$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft File: 7705E223B413A31F5B5C47149EFBCA7585682B42.mft (raw, json) Hash identifier: fa+YR27M5GnvwMVtxr28bOiJjQwpT+8301G4ApiOQA0= Subject key identifier: 7C:4A:DF:56:30:71:2A:1E:3D:FE:50:B1:C9:0A:0A:3E:3B:AF:6D:6F Authority key identifier: 77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42 Certificate issuer: /CN=7705E223B413A31F5B5C47149EFBCA7585682B42 Certificate serial: 4BD4739ECF1C4240D72EDE07396536989D9F0251 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft Manifest number: FA Signing time: Wed 04 Nov 2026 00:13:14 +0000 Manifest this update: Wed 04 Nov 2026 00:08:14 +0000 Manifest next update: Thu 05 Nov 2026 02:34:14 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: s99ZTaHI8AEsUmlddmqA7MWNsPpN7nJom6XrkndDWvE=) 2: 7705E223B413A31F5B5C47149EFBCA7585682B42.crl (hash: hwuXnqhnES8n9W+2ejolA+PFPUvU/iKZqlCReqOqMCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d4:73:9e:cf:1c:42:40:d7:2e:de:07:39:65:36:98:9d:9f:02:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7705E223B413A31F5B5C47149EFBCA7585682B42 Validity Not Before: Nov 4 00:08:14 2026 GMT Not After : Nov 5 02:34:14 2026 GMT Subject: CN=7C4ADF5630712A1E3DFE50B1C90A0A3E3BAF6D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:af:b7:1a:52:86:56:76:bf:55:bd:77:cc: 5d:25:d5:60:1e:44:cd:f8:58:ca:c0:c5:cb:34:4f: 11:d2:c5:2c:e4:20:dc:a5:e8:1e:b2:4f:96:8f:e4: 57:3c:e3:50:13:dd:46:78:92:1d:9d:6e:1e:bd:cf: 89:0b:64:5c:a4:81:91:28:89:bb:c0:be:59:7a:1f: c1:6f:73:8b:7f:39:5c:56:98:e5:1a:4c:01:17:c9: bc:8c:e3:25:4e:1c:33:11:a3:5b:91:c0:24:97:75: 3c:f2:1b:14:7f:b1:53:ae:f0:1c:65:fa:72:9f:36: 13:a6:4e:3b:af:4b:60:89:76:e9:df:e1:99:45:75: 77:00:96:d8:92:9d:8e:44:c6:00:f8:7d:09:6d:43: 7e:b1:e8:52:c2:e9:6f:60:22:5a:fd:c0:ea:12:ff: b5:68:19:9f:38:1b:1a:e6:8d:f7:da:bf:4d:67:30: e1:7c:3b:8f:1f:0b:7f:4c:d5:8b:6f:4f:6c:f2:de: 2b:90:e1:31:ad:99:3b:fe:0b:33:71:43:7b:b9:8d: 24:87:05:91:62:dd:af:c3:fe:fc:0c:bb:b9:81:bd: ce:a7:e7:4e:2e:84:e0:15:e2:58:f7:76:ad:b9:18: 5d:49:39:8e:71:24:52:a1:a7:28:f1:e0:ef:33:f4: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:DF:56:30:71:2A:1E:3D:FE:50:B1:C9:0A:0A:3E:3B:AF:6D:6F X509v3 Authority Key Identifier: keyid:77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:36:e4:5e:14:cd:27:c4:0a:ca:e0:ba:43:01:79:01:88:c8: 4c:74:b2:45:57:b2:fe:ac:33:bb:db:3c:dc:42:84:e7:b7:c4: 0b:3e:01:90:18:bb:3b:50:55:de:e1:d3:ec:0d:17:10:a3:c1: 66:e8:17:92:30:45:77:5c:7c:ba:0b:7d:fb:e5:0c:e5:de:be: bc:36:58:24:7f:42:99:ee:fe:67:69:46:74:5e:a0:ab:2a:e4: 4d:bb:2d:f9:dd:3c:e7:40:12:d2:ab:89:c0:b5:ff:62:8c:31: cd:b6:11:2f:5b:63:09:92:39:f5:da:61:21:6f:a6:40:4e:38: 63:42:28:2e:f7:7e:44:32:8c:7d:c8:5a:bb:fd:34:9e:e8:e4: 42:80:6a:0e:fe:45:e9:4b:22:70:86:48:b0:9d:e1:23:9c:88: ac:d9:6c:60:01:81:59:48:72:02:7c:58:2c:30:34:3f:f8:6a: cc:f8:20:b2:0a:30:98:13:23:8f:0b:7c:cd:95:cb:c4:da:65: 8a:f4:14:48:e5:bf:36:b7:af:b9:c9:39:83:bc:c0:bd:1f:7e: 43:b3:b2:bf:7d:2e:96:5d:65:07:6a:71:b9:eb:5e:54:c4:8a: ac:7d:3e:1b:2d:56:b3:87:c9:c1:49:a7:73:67:68:64:5d:72: 30:aa:3a:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9Rzns8cQkDXLt4HOWU2mJ2fAlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcwNUUyMjNCNDEzQTMxRjVCNUM0NzE0OUVGQkNBNzU4 NTY4MkI0MjAeFw0yNjExMDQwMDA4MTRaFw0yNjExMDUwMjM0MTRaMDMxMTAvBgNV BAMTKDdDNEFERjU2MzA3MTJBMUUzREZFNTBCMUM5MEEwQTNFM0JBRjZENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwq+3GlKGVna/Vb13zF0l1WAe RM34WMrAxcs0TxHSxSzkINyl6B6yT5aP5Fc841AT3UZ4kh2dbh69z4kLZFykgZEo ibvAvll6H8Fvc4t/OVxWmOUaTAEXybyM4yVOHDMRo1uRwCSXdTzyGxR/sVOu8Bxl +nKfNhOmTjuvS2CJdunf4ZlFdXcAltiSnY5ExgD4fQltQ36x6FLC6W9gIlr9wOoS /7VoGZ84Gxrmjffav01nMOF8O48fC39M1YtvT2zy3iuQ4TGtmTv+CzNxQ3u5jSSH BZFi3a/D/vwMu7mBvc6n504uhOAV4lj3dq25GF1JOY5xJFKhpyjx4O8z9B3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfErfVjBxKh49/lCxyQoKPjuvbW8wHwYDVR0j BBgwFoAUdwXiI7QTox9bXEcUnvvKdYVoK0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM0NTRkMGItMWFkNy00MWVkLThlNDAtY2NiNjY2NDNhY2YwLzAvNzcwNUUyMjNC NDEzQTMxRjVCNUM0NzE0OUVGQkNBNzU4NTY4MkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzA1RTIyM0I0MTNBMzFGNUI1QzQ3MTQ5RUZCQ0E3NTg1Njgy QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNzcwNUUyMjNCNDEzQTMxRjVCNUM0NzE0OUVGQkNB NzU4NTY4MkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA25F4UzSfECsrgukMBeQGIyEx0skVXsv6s M7vbPNxChOe3xAs+AZAYuztQVd7h0+wNFxCjwWboF5IwRXdcfLoLffvlDOXevrw2 WCR/Qpnu/mdpRnReoKsq5E27LfndPOdAEtKricC1/2KMMc22ES9bYwmSOfXaYSFv pkBOOGNCKC73fkQyjH3IWrv9NJ7o5EKAag7+RelLInCGSLCd4SOciKzZbGABgVlI cgJ8WCwwND/4asz4ILIKMJgTI48LfM2Vy8TaZYr0FEjlvza3r7nJOYO8wL0ffkOz sr99LpZdZQdqcbnrXlTEiqx9PhstVrOHycFJp3NnaGRdcjCqOkU= -----END CERTIFICATE-----Generated at Wed Nov 4 20:19:58 2026 by rpki-client