$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft File: 82619591421B67CACDA4E6A0B166011B7E6D1D21.mft (raw, json) Hash identifier: w6LWnrlCF2z3enMy4A8tF5A8uNiPEc8822fkfZ0eVmk= Subject key identifier: B5:17:DA:A6:7D:58:FD:A2:4E:94:A4:46:3E:D9:35:C4:EF:DB:86:A8 Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 Certificate issuer: /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Certificate serial: 0C76C8A05BEF2F6E448F67C89F49139A45DED401 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 06:41:35 +0000 Manifest this update: Wed 04 Nov 2026 06:36:35 +0000 Manifest next update: Thu 05 Nov 2026 09:06:35 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=) 2: 82619591421B67CACDA4E6A0B166011B7E6D1D21.crl (hash: vwZIqkJdZ/8EhO67TD89wh1Jg/27hzDWBH/IrsxyN8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:76:c8:a0:5b:ef:2f:6e:44:8f:67:c8:9f:49:13:9a:45:de:d4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Validity Not Before: Nov 4 06:36:35 2026 GMT Not After : Nov 5 09:06:35 2026 GMT Subject: CN=B517DAA67D58FDA24E94A4463ED935C4EFDB86A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:6b:5a:b9:c3:ae:6f:e9:45:35:de:93:c1: 68:ad:a4:b5:d2:eb:7c:05:62:68:1d:3a:16:8c:fd: fc:2e:63:e0:20:1a:d3:56:8b:1e:b5:ea:85:d1:0e: c6:7c:aa:e9:57:ca:b7:2d:aa:27:01:1c:c1:bb:9f: a7:fc:9f:0f:79:f8:8d:f1:4c:0a:73:b2:55:6c:14: 09:4a:5a:7b:f3:90:47:2f:6f:94:dd:44:e8:3b:8b: a1:a5:e5:a4:36:07:dd:21:fc:a2:26:f6:d4:6a:cf: be:b6:c7:bd:46:b6:1d:60:f4:8f:86:55:8f:8c:89: aa:6b:69:3d:d6:17:92:6a:fa:fe:8a:46:5e:6e:9e: 59:c5:b5:1c:fc:d4:8f:c0:65:b9:f1:e1:a6:49:59: 7f:69:ea:36:dd:89:ef:a1:f8:63:32:a2:36:2a:5d: 03:70:97:d1:c1:18:0c:33:17:01:b9:e2:ba:09:c0: c0:04:e2:79:59:0b:4e:76:2f:16:71:c6:66:76:84: 00:b7:67:fd:10:b1:a5:18:90:69:93:44:d9:7c:1b: b9:d1:93:00:8d:98:04:2a:28:bf:ee:36:62:09:ad: bb:49:cb:e7:fd:fd:c5:08:4e:31:af:ab:0e:9d:d6: f4:12:c5:65:5b:f7:65:93:12:dd:ee:62:e1:89:c9: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:17:DA:A6:7D:58:FD:A2:4E:94:A4:46:3E:D9:35:C4:EF:DB:86:A8 X509v3 Authority Key Identifier: keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ff:9d:de:54:7b:7f:12:1d:68:3b:72:ad:b3:b0:c9:ee:ac: 5a:64:0c:e2:ca:74:58:dd:45:16:d6:a1:14:5c:bc:38:2a:39: 34:a0:a6:81:58:15:b5:65:87:83:38:49:44:bd:5b:5d:6c:82: aa:64:0f:15:ed:7c:67:8d:48:19:57:f9:68:50:1b:de:62:66: 65:25:df:43:99:71:15:3b:ee:a2:b6:bf:5e:03:be:b7:bc:d5: 55:a8:63:59:2e:88:57:65:19:38:c1:11:6b:ce:7b:90:66:2c: 47:d0:35:d9:86:67:b3:01:58:f4:1b:dd:2e:93:3e:90:59:5a: 52:a2:13:49:35:77:8b:51:9d:31:ca:22:2d:e6:52:80:61:36: 69:61:fd:79:45:65:ab:c7:a6:2e:23:1c:7f:5b:57:48:a3:67: 06:c7:b0:59:8c:1e:d1:e5:86:07:3c:5a:03:2d:bf:2f:7f:4c: aa:1d:47:73:7e:73:63:60:0b:9b:ca:6f:49:b0:69:8c:16:ca: bb:18:ba:a0:68:61:7a:56:da:47:9b:01:1d:e0:b6:ff:d1:ba: 5a:8c:71:72:00:b1:f1:ca:e8:b4:08:8c:3d:c8:fc:9c:7c:be: dc:1b:fa:75:3c:00:ad:78:18:d3:a3:12:fe:52:de:95:17:0c: 0e:ec:46:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHbIoFvvL25Ej2fIn0kTmkXe1AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3 RTZEMUQyMTAeFw0yNjExMDQwNjM2MzVaFw0yNjExMDUwOTA2MzVaMDMxMTAvBgNV BAMTKEI1MTdEQUE2N0Q1OEZEQTI0RTk0QTQ0NjNFRDkzNUM0RUZEQjg2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdmtaucOub+lFNd6TwWitpLXS 63wFYmgdOhaM/fwuY+AgGtNWix616oXRDsZ8qulXyrctqicBHMG7n6f8nw95+I3x TApzslVsFAlKWnvzkEcvb5TdROg7i6Gl5aQ2B90h/KIm9tRqz762x71Gth1g9I+G VY+MiapraT3WF5Jq+v6KRl5unlnFtRz81I/AZbnx4aZJWX9p6jbdie+h+GMyojYq XQNwl9HBGAwzFwG54roJwMAE4nlZC052LxZxxmZ2hAC3Z/0QsaUYkGmTRNl8G7nR kwCNmAQqKL/uNmIJrbtJy+f9/cUITjGvqw6d1vQSxWVb92WTEt3uYuGJySBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtRfapn1Y/aJOlKRGPtk1xO/bhqgwHwYDVR0j BBgwFoAUgmGVkUIbZ8rNpOagsWYBG35tHSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmNzhiZDQtYzE5Yi00ZDQwLWFhNTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0 MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3RTZEMUQyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MjYxOTU5MTQyMUI2N0NBQ0RBNEU2QTBCMTY2MDExQjdFNkQx RDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAx MUI3RTZEMUQyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7/nd5Ue38SHWg7cq2zsMnurFpkDOLKdFjd RRbWoRRcvDgqOTSgpoFYFbVlh4M4SUS9W11sgqpkDxXtfGeNSBlX+WhQG95iZmUl 30OZcRU77qK2v14Dvre81VWoY1kuiFdlGTjBEWvOe5BmLEfQNdmGZ7MBWPQb3S6T PpBZWlKiE0k1d4tRnTHKIi3mUoBhNmlh/XlFZavHpi4jHH9bV0ijZwbHsFmMHtHl hgc8WgMtvy9/TKodR3N+c2NgC5vKb0mwaYwWyrsYuqBoYXpW2kebAR3gtv/RulqM cXIAsfHK6LQIjD3I/Jx8vtwb+nU8AK14GNOjEv5S3pUXDA7sRvU= -----END CERTIFICATE-----Generated at Thu Nov 5 01:16:34 2026 by rpki-client