$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: N5Do3rs1SaG1XjL82Wp7XfLJdI8ugfCevTudEjM+NME= Subject key identifier: 47:E1:C6:75:DC:E6:6A:40:28:C1:4C:0B:B2:58:F8:FD:0F:90:0A:17 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 63B6D46363702089A5049A866809600386D268B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 05:45:15 +0000 Manifest this update: Wed 04 Nov 2026 05:40:15 +0000 Manifest next update: Thu 05 Nov 2026 09:19:15 +0000 Files and hashes: 1: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 2: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: myyUAEMpSjg3B9VphUld1yk3aXpQK9LFVQOJYT5Kfpw=) 3: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b6:d4:63:63:70:20:89:a5:04:9a:86:68:09:60:03:86:d2:68:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Nov 4 05:40:15 2026 GMT Not After : Nov 5 09:19:15 2026 GMT Subject: CN=47E1C675DCE66A4028C14C0BB258F8FD0F900A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:a0:fa:c8:b8:5a:be:66:d0:db:f2:10:62: 80:25:50:52:f8:bb:2c:33:3d:7d:db:99:7f:5e:1b: d5:67:6e:b7:da:f3:e0:9a:b5:18:76:04:03:47:2c: f4:d7:23:ac:cf:38:5e:f1:0e:34:51:64:4e:fc:a1: b7:ef:86:84:79:53:bf:4d:8d:9d:7e:db:61:45:7f: 84:47:40:2e:2e:ef:93:05:93:f1:35:8a:de:a5:1b: 4b:c9:6a:cd:90:47:6d:d5:8b:93:3a:82:c2:85:33: e3:86:30:bb:b4:b5:77:88:b9:c5:0e:5a:1b:b3:52: 23:67:97:eb:c5:50:0d:09:e2:e6:d0:ab:8c:ba:6e: 2f:85:78:9d:ca:49:fe:88:bd:03:4c:58:e4:e7:1e: df:d6:0d:4f:17:a7:66:ee:c7:44:ed:bf:65:4e:dd: 6d:5a:c3:0c:eb:e5:d6:95:e2:db:9a:4c:22:11:7e: f9:24:05:f2:b7:e5:64:96:21:0c:88:a9:14:ae:c5: f4:8c:45:61:3c:b5:3b:32:a7:67:88:36:b4:1f:a6: 15:23:16:d7:f5:ad:e9:59:07:9d:13:e2:97:71:87: fb:e7:49:76:12:a2:c4:a8:eb:bd:4e:59:b5:ba:fa: a6:c1:e0:45:2a:63:2f:ab:86:5e:15:10:8c:91:86: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E1:C6:75:DC:E6:6A:40:28:C1:4C:0B:B2:58:F8:FD:0F:90:0A:17 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b7:ab:80:1f:9e:29:22:22:85:35:cf:9f:43:b0:12:50:f9: df:4c:2a:5b:1d:d5:fb:e6:32:06:5d:ce:f4:da:dd:82:1d:2d: 1d:f7:c2:92:ef:64:97:1a:60:8d:1c:b3:e1:e2:54:ec:7d:12: 1c:25:ba:4e:69:a0:34:0d:28:7f:6e:0c:a9:d0:55:6f:60:cd: 80:e3:9a:76:ac:aa:14:a2:94:f1:20:8d:75:bc:94:03:78:43: 73:44:d0:9d:8b:e0:a7:1f:bc:0b:35:fc:b9:79:be:3d:33:e2: d6:ad:9c:e0:2f:df:64:06:7e:e3:a6:01:b7:92:48:1b:d7:46: 05:b6:96:4e:f8:b3:ce:c9:5f:bc:bc:c6:f8:0e:ed:6b:35:fc: 5d:6b:73:23:8b:a1:9a:25:2b:15:5f:8e:19:33:12:ea:46:28: 7f:75:c4:56:3b:1e:df:1b:8c:d6:db:ae:41:1b:fa:d3:16:69: ea:92:e3:54:47:55:64:1f:21:51:90:bf:54:8a:f0:ff:d6:de: 4b:51:94:46:19:59:0f:35:61:28:c1:c6:81:bf:b5:76:70:22: 41:58:8e:7f:6e:d6:df:e5:da:bc:fb:31:b9:75:b4:b7:31:c7: f8:bb:e4:79:7b:47:e8:25:2f:38:4c:5b:74:72:71:f7:b5:8d: 99:cd:ca:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7bUY2NwIImlBJqGaAlgA4bSaLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjExMDQwNTQwMTVaFw0yNjExMDUwOTE5MTVaMDMxMTAvBgNV BAMTKDQ3RTFDNjc1RENFNjZBNDAyOEMxNEMwQkIyNThGOEZEMEY5MDBBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkaD6yLhavmbQ2/IQYoAlUFL4 uywzPX3bmX9eG9Vnbrfa8+CatRh2BANHLPTXI6zPOF7xDjRRZE78obfvhoR5U79N jZ1+22FFf4RHQC4u75MFk/E1it6lG0vJas2QR23Vi5M6gsKFM+OGMLu0tXeIucUO WhuzUiNnl+vFUA0J4ubQq4y6bi+FeJ3KSf6IvQNMWOTnHt/WDU8Xp2bux0Ttv2VO 3W1awwzr5daV4tuaTCIRfvkkBfK35WSWIQyIqRSuxfSMRWE8tTsyp2eINrQfphUj Ftf1relZB50T4pdxh/vnSXYSosSo671OWbW6+qbB4EUqYy+rhl4VEIyRhoKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+HGddzmakAowUwLslj4/Q+QChcwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa3q4AfnikiIoU1z59DsBJQ+d9MKlsd1fvm MgZdzvTa3YIdLR33wpLvZJcaYI0cs+HiVOx9Ehwluk5poDQNKH9uDKnQVW9gzYDj mnasqhSilPEgjXW8lAN4Q3NE0J2L4KcfvAs1/Ll5vj0z4tatnOAv32QGfuOmAbeS SBvXRgW2lk74s87JX7y8xvgO7Ws1/F1rcyOLoZolKxVfjhkzEupGKH91xFY7Ht8b jNbbrkEb+tMWaeqS41RHVWQfIVGQv1SK8P/W3ktRlEYZWQ81YSjBxoG/tXZwIkFY jn9u1t/l2rz7Mbl1tLcxx/i75Hl7R+glLzhMW3Rycfe1jZnNyvk= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:07 2026 by rpki-client