$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft (raw, json) Hash identifier: slgD+q+v5lX8QA0M+4G0tN+m+/vOMkzMvsqqyofpEZY= Subject key identifier: DA:D6:38:28:A6:F0:74:89:5A:D0:39:5A:CD:93:5C:1C:12:EE:53:28 Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Certificate serial: 7BCCA0F3333A7B190C8EE517C92AB6C9B7242BA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 14:15:52 +0000 Manifest this update: Mon 02 Nov 2026 14:10:52 +0000 Manifest next update: Tue 03 Nov 2026 14:31:52 +0000 Files and hashes: 1: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl (hash: udKzyKU58kcBRE7cAbG2ZcjoqnivpPK7R72IEst7l9c=) 2: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=) 3: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: 18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=) 4: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: ZPdcFv71Hcn3YAeVTYCVX3MD4vGj6utOnAFPRD2DXHY=) 5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cc:a0:f3:33:3a:7b:19:0c:8e:e5:17:c9:2a:b6:c9:b7:24:2b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Validity Not Before: Nov 2 14:10:52 2026 GMT Not After : Nov 3 14:31:52 2026 GMT Subject: CN=DAD63828A6F074895AD0395ACD935C1C12EE5328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:b2:d6:e1:41:a7:0b:ad:a0:49:48:7d:08: 33:f0:89:35:e8:61:e1:40:a8:29:bf:d3:fc:1a:04: cf:99:52:09:4c:de:35:cb:aa:f2:83:ea:bb:a0:97: 5c:00:2b:f1:a5:c4:0c:6e:6c:04:5f:bc:60:0d:a5: 9b:69:b0:74:cc:b3:1a:ef:d7:30:f1:a5:dc:02:c9: 99:9a:8d:50:a4:50:f4:7a:15:17:c1:85:e4:ae:da: 5e:7a:66:74:a6:1f:00:12:95:fa:9e:52:1e:35:35: b8:1b:10:62:1a:9e:78:d7:89:17:df:69:e3:70:6b: 6e:1e:1c:6a:44:77:81:dd:aa:98:e3:98:16:4b:f8: 23:cf:71:60:d6:0e:27:c2:d5:a9:19:7f:99:f4:51: 16:5a:b6:81:34:ef:ca:91:fd:ab:4e:99:8f:ab:37: 9f:dc:61:e9:4a:16:0d:6f:9b:b6:88:3a:38:9e:5d: 04:e9:40:68:d8:d5:9a:7e:aa:ba:13:0d:cb:90:ef: 86:7e:c1:a5:c4:2c:a3:ee:29:d8:db:3e:05:e9:63: 1f:c5:c9:1f:df:f2:2e:2d:d2:4e:f1:3d:19:6f:07: fd:1d:18:e5:a0:7f:28:64:37:6d:ea:18:cf:29:f9: 65:d7:5b:44:d0:e1:4a:8d:03:85:cc:53:01:d9:a2: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D6:38:28:A6:F0:74:89:5A:D0:39:5A:CD:93:5C:1C:12:EE:53:28 X509v3 Authority Key Identifier: keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:70:dd:2c:2e:1e:61:a8:ed:66:5d:33:da:dd:c9:e9:03:2f: b4:17:4e:8f:b4:b4:31:c6:f0:31:9c:09:b9:3b:d3:3e:cf:07: 68:f0:fa:f6:ef:b6:77:5e:fd:01:d5:b9:82:77:c7:39:b6:28: e3:02:f7:09:bb:87:67:55:98:15:c2:16:71:11:09:7c:64:09: f9:08:aa:c9:75:5d:ea:ea:6a:83:b6:97:d7:33:31:0a:f0:7d: d5:42:b3:9c:1f:e6:11:1a:bc:b6:eb:0d:ff:0b:12:b7:31:82: ed:32:05:a7:88:02:54:81:6c:fa:3f:61:7f:50:25:d9:e3:e0: 76:59:55:7e:b1:6b:eb:63:94:e5:93:87:06:71:64:e8:6d:d1: c4:4a:85:54:0c:ed:e1:61:d4:3b:5e:4e:f6:15:1a:df:83:83: 65:ad:26:6c:ad:8b:e5:49:ea:37:9f:cd:8b:6e:33:11:17:a7: ab:0a:96:e9:d9:7d:0a:19:81:aa:12:28:a6:47:66:50:2a:84: b8:50:09:80:93:59:36:70:c2:c2:49:4f:10:75:24:ee:12:2a: 4e:f2:76:10:69:73:0c:b0:f5:30:0b:a4:33:aa:fb:3b:51:64: ab:52:09:0c:f4:fd:17:46:58:5f:03:51:0e:3f:99:f4:b0:73: 6b:5f:df:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8yg8zM6exkMjuUXySq2ybckK6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0 RjRBMkVGMTAeFw0yNjExMDIxNDEwNTJaFw0yNjExMDMxNDMxNTJaMDMxMTAvBgNV BAMTKERBRDYzODI4QTZGMDc0ODk1QUQwMzk1QUNEOTM1QzFDMTJFRTUzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCrLW4UGnC62gSUh9CDPwiTXo YeFAqCm/0/waBM+ZUglM3jXLqvKD6rugl1wAK/GlxAxubARfvGANpZtpsHTMsxrv 1zDxpdwCyZmajVCkUPR6FRfBheSu2l56ZnSmHwASlfqeUh41NbgbEGIannjXiRff aeNwa24eHGpEd4HdqpjjmBZL+CPPcWDWDifC1akZf5n0URZatoE078qR/atOmY+r N5/cYelKFg1vm7aIOjieXQTpQGjY1Zp+qroTDcuQ74Z+waXELKPuKdjbPgXpYx/F yR/f8i4t0k7xPRlvB/0dGOWgfyhkN23qGM8p+WXXW0TQ4UqNA4XMUwHZouMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2tY4KKbwdIla0DlazZNcHBLuUygwHwYDVR0j BBgwFoAUwHSD/Rj/GDnmKiT/jtYHpE9KLvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY3ZmI4MzctMWIyZi00YzRlLWI5OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQx OEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0RjRBMkVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDc0ODNGRDE4RkYxODM5RTYyQTI0RkY4RUQ2MDdBNDRGNEEy RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3 QTQ0RjRBMkVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlw3SwuHmGo7WZdM9rdyekDL7QXTo+0tDHG 8DGcCbk70z7PB2jw+vbvtnde/QHVuYJ3xzm2KOMC9wm7h2dVmBXCFnERCXxkCfkI qsl1XerqaoO2l9czMQrwfdVCs5wf5hEavLbrDf8LErcxgu0yBaeIAlSBbPo/YX9Q Jdnj4HZZVX6xa+tjlOWThwZxZOht0cRKhVQM7eFh1DteTvYVGt+Dg2WtJmyti+VJ 6jefzYtuMxEXp6sKlunZfQoZgaoSKKZHZlAqhLhQCYCTWTZwwsJJTxB1JO4SKk7y dhBpcwyw9TALpDOq+ztRZKtSCQz0/RdGWF8DUQ4/mfSwc2tf3wI= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:11 2026 by rpki-client