$ rpki-client -vvvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json) Hash identifier: SIIePYkQIEvYmhAX+VoKFKs61MyGE13zgB+z0hk7row= Subject key identifier: 5D:38:65:6B:6F:80:33:08:34:8C:52:DF:02:4D:83:59:A2:0E:01:68 Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 5F4EFA7643A69DF9EE03870B23CB095DDEB9D474 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 02:15:20 +0000 Manifest this update: Tue 03 Nov 2026 02:10:20 +0000 Manifest next update: Wed 04 Nov 2026 02:28:20 +0000 Files and hashes: 1: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=) 2: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: VWYRU7PYSo7kYCJc30QIVDtGf2H6ZPEynfMot+yAn3g=) 3: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=) 4: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 02:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4e:fa:76:43:a6:9d:f9:ee:03:87:0b:23:cb:09:5d:de:b9:d4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: Nov 3 02:10:20 2026 GMT Not After : Nov 4 02:28:20 2026 GMT Subject: CN=5D38656B6F803308348C52DF024D8359A20E0168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:2e:ba:92:7d:bd:c6:e4:4e:6e:58:1e:51: 57:e0:1b:d3:e8:f4:d0:7b:4c:7a:d1:05:e6:96:06: 6f:76:a3:03:e6:0b:0d:07:e9:7e:da:04:72:7a:20: b5:97:f3:85:47:4d:e8:16:37:86:b1:71:4e:1d:3b: 6c:25:c5:48:b3:cf:75:15:48:82:75:99:65:cf:98: 7b:e9:ae:aa:df:9b:30:5c:67:d1:a1:f0:a8:b0:2a: 62:3e:62:53:63:53:03:01:42:fb:75:27:05:db:9c: 12:64:6d:5c:eb:57:7c:3d:bb:ba:24:96:e9:5e:58: e5:30:c1:a6:3a:7d:a7:80:47:da:42:7a:7f:22:9d: b8:0f:be:4a:b6:5d:0d:ce:e6:c5:75:74:38:07:39: a2:ec:d0:1c:89:f3:ff:e5:32:f4:6c:3c:77:8c:e5: ba:94:cd:04:ca:41:76:95:9b:35:11:28:ed:af:2f: 7d:48:c6:e1:7c:67:b8:38:49:95:11:83:0e:ef:0f: b8:a9:07:89:bb:11:0c:e2:58:d6:35:6f:53:a3:bb: bc:8d:50:12:1f:73:82:da:9f:97:7f:4c:a9:f0:e1: 8c:26:b9:cf:cc:bb:78:21:91:10:5f:4b:b4:db:59: a4:e6:59:10:0d:8a:3e:7a:83:25:84:7d:08:b0:45: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:38:65:6B:6F:80:33:08:34:8C:52:DF:02:4D:83:59:A2:0E:01:68 X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:02:53:83:1e:b1:e0:c9:b4:98:09:85:a9:78:97:1a:75:44: 64:d6:75:dc:b4:8d:57:b0:55:22:9a:62:16:70:4e:ff:97:a5: a1:89:39:06:6e:71:70:1e:2e:54:8b:13:e3:76:d9:99:eb:c2: 29:c0:b2:24:bf:c7:8e:d9:34:4c:9a:95:a0:09:50:5c:5d:dc: 7a:f1:18:b1:99:56:59:66:a8:7e:f0:06:a4:f7:65:dc:ff:05: a8:d1:8e:cd:b7:d3:81:14:8a:80:f1:d4:b3:1e:c3:3b:9a:29: 67:83:35:32:90:b7:8b:49:de:73:41:96:99:1d:ad:8b:40:1a: c6:6f:96:be:bd:24:26:da:d5:29:f3:1f:7e:ac:91:ed:52:dc: b7:88:b9:4e:18:e6:45:eb:2c:fe:87:8f:b9:f2:91:82:40:ec: 4b:b0:b8:50:ed:8f:82:ca:42:54:12:13:aa:ba:d8:f8:7e:e1: 29:77:c7:fd:bd:2c:e4:32:e5:39:13:ec:29:17:86:3c:8c:00: ea:b8:bd:56:8b:72:33:92:62:a0:b6:0d:60:05:be:4e:c6:52: c4:5a:ee:91:2b:f8:09:dc:1b:b8:4b:c5:02:71:98:43:5a:e9: 01:65:16:c5:9c:42:ff:ac:9b:6f:35:49:eb:12:6a:a7:f1:bf: 8e:1a:86:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX076dkOmnfnuA4cLI8sJXd651HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjExMDMwMjEwMjBaFw0yNjExMDQwMjI4MjBaMDMxMTAvBgNV BAMTKDVEMzg2NTZCNkY4MDMzMDgzNDhDNTJERjAyNEQ4MzU5QTIwRTAxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4C66kn29xuROblgeUVfgG9Po 9NB7THrRBeaWBm92owPmCw0H6X7aBHJ6ILWX84VHTegWN4axcU4dO2wlxUizz3UV SIJ1mWXPmHvprqrfmzBcZ9Gh8KiwKmI+YlNjUwMBQvt1JwXbnBJkbVzrV3w9u7ok luleWOUwwaY6faeAR9pCen8inbgPvkq2XQ3O5sV1dDgHOaLs0ByJ8//lMvRsPHeM 5bqUzQTKQXaVmzURKO2vL31IxuF8Z7g4SZURgw7vD7ipB4m7EQziWNY1b1Oju7yN UBIfc4Lan5d/TKnw4Ywmuc/Mu3ghkRBfS7TbWaTmWRANij56gyWEfQiwRTmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXThla2+AMwg0jFLfAk2DWaIOAWgwHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMw RTIwNjcxMURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACACU4MeseDJtJgJhal4lxp1RGTWddy0jVew VSKaYhZwTv+XpaGJOQZucXAeLlSLE+N22ZnrwinAsiS/x47ZNEyalaAJUFxd3Hrx GLGZVllmqH7wBqT3Zdz/BajRjs2304EUioDx1LMewzuaKWeDNTKQt4tJ3nNBlpkd rYtAGsZvlr69JCba1SnzH36ske1S3LeIuU4Y5kXrLP6Hj7nykYJA7EuwuFDtj4LK QlQSE6q62Ph+4Sl3x/29LOQy5TkT7CkXhjyMAOq4vVaLcjOSYqC2DWAFvk7GUsRa 7pEr+AncG7hLxQJxmENa6QFlFsWcQv+sm281SesSaqfxv44ahtY= -----END CERTIFICATE-----Generated at Tue Nov 3 13:07:00 2026 by rpki-client