4:ad:6e:1c:c6:69:10:f2:91:be:52:38:1c:9f: 05:2f:a2:e6:45:4b:c9:57:a5:9c:cd:a8:79:e3:98:4c:a1:ed: db:a8:1e:ea:b7:be:ac:8e:70:58:d9:ef:e0:78:1a:9e:8b:26: 5c:a2:80:65:3e:d9:c8:65:57:01:4e:c1:7f:3d:51:68:88:42: f6:31:3b:34:15:e5:ef:4e:c9:9d:54:32:5b:2a:d7:6a:69:84: be:ea:5e:9b:15:30:96:bd:ad:56:fc:39:c8:1c:ae:02:da:49: 25:ca:47:16:f6:af:a1:35:8b:e6:7f:42:31:d0:4d:12:fa:ba: a0:47:6f:e5:9a:2f:9d:40:60:0d:b8:ee:51:0e:6d:93:ad:87: 6d:30:ff:4c:c4:d4:6e:11:89:ad:42:cb:cf:7f:40:9c:15:af: 54:14:72:b5:4d:e0:e4:84:d0:6f:42:d6:d2:67:d5:cf:e6:ba: e9:ec:a1:1c:20:39:7c:66:e9:c5:f1:dc:c4:09:9c:2f:ab:a9: bb:c0:bc:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKfw7Dbk8iGQJL9D5NM0NsPDqnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3 QkRCOTQyRjAeFw0yNjEwMDgwNDQzMzhaFw0yNjEwMDkwNjM4MzhaMDMxMTAvBgNV BAMTKEU0QkRCMEFENzFDNkE4NTJCNDg0NjExMEU2QTM3RUIyRTlBRDQzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3OmQg6Cc5vDQ+/ce7df0hXRQ xDKBV0dCIL0jiD/M+y75W7/xhH04Y6KP9zUgPIFgxAoS68vlLKeJ5d86cGv/5gkC PfeUOnIZXKkHyfFjqTD/KV7qc9LOtU/Qm60vKRGFM+xD/XnoVQWbFfp1Vh24w2X+ CQ1fvH+QU6KktZDOhgqJz6dVGk+1jfVfi//H02LlqtpACBzo804N3KkxBf2DQtNZ G4IBeUJ6Q6oOSxiLX9hJM3yMDLK/HsxLQpZzRclsPXy+RUpXbuD/Ao0GHdDd1WEm 4fs0qJQ7rvl8Zdb3V/inLvm+VKA4P/Au1PJEo/UjcuIQW1WLQIRgliG0H+2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5L2wrXHGqFK0hGEQ5qN+sumtQ4QwHwYDVR0j BBgwFoAUSsqtCiimUKm9ZbCm4ZBX9HvblC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M1Yjc4NWQtODMwMy00NWM1LTlhNTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEy OEE2NTBBOUJENjVCMEE2RTE5MDU3RjQ3QkRCOTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUNBQUQwQTI4QTY1MEE5QkQ2NUIwQTZFMTkwNTdGNDdCREI5 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvNEFDQUFEMEEyOEE2NTBBOUJENjVCMEE2RTE5MDU3 RjQ3QkRCOTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt2som0lmjSjuVvsf6RsC8VERhWnSa/TM4p VYOxHprQoNJfisa5I/DifEgyu/jO9pZiQnjFuMl9IUfUrW4cxmkQ8pG+UjgcnwUv ouZFS8lXpZzNqHnjmEyh7duoHuq3vqyOcFjZ7+B4Gp6LJlyigGU+2chlVwFOwX89 UWiIQvYxOzQV5e9OyZ1UMlsq12pphL7qXpsVMJa9rVb8OcgcrgLaSSXKRxb2r6E1 i+Z/QjHQTRL6uqBHb+WaL51AYA247lEObZOth20w/0zE1G4Ria1Cy89/QJwVr1QU crVN4OSE0G9C1tJn1c/muunsoRwgOXxm6cXx3MQJnC+rqbvAvFU= -----END CERTIFICATE-----Generated at Thu Oct 8 14:29:51 2026 by rpki-client