$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: NwmPwqTQgUddvCqBBDhv5NRnFFX0eDghtbnGmCkvQpM= Subject key identifier: D1:54:E1:20:F8:D8:B6:2D:EA:DD:B9:13:77:3F:9F:00:41:F8:50:B0 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 132ECE5A0B9E32590A036BE7CD0BB5110BB8E39C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: ED Signing time: Sun 25 Oct 2026 15:15:40 +0000 Manifest this update: Sun 25 Oct 2026 15:10:40 +0000 Manifest next update: Mon 26 Oct 2026 16:25:40 +0000 Files and hashes: 1: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: bZIsWlq+UKPXgrsno6z/YhFG6lvNkAqRcxAzO3MFeJc=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 4: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2e:ce:5a:0b:9e:32:59:0a:03:6b:e7:cd:0b:b5:11:0b:b8:e3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Oct 25 15:10:40 2026 GMT Not After : Oct 26 16:25:40 2026 GMT Subject: CN=D154E120F8D8B62DEADDB913773F9F0041F850B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:cf:ad:54:3d:01:50:7d:09:a6:49:af:60: 21:f1:01:20:dd:a1:be:62:75:6a:da:d6:e6:4b:6e: 8b:80:86:4f:7c:e8:6b:8e:57:42:9c:1c:a2:4d:2c: f8:1e:7b:44:88:76:4c:ff:f1:4b:b7:82:7c:43:c5: fd:b9:4d:57:35:22:3e:3c:7f:9f:45:22:0a:8f:8b: 85:07:83:13:c7:aa:e2:54:fc:e1:e3:94:e4:84:22: eb:b0:8a:be:63:00:27:b7:23:45:37:df:1b:07:51: f8:a3:cb:5a:03:7c:e4:ef:ed:8f:a1:99:3d:56:10: 53:7e:16:de:95:e8:a3:43:61:dd:a0:2b:e7:d2:8d: c9:de:a7:2c:9f:2f:ae:1e:05:7d:5a:f7:8e:43:14: 1d:87:8f:3b:eb:d8:04:22:18:f3:8d:5c:de:f0:b7: 8e:7e:a3:7d:79:ee:06:3a:9c:9d:cc:fb:f5:64:11: 8b:c8:94:10:da:3c:e7:0b:90:a5:93:2b:5e:3e:ba: 9b:35:3c:7a:07:ee:92:61:97:1b:03:21:f5:91:43: 0f:79:c3:e0:17:f7:85:f6:f3:33:21:2d:0d:52:dd: 3b:89:9f:3d:b7:f8:59:49:8e:47:b8:f4:1f:c0:cf: ee:0c:62:15:bf:7c:a7:d4:b1:51:85:15:f3:58:8a: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:E1:20:F8:D8:B6:2D:EA:DD:B9:13:77:3F:9F:00:41:F8:50:B0 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:aa:61:05:51:a9:ac:7f:66:8c:c8:84:f4:99:f1:e6:50:2b: 1e:11:4a:a7:6d:49:04:6d:ed:ac:f0:fb:50:ee:78:d7:48:0a: e5:a0:ef:e8:eb:f7:3e:fa:f8:93:03:c6:7d:7d:cc:ba:d9:ae: 07:a5:2b:94:5a:2d:c3:aa:40:be:00:cc:4e:35:0a:28:43:2c: 47:0b:de:07:87:8d:e7:9a:e7:28:9e:57:92:ef:06:77:83:f5: 23:89:6c:1a:eb:f3:b6:76:fd:55:c5:85:c2:7a:40:f2:35:0c: fd:bc:cb:b2:9f:42:4a:63:d3:88:b3:3e:3f:ac:12:f8:a9:4e: 23:93:20:90:be:26:1f:27:c2:26:6c:92:d2:e2:d4:c7:52:cc: 41:07:ce:55:46:a2:6c:83:a7:21:8c:a8:f7:05:2a:9c:1e:2b: b7:e2:bb:72:0a:67:01:e2:70:47:b0:20:c2:e5:f4:15:9e:20: e8:1e:fb:46:e7:22:3b:c6:79:57:44:60:4b:8b:67:39:21:66: cd:10:13:28:85:18:ea:f1:14:69:62:02:74:cb:34:20:9e:f4: 35:5f:21:12:7b:1d:4b:1c:97:c7:bb:2e:a7:81:7b:71:f9:d0: 07:e4:48:58:d0:a5:25:2e:ec:c9:2c:69:b2:51:4f:12:e9:e8: df:f9:1f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEy7OWgueMlkKA2vnzQu1EQu445wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjEwMjUxNTEwNDBaFw0yNjEwMjYxNjI1NDBaMDMxMTAvBgNV BAMTKEQxNTRFMTIwRjhEOEI2MkRFQUREQjkxMzc3M0Y5RjAwNDFGODUwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwB8+tVD0BUH0JpkmvYCHxASDd ob5idWra1uZLbouAhk986GuOV0KcHKJNLPgee0SIdkz/8Uu3gnxDxf25TVc1Ij48 f59FIgqPi4UHgxPHquJU/OHjlOSEIuuwir5jACe3I0U33xsHUfijy1oDfOTv7Y+h mT1WEFN+Ft6V6KNDYd2gK+fSjcnepyyfL64eBX1a945DFB2Hjzvr2AQiGPONXN7w t45+o3157gY6nJ3M+/VkEYvIlBDaPOcLkKWTK14+ups1PHoH7pJhlxsDIfWRQw95 w+AX94X28zMhLQ1S3TuJnz23+FlJjke49B/Az+4MYhW/fKfUsVGFFfNYiqvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VThIPjYti3q3bkTdz+fAEH4ULAwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCqYQVRqax/ZozIhPSZ8eZQKx4RSqdtSQRt 7azw+1DueNdICuWg7+jr9z76+JMDxn19zLrZrgelK5RaLcOqQL4AzE41CihDLEcL 3geHjeea5yieV5LvBneD9SOJbBrr87Z2/VXFhcJ6QPI1DP28y7KfQkpj04izPj+s EvipTiOTIJC+Jh8nwiZsktLi1MdSzEEHzlVGomyDpyGMqPcFKpweK7fiu3IKZwHi cEewIMLl9BWeIOge+0bnIjvGeVdEYEuLZzkhZs0QEyiFGOrxFGliAnTLNCCe9DVf IRJ7HUscl8e7LqeBe3H50AfkSFjQpSUu7MksabJRTxLp6N/5H4g= -----END CERTIFICATE-----Generated at Sun Oct 25 18:47:41 2026 by rpki-client