$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft File: A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft (raw, json) Hash identifier: BTQSfrAzH4e9KH04tPPm5BluzNh6cw9fdOzKEejtzrg= Subject key identifier: 9F:22:90:BB:7D:76:B1:A4:53:E3:1A:B0:1F:D5:DD:C0:60:5C:56:B0 Authority key identifier: A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F Certificate issuer: /CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F Certificate serial: 4BE267717BBA451396170EB96B3B33FCFECC0B46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft Manifest number: F3 Signing time: Sun 01 Nov 2026 01:29:36 +0000 Manifest this update: Sun 01 Nov 2026 01:24:36 +0000 Manifest next update: Mon 02 Nov 2026 04:12:36 +0000 Files and hashes: 1: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: F6YSAuATIsBxma88CzXV1skAHkxyPFVdfsSvO2q3IYM=) 2: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: kdJxfQhpW6OgT8LyJDD+nLxEF80rT+HXCJxnMNo6540=) 3: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: iEOirfkgczYrzGd99jmi+CiuNPWk8r0epFlglE1baOk=) 4: A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl (hash: CLa2KYYYE2B/Gn11FYRH4IHm8+Qf4/M6HUq0/Qf/8iI=) 5: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: PWbgnuZ3gY3I9+iqPkGiWxqH6JeAe8KDOepdMcIDtEw=) 6: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: Er3H+NoE/qoCZ0NYTHj60F9W/pBp8HuIir1H+XZwb1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 04:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e2:67:71:7b:ba:45:13:96:17:0e:b9:6b:3b:33:fc:fe:cc:0b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F Validity Not Before: Nov 1 01:24:36 2026 GMT Not After : Nov 2 04:12:36 2026 GMT Subject: CN=9F2290BB7D76B1A453E31AB01FD5DDC0605C56B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:8a:77:8c:23:76:5b:c0:11:95:1f:ec:45: e7:f0:62:83:0b:00:37:a1:74:fe:7d:15:74:de:d3: 8e:a9:b4:6f:01:ea:4f:64:a3:01:df:af:bf:ff:75: 98:79:dc:55:7b:d9:53:ec:97:c3:20:7c:64:6a:ae: a2:8d:45:5c:28:dd:f3:63:98:c8:47:26:a2:1d:d0: 20:6f:89:bb:31:43:18:10:7f:3c:84:a5:d8:71:08: ad:33:21:f5:c8:de:2f:f5:fe:c0:8e:cc:f7:ed:48: 37:99:5a:ee:c1:61:d9:8e:37:58:5a:74:9f:88:ec: 7c:49:2f:1a:cb:05:97:62:ad:ee:f6:24:44:69:f4: 7f:53:9e:1d:66:9b:5c:7d:ef:ca:f2:42:90:a6:6d: a0:55:ab:14:e0:89:d8:75:c8:71:68:e0:cf:d2:03: 25:ac:17:04:76:1c:c3:d9:93:66:0c:bd:97:c2:59: a6:a1:7e:77:db:b1:d0:d2:0a:86:4e:57:68:46:5b: f9:f3:45:35:e4:45:0b:a9:be:5e:e5:53:63:a1:d3: 6e:ee:29:3d:78:08:84:19:b0:90:0c:4a:88:a2:54: 69:47:e4:01:1d:8d:5f:76:47:29:f2:f4:7e:05:72: ad:e7:7d:68:70:f1:85:8c:5d:ba:f0:3e:fa:c4:ab: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:90:BB:7D:76:B1:A4:53:E3:1A:B0:1F:D5:DD:C0:60:5C:56:B0 X509v3 Authority Key Identifier: keyid:A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9a:df:d8:b7:b7:1e:8b:22:e9:da:89:5f:77:6c:60:de:43: a0:24:d9:cb:ad:dd:53:2b:af:f9:d5:47:18:c2:fb:b5:8a:d8: 5d:8b:fe:5d:a1:f0:f1:7f:d8:27:fe:75:9f:6f:15:24:0f:e6: ab:e8:ad:65:ae:52:da:41:c8:10:6d:d4:30:e7:56:16:67:2a: 0c:b5:bd:90:19:37:57:33:c8:54:2c:1e:e6:ff:29:f0:40:09: 10:4a:bf:7b:9d:6e:55:67:ed:b5:9a:b7:8b:2e:66:30:b1:74: e4:ac:13:a9:55:ec:c7:a7:c7:fb:5d:4b:24:96:ea:06:41:1a: 66:64:ff:cf:4f:3e:de:ee:5f:ee:0f:2a:63:e6:55:7e:0f:34: cd:10:cc:fe:5f:f9:23:d7:0a:63:d9:5f:a7:2a:ac:f8:02:38: d1:13:34:02:02:71:67:51:ac:37:2b:06:d4:1c:ca:43:42:39: 1c:cb:43:ba:1c:62:11:6c:dd:31:0e:21:2a:7a:01:53:fa:4c: 43:ba:76:df:8f:f2:99:b6:aa:83:7f:84:7f:a6:c4:8c:88:f7: 25:c7:78:85:e3:16:dc:2c:a8:e8:54:c3:c4:bc:59:a1:20:25: be:72:be:fc:c0:d4:ba:06:0f:9e:de:8b:03:21:85:d0:05:9a: de:02:7a:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+JncXu6RROWFw65azsz/P7MC0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc1NjY0NDQxM0UzQjBFRUU0RjEyRkFENTEyMkJEN0Ex MDRCMDI5RjAeFw0yNjExMDEwMTI0MzZaFw0yNjExMDIwNDEyMzZaMDMxMTAvBgNV BAMTKDlGMjI5MEJCN0Q3NkIxQTQ1M0UzMUFCMDFGRDVEREMwNjA1QzU2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSop3jCN2W8ARlR/sRefwYoML ADehdP59FXTe046ptG8B6k9kowHfr7//dZh53FV72VPsl8MgfGRqrqKNRVwo3fNj mMhHJqId0CBvibsxQxgQfzyEpdhxCK0zIfXI3i/1/sCOzPftSDeZWu7BYdmON1ha dJ+I7HxJLxrLBZdire72JERp9H9Tnh1mm1x978ryQpCmbaBVqxTgidh1yHFo4M/S AyWsFwR2HMPZk2YMvZfCWaahfnfbsdDSCoZOV2hGW/nzRTXkRQupvl7lU2Oh027u KT14CIQZsJAMSoiiVGlH5AEdjV92Ryny9H4Fcq3nfWhw8YWMXbrwPvrEq/JvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyKQu312saRT4xqwH9XdwGBcVrAwHwYDVR0j BBgwFoAUp1ZkRBPjsO7k8S+tUSK9ehBLAp8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U0YWNhM2MtNjNkYy00YzFiLWE3ZTgtYWNiYWU4MjFjZGU1LzAvQTc1NjY0NDQx M0UzQjBFRUU0RjEyRkFENTEyMkJEN0ExMDRCMDI5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzU2NjQ0NDEzRTNCMEVFRTRGMTJGQUQ1MTIyQkQ3QTEwNEIw MjlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvQTc1NjY0NDQxM0UzQjBFRUU0RjEyRkFENTEyMkJE N0ExMDRCMDI5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOa39i3tx6LIunaiV93bGDeQ6Ak2cut3VMr r/nVRxjC+7WK2F2L/l2h8PF/2Cf+dZ9vFSQP5qvorWWuUtpByBBt1DDnVhZnKgy1 vZAZN1czyFQsHub/KfBACRBKv3udblVn7bWat4suZjCxdOSsE6lV7Menx/tdSySW 6gZBGmZk/89PPt7uX+4PKmPmVX4PNM0QzP5f+SPXCmPZX6cqrPgCONETNAICcWdR rDcrBtQcykNCORzLQ7ocYhFs3TEOISp6AVP6TEO6dt+P8pm2qoN/hH+mxIyI9yXH eIXjFtwsqOhUw8S8WaEgJb5yvvzA1LoGD57eiwMhhdAFmt4Cenk= -----END CERTIFICATE-----Generated at Sun Nov 1 20:03:52 2026 by rpki-client