$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft File: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft (raw, json) Hash identifier: rIfgMkXhY9wi1mZep/NQgNyXbY1RzXNyECtvhgfx3iE= Subject key identifier: 9C:45:10:AA:79:14:E9:5D:54:95:2D:5A:6D:DE:94:AB:CF:22:EB:1F Authority key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 Certificate issuer: /CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Certificate serial: 5B936392ADC75D36C1686C25C6E875EA817B30BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 01:44:44 +0000 Manifest this update: Tue 03 Nov 2026 01:39:44 +0000 Manifest next update: Wed 04 Nov 2026 03:19:44 +0000 Files and hashes: 1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: vTNwoFQSRd6UXwDXhePDtYRySxnP7vYZs8QtGgvL7F8=) 2: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl (hash: Ov+THhBf5C48asffR0cECxoXBPNofpp+vt4qtW4+sdg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 03:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:93:63:92:ad:c7:5d:36:c1:68:6c:25:c6:e8:75:ea:81:7b:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Validity Not Before: Nov 3 01:39:44 2026 GMT Not After : Nov 4 03:19:44 2026 GMT Subject: CN=9C4510AA7914E95D54952D5A6DDE94ABCF22EB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:95:76:d5:69:78:7f:b1:02:68:be:c7:e6: bb:ca:50:e4:d1:59:39:fb:bc:c2:3e:5c:26:d1:3e: a7:2b:bc:fe:61:25:85:33:d6:49:e4:d9:9d:24:2d: c0:1f:ca:93:90:7e:5d:18:45:44:5d:6e:5e:ea:be: c7:d1:b2:21:39:74:da:00:1e:e7:f5:ba:36:22:61: ee:55:68:a0:0d:62:9f:02:2d:28:5a:51:1f:89:09: e4:39:e8:d3:7b:1e:1e:74:4b:ae:3f:34:ad:10:a2: 10:09:b7:48:6f:e7:64:43:6f:66:b5:01:7e:29:0e: 34:f5:5c:b6:5a:3e:e0:3c:fd:18:0d:01:e8:03:3c: d5:cd:1f:41:f8:f3:ef:c1:02:ea:2b:ce:8a:8d:c7: 8e:7a:d3:72:9e:e2:16:89:cc:9f:3b:ba:66:16:d1: 10:3c:40:80:e1:25:9a:27:0d:08:a1:ec:48:c3:5e: 4e:cd:04:75:f3:8e:f6:cc:c4:76:a2:ff:7a:32:15: a6:13:fa:3e:ad:d7:fb:50:f9:55:01:18:44:55:18: cb:d9:58:36:db:ad:70:5a:f9:39:90:a1:77:9d:cb: c3:88:d3:93:4b:e3:88:9c:67:8a:1a:06:47:8c:2c: 1a:ec:f8:16:ce:78:d8:ca:ed:5e:9f:e1:1f:0c:8a: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:10:AA:79:14:E9:5D:54:95:2D:5A:6D:DE:94:AB:CF:22:EB:1F X509v3 Authority Key Identifier: keyid:26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f3:b2:1b:d1:b4:13:8b:cb:50:10:c3:d6:34:5a:ad:bc:63: a5:d2:33:09:11:e2:71:f2:2d:ce:f2:30:29:d0:cf:77:f3:ca: 7c:c6:39:a1:d6:de:d6:ef:9b:da:65:d6:bb:c1:7e:1f:ab:61: eb:4d:1e:f7:6c:fa:5c:5c:f3:36:54:44:7a:d6:c1:89:fd:3e: 8d:b1:c0:b2:ea:65:40:88:05:ff:aa:a9:89:5c:b7:a8:ae:05: a4:c3:6f:c1:67:39:f4:6f:9e:23:e9:0c:09:b7:74:13:ec:3b: 47:9a:63:98:e6:f4:c2:ca:07:aa:76:52:c3:1e:ef:67:16:17: cd:dd:35:76:f5:57:e6:2b:cd:68:fa:e6:22:9c:11:0b:33:7f: 6f:6d:af:4e:35:64:b6:a3:d4:f1:8f:27:94:e7:9c:83:b3:4c: 48:e7:ba:9d:6d:6f:b7:39:87:ee:32:33:0c:27:c0:93:49:0d: 03:b0:9b:b4:16:3c:98:b8:7f:df:5e:d9:76:cf:a2:aa:2e:62: e1:85:a1:5b:6d:ee:1a:45:43:a0:57:d7:d6:cb:ba:e3:8a:2f: 38:58:04:22:4d:f5:0c:3f:a9:59:a3:84:ef:82:b3:1f:e4:81: 6c:1d:8d:87:e3:b1:10:42:ef:6e:6b:d5:93:e0:5e:64:fe:d8: 26:22:e0:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5Njkq3HXTbBaGwlxuh16oF7MLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3RTlBNjZGN0E3Qzc4RjdDQzdDMDQ5ODZENjFCODdE RUJGNTEyMzAeFw0yNjExMDMwMTM5NDRaFw0yNjExMDQwMzE5NDRaMDMxMTAvBgNV BAMTKDlDNDUxMEFBNzkxNEU5NUQ1NDk1MkQ1QTZEREU5NEFCQ0YyMkVCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU5V21Wl4f7ECaL7H5rvKUOTR WTn7vMI+XCbRPqcrvP5hJYUz1knk2Z0kLcAfypOQfl0YRURdbl7qvsfRsiE5dNoA Huf1ujYiYe5VaKANYp8CLShaUR+JCeQ56NN7Hh50S64/NK0QohAJt0hv52RDb2a1 AX4pDjT1XLZaPuA8/RgNAegDPNXNH0H48+/BAuorzoqNx45603Ke4haJzJ87umYW 0RA8QIDhJZonDQih7EjDXk7NBHXzjvbMxHai/3oyFaYT+j6t1/tQ+VUBGERVGMvZ WDbbrXBa+TmQoXedy8OI05NL44icZ4oaBkeMLBrs+BbOeNjK7V6f4R8MiuAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEUQqnkU6V1UlS1abd6Uq88i6x8wHwYDVR0j BBgwFoAUJn6aZvenx498x8BJhtYbh96/USMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmN2M3OTAtNzZiNS00OTY3LWI2ZmYtMTJkYzc1NmJiZjdkLzAvMjY3RTlBNjZG N0E3Qzc4RjdDQzdDMDQ5ODZENjFCODdERUJGNTEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNjdFOUE2NkY3QTdDNzhGN0NDN0MwNDk4NkQ2MUI4N0RFQkY1 MTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMjY3RTlBNjZGN0E3Qzc4RjdDQzdDMDQ5ODZENjFC ODdERUJGNTEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7zshvRtBOLy1AQw9Y0Wq28Y6XSMwkR4nHy Lc7yMCnQz3fzynzGOaHW3tbvm9pl1rvBfh+rYetNHvds+lxc8zZURHrWwYn9Po2x wLLqZUCIBf+qqYlct6iuBaTDb8FnOfRvniPpDAm3dBPsO0eaY5jm9MLKB6p2UsMe 72cWF83dNXb1V+YrzWj65iKcEQszf29tr041ZLaj1PGPJ5TnnIOzTEjnup1tb7c5 h+4yMwwnwJNJDQOwm7QWPJi4f99e2XbPoqouYuGFoVtt7hpFQ6BX19bLuuOKLzhY BCJN9Qw/qVmjhO+Csx/kgWwdjYfjsRBC725r1ZPgXmT+2CYi4MU= -----END CERTIFICATE-----Generated at Tue Nov 3 06:38:48 2026 by rpki-client