$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: LVe2AljENenjSlbnTJSIVe8rLoVdxoY5vvvRw6FkdEo= Subject key identifier: 70:A3:98:51:B8:3F:B1:5E:75:83:22:C1:C6:88:49:65:EB:1A:4D:34 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 0B7C0C29626AD16D51EAF458ACED488C57718CB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 13:19:06 +0000 Manifest this update: Sun 01 Nov 2026 13:14:06 +0000 Manifest next update: Mon 02 Nov 2026 15:38:06 +0000 Files and hashes: 1: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 2: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 3: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: T0vD+D7ZQ8mFE0I8lF3mQ0nlmIO++EPxxO89wsM/9Uw=) 4: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) 5: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7c:0c:29:62:6a:d1:6d:51:ea:f4:58:ac:ed:48:8c:57:71:8c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Nov 1 13:14:06 2026 GMT Not After : Nov 2 15:38:06 2026 GMT Subject: CN=70A39851B83FB15E758322C1C6884965EB1A4D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:1b:4a:7a:b7:ea:bb:f4:ba:d6:bc:e1:35: 39:e0:b6:fc:42:c6:9c:ad:a7:7a:bd:fc:c7:3d:dc: f2:ea:41:0c:17:32:99:43:e6:6e:6b:06:70:5e:e9: c7:44:e4:fb:e9:6e:4d:eb:36:60:55:ed:38:f5:ab: b1:05:88:36:99:55:f8:95:5b:46:d1:70:98:3e:02: 7c:93:c4:42:03:d5:b5:5e:12:aa:05:0e:91:33:50: 37:2c:f9:8a:68:30:dd:84:e0:7f:d9:d8:50:c9:cf: 94:10:59:48:49:60:f6:f6:d6:8f:c6:d0:e4:d7:02: 67:7a:6e:ae:95:ae:c1:28:61:19:2c:4c:f4:7f:ba: 04:68:53:6b:78:3a:94:47:46:56:f3:c4:d7:f1:5b: c5:2a:37:0d:e9:8e:9b:ff:cf:d4:8c:e3:7f:82:dd: d0:f7:7b:e9:dc:ad:d2:41:cb:ac:13:88:73:2a:b8: 25:54:89:f1:60:d9:7c:88:c2:dc:56:b6:6c:b9:08: 7c:ed:62:86:24:56:e4:cd:e0:e0:86:bf:0e:11:91: 3c:ea:df:b4:22:e1:de:da:28:2d:01:2d:a8:40:c3: cd:57:7c:4e:59:a5:d8:f9:40:76:0a:0e:26:cc:25: 91:55:16:30:6c:97:4d:a5:27:e1:6c:de:57:fd:ff: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:98:51:B8:3F:B1:5E:75:83:22:C1:C6:88:49:65:EB:1A:4D:34 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d4:a5:82:0e:16:5b:be:e9:6c:f8:9b:51:85:34:90:2a:ad: cc:bf:0a:ff:12:2d:76:1e:45:82:64:24:c7:8f:e6:1d:86:50: cc:5c:2a:2d:e0:d5:70:5e:8c:f2:0d:36:10:76:8f:93:6c:4c: 0a:6c:64:bf:94:d5:d6:73:f3:97:0d:ef:dc:2a:0d:30:23:15: 3b:ca:1b:43:55:9f:2f:e7:64:24:34:e5:e4:3f:bd:7e:35:a8: 8c:66:d6:c0:9f:1c:25:94:7c:2f:f3:34:fe:b9:41:be:c7:cc: da:79:35:64:b2:9b:94:c6:f7:ae:54:8f:0b:15:13:74:05:ad: 48:ce:3c:53:cc:07:80:2c:fc:ed:54:30:3e:70:80:16:82:de: 65:3a:dc:bd:d7:69:80:2f:b2:a0:ae:e7:61:c6:58:f1:d5:7d: 9c:da:3c:1b:81:85:12:e6:96:5b:be:be:2c:2f:64:21:d6:4e: e0:30:2e:f1:9e:60:b1:7b:a8:bf:81:81:3d:14:36:12:38:1a: ba:74:7e:30:ff:ca:aa:96:c5:b4:5e:75:d7:72:ed:05:5e:32: 8e:9b:a6:1c:2f:4d:78:9d:d5:bb:41:c6:36:47:68:ab:ab:16: 49:3a:ef:56:ac:9a:f7:03:39:08:ce:c2:a3:43:68:75:1f:37: 8d:76:00:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3wMKWJq0W1R6vRYrO1IjFdxjLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjExMDExMzE0MDZaFw0yNjExMDIxNTM4MDZaMDMxMTAvBgNV BAMTKDcwQTM5ODUxQjgzRkIxNUU3NTgzMjJDMUM2ODg0OTY1RUIxQTREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0xtKerfqu/S61rzhNTngtvxC xpytp3q9/Mc93PLqQQwXMplD5m5rBnBe6cdE5Pvpbk3rNmBV7Tj1q7EFiDaZVfiV W0bRcJg+AnyTxEID1bVeEqoFDpEzUDcs+YpoMN2E4H/Z2FDJz5QQWUhJYPb21o/G 0OTXAmd6bq6VrsEoYRksTPR/ugRoU2t4OpRHRlbzxNfxW8UqNw3pjpv/z9SM43+C 3dD3e+ncrdJBy6wTiHMquCVUifFg2XyIwtxWtmy5CHztYoYkVuTN4OCGvw4RkTzq 37Qi4d7aKC0BLahAw81XfE5Zpdj5QHYKDibMJZFVFjBsl02lJ+Fs3lf9/wF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKOYUbg/sV51gyLBxohJZesaTTQwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzUpYIOFlu+6Wz4m1GFNJAqrcy/Cv8SLXYe RYJkJMeP5h2GUMxcKi3g1XBejPINNhB2j5NsTApsZL+U1dZz85cN79wqDTAjFTvK G0NVny/nZCQ05eQ/vX41qIxm1sCfHCWUfC/zNP65Qb7HzNp5NWSym5TG965UjwsV E3QFrUjOPFPMB4As/O1UMD5wgBaC3mU63L3XaYAvsqCu52HGWPHVfZzaPBuBhRLm llu+viwvZCHWTuAwLvGeYLF7qL+BgT0UNhI4Grp0fjD/yqqWxbRedddy7QVeMo6b phwvTXid1btBxjZHaKurFkk671asmvcDOQjOwqNDaHUfN412AAI= -----END CERTIFICATE-----Generated at Sun Nov 1 19:34:08 2026 by rpki-client