$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft File: B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json) Hash identifier: gu0UZ88WJkvPhK0OV7Glx/FZT2PFTIX4DbJNWSgNDMQ= Subject key identifier: 31:5A:3E:C1:D8:13:8D:6B:64:3D:A2:DA:F4:61:67:81:43:2D:E7:AB Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Certificate issuer: /CN=B7A0E7998A9F266F3882F19118691CB225356F5D Certificate serial: 51ED1A8954E4089009AB76DA2A87A6FD78A20ED1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft Manifest number: EB Signing time: Sun 25 Oct 2026 13:23:22 +0000 Manifest this update: Sun 25 Oct 2026 13:18:22 +0000 Manifest next update: Mon 26 Oct 2026 16:44:22 +0000 Files and hashes: 1: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: DbX2Whe+srgwb/4JQaHgotaF8vaBd6tdQzwSDGSDka4=) 2: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=) 4: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ed:1a:89:54:e4:08:90:09:ab:76:da:2a:87:a6:fd:78:a2:0e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Validity Not Before: Oct 25 13:18:22 2026 GMT Not After : Oct 26 16:44:22 2026 GMT Subject: CN=315A3EC1D8138D6B643DA2DAF4616781432DE7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:b4:6f:ea:56:19:b5:1a:de:3d:51:f8:7f: db:d4:39:e3:1c:04:2c:ab:31:7e:4d:e6:0f:4e:24: d9:2c:c1:bc:b4:4e:d3:97:ca:11:e3:9d:41:52:71: 6f:7c:e6:79:90:8c:5d:f4:87:0e:e3:16:17:69:ad: d5:50:72:27:22:24:06:75:b5:56:d3:01:d0:b5:65: 21:92:d4:9b:9c:c8:cd:e8:c0:e7:ce:59:88:c5:1d: 85:60:03:83:4f:c1:27:39:38:10:d4:21:93:29:52: ba:fa:74:fc:58:8f:92:ba:c6:5e:5a:94:e4:1a:1a: bd:2d:44:06:a9:68:07:67:f8:b7:e3:14:5d:aa:f5: 83:72:92:33:b6:4c:3c:6d:fc:71:98:d1:d1:5c:9a: bb:16:68:a3:89:9b:2f:28:67:85:1e:67:bb:25:cf: 07:e5:0e:56:4f:f7:b9:8b:5b:7e:d3:fd:4e:90:0a: 72:00:b9:06:06:8e:13:83:71:02:4f:7e:bb:f2:40: 22:a5:15:a9:d6:4f:46:25:22:59:5f:54:61:97:fa: fd:b1:ec:62:81:be:58:63:2c:06:cb:ed:fd:3d:02: 0f:e8:c7:64:15:b0:43:89:a1:aa:c5:39:8d:59:0d: ff:60:7a:9d:36:47:d6:54:d9:d4:d6:44:88:bb:2a: 93:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5A:3E:C1:D8:13:8D:6B:64:3D:A2:DA:F4:61:67:81:43:2D:E7:AB X509v3 Authority Key Identifier: keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:22:71:fd:d3:90:a0:0e:f6:7c:0c:09:0b:01:fa:e3:80:8c: 01:a0:39:8b:af:b0:07:6d:03:f2:04:c8:f7:4b:16:e6:7d:f1: 82:81:d4:4a:84:3a:76:28:29:11:c1:36:ce:fb:20:e8:82:c4: bf:02:80:37:fe:8f:4f:a3:13:f8:de:3d:86:a2:d1:2e:57:e0: 84:98:17:6f:99:85:a2:42:57:bb:e2:6f:ad:8a:56:e7:9c:87: 52:e1:85:ac:4a:a3:3f:04:15:c1:58:68:85:ea:6b:c6:54:e6: 3f:52:1b:0c:c6:b5:24:08:65:4a:e1:dd:a9:43:d8:a1:7f:6f: 34:56:22:c4:fb:ab:2b:5f:4e:0a:2d:57:a7:8d:da:41:e3:03: f5:be:0e:23:25:aa:a4:ee:c2:e0:31:5f:7e:d3:f4:2e:80:5c: 9f:1d:e4:ea:b8:f6:02:b8:cb:2b:ee:14:62:b0:b1:02:1b:ca: 7c:e1:fc:8a:77:28:43:3d:ad:c8:69:39:47:a9:56:59:f1:31: 19:cd:47:4a:cc:ea:17:57:e8:59:e3:dc:d8:88:11:2b:61:c2: 66:5c:8a:5b:09:ed:6f:16:a4:91:f8:74:82:3f:54:0b:8c:00: a6:98:d7:df:4d:34:be:20:34:83:d3:b0:93:f3:2f:7b:50:f7: 3e:2d:e0:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUe0aiVTkCJAJq3baKoem/XiiDtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy NTM1NkY1RDAeFw0yNjEwMjUxMzE4MjJaFw0yNjEwMjYxNjQ0MjJaMDMxMTAvBgNV BAMTKDMxNUEzRUMxRDgxMzhENkI2NDNEQTJEQUY0NjE2NzgxNDMyREU3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UbRv6lYZtRrePVH4f9vUOeMc BCyrMX5N5g9OJNkswby0TtOXyhHjnUFScW985nmQjF30hw7jFhdprdVQciciJAZ1 tVbTAdC1ZSGS1JucyM3owOfOWYjFHYVgA4NPwSc5OBDUIZMpUrr6dPxYj5K6xl5a lOQaGr0tRAapaAdn+LfjFF2q9YNykjO2TDxt/HGY0dFcmrsWaKOJmy8oZ4UeZ7sl zwflDlZP97mLW37T/U6QCnIAuQYGjhODcQJPfrvyQCKlFanWT0YlIllfVGGX+v2x 7GKBvlhjLAbL7f09Ag/ox2QVsEOJoarFOY1ZDf9gep02R9ZU2dTWRIi7KpOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMVo+wdgTjWtkPaLa9GFngUMt56swHwYDVR0j BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4 QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2 RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAicf3TkKAO9nwMCQsB+uOAjAGgOYuvsAdt A/IEyPdLFuZ98YKB1EqEOnYoKRHBNs77IOiCxL8CgDf+j0+jE/jePYai0S5X4ISY F2+ZhaJCV7vib62KVuech1LhhaxKoz8EFcFYaIXqa8ZU5j9SGwzGtSQIZUrh3alD 2KF/bzRWIsT7qytfTgotV6eN2kHjA/W+DiMlqqTuwuAxX37T9C6AXJ8d5Oq49gK4 yyvuFGKwsQIbynzh/Ip3KEM9rchpOUepVlnxMRnNR0rM6hdX6Fnj3NiIESthwmZc ilsJ7W8WpJH4dII/VAuMAKaY199NNL4gNIPTsJPzL3tQ9z4t4I4= -----END CERTIFICATE-----Generated at Sun Oct 25 19:53:47 2026 by rpki-client