$ rpki-client -vvvf rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft File: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft (raw, json) Hash identifier: 54Zjna3uew2hqtBNsosU7TT1nc/Sg5WrMl37KGE+QqY= Subject key identifier: 87:CD:88:B3:4F:CB:54:C0:4F:5F:63:09:CF:C2:B9:5D:9B:C3:2A:C0 Authority key identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C Certificate issuer: /CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Certificate serial: 3B1825FE3E01995F3635627CAAEFE4F0885A5DD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 13:45:22 +0000 Manifest this update: Wed 04 Nov 2026 13:40:22 +0000 Manifest next update: Thu 05 Nov 2026 15:31:22 +0000 Files and hashes: 1: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl (hash: U35QuW6EmpWOxgtU3hfu4JPwIioKwYAHmLa6+2gvKkg=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: hUbYV74o2po437IyhmufJ2EH4wEuOB+BJKCVuYVEfLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:18:25:fe:3e:01:99:5f:36:35:62:7c:aa:ef:e4:f0:88:5a:5d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Validity Not Before: Nov 4 13:40:22 2026 GMT Not After : Nov 5 15:31:22 2026 GMT Subject: CN=87CD88B34FCB54C04F5F6309CFC2B95D9BC32AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:01:e4:60:7d:48:59:62:57:a1:3e:e2:e2: b2:fd:9b:72:11:a1:d5:b1:b1:04:7f:3f:3a:c2:4f: 75:10:30:ef:db:58:da:e8:a3:cb:d4:a3:b6:18:35: 8c:35:ee:ee:8e:ca:4b:92:29:b2:ab:4f:b1:8a:e2: f8:3f:74:77:4b:93:11:b2:5a:ab:cf:30:46:27:e9: b4:dc:89:e0:c2:6a:89:e2:26:1b:da:c2:fa:65:14: 21:c2:ef:71:f3:55:33:47:41:f8:32:ef:07:9f:f7: c6:ce:05:f7:9e:24:80:0f:f8:4d:a2:bc:14:6b:e2: 84:7b:67:92:b3:f1:4c:b4:a4:22:86:60:84:a0:51: d9:61:2e:a2:84:ed:78:8b:39:ce:f5:46:15:eb:07: 77:b1:48:15:32:dc:d8:a4:5e:d0:37:21:5d:89:5a: 2e:1a:6c:a7:9c:81:2c:5f:a8:ed:1f:15:e4:a2:18: 95:14:be:6d:af:fa:4a:6a:8c:2d:4b:c4:3e:f4:c4: b6:9c:75:b0:47:13:84:83:35:4a:a1:ff:0a:66:7f: e3:ed:bb:b6:0b:07:42:f5:e1:93:9e:12:7e:0d:90: b6:83:c2:03:f6:a4:a2:d6:9a:6d:e5:93:03:7a:2b: 03:78:fa:39:64:d7:64:07:e9:e7:e3:55:c2:9e:89: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:88:B3:4F:CB:54:C0:4F:5F:63:09:CF:C2:B9:5D:9B:C3:2A:C0 X509v3 Authority Key Identifier: keyid:10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:58:12:6c:92:f8:25:36:86:d8:ef:96:ed:cf:b7:f1:f2:ae: 83:92:cd:a4:a4:fc:b7:c3:cc:86:c1:51:36:e0:bd:09:23:18: 89:3a:f1:43:3d:3d:91:9e:04:c9:0a:f3:f4:44:67:77:2b:02: be:ec:ab:d4:95:75:0e:1c:07:bb:dd:1d:3b:97:85:ac:59:48: 3f:9d:83:1d:60:ff:67:c5:b0:b5:32:4c:6f:55:2e:c1:2e:d8: e2:b7:3a:33:55:b9:02:64:d5:5b:c0:ef:77:8f:e9:db:7e:f6: 47:ec:48:25:fa:dc:1b:23:33:4e:52:87:d7:2d:9f:46:d6:ff: f2:1f:0c:7e:de:e4:b9:eb:4e:f5:41:a2:b5:12:41:52:1e:4e: 19:69:ed:db:2f:42:e1:6a:09:c8:fe:36:2f:cd:45:25:bc:86: e2:6e:72:5b:ff:d3:7a:ff:e2:75:ce:67:9c:97:8e:a3:3e:b8: ae:e9:f0:25:61:24:3c:18:92:5b:bf:9b:3b:14:3c:e5:e0:c4: 9a:f0:dc:b0:dd:2a:f4:d0:0c:e2:59:3d:dc:48:f2:4c:91:4d: 77:7f:09:8c:59:04:de:81:ac:20:45:eb:31:db:43:ad:d5:13: 9d:34:71:63:51:d7:35:61:cb:0b:c3:d6:95:0e:d5:a3:ed:2b: ee:06:c9:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxgl/j4BmV82NWJ8qu/k8IhaXdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENEOTdE Q0NGNDIyQzAeFw0yNjExMDQxMzQwMjJaFw0yNjExMDUxNTMxMjJaMDMxMTAvBgNV BAMTKDg3Q0Q4OEIzNEZDQjU0QzA0RjVGNjMwOUNGQzJCOTVEOUJDMzJBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8gHkYH1IWWJXoT7i4rL9m3IR odWxsQR/PzrCT3UQMO/bWNroo8vUo7YYNYw17u6OykuSKbKrT7GK4vg/dHdLkxGy WqvPMEYn6bTcieDCaoniJhvawvplFCHC73HzVTNHQfgy7wef98bOBfeeJIAP+E2i vBRr4oR7Z5Kz8Uy0pCKGYISgUdlhLqKE7XiLOc71RhXrB3exSBUy3NikXtA3IV2J Wi4abKecgSxfqO0fFeSiGJUUvm2v+kpqjC1LxD70xLacdbBHE4SDNUqh/wpmf+Pt u7YLB0L14ZOeEn4NkLaDwgP2pKLWmm3lkwN6KwN4+jlk12QH6efjVcKeiWVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh82Is0/LVMBPX2MJz8K5XZvDKsAwHwYDVR0j BBgwFoAUEHzDtdgy+cSVZqU2FNTNl9zPQiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU0YjlkMzItM2M1YS00MGUyLWI3ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVE ODMyRjlDNDk1NjZBNTM2MTRENENEOTdEQ0NGNDIyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDdDQzNCNUQ4MzJGOUM0OTU2NkE1MzYxNEQ0Q0Q5N0RDQ0Y0 MjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENE OTdEQ0NGNDIyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRYEmyS+CU2htjvlu3Pt/HyroOSzaSk/LfD zIbBUTbgvQkjGIk68UM9PZGeBMkK8/REZ3crAr7sq9SVdQ4cB7vdHTuXhaxZSD+d gx1g/2fFsLUyTG9VLsEu2OK3OjNVuQJk1VvA73eP6dt+9kfsSCX63BsjM05Sh9ct n0bW//IfDH7e5LnrTvVBorUSQVIeThlp7dsvQuFqCcj+Ni/NRSW8huJuclv/03r/ 4nXOZ5yXjqM+uK7p8CVhJDwYklu/mzsUPOXgxJrw3LDdKvTQDOJZPdxI8kyRTXd/ CYxZBN6BrCBF6zHbQ63VE500cWNR1zVhywvD1pUO1aPtK+4GyTk= -----END CERTIFICATE-----Generated at Wed Nov 4 17:04:17 2026 by rpki-client