$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json) Hash identifier: Fp/27Q3MQRpjT2gnKXHNiWuenKX6bKrMxPjk5sl1Fkk= Subject key identifier: F3:73:C8:20:B7:3A:05:C9:75:48:86:8E:85:43:DE:B9:A7:6A:8C:31 Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 6B89FFCD82B72A23CC30E0B4969136DA9E0C5A12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft Manifest number: 0112 Signing time: Sun 15 Nov 2026 09:10:41 +0000 Manifest this update: Sun 15 Nov 2026 09:05:41 +0000 Manifest next update: Mon 16 Nov 2026 12:51:41 +0000 Files and hashes: 1: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: KsMeh1WA5gXsNY3TF1tqlMKvttBiIrNqfZTnSs8vSRA=) 2: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=) 3: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=) 4: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=) 5: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=) 6: 3230322e35312e35362e302f32322d3232203d3e20313431383938.roa (hash: j/I/kKhkDUX9RuARCCcFlNxkkx+PA3hT+ZcJu48tmMM=) 7: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=) 8: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=) 9: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:89:ff:cd:82:b7:2a:23:cc:30:e0:b4:96:91:36:da:9e:0c:5a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: Nov 15 09:05:41 2026 GMT Not After : Nov 16 12:51:41 2026 GMT Subject: CN=F373C820B73A05C97548868E8543DEB9A76A8C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:cb:91:8c:0e:09:89:e7:1b:f1:8f:43:95: bc:e7:5d:fa:4a:27:53:47:51:9e:74:3a:26:9a:f8: f6:15:07:6e:5a:c6:23:98:b2:cf:64:9f:76:72:78: 20:ad:97:80:af:a4:7e:1f:66:2e:da:fc:05:73:78: 86:10:f9:06:37:57:79:c4:2d:57:d0:2f:f9:7d:0b: 69:5a:a3:88:f8:fe:c4:9a:7c:85:03:f6:bb:3d:bb: f6:11:25:f0:ff:1d:22:30:4a:94:05:2a:79:bf:f3: 40:9f:f9:a3:1f:53:02:da:8f:65:95:b1:9b:dd:4c: bf:df:c6:66:51:1a:e0:1a:04:af:ec:13:f6:68:a9: c8:19:48:ad:54:96:38:a0:34:6c:6e:32:d2:de:b9: 1a:d2:de:07:1f:43:e6:e9:f3:e2:6a:c3:d8:94:94: f1:ae:4f:31:f0:6b:62:29:4c:2d:00:0e:13:1d:e1: 4d:bf:2a:b0:a0:81:df:c6:43:dd:57:9f:f9:cb:9a: 36:d0:ac:ea:75:fb:75:70:e5:bc:1d:6c:e1:7e:04: e8:28:3c:b2:64:e7:27:be:d3:73:54:29:71:59:be: bb:ad:4a:22:29:17:57:bd:06:90:a9:cd:a8:f2:69: 29:66:dc:65:a4:27:3a:74:6e:a8:c1:3a:08:2f:79: b8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:73:C8:20:B7:3A:05:C9:75:48:86:8E:85:43:DE:B9:A7:6A:8C:31 X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e0:1b:39:aa:8d:25:f3:0c:ac:d0:2d:ec:a0:e5:a0:0c:b5: ad:21:fd:47:5c:b3:61:56:ad:6b:5f:15:a4:28:75:0b:18:18: 56:0d:0f:ea:73:ba:be:ba:57:3f:8a:74:ad:68:e2:78:83:7e: 39:28:00:38:02:63:37:10:60:4b:39:31:fc:75:ed:3d:d5:68: d1:2f:cc:39:3c:a1:dd:24:d8:ef:a7:fa:03:22:21:84:df:71: dc:30:b6:57:9c:e8:fd:31:47:1d:f4:7e:b5:97:b5:70:ae:f7: b1:58:0f:eb:ad:e7:5f:71:15:04:5c:6a:3d:a8:f0:af:53:c7: 04:81:6b:7d:14:0b:b2:2d:5d:4b:b2:15:6a:61:b9:45:7d:c1: c3:ac:02:90:8e:ca:01:f7:65:c2:3a:71:79:36:b2:3e:fb:5f: 34:ad:42:72:f1:95:95:80:8d:63:2b:43:f4:5f:7d:b0:27:87: e7:eb:ed:0f:52:f9:41:9b:ee:21:c3:f2:13:c7:39:cd:01:39: e4:ab:32:9f:24:e1:a6:d8:b8:90:56:59:9e:fe:0a:ac:d1:28: d5:d4:1f:9c:cc:c9:db:d4:d8:31:08:3e:7a:3c:97:b4:26:19: 3a:b4:af:54:1c:33:89:62:3c:83:ac:81:90:92:cf:61:a5:da: a8:47:32:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4n/zYK3KiPMMOC0lpE22p4MWhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjExMTUwOTA1NDFaFw0yNjExMTYxMjUxNDFaMDMxMTAvBgNV BAMTKEYzNzNDODIwQjczQTA1Qzk3NTQ4ODY4RTg1NDNERUI5QTc2QThDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEMuRjA4Jiecb8Y9DlbznXfpK J1NHUZ50Oiaa+PYVB25axiOYss9kn3ZyeCCtl4CvpH4fZi7a/AVzeIYQ+QY3V3nE LVfQL/l9C2lao4j4/sSafIUD9rs9u/YRJfD/HSIwSpQFKnm/80Cf+aMfUwLaj2WV sZvdTL/fxmZRGuAaBK/sE/ZoqcgZSK1UljigNGxuMtLeuRrS3gcfQ+bp8+Jqw9iU lPGuTzHwa2IpTC0ADhMd4U2/KrCggd/GQ91Xn/nLmjbQrOp1+3Vw5bwdbOF+BOgo PLJk5ye+03NUKXFZvrutSiIpF1e9BpCpzajyaSlm3GWkJzp0bqjBOggvebhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU83PIILc6Bcl1SIaOhUPeuadqjDEwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1 RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7gGzmqjSXzDKzQLeyg5aAMta0h/Udcs2FW rWtfFaQodQsYGFYND+pzur66Vz+KdK1o4niDfjkoADgCYzcQYEs5Mfx17T3VaNEv zDk8od0k2O+n+gMiIYTfcdwwtlec6P0xRx30frWXtXCu97FYD+ut519xFQRcaj2o 8K9TxwSBa30UC7ItXUuyFWphuUV9wcOsApCOygH3ZcI6cXk2sj77XzStQnLxlZWA jWMrQ/RffbAnh+fr7Q9S+UGb7iHD8hPHOc0BOeSrMp8k4abYuJBWWZ7+CqzRKNXU H5zMydvU2DEIPno8l7QmGTq0r1QcM4liPIOsgZCSz2Gl2qhHMqU= -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:46 2026 by rpki-client