$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json) Hash identifier: SQTK+XnaqtZRDHTf/2kXpqeDEBfjx2/l0Yz85lUFhnE= Subject key identifier: CD:86:C7:FC:57:96:17:C7:49:FD:53:D3:0F:45:B5:F4:53:1F:8F:24 Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F Certificate issuer: /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Certificate serial: 1ADD8888AA36345040DBA199712DB693ABF115C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 18:17:29 +0000 Manifest this update: Sat 14 Nov 2026 18:12:29 +0000 Manifest next update: Sun 15 Nov 2026 19:54:29 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=) 2: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: KUvVZfE1uNmBtx4JJ8dgnQPGy9RUGcTjlQY3fWU3Ivk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:dd:88:88:aa:36:34:50:40:db:a1:99:71:2d:b6:93:ab:f1:15:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F Validity Not Before: Nov 14 18:12:29 2026 GMT Not After : Nov 15 19:54:29 2026 GMT Subject: CN=CD86C7FC579617C749FD53D30F45B5F4531F8F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:4c:c0:83:01:58:6d:71:65:ee:e3:31:ae: 84:e6:e0:c1:63:f1:52:b4:7f:01:19:ad:03:c0:24: 95:2c:20:23:a0:67:06:e1:0e:4c:41:92:2c:e1:77: 7a:f0:14:a7:9a:24:55:d0:50:1e:e8:e1:f3:15:b6: 83:d1:14:bd:e5:d9:a8:a3:36:ba:c8:8d:24:87:0a: 1e:c4:1c:a9:12:f0:81:65:3a:20:e9:b9:c4:c5:96: f7:5e:4d:a2:b8:4d:69:4c:7d:52:66:5b:aa:de:96: 56:c9:9c:b1:a0:7f:9a:9b:8b:54:08:56:78:73:c5: 35:e4:c1:6a:ed:b6:09:e3:15:a7:74:50:12:85:14: 50:7c:73:8b:4f:ea:9e:0b:48:8d:56:d5:f8:1a:6b: 22:c3:8a:0c:b3:53:f2:d3:4b:c7:f8:7e:f9:64:66: 5b:32:ea:61:6a:bf:02:ed:71:15:d8:67:57:95:01: 8d:a7:0b:9e:ea:01:37:bc:2b:dd:a0:98:38:59:93: 8c:6b:b4:bc:bf:5f:66:e9:80:4b:c3:1d:fb:8d:0e: 3b:65:11:95:30:12:be:43:a3:fb:25:f9:84:5b:b2: 9c:e9:ce:f3:fd:d2:21:c2:2d:79:da:28:a6:c1:f5: c3:c4:e0:4d:20:bd:7a:45:05:3a:1a:46:95:c3:ac: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:C7:FC:57:96:17:C7:49:FD:53:D3:0F:45:B5:F4:53:1F:8F:24 X509v3 Authority Key Identifier: keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:50:50:2e:65:58:75:80:9a:16:b3:67:5b:24:91:51:66:b8: e0:36:72:e6:f4:eb:a6:09:5d:63:b0:f4:1e:be:44:9e:72:ce: da:82:75:53:d7:84:4e:9c:5c:65:b2:d7:62:e8:35:e7:d5:fc: 36:67:ec:be:d4:90:00:d2:10:11:ff:55:d1:ef:8e:1a:fe:5d: 05:b2:b4:9b:ee:38:0a:0c:b8:1e:57:64:2f:44:96:b8:b8:c0: 28:96:5f:ab:32:1f:1b:87:62:78:34:15:c1:ea:f4:49:fb:30: b5:ff:8b:f8:ad:e3:23:04:0e:6e:2f:0d:7f:cc:94:20:73:be: 78:76:03:1e:31:fc:cd:8c:d5:da:9e:8f:43:6b:4e:d9:79:e1: 11:d5:10:9e:2e:8d:6f:84:82:ae:bf:13:e1:17:25:9c:e5:ab: 4d:70:23:06:0d:d4:d7:0f:05:bd:46:e3:26:8f:f4:f4:25:e7: 83:f7:f0:dc:b6:7b:25:d0:9d:8c:4c:28:9a:3e:51:53:ac:6c: 03:97:4b:42:bb:4e:b6:01:62:2d:8f:83:0f:15:85:12:ef:ff: 7b:91:c1:7e:3a:42:59:b4:dc:5d:8c:d2:33:62:98:38:4c:16: 6a:8f:58:1f:0e:fc:67:16:98:b6:77:55:b6:26:9f:c1:f9:0a: e0:76:32:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGt2IiKo2NFBA26GZcS22k6vxFcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4 QzJEQTA5RjAeFw0yNjExMTQxODEyMjlaFw0yNjExMTUxOTU0MjlaMDMxMTAvBgNV BAMTKENEODZDN0ZDNTc5NjE3Qzc0OUZENTNEMzBGNDVCNUY0NTMxRjhGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mUzAgwFYbXFl7uMxroTm4MFj 8VK0fwEZrQPAJJUsICOgZwbhDkxBkizhd3rwFKeaJFXQUB7o4fMVtoPRFL3l2aij NrrIjSSHCh7EHKkS8IFlOiDpucTFlvdeTaK4TWlMfVJmW6rellbJnLGgf5qbi1QI VnhzxTXkwWrttgnjFad0UBKFFFB8c4tP6p4LSI1W1fgaayLDigyzU/LTS8f4fvlk Zlsy6mFqvwLtcRXYZ1eVAY2nC57qATe8K92gmDhZk4xrtLy/X2bpgEvDHfuNDjtl EZUwEr5Do/sl+YRbspzpzvP90iHCLXnaKKbB9cPE4E0gvXpFBToaRpXDrMlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYbH/FeWF8dJ/VPTD0W19FMfjyQwHwYDVR0j BBgwFoAUSx6rp2Rg2+YEa4V7V/37UowtoJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg4NTc1YzgtNTRmZS00ODAxLWE3YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2 NDYwREJFNjA0NkI4NTdCNTdGREZCNTI4QzJEQTA5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QjFFQUJBNzY0NjBEQkU2MDQ2Qjg1N0I1N0ZERkI1MjhDMkRB MDlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNEIxRUFCQTc2NDYwREJFNjA0NkI4NTdCNTdGREZC NTI4QzJEQTA5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxQUC5lWHWAmhazZ1skkVFmuOA2cub066YJ XWOw9B6+RJ5yztqCdVPXhE6cXGWy12LoNefV/DZn7L7UkADSEBH/VdHvjhr+XQWy tJvuOAoMuB5XZC9Elri4wCiWX6syHxuHYng0FcHq9En7MLX/i/it4yMEDm4vDX/M lCBzvnh2Ax4x/M2M1dqej0NrTtl54RHVEJ4ujW+Egq6/E+EXJZzlq01wIwYN1NcP Bb1G4yaP9PQl54P38Ny2eyXQnYxMKJo+UVOsbAOXS0K7TrYBYi2Pgw8VhRLv/3uR wX46Qlm03F2M0jNimDhMFmqPWB8O/GcWmLZ3VbYmn8H5CuB2Mjs= -----END CERTIFICATE-----Generated at Sat Nov 14 22:34:38 2026 by rpki-client