$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json) Hash identifier: zf2ZhhfAN2cKgWN7uZurdcL6KLw67EkIAYFg8XqopZ8= Subject key identifier: 23:73:7C:1E:6A:07:89:BE:20:9D:46:6A:A2:55:DA:6F:02:F2:B8:EF Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Certificate serial: 25F2118922F778603050788AC4992B446354B73E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 06:03:31 +0000 Manifest this update: Tue 10 Nov 2026 05:58:31 +0000 Manifest next update: Wed 11 Nov 2026 09:32:31 +0000 Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=) 2: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=) 3: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: 0jkNQaMRSYz1cr4gSkDIuEvXPrjKmzki0vAGeX55sUQ=) 4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f2:11:89:22:f7:78:60:30:50:78:8a:c4:99:2b:44:63:54:b7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3 Validity Not Before: Nov 10 05:58:31 2026 GMT Not After : Nov 11 09:32:31 2026 GMT Subject: CN=23737C1E6A0789BE209D466AA255DA6F02F2B8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:33:6e:d8:6c:b3:9c:ce:54:4d:64:e3:bf: 09:f0:2e:a1:57:49:86:1f:65:d4:b3:95:96:b2:70: 95:f6:b9:14:4c:00:33:4a:56:b6:e8:50:b5:ea:c9: 0f:e0:60:91:ae:8d:f6:f8:90:56:11:19:b6:40:bb: dd:45:df:33:76:52:27:e6:c1:db:f4:9a:25:62:b5: 78:2d:b2:65:2a:f0:4c:b6:e9:95:3d:34:bf:f5:2b: 1b:40:b8:b8:7c:01:04:09:97:f6:8c:60:a7:dc:e4: f7:03:56:ba:c5:5c:7d:4c:33:64:74:ed:69:4f:83: 2f:8e:53:60:1a:be:cd:8d:19:51:96:a9:56:05:ed: e0:62:05:c8:ff:eb:ed:5b:39:3d:89:b6:01:45:c3: 08:40:f1:a9:a8:2c:b3:ea:4d:85:62:c3:e5:ec:e3: e7:e1:37:27:76:ba:9c:1e:5a:f0:cd:1d:29:95:02: 06:25:0d:4c:47:95:c5:3c:0f:d3:2d:05:ac:fb:97: 18:56:98:eb:e5:97:3f:0e:a5:db:f8:be:2e:77:38: e5:cd:da:92:e2:57:b0:e3:8c:92:26:7e:fe:9f:29: 19:0e:a5:02:fe:20:8c:3a:fc:e2:b8:1b:75:1b:d4: 1b:8a:45:98:b2:f7:ec:92:f1:ca:fd:d5:c6:93:92: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:73:7C:1E:6A:07:89:BE:20:9D:46:6A:A2:55:DA:6F:02:F2:B8:EF X509v3 Authority Key Identifier: keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:af:63:e8:05:62:21:c4:8c:fe:2d:97:32:6e:5d:24:cc:bd: c4:f8:11:87:fe:9f:8a:68:fa:bd:81:d1:bf:3d:52:e6:eb:90: 4b:23:29:60:b1:30:41:ca:b2:39:7c:6d:2d:a4:52:bc:30:a3: 7b:30:f2:f9:89:aa:68:e6:6f:b7:76:d2:61:25:9f:70:72:9e: a3:80:e9:56:16:24:cf:dd:6a:66:56:18:8f:c2:23:df:99:2a: e8:a3:34:d6:1b:ca:60:4c:7b:35:8f:ed:3c:f4:6d:bb:d1:f6: 2f:af:ee:d6:f3:72:1b:13:59:a7:96:90:83:7b:bf:c7:32:1c: 9b:26:24:1f:2a:c3:d6:b8:ef:a1:40:17:62:78:b2:b2:33:ce: 63:65:58:fe:d0:f2:01:85:6e:93:5c:49:43:f1:af:4e:a2:6a: ba:e2:57:be:4d:90:1d:8f:24:94:fa:be:cc:ff:03:a7:9b:61: 4e:73:a9:f9:1a:ae:7f:b9:dd:d8:07:6a:c4:80:bf:83:79:6c: 10:98:5f:ab:aa:c5:56:3b:76:ca:ba:78:a3:45:c4:cd:d1:12: ac:ad:16:22:08:4c:75:8f:3a:2d:a0:ff:80:bf:bb:e7:c4:44: 9b:30:19:a8:e6:27:5a:c3:eb:52:69:5c:4f:e6:af:b6:48:5b: ae:fa:91:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfIRiSL3eGAwUHiKxJkrRGNUtz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2 REE4OTBCMzAeFw0yNjExMTAwNTU4MzFaFw0yNjExMTEwOTMyMzFaMDMxMTAvBgNV BAMTKDIzNzM3QzFFNkEwNzg5QkUyMDlENDY2QUEyNTVEQTZGMDJGMkI4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFDjNu2GyznM5UTWTjvwnwLqFX SYYfZdSzlZaycJX2uRRMADNKVrboULXqyQ/gYJGujfb4kFYRGbZAu91F3zN2Uifm wdv0miVitXgtsmUq8Ey26ZU9NL/1KxtAuLh8AQQJl/aMYKfc5PcDVrrFXH1MM2R0 7WlPgy+OU2Aavs2NGVGWqVYF7eBiBcj/6+1bOT2JtgFFwwhA8amoLLPqTYViw+Xs 4+fhNyd2upweWvDNHSmVAgYlDUxHlcU8D9MtBaz7lxhWmOvllz8Opdv4vi53OOXN 2pLiV7DjjJImfv6fKRkOpQL+IIw6/OK4G3Ub1BuKRZiy9+yS8cr91caTksHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3N8HmoHib4gnUZqolXabwLyuO8wHwYDVR0j BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3 NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5 MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0 MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACavY+gFYiHEjP4tlzJuXSTMvcT4EYf+n4po +r2B0b89UubrkEsjKWCxMEHKsjl8bS2kUrwwo3sw8vmJqmjmb7d20mEln3BynqOA 6VYWJM/damZWGI/CI9+ZKuijNNYbymBMezWP7Tz0bbvR9i+v7tbzchsTWaeWkIN7 v8cyHJsmJB8qw9a476FAF2J4srIzzmNlWP7Q8gGFbpNcSUPxr06iarriV75NkB2P JJT6vsz/A6ebYU5zqfkarn+53dgHasSAv4N5bBCYX6uqxVY7dsq6eKNFxM3REqyt FiIITHWPOi2g/4C/u+fERJswGajmJ1rD61JpXE/mr7ZIW676kfw= -----END CERTIFICATE-----Generated at Tue Nov 10 18:54:58 2026 by rpki-client