$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft File: 4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft (raw, json) Hash identifier: 1sL3KEAVOsay9o8IeetXwHhRWYDAqxHnbMpbJnzx5F4= Subject key identifier: B6:0E:33:43:58:7F:51:83:B4:AE:1D:14:93:B2:60:DE:A6:5A:01:78 Authority key identifier: 4A:6B:B4:ED:DC:C3:1D:B4:7C:BF:19:92:CA:C2:C3:29:DA:0F:34:8F Certificate issuer: /CN=4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F Certificate serial: 07C82F4EFD09681E44058F88A944623E071886C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft Manifest number: 18 Signing time: Mon 09 Nov 2026 18:33:51 +0000 Manifest this update: Mon 09 Nov 2026 18:28:51 +0000 Manifest next update: Tue 10 Nov 2026 19:40:51 +0000 Files and hashes: 1: 4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.crl (hash: Jdrbjcmj6A7pkFdvX0/j1j2KQXN8inXv5GPGtFQTP/c=) 2: 32372e39382e3139322e302f32332d3234203d3e20313535303539.roa (hash: pkjGPO0GR7OOCtt/YJaxtEb4nai8yoBDCA3gpaGFnn8=) 3: 323030313a6466373a633534303a3a2f34382d3438203d3e20313535303539.roa (hash: LlK3wAbSJPFCPCjzaCzhNcfPeCurxli8DRggL+bYOAo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.crl rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c8:2f:4e:fd:09:68:1e:44:05:8f:88:a9:44:62:3e:07:18:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F Validity Not Before: Nov 9 18:28:51 2026 GMT Not After : Nov 10 19:40:51 2026 GMT Subject: CN=B60E3343587F5183B4AE1D1493B260DEA65A0178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:27:d8:66:8d:5f:55:18:35:ff:cd:46:e6: d5:56:f0:a7:84:00:96:2c:5d:93:47:48:3d:e2:22: e0:17:c2:5c:d1:02:29:8c:7a:ee:bc:ac:cf:c8:1a: 4c:fa:95:3e:58:5d:6a:83:db:ad:97:49:98:a9:99: 72:d2:a9:fe:51:f2:e3:01:a3:5b:a5:0e:96:42:bc: 8c:e0:e1:8c:b8:b7:41:c9:90:27:d1:59:18:cc:61: db:e5:43:c0:76:48:17:a7:22:c1:43:ea:fe:df:86: 2a:c2:ea:dd:d3:d3:9a:9e:5a:ce:da:87:0d:1f:c9: fb:07:c1:14:57:89:3d:11:60:43:42:1a:d6:73:8d: e9:bd:99:e6:68:cf:94:68:b3:bc:12:a5:d8:81:a7: 26:1c:ed:ec:6d:49:fc:e3:da:18:6c:53:75:a5:66: 1a:a9:42:75:e2:7b:dd:d9:28:56:89:4d:f9:ef:f4: 76:1c:fd:4d:2b:f7:12:23:ac:db:4f:66:e5:1f:ea: be:48:78:67:85:fd:8d:2a:16:87:23:20:d4:3b:e2: a7:d4:7e:65:49:be:2d:93:c2:50:2e:3d:e0:6a:e9: d6:30:12:fe:53:4b:77:34:27:c5:b5:af:cb:ad:6f: a7:0f:f3:8e:5a:b1:cb:59:f8:cd:75:4b:02:38:2f: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0E:33:43:58:7F:51:83:B4:AE:1D:14:93:B2:60:DE:A6:5A:01:78 X509v3 Authority Key Identifier: keyid:4A:6B:B4:ED:DC:C3:1D:B4:7C:BF:19:92:CA:C2:C3:29:DA:0F:34:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:49:d6:6b:6a:7c:3f:05:2c:bb:1d:58:c8:6e:da:32:b9:fb: b0:b7:ee:d1:7c:3b:5d:a9:ff:b9:8b:96:09:2e:5f:16:62:02: 80:56:fe:fc:cf:b1:1f:4c:0b:6f:59:7f:89:26:80:cd:c6:eb: 10:85:c7:6c:33:de:95:01:e5:48:2e:ee:43:48:ac:71:c2:15: 17:02:ee:bc:db:af:34:5d:6a:3d:c1:d3:4a:61:e8:cf:db:67: 12:5d:ef:a5:3a:d6:57:ae:3a:a6:a5:48:86:35:7e:1d:12:b1: 60:e2:42:bf:de:94:a9:2e:1a:0c:eb:96:7c:9a:de:0a:82:42: 66:7b:88:fe:f9:c9:b2:8a:d3:2e:4f:a7:6e:26:8a:7c:83:74: 11:1b:3e:da:b9:b0:96:9c:c3:47:bd:e8:96:2a:c2:ea:20:32: 74:09:26:98:33:c3:1d:26:6f:d5:72:8b:ce:c8:f6:14:c6:a2: e9:49:2c:14:aa:af:a2:76:44:2d:d7:86:07:de:62:f3:83:4f: 94:49:02:60:67:72:61:d8:e9:d2:ba:9d:ee:5c:14:91:71:9f: 67:b4:a8:f8:66:e4:20:ad:05:a2:69:ce:cd:a4:43:9d:3f:24: 3e:64:33:96:bf:bd:fe:30:f5:bf:0c:65:68:37:65:b6:0c:07: 71:14:9b:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8gvTv0JaB5EBY+IqURiPgcYhsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2QkI0RUREQ0MzMURCNDdDQkYxOTkyQ0FDMkMzMjlE QTBGMzQ4RjAeFw0yNjExMDkxODI4NTFaFw0yNjExMTAxOTQwNTFaMDMxMTAvBgNV BAMTKEI2MEUzMzQzNTg3RjUxODNCNEFFMUQxNDkzQjI2MERFQTY1QTAxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26SfYZo1fVRg1/81G5tVW8KeE AJYsXZNHSD3iIuAXwlzRAimMeu68rM/IGkz6lT5YXWqD262XSZipmXLSqf5R8uMB o1ulDpZCvIzg4Yy4t0HJkCfRWRjMYdvlQ8B2SBenIsFD6v7fhirC6t3T05qeWs7a hw0fyfsHwRRXiT0RYENCGtZzjem9meZoz5Ros7wSpdiBpyYc7extSfzj2hhsU3Wl ZhqpQnXie93ZKFaJTfnv9HYc/U0r9xIjrNtPZuUf6r5IeGeF/Y0qFocjINQ74qfU fmVJvi2TwlAuPeBq6dYwEv5TS3c0J8W1r8utb6cP845asctZ+M11SwI4L9zNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtg4zQ1h/UYO0rh0Uk7Jg3qZaAXgwHwYDVR0j BBgwFoAUSmu07dzDHbR8vxmSysLDKdoPNI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOGRjYWYtMjZlZi00YzkxLTgyZjAtNWRkZWZjNTg5ODBjLzAvNEE2QkI0RURE Q0MzMURCNDdDQkYxOTkyQ0FDMkMzMjlEQTBGMzQ4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTZCQjRFRERDQzMxREI0N0NCRjE5OTJDQUMyQzMyOURBMEYz NDhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOGRjYWYtMjZlZi00YzkxLTgy ZjAtNWRkZWZjNTg5ODBjLzAvNEE2QkI0RUREQ0MzMURCNDdDQkYxOTkyQ0FDMkMz MjlEQTBGMzQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJJ1mtqfD8FLLsdWMhu2jK5+7C37tF8O12p /7mLlgkuXxZiAoBW/vzPsR9MC29Zf4kmgM3G6xCFx2wz3pUB5Ugu7kNIrHHCFRcC 7rzbrzRdaj3B00ph6M/bZxJd76U61leuOqalSIY1fh0SsWDiQr/elKkuGgzrlnya 3gqCQmZ7iP75ybKK0y5Pp24minyDdBEbPtq5sJacw0e96JYqwuogMnQJJpgzwx0m b9Vyi87I9hTGoulJLBSqr6J2RC3XhgfeYvODT5RJAmBncmHY6dK6ne5cFJFxn2e0 qPhm5CCtBaJpzs2kQ50/JD5kM5a/vf4w9b8MZWg3ZbYMB3EUm4M= -----END CERTIFICATE-----Generated at Tue Nov 10 10:18:14 2026 by rpki-client