$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json) Hash identifier: MWA4Z50RfdBJTS2x/UglEpYSm5ce2NlIM/LArUdJiNM= Subject key identifier: B1:E6:B0:69:14:75:8C:68:A7:9E:EB:3A:C0:20:68:E1:C3:29:6B:0D Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Certificate serial: E18D5B57B28CBDBEFB5E944597B83275F6A13A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 18:25:36 +0000 Manifest this update: Tue 03 Nov 2026 18:20:36 +0000 Manifest next update: Wed 04 Nov 2026 20:57:36 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=) 2: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: aym/yAt0n/FrXeQXzRWl0LKj7YDjrjQJ2l8Dl5PTJwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e1:8d:5b:57:b2:8c:bd:be:fb:5e:94:45:97:b8:32:75:f6:a1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Validity Not Before: Nov 3 18:20:36 2026 GMT Not After : Nov 4 20:57:36 2026 GMT Subject: CN=B1E6B06914758C68A79EEB3AC02068E1C3296B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:b3:aa:95:d2:09:27:2b:a7:45:08:93:a6: 2f:98:7a:56:21:bd:d8:b6:18:71:d2:95:2b:80:4b: 6e:cc:96:aa:29:38:15:4a:0d:85:81:c4:a6:c9:1b: 12:7c:07:89:41:52:cc:bf:a1:f8:02:b1:ad:bd:5d: 8e:ab:48:f3:a7:7a:c1:81:53:15:35:4f:41:a3:f5: f6:07:0b:0f:3f:8f:94:c6:ab:3e:7f:c3:f6:d2:a2: 70:7a:75:d8:99:a2:7d:3c:32:43:42:5e:a9:16:31: cb:6e:ac:73:42:a3:92:9a:19:88:d8:96:d1:e3:81: 51:08:df:37:93:2c:0f:7c:47:1d:e2:fd:1f:0e:e5: 0d:51:6a:d2:f8:90:1f:5e:45:5d:6b:f5:1c:14:81: 44:15:9f:36:9a:34:b5:25:6b:24:4c:64:0c:44:f5: aa:64:59:38:a1:72:5c:05:68:c8:65:f7:6e:03:59: ff:6e:fb:31:dc:d9:e9:f4:48:b5:09:ec:f2:f7:b1: ac:9c:b6:21:28:64:b0:90:30:5b:58:57:32:fa:e2: eb:a1:2f:c2:0d:ed:e8:5e:63:8c:6b:9d:77:97:d6: f0:92:25:06:f7:a2:ee:9a:49:b6:54:37:8c:25:d8: 10:94:eb:80:83:37:4e:cd:c0:6b:cb:82:c9:e7:e5: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E6:B0:69:14:75:8C:68:A7:9E:EB:3A:C0:20:68:E1:C3:29:6B:0D X509v3 Authority Key Identifier: keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1f:f1:8e:b6:53:08:d4:7d:3d:e4:f9:16:86:49:b0:b1:6c: 3f:0c:af:bc:e7:bc:c1:57:dc:19:ec:68:ec:f1:80:7c:fc:6d: d2:ad:e6:f7:0d:14:dd:12:aa:c2:3c:dc:98:9c:b5:d7:ce:d2: ab:be:6f:47:dc:cd:20:f8:dc:7b:4c:22:ab:18:bb:89:0d:97: 89:87:22:ad:44:88:24:75:29:fe:cd:8e:82:cb:8b:17:4a:53: 3e:bf:d7:ff:39:f2:f8:61:a2:9b:2c:a8:6e:f7:66:39:62:30: 88:d8:b3:36:20:f7:74:d8:0d:ad:f8:bb:28:a5:65:b2:53:4d: bf:fc:82:2d:e7:05:26:67:13:54:ba:92:d1:8e:f9:4c:58:aa: 03:57:b4:c9:0d:1a:f4:ab:65:5b:26:11:6a:29:f3:a6:ef:30: e8:7b:89:1d:2d:f2:5c:57:72:88:15:31:59:4d:17:38:9d:10: 22:bf:00:ca:d8:d1:51:72:64:b9:2b:f3:52:dd:77:3d:26:27: 50:c3:68:fe:4c:a3:5e:1c:bf:79:b2:07:28:d2:8b:8e:dd:c0: bd:bc:b0:76:fd:e1:8a:1e:fc:f0:0f:78:9d:5b:31:13:a9:9a: 9f:9f:f9:85:02:a6:4d:42:fa:f3:70:1f:1a:7f:b7:d6:ce:66: ac:6e:ab:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOGNW1eyjL2++16URZe4MnX2oTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2 RjJGMUVDRjAeFw0yNjExMDMxODIwMzZaFw0yNjExMDQyMDU3MzZaMDMxMTAvBgNV BAMTKEIxRTZCMDY5MTQ3NThDNjhBNzlFRUIzQUMwMjA2OEUxQzMyOTZCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwh7OqldIJJyunRQiTpi+YelYh vdi2GHHSlSuAS27MlqopOBVKDYWBxKbJGxJ8B4lBUsy/ofgCsa29XY6rSPOnesGB UxU1T0Gj9fYHCw8/j5TGqz5/w/bSonB6ddiZon08MkNCXqkWMcturHNCo5KaGYjY ltHjgVEI3zeTLA98Rx3i/R8O5Q1RatL4kB9eRV1r9RwUgUQVnzaaNLUlayRMZAxE 9apkWTihclwFaMhl924DWf9u+zHc2en0SLUJ7PL3sayctiEoZLCQMFtYVzL64uuh L8IN7eheY4xrnXeX1vCSJQb3ou6aSbZUN4wl2BCU64CDN07NwGvLgsnn5UXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseawaRR1jGinnus6wCBo4cMpaw0wHwYDVR0j BBgwFoAUfSGdtIzfdDiYo2/udPqIv28vHs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQyYjRmNzctNzRkMC00Nzk3LWFlZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4 Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2RjJGMUVDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDIxOURCNDhDREY3NDM4OThBMzZGRUU3NEZBODhCRjZGMkYx RUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4 QkY2RjJGMUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIf8Y62UwjUfT3k+RaGSbCxbD8Mr7znvMFX 3BnsaOzxgHz8bdKt5vcNFN0SqsI83JictdfO0qu+b0fczSD43HtMIqsYu4kNl4mH Iq1EiCR1Kf7NjoLLixdKUz6/1/858vhhopssqG73ZjliMIjYszYg93TYDa34uyil ZbJTTb/8gi3nBSZnE1S6ktGO+UxYqgNXtMkNGvSrZVsmEWop86bvMOh7iR0t8lxX cogVMVlNFzidECK/AMrY0VFyZLkr81Lddz0mJ1DDaP5Mo14cv3myByjSi47dwL28 sHb94Yoe/PAPeJ1bMROpmp+f+YUCpk1C+vNwHxp/t9bOZqxuqw8= -----END CERTIFICATE-----Generated at Wed Nov 4 07:34:33 2026 by rpki-client