$ rpki-client -vvvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json) Hash identifier: jd7EaLykADodb6vm9SDg7wYUBiRrcunmgSat/VbOZN0= Subject key identifier: 47:5A:2C:8B:75:9F:5F:84:93:F7:67:E1:33:16:FE:6D:F0:D0:34:B2 Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9 Certificate issuer: /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9 Certificate serial: 6E74308655A9D56F04B1A2EB44E0570F55908E8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 09:24:58 +0000 Manifest this update: Wed 04 Nov 2026 09:19:58 +0000 Manifest next update: Thu 05 Nov 2026 12:23:58 +0000 Files and hashes: 1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=) 2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=) 3: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: uq8DZF0kFDlt8WfTuEd6431T/vT2osoU2ZTPI+2sPX4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:74:30:86:55:a9:d5:6f:04:b1:a2:eb:44:e0:57:0f:55:90:8e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9 Validity Not Before: Nov 4 09:19:58 2026 GMT Not After : Nov 5 12:23:58 2026 GMT Subject: CN=475A2C8B759F5F8493F767E13316FE6DF0D034B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:c6:2b:30:12:0f:44:7b:2f:ca:12:97:33: 79:57:de:95:47:a1:10:21:ba:ef:bf:6c:47:be:cb: 01:f3:34:01:07:94:f2:6a:31:b4:3d:34:0d:e8:91: 2a:5f:a5:31:1c:5e:6f:8d:ac:8e:dd:cd:36:bc:e5: 7d:34:10:5e:1d:eb:39:8c:93:24:de:8c:c0:b3:ec: af:f2:41:fd:2d:97:d0:51:04:aa:aa:4a:9d:27:db: b2:38:b2:8f:6d:27:5e:c9:80:b1:c6:a8:d3:c2:3c: 62:eb:f3:e2:0e:41:99:08:fb:d9:92:fc:1d:29:aa: 5f:4f:85:ba:26:0a:4f:9c:1a:42:f0:50:3c:7a:4c: 16:9c:82:27:ed:5f:79:03:b6:9b:73:46:3c:f4:95: 9a:6b:33:04:7c:b4:0a:69:d3:08:80:61:e4:ac:97: 60:10:b0:e9:23:ec:bc:30:75:eb:9d:1a:2e:61:8b: 2e:7f:a3:7c:62:02:64:11:02:e6:f3:c1:82:be:09: 52:55:f6:18:0d:88:d8:be:6c:8a:67:85:8c:b0:45: 35:f8:a8:84:9e:68:9e:4d:5b:f3:6c:06:a8:ce:a4: 4e:c5:d9:35:23:da:27:7f:02:b7:a5:f9:56:60:69: 0b:68:4b:1d:29:ec:a0:1b:c2:d0:6e:d1:53:66:10: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:2C:8B:75:9F:5F:84:93:F7:67:E1:33:16:FE:6D:F0:D0:34:B2 X509v3 Authority Key Identifier: keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:87:c5:ea:9a:6d:ee:a9:9c:23:4e:ee:b4:84:8f:b9:5a:22: f9:d5:2c:1e:00:c0:53:fc:51:34:fe:7a:ef:e2:55:26:15:40: 43:6d:1e:fc:24:68:7f:fe:8b:72:c3:a0:a6:86:a2:56:fe:9b: 78:12:de:b5:08:c6:5b:c3:a3:62:2d:f8:41:78:4d:ee:0d:b3: 88:6e:a4:bf:61:36:d2:60:de:6f:43:b1:8d:f3:11:30:85:63: 90:62:bc:fd:f3:03:c5:62:1b:0f:9b:73:bc:d8:62:89:a1:46: 81:9f:36:89:d1:28:82:56:96:c4:31:cb:50:1d:0a:de:fe:6f: a7:84:1d:d4:da:30:ab:02:63:a6:e4:3c:73:b4:a2:dc:c2:6f: 80:2b:0f:c9:37:f6:a3:7c:be:25:e9:db:bb:45:23:8a:d1:03: 26:a1:94:8c:0d:7f:ce:dd:17:69:2e:ea:26:b8:e8:c9:99:c7: 97:2e:6e:d7:46:96:68:44:26:58:07:e2:75:04:25:61:ee:bd: 3c:a5:bb:2c:06:9a:8c:f4:0c:4b:c5:3a:c8:86:b6:be:01:dd: 0f:d8:d1:7c:63:f8:fa:5e:59:5a:99:0c:75:1e:45:99:e8:e3: 07:04:91:d8:44:c6:e8:3f:5b:ba:70:7c:e9:f5:75:36:99:74: 1d:98:32:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnQwhlWp1W8EsaLrROBXD1WQjoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0 NzY3RDdEOTAeFw0yNjExMDQwOTE5NThaFw0yNjExMDUxMjIzNThaMDMxMTAvBgNV BAMTKDQ3NUEyQzhCNzU5RjVGODQ5M0Y3NjdFMTMzMTZGRTZERjBEMDM0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsMYrMBIPRHsvyhKXM3lX3pVH oRAhuu+/bEe+ywHzNAEHlPJqMbQ9NA3okSpfpTEcXm+NrI7dzTa85X00EF4d6zmM kyTejMCz7K/yQf0tl9BRBKqqSp0n27I4so9tJ17JgLHGqNPCPGLr8+IOQZkI+9mS /B0pql9PhbomCk+cGkLwUDx6TBacgiftX3kDtptzRjz0lZprMwR8tApp0wiAYeSs l2AQsOkj7LwwdeudGi5hiy5/o3xiAmQRAubzwYK+CVJV9hgNiNi+bIpnhYywRTX4 qISeaJ5NW/NsBqjOpE7F2TUj2id/Arel+VZgaQtoSx0p7KAbwtBu0VNmEJRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1osi3WfX4ST92fhMxb+bfDQNLIwHwYDVR0j BBgwFoAUcEUmLV7L0ID9fpC9V8XKwUdn19kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxYjc5YWMtMzM1MS00NzA1LThjM2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1 RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0NzY3RDdEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDQ1MjYyRDVFQ0JEMDgwRkQ3RTkwQkQ1N0M1Q0FDMTQ3NjdE N0Q5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNB QzE0NzY3RDdEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+Hxeqabe6pnCNO7rSEj7laIvnVLB4AwFP8 UTT+eu/iVSYVQENtHvwkaH/+i3LDoKaGolb+m3gS3rUIxlvDo2It+EF4Te4Ns4hu pL9hNtJg3m9DsY3zETCFY5BivP3zA8ViGw+bc7zYYomhRoGfNonRKIJWlsQxy1Ad Ct7+b6eEHdTaMKsCY6bkPHO0otzCb4ArD8k39qN8viXp27tFI4rRAyahlIwNf87d F2ku6ia46MmZx5cubtdGlmhEJlgH4nUEJWHuvTyluywGmoz0DEvFOsiGtr4B3Q/Y 0Xxj+PpeWVqZDHUeRZno4wcEkdhExug/W7pwfOn1dTaZdB2YMt4= -----END CERTIFICATE-----Generated at Wed Nov 4 22:25:24 2026 by rpki-client