$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft File: 4DD279AECD518B9CE764AE03708B711A40048A1E.mft (raw, json) Hash identifier: OGuUqtphaC89H+7oqxdBkK3zC1ytcAb7xOTdNkMlm/4= Subject key identifier: B2:BA:6F:F3:C7:8E:36:23:C5:12:B0:65:9C:A1:84:F8:A4:60:37:1D Authority key identifier: 4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E Certificate issuer: /CN=4DD279AECD518B9CE764AE03708B711A40048A1E Certificate serial: 2F1D3224770111423B5D7C4EECCCA580BE24674F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft Manifest number: D3 Signing time: Wed 07 Oct 2026 19:32:40 +0000 Manifest this update: Wed 07 Oct 2026 19:27:40 +0000 Manifest next update: Thu 08 Oct 2026 23:24:40 +0000 Files and hashes: 1: 4DD279AECD518B9CE764AE03708B711A40048A1E.crl (hash: NhvIEsDMO7ERpA0hVioQGqlx8aGcN/Ooiurxn8Vh87E=) 2: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: mxXusZGfsr98abkNgqk3JfvCjZTqoXMC9/o99feBr+E=) 3: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: 6Laf+3GLGNpNAkhIsFH3maUJ3BnydIt6ABswzC07SLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 23:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1d:32:24:77:01:11:42:3b:5d:7c:4e:ec:cc:a5:80:be:24:67:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD279AECD518B9CE764AE03708B711A40048A1E Validity Not Before: Oct 7 19:27:40 2026 GMT Not After : Oct 8 23:24:40 2026 GMT Subject: CN=B2BA6FF3C78E3623C512B0659CA184F8A460371D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:c9:62:fa:2d:c1:5a:01:28:b0:ae:69:2a: 7a:20:7a:74:0a:10:87:9e:30:b4:d3:e1:aa:fe:d4: 7a:69:3a:a3:d2:06:60:55:03:ce:3e:30:e2:dd:6c: 1e:d8:cf:2c:19:f8:c3:20:56:a0:70:a1:30:dc:6d: 9f:a3:74:ee:82:22:b8:ea:8d:61:36:9b:f0:f4:40: 6b:6d:d3:31:65:76:e6:1b:2f:94:38:15:6d:c4:a7: 28:fe:ca:39:a8:f0:b8:14:2b:e3:4e:ff:53:a2:0b: 4c:7f:8a:06:b9:5c:36:14:99:77:1f:74:e0:5d:b2: e0:5a:0d:11:e2:f9:96:aa:45:ea:72:40:02:a7:da: d2:f5:9a:da:d3:b8:9d:82:ed:65:49:97:05:3a:9c: 41:9c:40:0c:62:1d:5e:16:5c:63:68:ae:12:3f:95: 70:17:33:1f:68:00:80:1c:8e:88:5a:74:7f:bf:f6: 79:ed:8b:48:3c:7c:42:6f:27:21:8e:5b:94:c5:2e: 26:18:85:19:5e:49:c1:b8:89:2b:a5:9c:22:16:2b: 08:f1:7f:9d:0f:4e:6d:c1:af:7c:06:ac:9d:76:17: f8:31:c8:36:51:ef:c2:e2:a7:b3:a4:ae:29:78:de: c3:52:4a:c5:f5:9e:55:85:b0:45:dc:42:7b:60:a5: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BA:6F:F3:C7:8E:36:23:C5:12:B0:65:9C:A1:84:F8:A4:60:37:1D X509v3 Authority Key Identifier: keyid:4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3d:7d:e0:2d:66:4e:ff:10:b2:1f:d4:f5:36:e7:6c:52:71: 0f:bd:48:1c:f5:3f:40:cb:79:88:0a:43:36:cd:a0:06:42:74: 2b:bf:34:f7:eb:20:95:0e:c1:61:4c:d2:51:e4:d2:87:d8:d8: a7:9e:2b:9f:53:dc:8b:01:6f:c8:a4:02:42:b2:d4:37:95:41: ff:af:22:ab:15:6d:ef:4c:fa:77:65:74:95:42:bd:ec:0d:f0: 3f:00:87:ae:42:09:73:ea:73:7f:6d:d2:59:be:64:82:8c:7e: 0f:8b:22:e2:1d:75:d4:75:db:21:31:48:29:1d:70:ad:bd:c9: f3:03:cc:b2:7c:61:d8:b6:22:6e:60:23:33:d5:c4:56:cc:a4: ac:90:5b:23:de:0c:ba:fa:95:4e:61:6f:b4:41:48:18:d4:36: 6a:86:98:10:7f:ca:79:9e:e0:98:b7:03:ce:57:f0:a9:e6:a6: 9f:07:65:d3:e5:06:45:66:6e:03:e2:11:e6:4c:5f:1a:21:57: e9:4a:1c:5b:e2:ee:b4:c2:a1:e0:5a:d1:74:05:51:70:6d:9c: a8:72:ec:ff:e6:44:1d:9e:43:77:73:b6:c7:ea:98:8a:cd:51: ed:04:bf:a7:08:4a:e4:7e:7d:2b:f6:4b:64:49:9e:6e:1d:1a: 05:2e:76:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULx0yJHcBEUI7XXxO7MylgL4kZ08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0 MDA0OEExRTAeFw0yNjEwMDcxOTI3NDBaFw0yNjEwMDgyMzI0NDBaMDMxMTAvBgNV BAMTKEIyQkE2RkYzQzc4RTM2MjNDNTEyQjA2NTlDQTE4NEY4QTQ2MDM3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKocli+i3BWgEosK5pKnogenQK EIeeMLTT4ar+1HppOqPSBmBVA84+MOLdbB7YzywZ+MMgVqBwoTDcbZ+jdO6CIrjq jWE2m/D0QGtt0zFlduYbL5Q4FW3Epyj+yjmo8LgUK+NO/1OiC0x/iga5XDYUmXcf dOBdsuBaDRHi+ZaqRepyQAKn2tL1mtrTuJ2C7WVJlwU6nEGcQAxiHV4WXGNorhI/ lXAXMx9oAIAcjohadH+/9nnti0g8fEJvJyGOW5TFLiYYhRleScG4iSulnCIWKwjx f50PTm3Br3wGrJ12F/gxyDZR78Lip7Okril43sNSSsX1nlWFsEXcQntgpTyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsrpv88eONiPFErBlnKGE+KRgNx0wHwYDVR0j BBgwFoAUTdJ5rs1Ri5znZK4DcItxGkAEih4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3MTQ2NjUtYzY3MC00NTFlLWJkY2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVD RDUxOEI5Q0U3NjRBRTAzNzA4QjcxMUE0MDA0OEExRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REQyNzlBRUNENTE4QjlDRTc2NEFFMDM3MDhCNzExQTQwMDQ4 QTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3MTQ2NjUtYzY3MC00NTFlLWJk Y2ItOTA3NDIxOWQ1NWNlLzAvNEREMjc5QUVDRDUxOEI5Q0U3NjRBRTAzNzA4Qjcx MUE0MDA0OEExRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG89feAtZk7/ELIf1PU252xScQ+9SBz1P0DL eYgKQzbNoAZCdCu/NPfrIJUOwWFM0lHk0ofY2KeeK59T3IsBb8ikAkKy1DeVQf+v IqsVbe9M+ndldJVCvewN8D8Ah65CCXPqc39t0lm+ZIKMfg+LIuIdddR12yExSCkd cK29yfMDzLJ8Ydi2Im5gIzPVxFbMpKyQWyPeDLr6lU5hb7RBSBjUNmqGmBB/ynme 4Ji3A85X8Knmpp8HZdPlBkVmbgPiEeZMXxohV+lKHFvi7rTCoeBa0XQFUXBtnKhy 7P/mRB2eQ3dztsfqmIrNUe0Ev6cISuR+fSv2S2RJnm4dGgUudlM= -----END CERTIFICATE-----Generated at Thu Oct 8 15:57:17 2026 by rpki-client