$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft File: 04464393DEE86F9C4534E90FA657647430EE82F1.mft (raw, json) Hash identifier: pgQ+mxsfojCeml8VseZGD0kyRwX/yhyu/aOO322hoGQ= Subject key identifier: 0C:4A:57:97:6E:10:A5:31:93:0F:C1:15:73:55:55:00:1E:4B:6D:AF Authority key identifier: 04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1 Certificate issuer: /CN=04464393DEE86F9C4534E90FA657647430EE82F1 Certificate serial: 63C1FD759AA5B26D4C8464B09D5E1C42FEDE6077 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 08:51:40 +0000 Manifest this update: Mon 09 Nov 2026 08:46:40 +0000 Manifest next update: Tue 10 Nov 2026 12:33:40 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: 5N/+NKK+QKHMpVx1kO3hDw5i9CbZNo+IX8Ypb8V9rXI=) 2: 04464393DEE86F9C4534E90FA657647430EE82F1.crl (hash: kUIcOa74LEnVNZVBqOm5UDJEbCM4SJsSOzzFlQ0UOd4=) 3: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: OOk+m+baT6rSEoQr7jsbvANi5LghM8WtezCSjbbc3mM=) 4: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: yMvq469T5W+wgJnUE4TkrUjU3nQrgKOaqCtAI0sxxfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c1:fd:75:9a:a5:b2:6d:4c:84:64:b0:9d:5e:1c:42:fe:de:60:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04464393DEE86F9C4534E90FA657647430EE82F1 Validity Not Before: Nov 9 08:46:40 2026 GMT Not After : Nov 10 12:33:40 2026 GMT Subject: CN=0C4A57976E10A531930FC115735555001E4B6DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:64:f2:88:70:c6:fb:eb:6c:0f:fd:81:15: 16:ad:5b:6c:2f:3c:5b:24:01:8f:d9:b8:1a:dd:41: d6:16:a2:61:4e:06:85:ce:d5:1a:54:80:d5:95:81: 44:77:9b:82:ac:94:19:ec:82:ca:c8:3c:8e:89:f8: 71:eb:7c:7d:8c:59:6b:c2:5e:f6:f8:b0:56:32:a2: 3f:95:5f:1b:04:d3:e5:76:be:a5:dd:70:c1:8b:4e: d9:09:4d:57:01:da:75:39:89:c3:c5:f9:3b:07:85: b5:aa:9e:48:ac:46:3e:f3:3b:42:38:e1:1d:e2:22: 2b:bd:15:3d:2b:f5:d0:15:00:eb:fd:21:80:d9:2b: e7:c0:01:78:0b:89:0a:99:64:ce:09:36:55:0c:56: 10:c3:91:28:e5:68:51:06:7f:25:8a:51:d0:e0:14: 6c:ac:e9:e8:c3:04:d5:1d:56:5e:4b:fa:16:b2:b6: 0a:c4:9f:c9:f3:41:e5:3d:c4:74:c3:8b:e5:f9:a3: f5:89:74:91:be:e8:e7:93:61:ae:25:29:7e:42:9d: be:1f:7a:34:58:0c:99:b2:c0:5e:dc:7e:a2:df:ae: 97:a7:e8:4d:44:f4:4d:4c:30:28:e2:97:77:a7:21: 84:c5:a2:b6:08:70:da:b8:55:66:d3:da:26:9a:ec: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:57:97:6E:10:A5:31:93:0F:C1:15:73:55:55:00:1E:4B:6D:AF X509v3 Authority Key Identifier: keyid:04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d4:17:13:1b:4a:a4:61:22:05:43:3d:c7:e9:e8:51:61:36: 68:a0:cf:c8:17:f5:60:2b:12:c2:05:59:02:c5:54:9b:b7:be: 41:01:94:69:be:65:07:39:e3:6d:95:a2:5a:43:ea:3c:1a:9f: f1:cc:b3:d8:10:e1:b0:7e:88:8b:dd:b8:16:66:57:7d:b8:94: 17:ad:fe:21:44:e1:b8:66:b9:a1:ef:e9:a1:fb:ef:b2:2c:03: 52:79:5f:49:90:67:3a:0d:ca:f4:7b:41:32:00:56:6f:cf:07: 75:5f:8d:c0:25:82:5f:24:a2:4e:f9:ca:bf:98:76:07:19:a8: 20:d5:c3:b1:f2:76:ae:96:8f:85:8a:71:bc:d2:a0:40:ab:ca: c9:a7:1b:a9:9e:94:ab:79:ea:ce:10:74:e6:44:cd:76:61:15: d5:09:47:7c:31:2d:d9:4c:b5:76:77:d9:74:23:cf:f1:19:2e: 83:25:0c:c6:f6:68:7a:3f:c2:83:08:cf:47:7c:15:16:cc:9d: 89:ad:09:2a:99:6e:41:cd:94:79:0f:26:bc:39:b5:f9:66:57: ce:3e:61:77:18:7e:de:d6:5e:34:67:3d:25:37:97:a2:ac:7c: a2:25:09:77:d8:58:c8:50:fd:b6:d3:74:7e:e8:44:60:6b:dd: 44:46:75:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8H9dZqlsm1MhGSwnV4cQv7eYHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NjQzOTNERUU4NkY5QzQ1MzRFOTBGQTY1NzY0NzQz MEVFODJGMTAeFw0yNjExMDkwODQ2NDBaFw0yNjExMTAxMjMzNDBaMDMxMTAvBgNV BAMTKDBDNEE1Nzk3NkUxMEE1MzE5MzBGQzExNTczNTU1NTAwMUU0QjZEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jGTyiHDG++tsD/2BFRatW2wv PFskAY/ZuBrdQdYWomFOBoXO1RpUgNWVgUR3m4KslBnsgsrIPI6J+HHrfH2MWWvC Xvb4sFYyoj+VXxsE0+V2vqXdcMGLTtkJTVcB2nU5icPF+TsHhbWqnkisRj7zO0I4 4R3iIiu9FT0r9dAVAOv9IYDZK+fAAXgLiQqZZM4JNlUMVhDDkSjlaFEGfyWKUdDg FGys6ejDBNUdVl5L+haytgrEn8nzQeU9xHTDi+X5o/WJdJG+6OeTYa4lKX5Cnb4f ejRYDJmywF7cfqLfrpen6E1E9E1MMCjil3enIYTForYIcNq4VWbT2iaa7IlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDEpXl24QpTGTD8EVc1VVAB5Lba8wHwYDVR0j BBgwFoAUBEZDk97ob5xFNOkPpldkdDDugvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmIwMDc0Y2YtNzZkZC00MDk3LWExOWItZTM3ZTYyODU4YjI0LzAvMDQ0NjQzOTNE RUU4NkY5QzQ1MzRFOTBGQTY1NzY0NzQzMEVFODJGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2NDM5M0RFRTg2RjlDNDUzNEU5MEZBNjU3NjQ3NDMwRUU4 MkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvMDQ0NjQzOTNERUU4NkY5QzQ1MzRFOTBGQTY1NzY0 NzQzMEVFODJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnUFxMbSqRhIgVDPcfp6FFhNmigz8gX9WAr EsIFWQLFVJu3vkEBlGm+ZQc5422VolpD6jwan/HMs9gQ4bB+iIvduBZmV324lBet /iFE4bhmuaHv6aH777IsA1J5X0mQZzoNyvR7QTIAVm/PB3VfjcAlgl8kok75yr+Y dgcZqCDVw7Hydq6Wj4WKcbzSoECrysmnG6melKt56s4QdOZEzXZhFdUJR3wxLdlM tXZ32XQjz/EZLoMlDMb2aHo/woMIz0d8FRbMnYmtCSqZbkHNlHkPJrw5tflmV84+ YXcYft7WXjRnPSU3l6KsfKIlCXfYWMhQ/bbTdH7oRGBr3URGdUM= -----END CERTIFICATE-----Generated at Mon Nov 9 12:57:14 2026 by rpki-client