$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft File: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json) Hash identifier: 9nH3tlDfUPemHzhH2GaTmmMi9UTd3PWj5H4jZfHIE20= Subject key identifier: 49:FC:62:D3:ED:A0:B5:BC:6D:55:4C:AE:BE:95:34:D5:DF:CD:63:18 Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A Certificate issuer: /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Certificate serial: 5D4FFA83BA5F54D0FF930177BC7989BEA1D39CB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:56:30 +0000 Manifest this update: Sun 15 Nov 2026 09:51:30 +0000 Manifest next update: Mon 16 Nov 2026 10:35:30 +0000 Files and hashes: 1: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: oMAPvFcrT+BZepsAC0NXtyOmk6fIAo2czGPtkrHAcB4=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4f:fa:83:ba:5f:54:d0:ff:93:01:77:bc:79:89:be:a1:d3:9c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A Validity Not Before: Nov 15 09:51:30 2026 GMT Not After : Nov 16 10:35:30 2026 GMT Subject: CN=49FC62D3EDA0B5BC6D554CAEBE9534D5DFCD6318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:0d:fc:6e:fa:1c:b0:59:b7:88:a3:37:3b: 76:cc:e3:ca:6a:bd:db:51:28:ea:b0:79:e3:38:95: 9c:c4:4c:ac:fe:d4:24:cc:be:f4:0e:ba:48:cc:5c: e1:26:b1:18:a6:f1:ad:2a:7e:25:34:73:b3:42:13: 29:91:bb:81:24:78:f7:d9:9f:28:71:1a:20:93:46: 6f:b5:3b:73:35:0a:25:a8:5a:40:dd:49:ee:cc:bd: cc:c1:c0:c6:f6:cd:57:57:81:23:92:1e:56:34:d6: 57:81:ca:4c:e7:de:e8:08:30:3e:b3:b3:ba:83:fd: 54:de:77:38:e1:9d:05:4d:bf:06:74:a8:0c:78:fb: 72:1b:78:b9:e5:36:79:32:3c:c6:9a:32:71:62:d2: 9f:8c:b3:c2:fe:83:77:d4:b6:7e:c0:4e:87:a0:ba: af:f2:66:52:34:14:3d:1b:36:b5:5c:4a:82:d8:02: dd:69:1e:a6:24:7a:8c:4b:ba:15:48:cb:e8:e2:9b: c0:ab:55:d7:68:d0:dc:18:eb:f0:1f:7a:79:4c:f6: ae:de:7e:ab:b4:e8:b9:f0:97:cc:d7:a5:1c:e6:0d: ab:89:5b:c9:62:9f:2a:e0:a0:a5:ef:19:bd:79:f8: 50:53:70:05:6d:dc:b0:ea:f7:87:84:ea:9f:5a:52: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:62:D3:ED:A0:B5:BC:6D:55:4C:AE:BE:95:34:D5:DF:CD:63:18 X509v3 Authority Key Identifier: keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4b:46:38:46:aa:68:54:5b:15:12:93:42:72:ca:c2:2c:41: 32:d8:dd:0e:bc:0b:a2:a6:46:70:a7:d4:a6:51:6c:85:bc:ba: 7a:6d:dd:be:73:ba:aa:00:44:85:da:b1:d4:65:a2:f6:1e:71: a4:bf:26:ff:25:39:a7:f4:ab:65:a5:bf:b7:ad:4c:79:17:c8: bf:6c:4d:0d:85:c0:8d:d5:24:94:92:e7:c1:2d:de:d5:07:41: 40:c2:51:2c:8d:a5:df:85:8f:34:d6:89:f2:26:e8:84:ed:ac: cb:3f:bd:56:33:c2:a0:53:49:c6:b0:d7:ba:cb:05:f8:58:8a: ca:81:4a:eb:fd:b4:23:ef:c8:54:04:fa:3a:08:1e:f2:c5:2a: 73:34:22:96:a9:04:7f:3d:6e:8e:12:55:18:7a:9d:24:a2:1b: aa:a5:51:5e:98:e5:6f:d4:22:b5:d7:be:e1:33:2d:24:fb:7a: 4a:19:7e:2b:3d:02:ac:c7:7f:5a:71:11:6e:96:31:14:2e:b8: fd:7e:ed:99:65:08:1c:9b:bd:42:54:fa:e4:7f:bc:6e:b7:01: c6:0d:c2:86:50:f3:f0:42:e7:14:76:6e:3c:ed:9c:33:e1:b8: ca:af:18:ef:b3:16:6f:be:72:c5:15:d6:b2:f9:f8:db:d3:33: 7b:c4:1e:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXU/6g7pfVND/kwF3vHmJvqHTnLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJDOUJE QURDRTMwQTAeFw0yNjExMTUwOTUxMzBaFw0yNjExMTYxMDM1MzBaMDMxMTAvBgNV BAMTKDQ5RkM2MkQzRURBMEI1QkM2RDU1NENBRUJFOTUzNEQ1REZDRDYzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvw38bvocsFm3iKM3O3bM48pq vdtRKOqweeM4lZzETKz+1CTMvvQOukjMXOEmsRim8a0qfiU0c7NCEymRu4EkePfZ nyhxGiCTRm+1O3M1CiWoWkDdSe7MvczBwMb2zVdXgSOSHlY01leBykzn3ugIMD6z s7qD/VTedzjhnQVNvwZ0qAx4+3IbeLnlNnkyPMaaMnFi0p+Ms8L+g3fUtn7AToeg uq/yZlI0FD0bNrVcSoLYAt1pHqYkeoxLuhVIy+jim8CrVddo0NwY6/AfenlM9q7e fqu06Lnwl8zXpRzmDauJW8linyrgoKXvGb15+FBTcAVt3LDq94eE6p9aUrctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSfxi0+2gtbxtVUyuvpU01d/NYxgwHwYDVR0j BBgwFoAUTc61YLxCjb7E7C7y73Qsm9rc4wowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGViYTg2N2EtOGY4NC00NjYzLWIzMjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBC QzQyOERCRUM0RUMyRUYyRUY3NDJDOUJEQURDRTMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RENFQjU2MEJDNDI4REJFQzRFQzJFRjJFRjc0MkM5QkRBRENF MzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvNERDRUI1NjBCQzQyOERCRUM0RUMyRUYyRUY3NDJD OUJEQURDRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlLRjhGqmhUWxUSk0JyysIsQTLY3Q68C6Km RnCn1KZRbIW8unpt3b5zuqoARIXasdRlovYecaS/Jv8lOaf0q2Wlv7etTHkXyL9s TQ2FwI3VJJSS58Et3tUHQUDCUSyNpd+FjzTWifIm6ITtrMs/vVYzwqBTScaw17rL BfhYisqBSuv9tCPvyFQE+joIHvLFKnM0IpapBH89bo4SVRh6nSSiG6qlUV6Y5W/U IrXXvuEzLST7ekoZfis9AqzHf1pxEW6WMRQuuP1+7ZllCBybvUJU+uR/vG63AcYN woZQ8/BC5xR2bjztnDPhuMqvGO+zFm++csUV1rL5+NvTM3vEHhI= -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:41 2026 by rpki-client