$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: r37ea5YlD6HJYTOLX8EYgnVcNo/6JTRRAJMk/9LC1ws= Subject key identifier: 94:26:82:28:2F:59:CE:DA:FC:6A:2B:87:3A:53:1A:14:63:BD:B4:3D Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 624D57640BDA3CA2B78961FDA01B001F4C3B3E0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 10:37:50 +0000 Manifest this update: Sat 14 Nov 2026 10:32:50 +0000 Manifest next update: Sun 15 Nov 2026 12:59:50 +0000 Files and hashes: 1: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: ndnuK5UcfPfH5jHP8Tk0EQpmhj5p7vhPGWbjiJJnQ8c=) 2: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 3: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 4: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4d:57:64:0b:da:3c:a2:b7:89:61:fd:a0:1b:00:1f:4c:3b:3e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Nov 14 10:32:50 2026 GMT Not After : Nov 15 12:59:50 2026 GMT Subject: CN=942682282F59CEDAFC6A2B873A531A1463BDB43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:8a:ed:96:f8:75:2a:bb:02:de:5d:75:a5: f7:f7:7d:3b:8b:de:bb:68:cf:8a:fe:c6:35:ce:1d: ad:57:da:46:52:e9:db:c5:a2:8f:b2:39:81:e3:dc: 04:71:54:c3:c4:ab:d7:bf:10:7e:19:ae:42:b2:cc: 98:da:ea:75:50:ac:74:c9:75:a2:2e:58:6f:f7:0e: ca:7f:6c:51:e2:e4:82:d4:fa:c2:5a:c3:0b:35:97: 16:18:06:3c:bb:09:12:d9:68:a2:0f:6c:ed:08:2b: 4b:dc:5b:bf:8a:64:a1:6e:ee:0e:4d:e2:e2:dc:2b: 00:02:07:21:47:de:fe:86:f0:30:fa:98:5e:e9:9a: 4c:3e:90:0c:7f:fb:1b:d0:83:4f:7e:98:d9:77:d6: c2:3d:b4:36:6c:d0:73:8c:c0:06:c2:8f:2a:c2:fd: 41:f8:6e:69:8d:9a:11:eb:5f:db:b0:f4:b0:d0:9a: d3:fd:de:6f:57:f4:9b:63:34:0f:97:d6:f3:b9:30: 21:a4:83:69:db:03:cb:e5:3d:5f:02:41:8e:f0:27: 3d:15:cf:36:41:90:be:7b:7a:1a:67:38:10:64:8a: 3a:bf:25:bc:92:7b:5b:67:2e:2d:27:2a:c9:ca:b8: 5a:d5:78:8a:fc:ad:69:86:9b:fa:6b:34:f5:ce:e1: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:26:82:28:2F:59:CE:DA:FC:6A:2B:87:3A:53:1A:14:63:BD:B4:3D X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:15:f4:76:1c:99:f9:8e:1d:cf:4f:6b:90:01:29:88:b8:49: 33:5c:a5:ab:64:1a:d4:97:1d:e0:98:30:98:e2:a1:04:97:62: 31:65:10:28:3c:99:d4:97:21:c2:3b:cd:87:65:45:c1:8b:42: da:46:05:98:94:e6:86:37:fb:a6:e7:8a:91:02:f3:15:88:97: 13:87:e1:7f:a8:62:e8:1f:ee:ee:a1:b7:f6:d0:ff:31:b2:0a: 2e:b3:25:e8:3e:e1:d7:57:4d:49:73:e6:ee:fd:3e:3a:13:e0: a0:f1:8a:b9:06:58:fa:38:a3:5b:f0:1e:78:be:37:e4:79:f0: 19:7b:5c:8f:59:27:88:db:de:08:86:d3:6e:fb:81:39:c6:af: d0:d7:c3:49:6e:2c:83:c5:9e:be:30:70:5f:88:c4:4d:5f:69: e7:d5:d3:2f:ab:42:e3:fb:92:05:99:7a:c9:f4:75:89:d7:30: c7:17:72:16:a3:19:b8:08:d3:36:c6:8c:21:ff:e9:8b:ed:37: 82:53:31:a6:48:98:f5:8d:c7:e8:a1:fe:ab:23:76:6e:54:bc: 12:d9:0f:f9:51:34:a4:a2:34:31:97:9a:4b:72:1b:ff:d1:71: 2f:5f:df:80:1e:64:2f:ad:55:6a:74:82:49:d2:eb:9f:8f:7f: 0d:85:e7:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYk1XZAvaPKK3iWH9oBsAH0w7PgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjExMTQxMDMyNTBaFw0yNjExMTUxMjU5NTBaMDMxMTAvBgNV BAMTKDk0MjY4MjI4MkY1OUNFREFGQzZBMkI4NzNBNTMxQTE0NjNCREI0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTortlvh1KrsC3l11pff3fTuL 3rtoz4r+xjXOHa1X2kZS6dvFoo+yOYHj3ARxVMPEq9e/EH4ZrkKyzJja6nVQrHTJ daIuWG/3Dsp/bFHi5ILU+sJawws1lxYYBjy7CRLZaKIPbO0IK0vcW7+KZKFu7g5N 4uLcKwACByFH3v6G8DD6mF7pmkw+kAx/+xvQg09+mNl31sI9tDZs0HOMwAbCjyrC /UH4bmmNmhHrX9uw9LDQmtP93m9X9JtjNA+X1vO5MCGkg2nbA8vlPV8CQY7wJz0V zzZBkL57ehpnOBBkijq/JbySe1tnLi0nKsnKuFrVeIr8rWmGm/prNPXO4UgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlCaCKC9Zztr8aiuHOlMaFGO9tD0wHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEV9HYcmfmOHc9Pa5ABKYi4STNcpatkGtSX HeCYMJjioQSXYjFlECg8mdSXIcI7zYdlRcGLQtpGBZiU5oY3+6bnipEC8xWIlxOH 4X+oYugf7u6ht/bQ/zGyCi6zJeg+4ddXTUlz5u79PjoT4KDxirkGWPo4o1vwHni+ N+R58Bl7XI9ZJ4jb3giG0277gTnGr9DXw0luLIPFnr4wcF+IxE1faefV0y+rQuP7 kgWZesn0dYnXMMcXchajGbgI0zbGjCH/6YvtN4JTMaZImPWNx+ih/qsjdm5UvBLZ D/lRNKSiNDGXmktyG//RcS9f34AeZC+tVWp0gknS65+Pfw2F53E= -----END CERTIFICATE-----Generated at Sun Nov 15 00:53:30 2026 by rpki-client