$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: ilUU+HGOVrWaAXIlVSsYwmsl3gNl5p21zmp4agzEYx4= Subject key identifier: 4F:B9:B8:2A:40:32:59:82:BA:44:F0:6C:8E:AE:70:66:97:4E:BE:02 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 7727A8B9D4628FD56A0E8733DC902B03BA5999CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 13:50:27 +0000 Manifest this update: Wed 04 Nov 2026 13:45:27 +0000 Manifest next update: Thu 05 Nov 2026 17:07:27 +0000 Files and hashes: 1: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: wDY5oC94qU4j/qHepXjnRNCALhkJ3UjOr9ZmsTa+3V4=) 2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) 3: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:27:a8:b9:d4:62:8f:d5:6a:0e:87:33:dc:90:2b:03:ba:59:99:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Nov 4 13:45:27 2026 GMT Not After : Nov 5 17:07:27 2026 GMT Subject: CN=4FB9B82A40325982BA44F06C8EAE7066974EBE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:b0:b0:dd:14:d3:8c:88:ef:4c:0b:3d:49: e3:f5:2f:05:85:b0:f4:01:bc:d3:43:fc:47:86:fe: 30:f9:5f:12:d5:38:7a:1a:3b:11:be:d5:aa:fe:2e: 9b:68:14:86:cf:89:79:95:b6:df:a1:0c:c5:f2:0a: 6f:29:1d:39:6e:8a:de:38:0b:91:56:81:4c:16:aa: a6:66:ce:82:36:2b:c8:fc:af:03:0f:9b:7b:8b:0c: f4:b4:19:d2:78:68:68:59:79:d6:64:4a:fc:33:b5: 98:b9:bf:6e:80:b7:df:53:61:56:d0:6c:da:83:c3: 84:32:f9:7f:93:9a:f7:6d:03:89:56:a3:9e:aa:c5: 9a:01:59:4e:64:b7:62:a6:3c:c1:f2:46:1a:07:16: 81:85:79:7e:72:7d:5c:3e:c6:ba:59:38:f5:dc:55: 92:d7:d2:71:39:dd:7c:92:2f:98:03:f5:49:26:63: 96:f0:a8:c3:f7:68:f7:5c:10:a3:4a:cd:e3:c1:b6: 16:4e:21:ff:8d:86:29:0f:19:58:a5:5c:8b:38:23: 3f:91:8e:ec:c0:bb:72:c5:4b:bd:aa:52:1e:72:59: 9d:79:81:82:40:3f:07:da:b6:0d:5a:8f:05:26:09: 0d:e5:d8:8c:86:50:4b:01:e7:5b:28:9d:69:4e:40: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B9:B8:2A:40:32:59:82:BA:44:F0:6C:8E:AE:70:66:97:4E:BE:02 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ed:e1:2c:c5:d8:5d:3b:f9:36:0e:be:9d:e6:b9:a3:9a:7c: 7b:22:14:48:fd:26:20:da:92:1d:9c:ad:02:3a:48:e9:8c:2f: 15:64:6c:70:f7:65:b2:36:d3:d8:f7:59:05:bd:bc:af:51:c7: 37:b9:47:3c:0f:91:90:4c:66:38:7d:96:18:89:89:64:56:a8: 3c:5e:ae:b7:fb:4d:b0:87:ad:32:82:36:9e:b1:b4:f1:ce:0a: 9e:de:fd:3c:bb:04:02:a5:36:9a:79:47:6a:e0:ab:2d:70:c3: 48:db:8e:8f:2b:6c:e8:12:f3:7d:3a:a7:df:29:ae:b4:a5:47: 7d:02:9f:6f:38:20:d1:a1:0c:21:ed:b7:a8:e9:9b:30:8c:da: ae:43:77:1b:41:27:aa:13:ba:bb:1b:9c:ec:a4:bd:eb:e7:20: d4:07:74:fe:a1:15:df:7e:1e:62:ff:29:88:3b:67:4c:a2:59: 93:85:5c:16:06:2a:42:b8:41:43:c1:2a:ff:f0:10:12:88:d5: a6:e2:15:03:fd:a6:80:65:d6:b8:e6:bb:86:c2:61:2b:5b:d4: fc:57:59:87:ee:e6:19:22:a4:75:f6:e9:95:4b:32:57:70:88: 3f:95:f9:36:3e:3a:f6:f9:1e:92:16:74:fb:bb:65:22:c8:a1: 0b:59:c3:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyeoudRij9VqDocz3JArA7pZmc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjExMDQxMzQ1MjdaFw0yNjExMDUxNzA3MjdaMDMxMTAvBgNV BAMTKDRGQjlCODJBNDAzMjU5ODJCQTQ0RjA2QzhFQUU3MDY2OTc0RUJFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS7Cw3RTTjIjvTAs9SeP1LwWF sPQBvNND/EeG/jD5XxLVOHoaOxG+1ar+LptoFIbPiXmVtt+hDMXyCm8pHTluit44 C5FWgUwWqqZmzoI2K8j8rwMPm3uLDPS0GdJ4aGhZedZkSvwztZi5v26At99TYVbQ bNqDw4Qy+X+TmvdtA4lWo56qxZoBWU5kt2KmPMHyRhoHFoGFeX5yfVw+xrpZOPXc VZLX0nE53XySL5gD9UkmY5bwqMP3aPdcEKNKzePBthZOIf+NhikPGVilXIs4Iz+R juzAu3LFS72qUh5yWZ15gYJAPwfatg1ajwUmCQ3l2IyGUEsB51sonWlOQI4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7m4KkAyWYK6RPBsjq5wZpdOvgIwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrt4SzF2F07+TYOvp3muaOafHsiFEj9JiDa kh2crQI6SOmMLxVkbHD3ZbI209j3WQW9vK9Rxze5RzwPkZBMZjh9lhiJiWRWqDxe rrf7TbCHrTKCNp6xtPHOCp7e/Ty7BAKlNpp5R2rgqy1ww0jbjo8rbOgS8306p98p rrSlR30Cn284INGhDCHtt6jpmzCM2q5DdxtBJ6oTursbnOykvevnINQHdP6hFd9+ HmL/KYg7Z0yiWZOFXBYGKkK4QUPBKv/wEBKI1abiFQP9poBl1rjmu4bCYStb1PxX WYfu5hkipHX26ZVLMldwiD+V+TY+Ovb5HpIWdPu7ZSLIoQtZw0w= -----END CERTIFICATE-----Generated at Wed Nov 4 20:39:28 2026 by rpki-client