$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft File: E6782977133FCE90213CEBEC30761D98F47C2F41.mft (raw, json) Hash identifier: zp+zibtf60Fmqt5rMrncIfeFMbxGQgzOnyG4HhBYkao= Subject key identifier: E2:72:5A:90:58:19:E3:DB:1C:0D:B4:AB:29:B8:6A:30:B6:23:00:E2 Authority key identifier: E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41 Certificate issuer: /CN=E6782977133FCE90213CEBEC30761D98F47C2F41 Certificate serial: 5D8F7AE098788CB112CD225D0946B31B5FD0D69C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 14:31:10 +0000 Manifest this update: Mon 02 Nov 2026 14:26:10 +0000 Manifest next update: Tue 03 Nov 2026 16:54:10 +0000 Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: AzwawxbCEg5H+zE23E5y6RqY3/0LQRvHyDvmDqo+Klw=) 2: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: bESj5Nb0cN33a7g1XWz+UbX4GF5PV+yGORqTT/G1JCk=) 3: E6782977133FCE90213CEBEC30761D98F47C2F41.crl (hash: UzGCYFW8LltOHad6Y3QNuiXMeZdLfqQOe91X6HQ9b+0=) 4: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: usoIWcd8Xh8Y5o5mz4Th6snOG36cNVkHpCLTqZ4OQbk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8f:7a:e0:98:78:8c:b1:12:cd:22:5d:09:46:b3:1b:5f:d0:d6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6782977133FCE90213CEBEC30761D98F47C2F41 Validity Not Before: Nov 2 14:26:10 2026 GMT Not After : Nov 3 16:54:10 2026 GMT Subject: CN=E2725A905819E3DB1C0DB4AB29B86A30B62300E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:89:01:a9:79:16:66:89:a4:fa:18:37:06: 78:f6:19:95:50:bf:d9:82:88:36:45:be:82:a7:c1: f6:b1:64:2a:bd:6b:f9:82:89:af:2a:84:70:d4:29: 2a:1c:06:39:d9:e4:19:bd:15:93:31:a9:29:9b:7d: 78:d6:7a:e4:72:5e:40:25:d0:6f:75:c3:6c:c8:c9: cd:11:65:c7:ef:8b:1b:65:f1:44:fe:2e:ed:5d:41: f3:84:a0:ce:2e:57:44:45:b3:4d:d0:3c:a9:3d:f0: cc:5d:ec:a3:d0:d3:21:42:08:aa:89:e6:86:63:b9: 14:82:7d:a9:10:37:e1:51:b8:25:23:81:36:a8:10: d9:d2:c8:18:e5:07:6b:5f:b2:08:14:1a:e7:0f:50: ff:69:ab:54:f9:73:b5:7d:2f:b4:69:7b:e0:84:15: 0c:d9:27:fc:d6:c2:dc:63:17:20:2a:dc:c5:c9:5c: c2:52:3b:cd:96:e7:56:c6:4c:31:69:b8:8e:e2:aa: 26:7c:f3:f5:b6:78:0d:ed:58:8b:b9:e9:3a:e6:c2: d2:dc:5c:71:51:60:d0:03:a9:ba:81:b7:e7:12:1f: 35:9a:0c:53:42:61:c3:cd:1e:99:be:14:02:72:e0: 82:2d:de:90:33:35:bb:9f:97:04:33:5e:f3:14:72: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:5A:90:58:19:E3:DB:1C:0D:B4:AB:29:B8:6A:30:B6:23:00:E2 X509v3 Authority Key Identifier: keyid:E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:10:2b:fb:c2:32:cf:5b:32:6b:20:a2:c2:8e:32:5b:18: 43:14:e2:86:5d:94:09:42:61:5e:dc:d6:fe:31:47:0b:e7:6e: e8:a7:a3:c3:c4:58:83:01:e3:20:c7:fc:9a:7f:fc:6f:23:bb: 54:0d:90:61:53:56:e4:1c:2f:86:a4:b6:88:3d:cf:05:67:11: 49:ee:15:52:ac:ea:f6:6c:14:fa:01:3b:08:91:e5:89:c6:af: 75:a5:f0:22:36:5b:82:65:1d:10:8f:2a:4e:4b:ac:29:cc:fa: 8a:88:a1:1f:40:85:c9:95:bb:8d:85:97:f9:96:8f:85:5e:39: 0a:e5:cc:be:6e:9c:38:34:91:37:2e:1d:22:a0:20:bd:4d:af: de:c5:8d:39:87:f8:27:1b:57:fe:db:0b:68:e1:86:3d:a5:82: e4:33:9f:79:29:7b:05:50:a4:f1:2b:e7:4b:0a:d6:0f:70:62: dd:f7:9d:1b:14:20:92:a4:37:07:89:93:7c:05:9f:09:5f:bb: a1:a1:01:72:5f:8c:d9:07:ba:c8:5c:73:5c:db:4f:0a:43:57: 52:e2:7b:b0:61:0d:02:ac:4f:0f:43:c0:53:40:37:13:33:bf: d9:38:77:6d:b0:59:fc:ab:85:4b:0a:76:1c:2a:92:d6:ca:a9: 8e:b3:8f:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXY964Jh4jLESzSJdCUazG1/Q1pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY3ODI5NzcxMzNGQ0U5MDIxM0NFQkVDMzA3NjFEOThG NDdDMkY0MTAeFw0yNjExMDIxNDI2MTBaFw0yNjExMDMxNjU0MTBaMDMxMTAvBgNV BAMTKEUyNzI1QTkwNTgxOUUzREIxQzBEQjRBQjI5Qjg2QTMwQjYyMzAwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+64kBqXkWZomk+hg3Bnj2GZVQ v9mCiDZFvoKnwfaxZCq9a/mCia8qhHDUKSocBjnZ5Bm9FZMxqSmbfXjWeuRyXkAl 0G91w2zIyc0RZcfvixtl8UT+Lu1dQfOEoM4uV0RFs03QPKk98Mxd7KPQ0yFCCKqJ 5oZjuRSCfakQN+FRuCUjgTaoENnSyBjlB2tfsggUGucPUP9pq1T5c7V9L7Rpe+CE FQzZJ/zWwtxjFyAq3MXJXMJSO82W51bGTDFpuI7iqiZ88/W2eA3tWIu56TrmwtLc XHFRYNADqbqBt+cSHzWaDFNCYcPNHpm+FAJy4IIt3pAzNbuflwQzXvMUcueDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4nJakFgZ49scDbSrKbhqMLYjAOIwHwYDVR0j BBgwFoAU5ngpdxM/zpAhPOvsMHYdmPR8L0EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNThkZGEtMGZmMS00ZjZhLWJiNjYtNjBmNGNhMDRjNDkwLzAvRTY3ODI5Nzcx MzNGQ0U5MDIxM0NFQkVDMzA3NjFEOThGNDdDMkY0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjc4Mjk3NzEzM0ZDRTkwMjEzQ0VCRUMzMDc2MUQ5OEY0N0My RjQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvRTY3ODI5NzcxMzNGQ0U5MDIxM0NFQkVDMzA3NjFE OThGNDdDMkY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIHECv7wjLPWzJrIKLCjjJbGEMU4oZdlAlC YV7c1v4xRwvnbuino8PEWIMB4yDH/Jp//G8ju1QNkGFTVuQcL4aktog9zwVnEUnu FVKs6vZsFPoBOwiR5YnGr3Wl8CI2W4JlHRCPKk5LrCnM+oqIoR9AhcmVu42Fl/mW j4VeOQrlzL5unDg0kTcuHSKgIL1Nr97FjTmH+CcbV/7bC2jhhj2lguQzn3kpewVQ pPEr50sK1g9wYt33nRsUIJKkNweJk3wFnwlfu6GhAXJfjNkHushcc1zbTwpDV1Li e7BhDQKsTw9DwFNANxMzv9k4d22wWfyrhUsKdhwqktbKqY6zj7A= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:55 2026 by rpki-client