$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: trcXsDbarCn+55j57o/36fw97IRB/qAsf8ifXx5GGi8= Subject key identifier: E1:B4:EC:D4:0C:BE:70:4C:73:B9:07:E5:C0:5C:3A:8E:0F:F5:CC:F5 Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 5E91C15345876F340142F3ED65B40B06CAD2D141 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 21:44:52 +0000 Manifest this update: Tue 03 Nov 2026 21:39:52 +0000 Manifest next update: Thu 05 Nov 2026 01:09:52 +0000 Files and hashes: 1: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) 2: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: tJFcqpxJhEppSMza8I9IdLUN3I/Jk1wa4qz7fqZXBa4=) 3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:91:c1:53:45:87:6f:34:01:42:f3:ed:65:b4:0b:06:ca:d2:d1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: Nov 3 21:39:52 2026 GMT Not After : Nov 5 01:09:52 2026 GMT Subject: CN=E1B4ECD40CBE704C73B907E5C05C3A8E0FF5CCF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:c9:e2:d8:f2:cd:ac:9b:93:93:70:05:b3: 10:14:12:92:cb:db:ec:de:7b:a5:b6:da:6a:a0:b1: e6:27:17:90:6f:87:96:cf:1a:41:89:dd:ce:9d:a9: e7:65:4d:13:4b:c6:cb:a6:90:d5:c9:43:ac:2a:c6: 99:cf:69:ac:31:a1:0b:34:90:ed:ca:6f:07:1b:31: 69:8e:e3:63:4b:ce:06:a8:9a:3c:c8:50:31:a2:99: 1b:bf:d8:cd:12:50:1c:9e:b3:d4:6e:5b:20:f0:2e: 82:14:27:ea:77:b5:fd:0d:97:85:2c:83:9b:e3:b1: 60:18:78:58:fe:83:88:d5:92:fb:76:fd:ae:45:6a: c7:b1:82:6f:0c:da:17:3e:34:e7:93:0b:01:a1:37: 58:44:49:00:2b:d4:1d:16:c8:b2:c5:46:b1:96:bc: 52:c6:a0:b6:eb:26:fd:48:ff:d2:13:1f:d9:7e:7a: 6d:f6:07:80:96:8d:0f:ae:09:5d:47:29:40:b1:4b: 8c:eb:d8:62:83:1b:f8:db:f1:b5:11:20:a3:76:dc: 67:45:fc:a6:2c:43:39:a1:dd:5d:5a:7b:a9:62:b1: 2a:3e:bd:ec:a8:c0:b9:60:fe:00:25:82:44:0f:41: e3:9b:bc:4c:2e:bc:d0:62:f6:38:71:84:e4:24:01: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B4:EC:D4:0C:BE:70:4C:73:B9:07:E5:C0:5C:3A:8E:0F:F5:CC:F5 X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:26:f1:3e:3f:20:ea:81:cc:58:83:7d:f4:2b:0c:0d:79: fb:ef:9f:65:68:7c:81:b3:3b:92:74:4b:68:f4:d4:fe:e7:34: 36:cf:54:8c:80:a8:54:52:76:a1:4c:54:41:47:2b:3e:89:8b: ce:5b:fe:de:76:2c:7e:b7:91:05:b4:3a:c8:67:14:33:27:44: aa:e2:13:5a:76:7d:a1:31:b7:27:70:a5:35:4f:08:58:04:eb: c8:0a:6d:4c:d2:9b:e0:d4:1f:c2:d4:45:ac:7c:1b:94:8a:69: d0:40:9c:9c:e5:b3:ff:7e:ed:3a:2b:29:48:b4:60:0a:28:76: fc:06:7f:c9:f3:71:05:08:5b:98:e0:e5:3a:34:fb:26:f7:5c: 1d:91:47:bc:0c:ac:3b:07:23:0d:d2:6f:7d:0e:31:cc:b8:7e: 63:e7:87:d1:f8:59:c1:f6:a6:d6:45:14:bd:d9:85:a4:43:6e: cc:6b:e2:4b:ec:b3:c5:89:00:c0:2c:96:d5:5c:66:e0:6a:95: 69:5c:87:e7:91:cd:27:22:9a:5a:d4:5f:78:83:f8:2f:b2:b6: 54:7e:29:4c:5b:75:65:f6:9d:e0:5e:5e:fc:e8:df:c1:54:ab: cf:62:3f:64:f1:ff:98:bb:ea:0a:b4:f3:c4:5c:05:ce:d4:0d: 00:c1:70:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpHBU0WHbzQBQvPtZbQLBsrS0UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjExMDMyMTM5NTJaFw0yNjExMDUwMTA5NTJaMDMxMTAvBgNV BAMTKEUxQjRFQ0Q0MENCRTcwNEM3M0I5MDdFNUMwNUMzQThFMEZGNUNDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjsni2PLNrJuTk3AFsxAUEpLL 2+zee6W22mqgseYnF5Bvh5bPGkGJ3c6dqedlTRNLxsumkNXJQ6wqxpnPaawxoQs0 kO3KbwcbMWmO42NLzgaomjzIUDGimRu/2M0SUByes9RuWyDwLoIUJ+p3tf0Nl4Us g5vjsWAYeFj+g4jVkvt2/a5Fasexgm8M2hc+NOeTCwGhN1hESQAr1B0WyLLFRrGW vFLGoLbrJv1I/9ITH9l+em32B4CWjQ+uCV1HKUCxS4zr2GKDG/jb8bURIKN23GdF /KYsQzmh3V1ae6lisSo+veyowLlg/gAlgkQPQeObvEwuvNBi9jhxhOQkAYDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bTs1Ay+cExzuQflwFw6jg/1zPUwHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsXJvE+PyDqgcxYg330KwwNefvvn2VofIGz O5J0S2j01P7nNDbPVIyAqFRSdqFMVEFHKz6Ji85b/t52LH63kQW0OshnFDMnRKri E1p2faExtydwpTVPCFgE68gKbUzSm+DUH8LURax8G5SKadBAnJzls/9+7TorKUi0 YAoodvwGf8nzcQUIW5jg5To0+yb3XB2RR7wMrDsHIw3Sb30OMcy4fmPnh9H4WcH2 ptZFFL3ZhaRDbsxr4kvss8WJAMAsltVcZuBqlWlch+eRzScimlrUX3iD+C+ytlR+ KUxbdWX2neBeXvzo38FUq89iP2Tx/5i76gq088RcBc7UDQDBcFI= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:34 2026 by rpki-client