$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft File: 4E0311031DBA1471A97F3183416162430EA78405.mft (raw, json) Hash identifier: h3R5CG1V4oTlBC7Fl2yRKbvvLkStz0oYUxjgLUdIQu0= Subject key identifier: 52:D3:F7:99:19:24:D4:A0:C4:A1:7C:8A:E8:D3:6E:6A:1C:8F:CA:FB Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405 Certificate serial: 53C6069076344C769E7565FC5F69430BD16C37D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft Manifest number: D0 Signing time: Sun 04 Oct 2026 02:28:14 +0000 Manifest this update: Sun 04 Oct 2026 02:23:14 +0000 Manifest next update: Mon 05 Oct 2026 03:23:14 +0000 Files and hashes: 1: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=) 2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: EeoLX1eQr3kbHp2go87fzfWuIm2QGRQurIS8zg4rg8k=) 3: 4E0311031DBA1471A97F3183416162430EA78405.crl (hash: vrVevL8PajuntPE/2X554FjNrT5qkd+7+Du3eHyqVUA=) 4: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=) 5: 3130332e3138382e3137322e302f32332d3233203d3e20313439373336.roa (hash: i7/UT3YcH1KnN8ZKGHTJm6kNrXY+Ng3CBCiwy2+npQ8=) 6: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: kBF7Opi92U9hs5gCPj1VpLoXTbkOV0WaW1UNm3qxyr8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:06:90:76:34:4c:76:9e:75:65:fc:5f:69:43:0b:d1:6c:37:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405 Validity Not Before: Oct 4 02:23:14 2026 GMT Not After : Oct 5 03:23:14 2026 GMT Subject: CN=52D3F7991924D4A0C4A17C8AE8D36E6A1C8FCAFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:5e:73:a9:b8:f2:bd:fe:55:38:11:fe:7b: ad:82:1a:f3:47:59:a5:01:d7:d4:d6:43:6a:61:a3: 5d:95:53:79:3d:ed:dd:35:b7:bf:10:9b:d8:4f:53: 31:c2:f8:0a:18:e9:79:68:3b:fc:d9:ab:52:15:88: 1b:a9:4f:dd:5c:a3:ec:a9:f2:61:a5:38:71:e1:e8: 1c:36:cd:08:4c:27:7b:c3:12:48:44:51:fa:63:78: 6f:0e:ea:27:cd:cd:23:c1:2f:78:e8:e3:fa:80:8c: 9b:7f:59:e3:5d:2f:7b:f7:6f:d9:2f:c6:a3:1a:46: 94:f0:a2:b7:88:b9:83:e8:cb:5e:a2:ae:c2:75:59: f9:0a:41:97:d0:8d:86:48:c2:cd:57:36:74:2a:95: 24:eb:c4:c3:d4:2b:13:23:be:59:da:f6:6f:c2:a3: ae:0b:c6:1b:f0:c8:19:96:ac:53:7f:f1:e6:bd:a8: 27:ee:ff:2b:cb:6f:25:9f:d8:9d:4c:58:52:94:b1: 52:c8:0e:d6:52:bc:1c:d7:e4:10:b5:1a:b4:36:51: af:78:c6:c6:0a:23:ab:b5:4d:1c:3e:91:97:f4:43: 95:c3:56:b8:7d:fd:46:ea:45:ab:ea:87:5b:71:28: e9:33:2b:e6:28:04:99:f1:b6:96:b2:ab:dd:91:fd: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D3:F7:99:19:24:D4:A0:C4:A1:7C:8A:E8:D3:6E:6A:1C:8F:CA:FB X509v3 Authority Key Identifier: keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:05:e7:b8:12:30:28:5c:c3:44:4b:62:6f:d9:c6:a0:64:d0: 3b:1a:65:43:19:c2:40:8b:09:72:5b:1d:98:8b:12:df:58:bc: 63:96:54:df:14:de:0f:34:67:a0:e7:83:8b:f8:c9:a8:8d:4d: b3:24:17:cd:43:1f:e1:34:79:a5:3f:06:34:9b:e1:72:0e:c1: 67:fe:bf:09:d5:3f:76:02:28:86:09:7c:dd:cd:c7:ec:31:ae: 35:74:84:43:a0:f5:28:c7:44:b2:df:e8:13:27:cc:77:f5:8d: 25:a5:76:d1:4a:7f:8a:e5:1b:03:27:93:57:5e:ab:12:2c:f9: ac:86:ba:2d:d1:2d:76:66:8c:39:88:36:6c:c7:19:b9:c5:da: 17:c4:b5:4c:eb:52:b3:b8:f6:00:31:12:54:cf:86:4b:b0:a6: 69:28:7c:b2:f4:8e:89:65:ef:97:e7:46:04:5c:3d:b1:c5:0d: b7:29:d1:a1:70:b9:ed:c8:4f:b3:b4:f4:c0:c3:e2:f6:33:7a: 56:2d:93:e5:e5:3d:42:8b:24:fb:71:76:39:bd:37:e8:5c:91: f0:28:c7:54:65:11:82:1c:92:27:42:a7:70:a9:c3:0c:a3:1d: 68:5a:c0:02:09:0e:cb:fa:b2:90:b4:c9:be:98:75:2b:ed:b7: 4f:12:28:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8YGkHY0THaedWX8X2lDC9FsN9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMw RUE3ODQwNTAeFw0yNjEwMDQwMjIzMTRaFw0yNjEwMDUwMzIzMTRaMDMxMTAvBgNV BAMTKDUyRDNGNzk5MTkyNEQ0QTBDNEExN0M4QUU4RDM2RTZBMUM4RkNBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI115zqbjyvf5VOBH+e62CGvNH WaUB19TWQ2pho12VU3k97d01t78Qm9hPUzHC+AoY6XloO/zZq1IViBupT91co+yp 8mGlOHHh6Bw2zQhMJ3vDEkhEUfpjeG8O6ifNzSPBL3jo4/qAjJt/WeNdL3v3b9kv xqMaRpTworeIuYPoy16irsJ1WfkKQZfQjYZIws1XNnQqlSTrxMPUKxMjvlna9m/C o64LxhvwyBmWrFN/8ea9qCfu/yvLbyWf2J1MWFKUsVLIDtZSvBzX5BC1GrQ2Ua94 xsYKI6u1TRw+kZf0Q5XDVrh9/UbqRavqh1txKOkzK+YoBJnxtpayq92R/ZNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtP3mRkk1KDEoXyK6NNuahyPyvswHwYDVR0j BBgwFoAUTgMRAx26FHGpfzGDQWFiQw6nhAUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2E4YjU0ZTYtMTAxNS00OGViLTliYmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMx REJBMTQ3MUE5N0YzMTgzNDE2MTYyNDMwRUE3ODQwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RTAzMTEwMzFEQkExNDcxQTk3RjMxODM0MTYxNjI0MzBFQTc4 NDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvNEUwMzExMDMxREJBMTQ3MUE5N0YzMTgzNDE2MTYy NDMwRUE3ODQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQF57gSMChcw0RLYm/ZxqBk0DsaZUMZwkCL CXJbHZiLEt9YvGOWVN8U3g80Z6Dng4v4yaiNTbMkF81DH+E0eaU/BjSb4XIOwWf+ vwnVP3YCKIYJfN3Nx+wxrjV0hEOg9SjHRLLf6BMnzHf1jSWldtFKf4rlGwMnk1de qxIs+ayGui3RLXZmjDmINmzHGbnF2hfEtUzrUrO49gAxElTPhkuwpmkofLL0joll 75fnRgRcPbHFDbcp0aFwue3IT7O09MDD4vYzelYtk+XlPUKLJPtxdjm9N+hckfAo x1RlEYIckidCp3CpwwyjHWhawAIJDsv6spC0yb6YdSvtt08SKGI= -----END CERTIFICATE-----Generated at Sun Oct 4 17:28:36 2026 by rpki-client