$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft File: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft (raw, json) Hash identifier: YKb7g8ysqjeZ9QDw6n4QtfIXTjhtMYHzeRiDyRsK9jQ= Subject key identifier: B0:32:C0:46:01:1D:30:51:C9:BD:F9:06:1E:1A:31:60:52:9A:38:D6 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 24E109646E30E6D7D1AF210E07FB0E53C18C2F99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 12:50:03 +0000 Manifest this update: Sun 15 Nov 2026 12:45:03 +0000 Manifest next update: Mon 16 Nov 2026 15:46:03 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=) 3: 4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl (hash: ewWdemkgt9EIM+Ht3rk9IewWhj9k/Ppp7hLu/TtWtcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e1:09:64:6e:30:e6:d7:d1:af:21:0e:07:fb:0e:53:c1:8c:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: Nov 15 12:45:03 2026 GMT Not After : Nov 16 15:46:03 2026 GMT Subject: CN=B032C046011D3051C9BDF9061E1A3160529A38D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:50:ec:3e:09:81:71:3f:4a:06:51:6b:c1: c1:90:69:d4:ec:27:27:f7:70:95:ea:6f:77:86:1c: 81:b9:ca:f9:ed:d9:08:ba:65:ba:3c:8e:08:2d:41: 77:2f:c1:48:f2:da:85:40:1c:68:c3:58:07:68:3b: 00:6c:90:70:0e:a4:ec:f7:c6:17:5b:80:e9:4a:bf: cd:cb:c5:15:b3:f5:b2:54:7b:8e:4f:57:df:d2:34: cc:98:72:f5:63:ce:d5:55:41:c2:b5:ba:af:fb:8e: 80:59:95:5a:9c:6c:c8:1b:15:42:12:b4:3c:82:14: 11:fd:0d:08:39:fb:59:45:2d:96:22:cd:dd:26:78: 4f:33:0b:69:4e:bc:ae:ca:5c:f4:bf:85:7f:23:ea: 49:a2:b8:c7:7c:c9:6b:7f:6f:36:34:b6:56:31:74: 5a:70:26:40:a4:51:d3:1e:67:a9:3b:24:73:a7:c2: 36:c2:0e:f1:3a:5a:3a:dd:f5:66:94:9e:df:02:82: c1:52:c8:f9:e2:db:c5:0c:b4:e9:91:c8:25:71:18: 30:9f:95:5b:a0:6d:79:80:68:e4:e9:07:fe:02:33: 2c:08:d1:fb:eb:d8:38:2c:4e:30:cb:18:a5:b7:05: fc:51:54:64:ec:73:21:4d:47:b8:a8:31:0c:26:97: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:32:C0:46:01:1D:30:51:C9:BD:F9:06:1E:1A:31:60:52:9A:38:D6 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:21:a7:92:36:d2:28:49:70:11:e6:92:aa:f5:47:3d:4d:05: 82:b7:f9:38:a8:7d:48:41:5a:8a:bb:7d:4b:c4:74:9a:43:0c: 2e:e1:9c:00:5b:d7:66:f1:d1:97:58:eb:a3:f7:c9:31:81:20: 66:98:cb:09:8e:43:86:f6:f3:d2:50:74:d3:04:0f:12:41:5f: 29:5d:bb:ca:e2:17:94:0b:d5:15:c8:50:44:21:10:23:8c:78: e5:c2:47:8b:09:3a:55:5a:38:e9:09:72:48:d4:f7:a6:a3:87: e2:75:4f:52:05:c9:f6:91:b8:db:6c:df:97:d4:6f:27:eb:d6: 84:1a:36:fa:40:52:d5:39:67:34:b5:ab:37:58:d8:e6:e4:25: 7e:af:2f:de:27:9e:da:8d:fc:75:59:47:be:95:c9:ac:27:85: 01:a4:1c:25:f9:65:cf:3c:61:5c:20:fd:39:fd:a1:7e:b9:09: 86:80:de:a5:fd:30:17:c9:b7:79:94:06:d3:1e:40:ab:72:da: d6:0b:07:a2:1c:8e:a5:77:0f:16:2c:df:9b:bc:10:01:fc:65: 17:9a:35:c7:5c:80:8a:9e:4d:46:d6:49:40:d9:ac:26:ba:e0: 4e:f8:99:01:ad:89:fa:e4:a7:09:d0:0c:ec:ef:e2:be:b3:6c: f9:ca:44:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOEJZG4w5tfRryEOB/sOU8GML5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjExMTUxMjQ1MDNaFw0yNjExMTYxNTQ2MDNaMDMxMTAvBgNV BAMTKEIwMzJDMDQ2MDExRDMwNTFDOUJERjkwNjFFMUEzMTYwNTI5QTM4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSlDsPgmBcT9KBlFrwcGQadTs Jyf3cJXqb3eGHIG5yvnt2Qi6Zbo8jggtQXcvwUjy2oVAHGjDWAdoOwBskHAOpOz3 xhdbgOlKv83LxRWz9bJUe45PV9/SNMyYcvVjztVVQcK1uq/7joBZlVqcbMgbFUIS tDyCFBH9DQg5+1lFLZYizd0meE8zC2lOvK7KXPS/hX8j6kmiuMd8yWt/bzY0tlYx dFpwJkCkUdMeZ6k7JHOnwjbCDvE6Wjrd9WaUnt8CgsFSyPni28UMtOmRyCVxGDCf lVugbXmAaOTpB/4CMywI0fvr2DgsTjDLGKW3BfxRVGTscyFNR7ioMQwmlzi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDLARgEdMFHJvfkGHhoxYFKaONYwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRF QTA4QUY2ODdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUhp5I20ihJcBHmkqr1Rz1NBYK3+TiofUhB Woq7fUvEdJpDDC7hnABb12bx0ZdY66P3yTGBIGaYywmOQ4b289JQdNMEDxJBXyld u8riF5QL1RXIUEQhECOMeOXCR4sJOlVaOOkJckjU96ajh+J1T1IFyfaRuNts35fU byfr1oQaNvpAUtU5ZzS1qzdY2ObkJX6vL94nntqN/HVZR76VyawnhQGkHCX5Zc88 YVwg/Tn9oX65CYaA3qX9MBfJt3mUBtMeQKty2tYLB6IcjqV3DxYs35u8EAH8ZRea NcdcgIqeTUbWSUDZrCa64E74mQGtifrkpwnQDOzv4r6zbPnKRMo= -----END CERTIFICATE-----Generated at Sun Nov 15 15:39:45 2026 by rpki-client