$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json) Hash identifier: u2WKse+DTw9CH889oVNwuCVdIKFUujbfWOIVK2tmKd0= Subject key identifier: DF:5F:E1:0B:53:E0:DB:F5:50:0D:CC:C4:EF:6E:18:DF:39:26:87:D6 Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Certificate serial: 302CB7024A5F58711BC158B8B4EC6777C1B99636 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 17:28:09 +0000 Manifest this update: Tue 10 Nov 2026 17:23:09 +0000 Manifest next update: Wed 11 Nov 2026 20:54:09 +0000 Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=) 2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: uEeW/YCSgsRvb2tCcSFknF3hRc1EKciuYEsd9Lzg4Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:b7:02:4a:5f:58:71:1b:c1:58:b8:b4:ec:67:77:c1:b9:96:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58 Validity Not Before: Nov 10 17:23:09 2026 GMT Not After : Nov 11 20:54:09 2026 GMT Subject: CN=DF5FE10B53E0DBF5500DCCC4EF6E18DF392687D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:f5:90:ea:11:76:0a:41:ae:55:1c:18:4f: 42:38:17:df:0e:b8:d3:9e:10:82:c4:1d:12:3b:fe: e5:1f:02:1e:19:dc:32:f7:90:68:b8:b0:6c:35:88: 75:2a:ec:bd:97:bc:14:92:da:8c:c3:40:5f:1b:4d: d2:68:0d:33:e0:b8:e4:60:91:e0:f6:3f:47:d3:46: 10:0f:86:c7:5b:3e:37:bc:d7:d4:b3:cb:c7:79:a3: 3a:54:53:2f:d9:2a:3f:d6:33:7c:67:bd:8e:ae:f7: a6:eb:76:bf:40:b2:9d:ab:7b:86:9d:f1:23:82:34: e7:05:6c:ba:a0:c0:de:7b:f0:5d:4f:67:57:55:29: 01:3a:f0:24:21:8f:d5:b9:db:2b:8b:c1:24:ff:b3: 55:89:08:49:6b:fe:14:46:67:4c:93:cc:f1:64:7a: 8c:f9:5c:16:61:0b:8f:61:3d:c2:e6:3d:91:df:f1: 66:71:d2:ae:69:7f:61:5d:77:68:6f:8c:5d:85:81: 31:8c:b4:78:3e:e8:68:23:82:84:0f:99:33:ec:29: 58:2f:f6:8f:e7:14:9a:13:70:b6:3b:02:23:76:51: 46:22:f3:d3:f1:f9:8f:a0:cd:cb:8c:f0:a1:6c:85: db:93:35:f5:8c:60:dd:22:4d:56:06:81:ea:3a:2f: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:E1:0B:53:E0:DB:F5:50:0D:CC:C4:EF:6E:18:DF:39:26:87:D6 X509v3 Authority Key Identifier: keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:d1:5a:f0:a6:e8:40:f2:7d:51:72:97:2c:e7:fe:79:18: 94:3e:4c:d6:e8:1b:95:54:ab:4c:14:b3:c2:bc:17:85:60:81: 77:09:fe:48:1c:a3:96:f2:b5:44:9d:b1:ab:aa:19:2f:ce:22: 9f:4d:a9:e0:6e:db:62:84:f6:fb:ef:51:86:80:ed:93:aa:ad: e0:5b:fa:2a:88:5f:21:9f:5e:76:1c:ba:0f:90:6e:47:6b:10: d4:a9:4c:ae:ac:4d:00:d1:9c:95:da:ea:8b:0c:af:82:e1:5a: 4e:d3:7a:22:ab:d9:33:ea:2a:5c:e9:a0:d4:48:8a:8f:9b:1e: 44:66:e2:39:a8:e3:46:4f:f5:9f:7c:09:0a:a9:03:d4:3e:ce: 99:db:99:7a:0f:e7:55:4b:26:c5:45:c3:9f:a6:0b:98:26:4f: fa:19:18:11:70:01:c3:4b:7f:57:f9:70:9f:ee:bf:56:e4:29: 6b:cc:e4:86:ed:f5:fa:be:e5:8b:7d:54:d1:87:f1:62:d9:bd: e0:e7:d7:7b:45:39:94:37:41:20:42:a3:1c:71:3f:60:66:cf: 7d:cf:91:58:28:dc:d6:13:33:4f:7f:be:21:1e:18:45:44:9c: 8e:05:8b:cc:de:c2:e5:b5:ef:18:f6:5d:76:26:a7:7b:c1:92: ef:ff:23:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCy3AkpfWHEbwVi4tOxnd8G5ljYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2 M0QxMEY1ODAeFw0yNjExMTAxNzIzMDlaFw0yNjExMTEyMDU0MDlaMDMxMTAvBgNV BAMTKERGNUZFMTBCNTNFMERCRjU1MDBEQ0NDNEVGNkUxOERGMzkyNjg3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5vWQ6hF2CkGuVRwYT0I4F98O uNOeEILEHRI7/uUfAh4Z3DL3kGi4sGw1iHUq7L2XvBSS2ozDQF8bTdJoDTPguORg keD2P0fTRhAPhsdbPje819Szy8d5ozpUUy/ZKj/WM3xnvY6u96brdr9Asp2re4ad 8SOCNOcFbLqgwN578F1PZ1dVKQE68CQhj9W52yuLwST/s1WJCElr/hRGZ0yTzPFk eoz5XBZhC49hPcLmPZHf8WZx0q5pf2Fdd2hvjF2FgTGMtHg+6GgjgoQPmTPsKVgv 9o/nFJoTcLY7AiN2UUYi89Px+Y+gzcuM8KFshduTNfWMYN0iTVYGgeo6L5j5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31/hC1Pg2/VQDczE724Y3zkmh9YwHwYDVR0j BBgwFoAUTAtkfB333OIgEGvaEcHX0WPRD1gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzZjY2YTgtYTBmZi00NGZhLWJkYTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0Mx REY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2M0QxMEY1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzBCNjQ3QzFERjdEQ0UyMjAxMDZCREExMUMxRDdEMTYzRDEw RjU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3 RDE2M0QxMEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABon0VrwpuhA8n1Rcpcs5/55GJQ+TNboG5VU q0wUs8K8F4VggXcJ/kgco5bytUSdsauqGS/OIp9NqeBu22KE9vvvUYaA7ZOqreBb +iqIXyGfXnYcug+QbkdrENSpTK6sTQDRnJXa6osMr4LhWk7TeiKr2TPqKlzpoNRI io+bHkRm4jmo40ZP9Z98CQqpA9Q+zpnbmXoP51VLJsVFw5+mC5gmT/oZGBFwAcNL f1f5cJ/uv1bkKWvM5Ibt9fq+5Yt9VNGH8WLZveDn13tFOZQ3QSBCoxxxP2Bmz33P kVgo3NYTM09/viEeGEVEnI4Fi8zewuW17xj2XXYmp3vBku//I+I= -----END CERTIFICATE-----Generated at Wed Nov 11 00:21:58 2026 by rpki-client