$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: EuqWqFfGNQ/uUZe0yaTQLnBBgWVbH4b3VVhO/VUomFg= Subject key identifier: F0:87:AA:CE:12:F7:08:1B:40:42:D8:1E:5A:FF:E4:DF:13:F1:F3:DB Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 25291BCFEA65AE49FC3AA3E31BAA53292B7AA7D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: EF Signing time: Sun 25 Oct 2026 03:23:09 +0000 Manifest this update: Sun 25 Oct 2026 03:18:09 +0000 Manifest next update: Mon 26 Oct 2026 03:23:09 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa (hash: UfSTsOVMmUHhlSuicPfv/acnVZkznnLyaQTNx0s5r/I=) 2: 3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa (hash: 1SUvsGX664dyT73KTnssj6SLYMQJcE1PRfUOLl0J8A0=) 3: 3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa (hash: QnjSCWkwabhUboJKZ28QBKGbgaSMy7Q0+XqOshpVH5I=) 4: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) 5: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: PIffrP4QSgVGWoAOMQU8+j/OP9UHhuYw4USnWbW81Oo=) 6: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:29:1b:cf:ea:65:ae:49:fc:3a:a3:e3:1b:aa:53:29:2b:7a:a7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Oct 25 03:18:09 2026 GMT Not After : Oct 26 03:23:09 2026 GMT Subject: CN=F087AACE12F7081B4042D81E5AFFE4DF13F1F3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:6c:f2:50:d0:17:65:6c:6d:71:eb:58:e2: 60:15:4f:7c:21:f5:b9:a2:cd:80:98:46:b6:4e:2a: 0c:0f:c9:6d:42:1a:35:b7:03:3e:a6:b3:42:83:27: 94:e3:e5:1c:eb:bb:33:8c:a0:e9:85:a7:42:67:14: 22:e2:05:51:b2:4b:1f:b8:69:50:55:08:92:b4:b8: 79:9e:f0:a8:6d:0a:7b:f4:c3:77:fb:7c:b9:ac:ca: e1:e1:08:25:b7:9f:a8:31:f8:35:22:6e:f2:f2:e0: db:c2:88:0b:46:21:be:cc:f2:7e:f4:59:b6:b0:64: 59:e2:b1:46:b7:b5:f7:4c:bc:9d:9f:51:5e:2c:ec: 30:05:e2:b7:78:ba:17:ff:cc:46:31:d7:b7:21:12: 12:8d:02:4e:e6:59:df:fa:9e:8a:d1:18:2b:c6:36: 26:9a:13:94:49:71:d7:f3:d0:6c:70:ae:45:e5:cd: 0b:3d:24:33:e9:e7:1a:3b:03:b9:1e:f6:47:87:60: 35:6e:74:3b:69:26:eb:70:73:f1:39:ea:99:39:c6: 2b:69:73:78:d1:67:e9:00:fa:9a:43:3c:f0:4d:20: 88:29:6d:1f:11:e9:8a:93:3d:a2:50:2b:d9:06:af: b0:b1:b2:cc:98:fe:30:2d:34:96:cf:5d:91:ae:b0: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:87:AA:CE:12:F7:08:1B:40:42:D8:1E:5A:FF:E4:DF:13:F1:F3:DB X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:76:1f:d5:80:13:69:27:16:81:59:2e:d8:ac:4d:a7:4d:c0: 5a:74:08:bf:31:d6:c4:34:07:97:0f:fe:55:fd:27:89:e2:12: 74:a4:1e:d7:3d:62:30:64:d3:f5:cd:61:e3:24:b3:f2:31:91: 97:be:ec:ec:22:23:98:d4:4f:04:28:b4:55:14:ab:66:28:20: 9b:67:41:88:5e:7e:01:cb:8f:82:78:15:e8:6a:23:68:90:71: e1:ec:c3:96:bc:9a:ca:a0:13:2b:c0:8d:e9:21:6f:d2:44:b1: 7d:39:e4:4f:ff:33:ea:87:98:4f:91:18:f2:b9:28:f5:1d:05: c0:f0:b0:11:ba:e3:bf:28:6f:f4:fd:0f:88:f6:50:96:d6:07: b3:fc:68:27:7b:06:3e:34:ae:a4:fc:18:bf:24:7b:56:98:a6: 45:c6:79:96:d6:e2:9c:34:bb:62:4f:aa:1a:c9:8e:b7:75:76: 1f:ea:c4:63:ab:93:36:06:e3:37:af:18:b3:6d:ef:87:55:5c: 85:0d:22:ad:cf:cf:e4:88:b7:d2:4c:12:c5:25:fc:75:23:f7: 39:62:fa:0f:4a:2e:53:a3:1c:2b:8b:fc:67:46:16:03:0f:a0: 29:52:e2:19:c6:86:6b:e4:f6:f3:62:6d:b1:01:e6:4d:f6:24: 03:66:a5:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSkbz+plrkn8OqPjG6pTKSt6p9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjEwMjUwMzE4MDlaFw0yNjEwMjYwMzIzMDlaMDMxMTAvBgNV BAMTKEYwODdBQUNFMTJGNzA4MUI0MDQyRDgxRTVBRkZFNERGMTNGMUYzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NWzyUNAXZWxtcetY4mAVT3wh 9bmizYCYRrZOKgwPyW1CGjW3Az6ms0KDJ5Tj5RzruzOMoOmFp0JnFCLiBVGySx+4 aVBVCJK0uHme8KhtCnv0w3f7fLmsyuHhCCW3n6gx+DUibvLy4NvCiAtGIb7M8n70 WbawZFnisUa3tfdMvJ2fUV4s7DAF4rd4uhf/zEYx17chEhKNAk7mWd/6norRGCvG NiaaE5RJcdfz0GxwrkXlzQs9JDPp5xo7A7ke9keHYDVudDtpJutwc/E56pk5xitp c3jRZ+kA+ppDPPBNIIgpbR8R6YqTPaJQK9kGr7CxssyY/jAtNJbPXZGusAzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8IeqzhL3CBtAQtgeWv/k3xPx89swHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB2H9WAE2knFoFZLtisTadNwFp0CL8x1sQ0 B5cP/lX9J4niEnSkHtc9YjBk0/XNYeMks/IxkZe+7OwiI5jUTwQotFUUq2YoIJtn QYhefgHLj4J4FehqI2iQceHsw5a8msqgEyvAjekhb9JEsX055E//M+qHmE+RGPK5 KPUdBcDwsBG6478ob/T9D4j2UJbWB7P8aCd7Bj40rqT8GL8ke1aYpkXGeZbW4pw0 u2JPqhrJjrd1dh/qxGOrkzYG4zevGLNt74dVXIUNIq3Pz+SIt9JMEsUl/HUj9zli +g9KLlOjHCuL/GdGFgMPoClS4hnGhmvk9vNibbEB5k32JANmpRg= -----END CERTIFICATE-----Generated at Sun Oct 25 08:03:46 2026 by rpki-client