$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft File: 7FAE1489FF53B0236543706FB85A70734890458C.mft (raw, json) Hash identifier: 0lf0/KA+qVhfmS9lG7pBrFjL7k2wUWxPG6qaeskS24s= Subject key identifier: D8:C6:99:0F:DA:01:60:27:62:E2:B3:09:4F:F5:58:BC:1D:79:92:45 Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C Certificate serial: 381F0D5EA29254D79D98BB06D0A17E7AFD4D39AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 04:13:05 +0000 Manifest this update: Tue 03 Nov 2026 04:08:05 +0000 Manifest next update: Wed 04 Nov 2026 07:48:05 +0000 Files and hashes: 1: 7FAE1489FF53B0236543706FB85A70734890458C.crl (hash: tsCDFaX8dZmJySS8ywDOs6O+xGI6mWBVBHhnyLBDVyc=) 2: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: 6M66XRhDFpnkGG9KVSAo4c89kPTU1jvZczvHe42e5Vk=) 3: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=) 4: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 07:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1f:0d:5e:a2:92:54:d7:9d:98:bb:06:d0:a1:7e:7a:fd:4d:39:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C Validity Not Before: Nov 3 04:08:05 2026 GMT Not After : Nov 4 07:48:05 2026 GMT Subject: CN=D8C6990FDA01602762E2B3094FF558BC1D799245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:00:ba:88:b6:5e:b3:82:b6:d1:96:41:5e:8d: 62:75:8b:14:6f:97:43:95:62:01:38:a6:fc:a3:26: 1b:f8:44:d4:c0:b6:f0:86:7b:49:99:14:24:47:71: f0:bd:91:73:1f:28:3f:5c:d9:9c:85:7e:59:dc:40: ae:ff:5c:b3:ba:a6:33:e4:bb:80:63:e2:4b:c7:f8: 08:4e:e8:ab:d4:08:8d:c2:9f:62:8e:cd:ba:d5:01: a1:69:f6:ef:57:92:57:76:e3:71:ce:2d:87:c4:f6: 34:42:7c:08:bd:f8:cf:47:ff:e0:62:2d:a1:60:46: 10:3b:db:4d:fb:2a:bc:47:91:2e:b2:a2:f0:cc:6e: 40:82:9f:f6:38:fe:31:24:7d:d4:f7:e5:e6:61:8a: 3a:76:e9:54:a4:73:1a:12:a5:62:2d:31:97:d6:13: 40:33:b1:a3:c6:85:5e:ea:ea:e9:91:b1:c7:0a:4c: 8d:00:e8:0d:d8:56:95:56:ac:2a:35:bc:d1:a6:53: 5b:40:48:be:0b:8b:d3:27:e5:6d:7e:39:ba:dd:83: a6:50:04:31:86:dd:3d:aa:ee:5c:9b:58:4c:d6:2b: 7f:10:ff:9d:02:27:28:0b:e2:11:6f:e0:ee:ab:a7: 8d:67:e6:de:b1:10:92:27:c5:79:58:54:b8:a5:f9: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C6:99:0F:DA:01:60:27:62:E2:B3:09:4F:F5:58:BC:1D:79:92:45 X509v3 Authority Key Identifier: keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:97:fc:14:f9:b4:22:4f:58:db:df:dd:c5:75:7d:11:be:d8: e3:08:a1:35:d1:6a:82:ed:51:8e:51:60:67:d0:d7:a6:e7:ca: 59:01:f6:a5:e4:02:8e:9b:e1:e4:7a:65:65:9a:7b:3e:6e:63: 15:4d:57:c9:0b:72:97:57:5e:34:bd:26:0e:95:ce:9f:27:0b: 8c:e8:fc:2d:dc:68:6e:6c:18:2f:4c:b2:78:18:97:c4:74:05: 20:e1:b4:0d:70:32:65:aa:56:15:26:2d:11:82:cd:49:97:a9: dd:ba:f5:06:7d:fb:6a:6d:dd:a1:9b:6c:56:ad:59:60:a7:6b: 30:ab:d9:15:d9:ca:59:fb:8b:2a:0a:cb:87:c4:9a:9a:e7:7e: 15:75:ce:0f:a5:8a:3c:0f:d2:a3:6d:4d:2f:3d:a8:bb:fd:e8: 60:41:a9:fe:95:f5:fd:26:e9:74:03:3b:63:b9:1a:13:8d:0f: b1:b9:d3:7b:a2:7b:15:ba:c5:09:d4:b8:2a:d8:48:60:65:c2: f8:bc:f4:3a:e9:9b:b0:5a:1c:ab:2d:32:91:e4:54:46:5a:de: cf:48:d4:98:2e:73:c5:55:9a:25:51:c9:33:ab:fa:3b:0c:18: f9:f4:21:94:e4:16:36:d7:07:89:78:81:0d:3d:e5:a0:88:8b: 52:ba:0a:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB8NXqKSVNedmLsG0KF+ev1NOaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0 ODkwNDU4QzAeFw0yNjExMDMwNDA4MDVaFw0yNjExMDQwNzQ4MDVaMDMxMTAvBgNV BAMTKEQ4QzY5OTBGREEwMTYwMjc2MkUyQjMwOTRGRjU1OEJDMUQ3OTkyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ALqItl6zgrbRlkFejWJ1ixRv l0OVYgE4pvyjJhv4RNTAtvCGe0mZFCRHcfC9kXMfKD9c2ZyFflncQK7/XLO6pjPk u4Bj4kvH+AhO6KvUCI3Cn2KOzbrVAaFp9u9Xkld243HOLYfE9jRCfAi9+M9H/+Bi LaFgRhA72037KrxHkS6yovDMbkCCn/Y4/jEkfdT35eZhijp26VSkcxoSpWItMZfW E0AzsaPGhV7q6umRsccKTI0A6A3YVpVWrCo1vNGmU1tASL4Li9Mn5W1+Obrdg6ZQ BDGG3T2q7lybWEzWK38Q/50CJygL4hFv4O6rp41n5t6xEJInxXlYVLil+b6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MaZD9oBYCdi4rMJT/VYvB15kkUwHwYDVR0j BBgwFoAUf64Uif9TsCNlQ3BvuFpwc0iQRYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM0ZTE2NjktNjhmNy00YTM5LWFjYzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlG RjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0ODkwNDU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkFFMTQ4OUZGNTNCMDIzNjU0MzcwNkZCODVBNzA3MzQ4OTA0 NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcw NzM0ODkwNDU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiX/BT5tCJPWNvf3cV1fRG+2OMIoTXRaoLt UY5RYGfQ16bnylkB9qXkAo6b4eR6ZWWaez5uYxVNV8kLcpdXXjS9Jg6Vzp8nC4zo /C3caG5sGC9MsngYl8R0BSDhtA1wMmWqVhUmLRGCzUmXqd269QZ9+2pt3aGbbFat WWCnazCr2RXZyln7iyoKy4fEmprnfhV1zg+lijwP0qNtTS89qLv96GBBqf6V9f0m 6XQDO2O5GhOND7G503uiexW6xQnUuCrYSGBlwvi89Drpm7BaHKstMpHkVEZa3s9I 1Jguc8VVmiVRyTOr+jsMGPn0IZTkFjbXB4l4gQ095aCIi1K6ClI= -----END CERTIFICATE-----Generated at Wed Nov 4 01:16:04 2026 by rpki-client