$ rpki-client -vvvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft File: A7FB244B07B590E887183B90A5F474AF8A740E0D.mft (raw, json) Hash identifier: NYHGIsii7FQkIi1/mkoekbdERWaqiQWpjSgWds3HemY= Subject key identifier: 7E:23:96:1D:69:FF:D5:24:79:75:D1:62:FB:0D:50:55:8D:40:FD:A8 Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Certificate serial: 6E21DAFF29C46CF865112CE0EA3591C8BCB28F5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 00:08:00 +0000 Manifest this update: Wed 04 Nov 2026 00:03:00 +0000 Manifest next update: Thu 05 Nov 2026 01:38:00 +0000 Files and hashes: 1: A7FB244B07B590E887183B90A5F474AF8A740E0D.crl (hash: 2IHP8KxKwnt1MeURh4m62RS2TbGnE2QPS5Xeztme6GI=) 2: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: O4W7xGyLdg25nBLD06FHdWKOQMvZ4LJiQpV+BuyHkrg=) 3: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 1rPPrUPUYQqxaBIZqYAyAxfvcUpoRBq/uR7Dh5JxpYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:21:da:ff:29:c4:6c:f8:65:11:2c:e0:ea:35:91:c8:bc:b2:8f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Validity Not Before: Nov 4 00:03:00 2026 GMT Not After : Nov 5 01:38:00 2026 GMT Subject: CN=7E23961D69FFD5247975D162FB0D50558D40FDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:27:40:95:f8:e0:6d:70:02:cc:b0:15:dd: 37:c5:1a:d6:a1:1d:5b:c5:f5:63:98:09:c1:a1:75: 24:c0:6a:7e:d2:9f:56:db:fb:31:e8:27:46:58:eb: c3:80:2d:6f:2e:7f:39:ac:98:02:eb:bb:66:38:0a: df:3b:d2:1e:89:30:bb:51:07:e3:ef:cb:cb:d6:0c: 09:ba:92:56:e4:a3:bc:7d:3d:31:6d:a5:1a:68:aa: 0d:f1:ec:69:47:13:a8:75:d6:6c:55:33:b9:18:80: 2f:d7:af:a5:ed:80:13:68:3c:ad:34:5c:ca:44:51: dc:31:c9:6d:7a:b5:70:d1:7e:dc:bc:47:a0:e4:63: c1:50:fa:bd:93:eb:8a:5c:7f:ba:49:21:3d:3a:95: ba:b6:0f:07:e9:ff:97:8f:ce:c1:d9:be:9f:9c:44: 79:93:34:76:bc:81:2b:41:09:4a:54:68:98:51:ca: 55:c0:90:c0:f4:61:70:5f:91:c4:29:c4:ca:d9:be: af:80:df:b8:8c:52:c7:4f:75:25:e6:84:6e:8c:2a: 23:9d:be:66:d0:f9:fe:99:0f:1d:c5:70:d3:a0:3d: ae:2e:7a:89:9b:3f:d9:ec:85:73:eb:37:1d:6e:ed: 66:6b:11:5a:d9:97:51:59:92:b8:81:e7:1f:8b:a9: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:96:1D:69:FF:D5:24:79:75:D1:62:FB:0D:50:55:8D:40:FD:A8 X509v3 Authority Key Identifier: keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a4:2d:9a:0c:80:17:f3:03:57:53:f4:bf:36:4e:dd:54:59: bc:9d:2b:3a:a3:dc:a3:01:20:b7:31:81:2a:50:90:6f:77:e1: d8:57:c9:97:d9:f2:37:7d:2d:f8:9a:26:82:2b:07:f0:0e:1f: 6b:b0:7c:cf:8b:3e:7a:56:c2:4f:18:35:9c:8a:47:34:c7:76: 7b:42:3e:0e:8c:e8:08:12:3a:b8:c4:90:2a:ce:ca:bf:37:c4: 60:b5:53:a2:e0:ba:51:18:cb:70:e5:0e:cb:78:bc:43:9f:ba: 19:c1:4f:63:36:80:ea:75:57:82:b6:bf:4a:a2:29:a8:18:ed: f7:3e:ef:46:d0:1f:f0:44:d9:7b:e7:31:ca:d1:a2:b0:e5:85: 75:b3:94:1b:d9:cf:4d:68:9f:40:f1:b0:1b:53:a2:16:2b:e3: d8:b1:80:89:83:ce:f2:34:63:8b:a4:c7:d2:88:c7:97:1f:45: 25:13:87:b0:c5:e6:e9:e8:4d:21:8a:ce:1a:93:ba:0e:69:08: c7:51:1a:9d:88:07:7e:b4:c9:ee:a1:c7:65:4c:4f:7f:c8:9e: 22:33:b3:9e:ec:8c:20:c0:f5:43:b2:0a:22:a8:2a:a5:4b:3e: 4a:46:41:46:71:e9:55:1c:f2:e1:25:ba:8d:bb:61:81:b6:17: 11:a5:02:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiHa/ynEbPhlESzg6jWRyLyyj14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4 QTc0MEUwRDAeFw0yNjExMDQwMDAzMDBaFw0yNjExMDUwMTM4MDBaMDMxMTAvBgNV BAMTKDdFMjM5NjFENjlGRkQ1MjQ3OTc1RDE2MkZCMEQ1MDU1OEQ0MEZEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfydAlfjgbXACzLAV3TfFGtah HVvF9WOYCcGhdSTAan7Sn1bb+zHoJ0ZY68OALW8ufzmsmALru2Y4Ct870h6JMLtR B+Pvy8vWDAm6klbko7x9PTFtpRpoqg3x7GlHE6h11mxVM7kYgC/Xr6XtgBNoPK00 XMpEUdwxyW16tXDRfty8R6DkY8FQ+r2T64pcf7pJIT06lbq2Dwfp/5ePzsHZvp+c RHmTNHa8gStBCUpUaJhRylXAkMD0YXBfkcQpxMrZvq+A37iMUsdPdSXmhG6MKiOd vmbQ+f6ZDx3FcNOgPa4ueombP9nshXPrNx1u7WZrEVrZl1FZkriB5x+LqThnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfiOWHWn/1SR5ddFi+w1QVY1A/agwHwYDVR0j BBgwFoAUp/skSwe1kOiHGDuQpfR0r4p0Dg0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgyYTliZDktMTY2Zi00NTNlLWIzYzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIw N0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4QTc0MEUwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BN0ZCMjQ0QjA3QjU5MEU4ODcxODNCOTBBNUY0NzRBRjhBNzQw RTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0 QUY4QTc0MEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGkLZoMgBfzA1dT9L82Tt1UWbydKzqj3KMB ILcxgSpQkG934dhXyZfZ8jd9LfiaJoIrB/AOH2uwfM+LPnpWwk8YNZyKRzTHdntC Pg6M6AgSOrjEkCrOyr83xGC1U6LgulEYy3DlDst4vEOfuhnBT2M2gOp1V4K2v0qi KagY7fc+70bQH/BE2XvnMcrRorDlhXWzlBvZz01on0DxsBtTohYr49ixgImDzvI0 Y4ukx9KIx5cfRSUTh7DF5unoTSGKzhqTug5pCMdRGp2IB360ye6hx2VMT3/IniIz s57sjCDA9UOyCiKoKqVLPkpGQUZx6VUc8uEluo27YYG2FxGlAmE= -----END CERTIFICATE-----Generated at Wed Nov 4 20:17:21 2026 by rpki-client