$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: OLFxV1AhJPemOe94pGR4d37pQS6XfbqUqHMpIwpyxLI= Subject key identifier: E6:27:F6:2B:AB:6F:3E:3D:26:F9:7C:AA:33:13:D7:3F:37:19:E0:95 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 51E06A301728ABE36853B5D2D4E716239E58963C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 11:12:03 +0000 Manifest this update: Tue 03 Nov 2026 11:07:03 +0000 Manifest next update: Wed 04 Nov 2026 13:45:03 +0000 Files and hashes: 1: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: D0l+KT2n3OQKIDXiUH+Ld0nx14Rbw+6h+b4hZNlggDo=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 3: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e0:6a:30:17:28:ab:e3:68:53:b5:d2:d4:e7:16:23:9e:58:96:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Nov 3 11:07:03 2026 GMT Not After : Nov 4 13:45:03 2026 GMT Subject: CN=E627F62BAB6F3E3D26F97CAA3313D73F3719E095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:ad:f8:8c:84:ec:98:ec:82:bd:57:6d:53: 25:26:42:6d:df:09:c1:5f:c1:0c:99:02:00:08:4b: dc:53:fa:97:1c:09:04:15:23:3e:81:83:a3:64:78: a6:9c:9d:e1:70:86:c8:3c:63:ff:9b:76:1c:38:f8: 62:b9:8d:7c:33:6e:ff:72:ca:68:a7:71:01:bf:8f: cd:96:a7:64:b2:29:93:e7:93:74:c7:9a:aa:6a:2d: 9e:65:4d:ab:97:70:85:da:96:cf:0b:64:40:58:4b: fe:a5:1e:b2:49:73:e8:86:96:77:03:6f:70:09:37: 1f:97:ab:bc:7b:30:f0:e6:37:77:02:98:c3:cc:83: 56:9b:c3:87:84:e1:10:2b:3f:88:bd:e5:36:0f:90: 0e:bd:d2:4e:b6:88:d5:77:93:ff:00:a3:19:ee:ce: 30:72:7e:2e:02:8b:5f:4b:95:9a:06:57:3f:1b:e5: ac:d9:a4:c3:c8:5d:6c:bf:43:e9:11:a5:b5:c0:b9: d8:f1:6b:43:fb:09:e3:45:c0:36:50:05:1b:a5:68: 59:47:85:20:4f:0c:a0:0d:48:78:28:60:bd:b6:19: b2:8b:9c:72:32:0e:ba:bf:e8:ef:9d:fe:81:33:ad: 02:27:9e:79:47:dd:08:78:63:1d:41:cd:d7:ce:f7: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:F6:2B:AB:6F:3E:3D:26:F9:7C:AA:33:13:D7:3F:37:19:E0:95 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:30:e3:ec:d9:88:4b:df:7a:12:6b:3d:54:c4:72:0d:98:f2: 1e:34:51:61:54:f8:4d:18:26:0e:60:3c:61:73:a9:48:97:ab: 5c:28:c4:73:90:78:9c:0d:88:ff:21:3e:df:32:21:83:54:3f: 89:b4:29:90:d4:3a:cb:aa:df:5b:ed:09:4b:e9:16:f2:a4:c7: ba:f2:09:06:a7:c3:64:a5:42:37:e2:bf:38:5e:25:67:62:fa: 0f:0c:54:55:95:96:0e:21:c1:7d:80:5b:b9:f0:4d:f9:b4:dc: de:6d:39:14:ff:ca:e8:ed:88:fa:4c:64:2a:40:10:33:ca:8b: cb:3e:7f:3e:ef:91:a2:69:b9:f4:b8:1c:52:03:6b:4e:7d:13: f9:48:cb:4d:6a:93:31:1e:22:95:f5:ee:22:91:f4:80:b3:98: 9e:7c:fd:c7:fa:52:9f:88:41:42:09:12:14:c5:ad:94:21:ab: ce:4d:8f:ca:bf:f1:c0:7c:4c:9b:c2:d4:db:ad:fc:cf:44:29: 8e:eb:f5:6c:a6:ce:4e:c1:7b:bb:e7:45:1e:1f:0d:cb:1c:c4: 8f:93:8c:af:54:37:e6:f5:3b:d5:23:32:ed:d5:3d:51:b8:06: 83:4f:a7:3e:c8:38:e8:c4:83:cc:f8:85:85:73:fe:0a:38:d8: 90:a1:8d:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeBqMBcoq+NoU7XS1OcWI55YljwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjExMDMxMTA3MDNaFw0yNjExMDQxMzQ1MDNaMDMxMTAvBgNV BAMTKEU2MjdGNjJCQUI2RjNFM0QyNkY5N0NBQTMzMTNENzNGMzcxOUUwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHK34jITsmOyCvVdtUyUmQm3f CcFfwQyZAgAIS9xT+pccCQQVIz6Bg6NkeKacneFwhsg8Y/+bdhw4+GK5jXwzbv9y ymincQG/j82Wp2SyKZPnk3THmqpqLZ5lTauXcIXals8LZEBYS/6lHrJJc+iGlncD b3AJNx+Xq7x7MPDmN3cCmMPMg1abw4eE4RArP4i95TYPkA690k62iNV3k/8Aoxnu zjByfi4Ci19LlZoGVz8b5azZpMPIXWy/Q+kRpbXAudjxa0P7CeNFwDZQBRulaFlH hSBPDKANSHgoYL22GbKLnHIyDrq/6O+d/oEzrQInnnlH3Qh4Yx1BzdfO92KjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5if2K6tvPj0m+XyqMxPXPzcZ4JUwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUw4+zZiEvfehJrPVTEcg2Y8h40UWFU+E0Y Jg5gPGFzqUiXq1woxHOQeJwNiP8hPt8yIYNUP4m0KZDUOsuq31vtCUvpFvKkx7ry CQanw2SlQjfivzheJWdi+g8MVFWVlg4hwX2AW7nwTfm03N5tORT/yujtiPpMZCpA EDPKi8s+fz7vkaJpufS4HFIDa059E/lIy01qkzEeIpX17iKR9ICzmJ58/cf6Up+I QUIJEhTFrZQhq85Nj8q/8cB8TJvC1Nut/M9EKY7r9Wymzk7Be7vnRR4fDcscxI+T jK9UN+b1O9UjMu3VPVG4BoNPpz7IOOjEg8z4hYVz/go42JChjUw= -----END CERTIFICATE-----Generated at Tue Nov 3 19:40:49 2026 by rpki-client