$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: lYVFlxlD8ilpjjsediPblm6bTbUYRs7aU/8KkygARnQ= Subject key identifier: 16:EB:15:66:7D:FA:82:A7:F6:76:B9:01:60:1D:2B:87:1F:C3:21:DA Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 4B217C672AF2A13AC38A027ED6F174AFB69CC303 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 06:21:06 +0000 Manifest this update: Wed 04 Nov 2026 06:16:06 +0000 Manifest next update: Thu 05 Nov 2026 08:49:06 +0000 Files and hashes: 1: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: alGnBb+ixoBtPJHzNPnRp4dm5MLC6bVrShnEtdwSWN8=) 2: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:21:7c:67:2a:f2:a1:3a:c3:8a:02:7e:d6:f1:74:af:b6:9c:c3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: Nov 4 06:16:06 2026 GMT Not After : Nov 5 08:49:06 2026 GMT Subject: CN=16EB15667DFA82A7F676B901601D2B871FC321DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:46:16:18:b6:4d:59:95:1c:36:ee:be:b0: 7a:aa:51:93:b2:46:37:67:94:0f:f8:6d:64:2c:c8: 9f:fb:e4:ef:6c:2d:e1:1e:e8:75:52:1c:6a:81:08: 08:d6:f7:bd:7e:8d:f5:22:56:7d:5b:62:e6:6e:ee: e4:5a:33:93:f9:f2:a3:26:1a:73:d3:60:1f:a7:bc: 69:36:50:82:17:d5:95:c0:5e:8b:49:ff:58:03:dc: 4d:35:78:06:fc:eb:30:90:b3:d7:a5:ba:01:36:c0: f1:2d:8a:43:ae:11:0c:0c:33:b3:34:35:e5:2f:fa: f0:3e:95:5c:16:87:98:4b:2e:56:e9:b9:5e:70:7a: 03:c2:f0:36:73:f9:1e:60:42:98:0d:57:ce:55:6d: c2:e9:35:d9:b8:e8:5e:52:3f:43:08:6f:ac:4f:58: 93:d5:d0:56:af:b3:2b:2a:04:02:68:a8:fb:ed:81: 37:34:2a:79:cd:a0:ac:29:93:71:58:c0:93:54:fb: d2:c6:d5:21:a6:b5:20:51:0a:66:57:a6:10:8c:5e: a9:82:6c:79:eb:a4:ee:58:28:e1:c7:f8:9d:9a:e8: 0d:3e:3e:ab:5d:ca:ee:fd:4d:30:3c:71:f8:79:cc: ab:ca:48:bf:a7:38:71:f1:41:d4:3b:f8:20:07:be: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:15:66:7D:FA:82:A7:F6:76:B9:01:60:1D:2B:87:1F:C3:21:DA X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b2:e3:0a:4f:63:ca:ff:75:05:2a:b0:54:d6:62:8d:c0:b9: 7c:18:ec:b0:30:ea:fe:0e:70:be:13:06:6f:b4:63:c5:fe:6c: eb:c2:d4:65:75:8c:6d:29:4c:ff:d8:ae:68:ec:78:9b:ac:d5: ec:64:f4:c3:5f:c4:45:5a:a4:a2:ca:f6:a1:b2:ab:cf:87:9b: 9e:6b:1f:9f:bb:c6:aa:b2:72:71:49:b1:05:e8:3c:44:94:a9: b6:fe:10:be:71:c2:c3:67:f7:11:3c:55:4f:7c:11:26:a4:dd: 38:8c:33:9c:6e:78:19:74:83:16:19:29:ed:88:c7:58:ef:3b: f5:0e:d8:fe:04:91:53:95:22:cd:93:e2:d8:4f:29:2b:63:fc: a5:80:07:b8:07:5c:9f:cd:07:d3:3b:4e:b3:97:9f:4e:18:b4: ae:de:bc:45:7a:af:d3:54:08:81:66:b6:80:7e:12:2b:0d:a3: 3c:4f:dd:d0:64:a8:be:ec:ea:8e:04:9f:7e:e2:95:74:cf:11: 68:ed:0b:c1:64:40:66:63:1d:27:f3:14:b4:c5:94:3b:5e:96: 9c:80:9b:01:c4:a5:20:db:7a:e8:12:c5:93:34:ec:ce:eb:69: e1:09:aa:fe:2f:33:29:87:c1:2a:12:6c:db:c3:f6:0c:59:fe: c4:aa:e4:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyF8ZyryoTrDigJ+1vF0r7acwwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjExMDQwNjE2MDZaFw0yNjExMDUwODQ5MDZaMDMxMTAvBgNV BAMTKDE2RUIxNTY2N0RGQTgyQTdGNjc2QjkwMTYwMUQyQjg3MUZDMzIxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tkYWGLZNWZUcNu6+sHqqUZOy RjdnlA/4bWQsyJ/75O9sLeEe6HVSHGqBCAjW971+jfUiVn1bYuZu7uRaM5P58qMm GnPTYB+nvGk2UIIX1ZXAXotJ/1gD3E01eAb86zCQs9elugE2wPEtikOuEQwMM7M0 NeUv+vA+lVwWh5hLLlbpuV5wegPC8DZz+R5gQpgNV85VbcLpNdm46F5SP0MIb6xP WJPV0FavsysqBAJoqPvtgTc0KnnNoKwpk3FYwJNU+9LG1SGmtSBRCmZXphCMXqmC bHnrpO5YKOHH+J2a6A0+Pqtdyu79TTA8cfh5zKvKSL+nOHHxQdQ7+CAHvsVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFusVZn36gqf2drkBYB0rhx/DIdowHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuy4wpPY8r/dQUqsFTWYo3AuXwY7LAw6v4O cL4TBm+0Y8X+bOvC1GV1jG0pTP/YrmjseJus1exk9MNfxEVapKLK9qGyq8+Hm55r H5+7xqqycnFJsQXoPESUqbb+EL5xwsNn9xE8VU98ESak3TiMM5xueBl0gxYZKe2I x1jvO/UO2P4EkVOVIs2T4thPKStj/KWAB7gHXJ/NB9M7TrOXn04YtK7evEV6r9NU CIFmtoB+EisNozxP3dBkqL7s6o4En37ilXTPEWjtC8FkQGZjHSfzFLTFlDtelpyA mwHEpSDbeugSxZM07M7raeEJqv4vMymHwSoSbNvD9gxZ/sSq5EA= -----END CERTIFICATE-----Generated at Thu Nov 5 01:07:16 2026 by rpki-client