$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json) Hash identifier: 0o2i5PyGdZwj3atTz4yAFR9VLo+V8xx+hrFbGTsTcBE= Subject key identifier: E4:93:5D:32:58:B2:BA:FA:9A:34:F2:FA:E5:3C:9D:CA:EB:AF:9C:C1 Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Certificate serial: 06E160EA8954436E0F2261FDD2F71ADC5D8B45D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 01:24:49 +0000 Manifest this update: Wed 04 Nov 2026 01:19:49 +0000 Manifest next update: Thu 05 Nov 2026 02:28:49 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=) 2: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: a/bs3Et/M2CW9k2oenAs3OBOTegjSzMvVdeFdakmBU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e1:60:ea:89:54:43:6e:0f:22:61:fd:d2:f7:1a:dc:5d:8b:45:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Validity Not Before: Nov 4 01:19:49 2026 GMT Not After : Nov 5 02:28:49 2026 GMT Subject: CN=E4935D3258B2BAFA9A34F2FAE53C9DCAEBAF9CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:d3:07:b0:4e:e4:67:d9:0c:d2:02:49:78: bc:6d:2f:bc:0a:7d:ae:d5:10:93:6c:19:f6:7b:93: bf:e9:9f:2b:5b:dd:82:6a:53:72:d7:c5:55:48:8e: a0:06:5c:c3:9b:d1:0d:79:11:d1:c9:10:be:36:71: 19:0e:2e:5b:c3:d2:ef:c1:9d:5e:92:92:f8:c3:be: df:79:25:79:5d:44:84:13:9b:f9:34:f7:c4:ea:c7: 78:1a:64:67:03:f3:6c:54:5c:6b:4a:ee:13:9c:7f: b3:5a:c1:ed:46:0e:3a:19:f3:0d:31:ce:6f:92:52: b2:83:85:38:71:39:97:cd:26:e2:1a:c7:80:d8:f8: 6b:49:3b:3d:02:e6:0b:c5:28:36:40:65:1f:79:d5: 81:4d:40:63:fa:6e:19:0e:74:a5:67:9e:40:4c:5a: a2:fc:49:11:dc:f4:f6:b3:0e:15:9b:af:bc:08:6d: df:87:0d:05:87:2f:17:49:88:a8:3c:b0:7a:23:b9: a7:1c:65:7a:39:42:bb:c8:dd:21:1c:1f:a3:1f:b0: 07:7a:d3:27:ce:ff:04:4c:28:ef:83:5d:6c:5b:35: 32:b7:75:c9:2b:f8:58:16:36:43:d0:40:31:3b:40: ec:d6:e7:7a:2f:3c:95:0b:ed:e4:7d:70:00:f5:81: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:5D:32:58:B2:BA:FA:9A:34:F2:FA:E5:3C:9D:CA:EB:AF:9C:C1 X509v3 Authority Key Identifier: keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:dd:f5:32:7b:83:fd:90:4c:95:81:0f:d2:d4:8a:cd:5b:02: 63:bb:ed:1c:2d:d3:c5:e3:df:07:30:da:5d:03:a3:03:93:bd: ae:1e:f0:b6:12:ad:40:5e:68:53:db:d8:46:3a:84:7f:dc:0a: b3:2a:7f:6f:92:66:13:46:21:ec:81:13:32:e1:c5:52:e2:19: ad:f7:02:55:b2:8c:13:46:2a:d7:11:99:72:9b:39:b3:b1:c3: 97:35:0c:4e:60:60:2f:54:81:92:52:20:c1:c6:59:73:60:62: 49:da:3d:56:fa:8f:0e:88:20:3f:df:ca:94:7b:0f:bc:b7:a7: f3:92:e1:22:d7:a9:85:57:57:e1:33:ec:0c:33:fd:a0:3b:62: f4:44:77:9e:9e:e4:81:cc:fe:e6:eb:10:3c:f6:61:b9:80:07: 43:23:7a:81:3b:01:a2:0d:40:cc:fe:48:00:9d:cd:1b:ee:de: 8e:72:2c:f7:b1:37:73:6e:28:54:b8:96:b2:12:88:1d:ad:01: fa:84:d9:ad:4e:a6:f0:9a:a5:f8:07:71:9b:7d:cf:58:5d:10: 9f:1f:82:6a:f4:60:62:4b:05:8e:c7:f4:47:6c:92:45:d9:d5: a4:5c:0f:88:da:01:3a:31:36:d4:6b:f3:af:84:f1:8c:e2:22: 8f:0d:fa:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuFg6olUQ24PImH90vca3F2LRdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3 NjQ2RjgxQzAeFw0yNjExMDQwMTE5NDlaFw0yNjExMDUwMjI4NDlaMDMxMTAvBgNV BAMTKEU0OTM1RDMyNThCMkJBRkE5QTM0RjJGQUU1M0M5RENBRUJBRjlDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/tMHsE7kZ9kM0gJJeLxtL7wK fa7VEJNsGfZ7k7/pnytb3YJqU3LXxVVIjqAGXMOb0Q15EdHJEL42cRkOLlvD0u/B nV6SkvjDvt95JXldRIQTm/k098Tqx3gaZGcD82xUXGtK7hOcf7Nawe1GDjoZ8w0x zm+SUrKDhThxOZfNJuIax4DY+GtJOz0C5gvFKDZAZR951YFNQGP6bhkOdKVnnkBM WqL8SRHc9PazDhWbr7wIbd+HDQWHLxdJiKg8sHojuaccZXo5QrvI3SEcH6MfsAd6 0yfO/wRMKO+DXWxbNTK3dckr+FgWNkPQQDE7QOzW53ovPJUL7eR9cAD1ga/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5JNdMliyuvqaNPL65TydyuuvnMEwHwYDVR0j BBgwFoAUwQQ3ITd0x8K7W8m6dkm3LXZG+BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBhOGNlNmMtODI5MC00YjlkLTlhZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEz Nzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3NjQ2RjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTA0MzcyMTM3NzRDN0MyQkI1QkM5QkE3NjQ5QjcyRDc2NDZG ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3 MkQ3NjQ2RjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLd9TJ7g/2QTJWBD9LUis1bAmO77Rwt08Xj 3wcw2l0DowOTva4e8LYSrUBeaFPb2EY6hH/cCrMqf2+SZhNGIeyBEzLhxVLiGa33 AlWyjBNGKtcRmXKbObOxw5c1DE5gYC9UgZJSIMHGWXNgYknaPVb6jw6IID/fypR7 D7y3p/OS4SLXqYVXV+Ez7Awz/aA7YvREd56e5IHM/ubrEDz2YbmAB0MjeoE7AaIN QMz+SACdzRvu3o5yLPexN3NuKFS4lrISiB2tAfqE2a1OpvCapfgHcZt9z1hdEJ8f gmr0YGJLBY7H9EdskkXZ1aRcD4jaAToxNtRr86+E8YziIo8N+uY= -----END CERTIFICATE-----Generated at Wed Nov 4 17:05:17 2026 by rpki-client