$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: d4UwdunBJ0hdP/kW85ksqogveX+FXzD4pgmJCzCQSVs= Subject key identifier: 8D:B6:B1:B6:FF:0D:59:E6:8D:F1:9E:95:96:8A:F9:C5:C1:76:CF:25 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 3926FBF845E283A7113D78DADD5ECC71008DA8DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 16:18:21 +0000 Manifest this update: Mon 02 Nov 2026 16:13:21 +0000 Manifest next update: Tue 03 Nov 2026 18:53:21 +0000 Files and hashes: 1: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) 2: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 3: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 4: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: hkpcd6ILrRfVYgMG6kvF1BgLrOGbpefHHJ7dIzMd3zg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:fb:f8:45:e2:83:a7:11:3d:78:da:dd:5e:cc:71:00:8d:a8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Nov 2 16:13:21 2026 GMT Not After : Nov 3 18:53:21 2026 GMT Subject: CN=8DB6B1B6FF0D59E68DF19E95968AF9C5C176CF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e6:ec:e0:7e:9f:ba:11:58:05:16:74:9f:ee: 06:d8:b2:43:1c:d5:fb:0e:2d:13:d6:d4:d7:fc:ab: dc:56:25:24:3d:79:68:4f:cc:77:e3:f3:b2:92:3f: 4c:e9:70:a6:39:1b:0a:f7:ba:e4:e4:de:b8:4b:11: 91:da:9b:35:ff:6c:04:ab:b8:05:a2:8c:47:56:66: 22:8a:ec:5f:66:35:f5:fe:b1:5c:58:f3:d9:cd:58: 4f:5b:37:90:24:e2:52:f7:f5:d2:2f:48:04:67:5c: 9c:c9:ef:0c:92:b4:15:c5:fc:cc:41:d5:cd:51:b2: bd:92:1c:d2:dc:f6:34:5c:7f:a9:10:6a:77:86:36: 43:2c:9f:b6:57:3c:25:f2:c9:a9:2d:5a:52:33:63: fd:2e:d2:46:2c:8c:87:24:86:e0:1c:be:97:96:23: 00:ef:28:0f:40:52:99:1c:d2:73:1d:d8:8b:68:f2: 60:80:76:36:04:15:37:26:a8:f3:6c:b1:20:3c:d1: 44:77:0e:a4:11:a5:f7:99:32:2d:b3:f7:2b:d6:6f: 3c:a1:1e:ad:68:94:34:e0:28:d5:0d:46:0c:e4:0e: e6:46:1a:34:e1:8b:f3:be:62:a1:3d:6f:9d:c2:d4: 76:d3:9d:b7:5f:76:40:32:84:5c:44:c7:65:16:7d: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B6:B1:B6:FF:0D:59:E6:8D:F1:9E:95:96:8A:F9:C5:C1:76:CF:25 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fa:a5:53:e4:8b:fc:ee:15:f8:4e:40:11:96:a0:41:2c:82: 32:f7:eb:bc:da:17:17:ea:b4:24:e5:44:2d:eb:bd:b5:6a:51: 31:41:be:d1:9c:19:e4:ac:21:24:f1:f0:be:3f:4f:1b:0e:39: 3f:ee:0a:b2:6a:d2:fe:7c:9a:b1:85:84:42:80:f5:b2:1b:28: f8:5b:7f:5d:eb:0f:9f:ab:8c:61:af:b6:6c:31:34:68:33:67: 4e:dc:ba:ae:34:f6:e8:37:f5:86:c9:a2:cc:85:0b:3e:5a:55: 73:2f:4f:0c:4c:1c:59:37:ac:a1:1c:b6:fc:48:6f:5b:75:9c: 74:2b:56:a4:84:a9:ce:e3:8c:2e:e6:5b:e4:6b:58:94:91:d4: 31:9d:0f:1e:7a:1a:f8:53:16:b8:ba:7b:54:d1:71:e9:a3:46: 17:ee:24:11:91:42:db:cc:fb:a1:f7:dc:c7:e2:9f:7b:b1:d7: d1:67:1b:a4:62:0e:c6:f9:be:fe:81:a3:41:1b:ce:cd:f5:d0: 25:c9:6e:40:c9:85:27:b4:ef:38:db:2d:e6:ab:a5:8f:b9:c9: 5c:b7:aa:9f:35:7e:b8:84:71:68:f0:aa:49:b8:86:30:c9:d6: 9c:56:b0:63:8f:b1:c5:7b:b3:9a:d5:08:87:7e:f4:8d:85:8d: 2e:22:30:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSb7+EXig6cRPXja3V7McQCNqN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjExMDIxNjEzMjFaFw0yNjExMDMxODUzMjFaMDMxMTAvBgNV BAMTKDhEQjZCMUI2RkYwRDU5RTY4REYxOUU5NTk2OEFGOUM1QzE3NkNGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD45uzgfp+6EVgFFnSf7gbYskMc 1fsOLRPW1Nf8q9xWJSQ9eWhPzHfj87KSP0zpcKY5Gwr3uuTk3rhLEZHamzX/bASr uAWijEdWZiKK7F9mNfX+sVxY89nNWE9bN5Ak4lL39dIvSARnXJzJ7wyStBXF/MxB 1c1Rsr2SHNLc9jRcf6kQaneGNkMsn7ZXPCXyyaktWlIzY/0u0kYsjIckhuAcvpeW IwDvKA9AUpkc0nMd2Ito8mCAdjYEFTcmqPNssSA80UR3DqQRpfeZMi2z9yvWbzyh Hq1olDTgKNUNRgzkDuZGGjThi/O+YqE9b53C1HbTnbdfdkAyhFxEx2UWfUTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjbaxtv8NWeaN8Z6Vlor5xcF2zyUwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf6pVPki/zuFfhOQBGWoEEsgjL367zaFxfq tCTlRC3rvbVqUTFBvtGcGeSsISTx8L4/TxsOOT/uCrJq0v58mrGFhEKA9bIbKPhb f13rD5+rjGGvtmwxNGgzZ07cuq409ug39YbJosyFCz5aVXMvTwxMHFk3rKEctvxI b1t1nHQrVqSEqc7jjC7mW+RrWJSR1DGdDx56GvhTFri6e1TRcemjRhfuJBGRQtvM +6H33Mfin3ux19FnG6RiDsb5vv6Bo0Ebzs310CXJbkDJhSe07zjbLearpY+5yVy3 qp81friEcWjwqkm4hjDJ1pxWsGOPscV7s5rVCId+9I2FjS4iMN0= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:52 2026 by rpki-client