$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: 8m4h5YGc7qmNntCvc3/uf/PWDW8Qq5Q81xppb44jqbA= Subject key identifier: E4:14:BB:22:1E:6B:D7:69:A8:73:90:9C:9A:CA:7C:34:53:EA:2C:44 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 5EF196ADFABB02B73F401693FD4F1619CE5A2678 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 16:29:09 +0000 Manifest this update: Wed 04 Nov 2026 16:24:09 +0000 Manifest next update: Thu 05 Nov 2026 17:11:09 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: aaOJ7zt198uePodtQUpHiYvvrTj3o7cI1ic81QCeWXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f1:96:ad:fa:bb:02:b7:3f:40:16:93:fd:4f:16:19:ce:5a:26:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Nov 4 16:24:09 2026 GMT Not After : Nov 5 17:11:09 2026 GMT Subject: CN=E414BB221E6BD769A873909C9ACA7C3453EA2C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:4a:5c:ce:1c:92:7f:17:17:4e:bc:76:8c: 7e:ac:b0:dd:7b:58:db:c7:57:39:6e:01:d3:dd:60: d6:10:75:eb:fb:37:65:c8:a6:fd:25:d9:82:4b:15: f7:d9:a2:bf:4c:2e:ba:fc:d7:a3:cc:b0:69:d3:3e: e0:cd:52:73:1a:95:f0:f2:4a:0b:33:46:92:19:17: 4d:16:e7:fc:d4:9e:f8:a6:75:9d:ff:92:5b:7b:d4: 1f:21:47:00:15:be:7f:71:41:93:14:04:f6:83:ab: 06:6f:0e:a4:18:7f:61:ea:e4:31:aa:45:eb:a8:a9: 96:e4:cf:8c:e3:02:49:40:5d:03:1f:e5:fa:09:48: 22:e7:4d:97:c7:db:65:40:7a:6f:1a:91:3b:8b:5c: 78:e0:1e:ae:05:60:07:05:64:dc:bd:79:6c:42:0b: e0:01:56:01:74:5d:0d:86:f8:e9:c0:41:d7:90:a0: 3e:77:e6:a0:20:72:43:53:71:56:73:02:b7:92:35: c5:51:b4:43:cb:5b:f3:eb:5f:b0:02:ce:21:29:30: 20:e7:47:9a:ee:dd:dc:9b:03:2f:a4:ea:b2:e3:fc: 15:65:78:e2:8a:c1:d2:24:f1:6a:91:41:63:8e:88: d4:d1:c0:0c:0f:3e:c2:24:5b:9c:ff:2f:8b:d9:1a: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:14:BB:22:1E:6B:D7:69:A8:73:90:9C:9A:CA:7C:34:53:EA:2C:44 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:53:b1:56:fd:25:82:59:b1:8e:6b:0b:fb:f6:2f:ea:4e:d0: 44:33:36:5b:13:a2:e8:10:e2:7c:45:bc:e6:c3:49:d7:d6:33: bc:b5:59:d8:30:d4:b8:b2:a1:e5:9a:5a:ac:38:20:a3:f7:78: 3a:2a:6a:7c:09:51:66:ea:b3:76:b8:ab:6d:cb:7a:6d:18:70: e1:03:ce:6b:77:3e:72:da:2f:74:95:4e:2f:c2:44:cc:82:9e: be:18:f9:d3:45:54:4f:7a:d7:37:cd:ac:8a:50:18:e9:a1:92: 9e:57:45:50:a6:57:d6:06:12:81:19:ae:91:d2:df:c4:c8:7d: 7d:a5:53:4f:d6:f1:3f:c6:61:18:d6:4c:34:5b:6f:41:7f:10: fd:4a:a0:ce:1d:73:39:a1:99:77:aa:99:d3:b0:33:f0:3e:79: 34:63:96:a7:cd:6d:28:8a:5c:7c:0b:c9:1a:01:ea:9c:1d:ce: 34:56:00:e7:a5:60:b6:28:74:7c:f0:fb:81:8c:2f:67:ce:7d: d2:5d:2d:60:0d:86:71:0e:a2:b9:19:14:2d:44:c4:12:ee:7c: 42:04:a7:3a:75:13:86:20:45:a0:9a:b6:2f:e4:6b:b0:42:81: 8f:c7:0e:cd:3c:a7:ab:e8:93:00:1f:5a:68:3d:4c:56:61:ae: ad:82:9b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvGWrfq7Arc/QBaT/U8WGc5aJngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjExMDQxNjI0MDlaFw0yNjExMDUxNzExMDlaMDMxMTAvBgNV BAMTKEU0MTRCQjIyMUU2QkQ3NjlBODczOTA5QzlBQ0E3QzM0NTNFQTJDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkl0pczhySfxcXTrx2jH6ssN17 WNvHVzluAdPdYNYQdev7N2XIpv0l2YJLFffZor9MLrr816PMsGnTPuDNUnMalfDy SgszRpIZF00W5/zUnvimdZ3/klt71B8hRwAVvn9xQZMUBPaDqwZvDqQYf2Hq5DGq ReuoqZbkz4zjAklAXQMf5foJSCLnTZfH22VAem8akTuLXHjgHq4FYAcFZNy9eWxC C+ABVgF0XQ2G+OnAQdeQoD535qAgckNTcVZzAreSNcVRtEPLW/PrX7ACziEpMCDn R5ru3dybAy+k6rLj/BVleOKKwdIk8WqRQWOOiNTRwAwPPsIkW5z/L4vZGjizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BS7Ih5r12moc5Ccmsp8NFPqLEQwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhTsVb9JYJZsY5rC/v2L+pO0EQzNlsTougQ 4nxFvObDSdfWM7y1Wdgw1LiyoeWaWqw4IKP3eDoqanwJUWbqs3a4q23Lem0YcOED zmt3PnLaL3SVTi/CRMyCnr4Y+dNFVE961zfNrIpQGOmhkp5XRVCmV9YGEoEZrpHS 38TIfX2lU0/W8T/GYRjWTDRbb0F/EP1KoM4dczmhmXeqmdOwM/A+eTRjlqfNbSiK XHwLyRoB6pwdzjRWAOelYLYodHzw+4GML2fOfdJdLWANhnEOorkZFC1ExBLufEIE pzp1E4YgRaCati/ka7BCgY/HDs08p6vokwAfWmg9TFZhrq2Cm14= -----END CERTIFICATE-----Generated at Thu Nov 5 09:38:03 2026 by rpki-client