$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: olvJxcXf/36kJt0tTTMJL2j0JTMlAuSjVfiKSzrHIbk= Subject key identifier: 91:E9:59:A7:85:22:25:96:DF:D8:24:04:48:53:33:EE:04:6E:E2:5B Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 1F4EAEBF45DDF825EEACDAEA9A85A3E09E3B857D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: FF Signing time: Mon 09 Nov 2026 18:49:11 +0000 Manifest this update: Mon 09 Nov 2026 18:44:11 +0000 Manifest next update: Tue 10 Nov 2026 22:31:11 +0000 Files and hashes: 1: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: k7m9qx5pHmhlpBnuj1I8/Jxwfepyy9neFu5qdWTUmqA=) 2: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 22:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4e:ae:bf:45:dd:f8:25:ee:ac:da:ea:9a:85:a3:e0:9e:3b:85:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Nov 9 18:44:11 2026 GMT Not After : Nov 10 22:31:11 2026 GMT Subject: CN=91E959A785222596DFD82404485333EE046EE25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:94:0a:d2:e8:f2:76:5c:29:5d:5b:ed:d7: 5e:57:60:62:42:d2:6c:18:eb:56:9c:83:29:03:10: d3:1f:c9:d3:dd:a0:d0:bf:de:60:54:39:31:48:10: 2f:f0:d2:52:14:75:cd:ba:82:65:da:53:95:be:ac: 36:0f:4d:d8:f8:73:5d:49:e6:95:25:86:b7:0c:7d: 28:8d:e0:8a:e4:92:6b:76:d3:ef:48:5f:00:28:53: 2a:16:81:79:6c:5d:f9:05:3f:8a:f8:b8:e7:b0:fd: 74:1e:dc:96:e6:68:b1:2b:90:9a:65:08:f4:84:ff: b4:2b:97:f6:40:02:62:d0:68:21:da:e1:06:12:3e: 7e:f5:9a:d2:76:d7:3e:53:47:da:d8:48:71:6f:8c: 42:1f:d0:e8:00:14:08:56:7e:6c:27:01:05:77:fe: 34:3b:ee:17:08:67:ce:31:1b:74:1c:0d:48:f4:86: af:56:9e:70:b8:b7:31:9c:30:f0:b0:a6:7b:b1:1c: 7a:ee:ff:16:a4:40:3e:92:95:42:87:f1:18:b1:e9: cf:f6:1e:63:cb:da:42:a4:8a:19:29:84:c4:9b:86: c0:1e:a9:b3:ea:f2:8a:e8:ec:35:c0:a8:8f:f5:54: ce:ed:69:40:b3:fc:23:f1:3e:7c:d7:aa:50:8a:e5: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:59:A7:85:22:25:96:DF:D8:24:04:48:53:33:EE:04:6E:E2:5B X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:29:70:7c:e3:9b:a8:5a:81:48:73:9b:b2:e3:c6:2f:ee:03: c4:25:6e:d1:6f:2f:8c:10:8a:ff:98:54:5e:fa:04:16:d1:77: 3a:06:60:18:e1:e4:90:98:55:5a:0e:bd:ed:5c:89:cb:77:ba: 44:1b:dd:39:f2:5f:dd:74:a1:e1:c0:26:bb:88:3f:52:8e:4d: b6:e4:a5:cc:1f:2a:19:da:6b:da:bd:c8:f0:fa:f0:3a:5c:28: 6e:9e:8d:fd:9f:0e:0f:68:51:42:79:7c:30:b3:74:e9:82:bf: 43:af:0c:9d:16:84:14:72:68:a8:4a:f7:8f:c9:41:79:f4:34: 67:da:e8:62:84:6b:88:1a:16:b5:95:83:d3:8c:6a:7a:94:bf: 3e:50:23:1c:5f:a9:84:b4:26:06:a8:7a:2c:5e:8d:28:a6:c5: 74:49:2a:95:ed:04:c4:09:03:8e:fe:b5:4d:e2:b4:f9:79:b2: 30:fe:6d:ac:5a:b2:12:76:8a:4c:aa:8a:3e:f2:3d:bf:a3:92: 01:d4:b5:16:73:7f:8e:f4:7a:59:dd:5c:21:e8:a8:5a:e0:7f: 46:aa:88:1b:ff:f4:73:74:1c:f7:b8:b4:c3:2f:3f:14:c4:be: 23:55:0f:b2:07:0e:d4:a1:32:8d:cc:68:d5:a3:91:fb:a1:fa: 14:69:2d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH06uv0Xd+CXurNrqmoWj4J47hX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjExMDkxODQ0MTFaFw0yNjExMTAyMjMxMTFaMDMxMTAvBgNV BAMTKDkxRTk1OUE3ODUyMjI1OTZERkQ4MjQwNDQ4NTMzM0VFMDQ2RUUyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIJQK0ujydlwpXVvt115XYGJC 0mwY61acgykDENMfydPdoNC/3mBUOTFIEC/w0lIUdc26gmXaU5W+rDYPTdj4c11J 5pUlhrcMfSiN4Irkkmt20+9IXwAoUyoWgXlsXfkFP4r4uOew/XQe3JbmaLErkJpl CPSE/7Qrl/ZAAmLQaCHa4QYSPn71mtJ21z5TR9rYSHFvjEIf0OgAFAhWfmwnAQV3 /jQ77hcIZ84xG3QcDUj0hq9WnnC4tzGcMPCwpnuxHHru/xakQD6SlUKH8Rix6c/2 HmPL2kKkihkphMSbhsAeqbPq8oro7DXAqI/1VM7taUCz/CPxPnzXqlCK5WMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkelZp4UiJZbf2CQESFMz7gRu4lswHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEspcHzjm6hagUhzm7Ljxi/uA8QlbtFvL4wQ iv+YVF76BBbRdzoGYBjh5JCYVVoOve1cict3ukQb3TnyX910oeHAJruIP1KOTbbk pcwfKhnaa9q9yPD68DpcKG6ejf2fDg9oUUJ5fDCzdOmCv0OvDJ0WhBRyaKhK94/J QXn0NGfa6GKEa4gaFrWVg9OManqUvz5QIxxfqYS0JgaoeixejSimxXRJKpXtBMQJ A47+tU3itPl5sjD+baxashJ2ikyqij7yPb+jkgHUtRZzf470elndXCHoqFrgf0aq iBv/9HN0HPe4tMMvPxTEviNVD7IHDtShMo3MaNWjkfuh+hRpLUk= -----END CERTIFICATE-----Generated at Tue Nov 10 16:25:51 2026 by rpki-client