$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: DHgiU7Uyi13D3+qk/4otF4hrHWoc6OgdULXKTgtyGG0= Subject key identifier: 9A:1F:0F:2E:22:28:9B:A6:D2:E3:B7:A4:93:54:EF:FC:BA:0A:EE:EE Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 2775D47DA45339072FBEE6575A9FB3E3FFF4308A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 08:08:26 +0000 Manifest this update: Wed 04 Nov 2026 08:03:26 +0000 Manifest next update: Thu 05 Nov 2026 08:17:26 +0000 Files and hashes: 1: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: 5beO1oRxd/p5COuc88bAX9E/3/w+koB5cci8BG0Pgtk=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 4: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:75:d4:7d:a4:53:39:07:2f:be:e6:57:5a:9f:b3:e3:ff:f4:30:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Nov 4 08:03:26 2026 GMT Not After : Nov 5 08:17:26 2026 GMT Subject: CN=9A1F0F2E22289BA6D2E3B7A49354EFFCBA0AEEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:6e:c8:34:0a:7a:9a:76:d9:b4:b5:1a:f8: f7:89:14:27:cf:60:76:9a:f6:80:d7:ec:aa:2a:ee: 8c:39:69:a2:3d:4c:1b:98:d5:c7:43:27:31:31:43: db:0a:fd:64:5e:b7:ef:73:91:57:80:99:fc:4e:e8: b9:70:c4:8f:e7:22:ca:14:ae:e7:80:3a:71:2a:f5: 63:95:4c:d6:0c:3e:e8:8e:fa:76:a6:4e:b5:23:a2: 47:23:d1:cf:06:10:ae:0d:52:0a:22:a4:34:53:dd: 09:bc:67:d9:46:22:ae:9e:80:ba:a2:89:57:88:f2: 6d:57:dc:3a:f8:1e:5c:0b:98:a9:69:3a:b6:5e:18: 88:e0:e4:d4:49:33:a1:06:0e:12:7e:79:c7:b0:c9: 5f:d5:d6:b2:7d:1e:b5:cf:d9:4c:0d:0e:5b:66:81: 34:76:49:bf:87:d5:83:2c:0c:08:4e:87:22:56:c3: ad:e6:7b:26:d4:d1:73:ef:99:c5:bc:79:89:26:a5: 0e:02:69:04:64:41:54:10:9b:31:34:c7:03:e3:13: c3:bc:a7:55:55:65:e8:bd:3e:61:08:80:31:96:33: 80:ea:f0:ad:04:4c:2d:bd:5e:73:4e:99:8a:ec:2d: 65:a1:ed:7f:30:3e:38:ea:a0:14:dd:69:bc:f0:22: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1F:0F:2E:22:28:9B:A6:D2:E3:B7:A4:93:54:EF:FC:BA:0A:EE:EE X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:45:c4:49:30:c1:80:f1:ea:81:30:e1:66:7b:3a:1c:57:8a: 5c:6d:f1:2e:67:67:5c:5c:3f:19:8a:72:0b:47:be:ce:60:19: 4c:3d:c2:90:6b:1c:e7:6f:92:0a:47:93:8d:8c:91:9d:79:30: 23:8e:43:23:85:92:ce:a6:b3:51:12:f3:d5:47:22:8f:6c:50: 65:56:3a:4b:a3:50:fa:36:99:03:a2:47:f0:6b:24:61:2b:3f: 13:f1:3e:d1:5a:b5:02:40:23:7b:b8:59:d7:b0:a2:88:5d:7a: 7c:88:19:43:f6:32:6b:26:a2:8f:5a:fe:9f:09:6f:a9:30:4f: ac:78:73:0a:ec:d9:3b:3f:cd:4c:f8:99:83:14:fa:b8:47:68: 98:92:54:1d:2e:08:e5:24:64:fb:bc:87:22:6b:b1:b9:c3:06: 4c:34:02:15:1d:e6:51:da:a2:d8:d1:cb:a7:bd:58:7c:80:20: 3b:f8:98:23:63:5c:d0:60:d2:e8:b9:22:1c:57:a3:bb:6e:66: 6c:3f:df:af:b1:36:3a:5e:da:95:a0:18:6e:ba:69:67:9e:a3: 99:85:8c:4b:57:e4:da:bc:a9:fd:e9:23:0e:26:88:88:aa:ad: 95:8c:95:0b:a7:ab:80:50:e6:96:57:94:1b:3e:83:ec:b2:aa: ac:d0:81:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3XUfaRTOQcvvuZXWp+z4//0MIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjExMDQwODAzMjZaFw0yNjExMDUwODE3MjZaMDMxMTAvBgNV BAMTKDlBMUYwRjJFMjIyODlCQTZEMkUzQjdBNDkzNTRFRkZDQkEwQUVFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoP27INAp6mnbZtLUa+PeJFCfP YHaa9oDX7Koq7ow5aaI9TBuY1cdDJzExQ9sK/WRet+9zkVeAmfxO6LlwxI/nIsoU rueAOnEq9WOVTNYMPuiO+namTrUjokcj0c8GEK4NUgoipDRT3Qm8Z9lGIq6egLqi iVeI8m1X3Dr4HlwLmKlpOrZeGIjg5NRJM6EGDhJ+ecewyV/V1rJ9HrXP2UwNDltm gTR2Sb+H1YMsDAhOhyJWw63meybU0XPvmcW8eYkmpQ4CaQRkQVQQmzE0xwPjE8O8 p1VVZei9PmEIgDGWM4Dq8K0ETC29XnNOmYrsLWWh7X8wPjjqoBTdabzwIm9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmh8PLiIom6bS47ekk1Tv/LoK7u4wHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINFxEkwwYDx6oEw4WZ7OhxXilxt8S5nZ1xc PxmKcgtHvs5gGUw9wpBrHOdvkgpHk42MkZ15MCOOQyOFks6ms1ES89VHIo9sUGVW OkujUPo2mQOiR/BrJGErPxPxPtFatQJAI3u4WdewoohdenyIGUP2Mmsmoo9a/p8J b6kwT6x4cwrs2Ts/zUz4mYMU+rhHaJiSVB0uCOUkZPu8hyJrsbnDBkw0AhUd5lHa otjRy6e9WHyAIDv4mCNjXNBg0ui5IhxXo7tuZmw/36+xNjpe2pWgGG66aWeeo5mF jEtX5Nq8qf3pIw4miIiqrZWMlQunq4BQ5pZXlBs+g+yyqqzQgd4= -----END CERTIFICATE-----Generated at Thu Nov 5 01:25:50 2026 by rpki-client