$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft File: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft (raw, json) Hash identifier: Vtg4kseXxWdWGKfByWsyu/tLdMCkkmNhqlfclfA4Emw= Subject key identifier: 1E:45:DD:37:14:68:A9:63:96:B0:C8:0C:18:30:FD:25:91:3D:71:19 Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Certificate serial: 7094269B31121D1D1B6B9A3A3F49330F618FC2CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft Manifest number: E7 Signing time: Thu 22 Oct 2026 09:51:08 +0000 Manifest this update: Thu 22 Oct 2026 09:46:08 +0000 Manifest next update: Fri 23 Oct 2026 12:26:08 +0000 Files and hashes: 1: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=) 2: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl (hash: iwuH+JDUnzCsV6jgSuCLLFoD2IuWvbNtE5NICZcBcXc=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: CVrUJTlhlyjQcXWYw9mEs6T2cItEcY6BENuMI3nROC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 12:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:94:26:9b:31:12:1d:1d:1b:6b:9a:3a:3f:49:33:0f:61:8f:c2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Validity Not Before: Oct 22 09:46:08 2026 GMT Not After : Oct 23 12:26:08 2026 GMT Subject: CN=1E45DD371468A96396B0C80C1830FD25913D7119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:74:e1:45:5e:43:cf:7a:ec:77:b4:df:18: d0:40:9f:98:3d:6f:b3:68:df:a6:42:9b:c3:cc:fe: dc:c4:f2:a3:8a:c4:68:85:41:d5:78:3c:5d:6a:70: 9f:18:28:50:1e:5d:b0:88:87:44:17:db:76:04:14: 8c:02:50:81:64:d9:fe:a4:38:0f:c5:d7:0e:c8:58: 1e:70:92:75:cb:4a:f7:e1:a2:74:21:20:0c:73:32: c8:de:f4:3e:0c:27:54:63:5a:f4:4d:b1:6f:d8:81: 6b:d7:a5:02:2e:3c:6e:07:09:e0:72:0b:91:07:5c: cd:b0:d3:34:11:da:83:77:bc:d9:7f:36:de:f9:52: 2d:c3:a0:13:55:32:75:04:fa:87:8e:50:77:0b:41: 41:b6:a2:ee:94:de:47:a6:f5:a4:01:a9:f8:0b:c6: 76:07:c2:21:bd:eb:c5:14:3d:10:bd:d8:b4:70:a2: 85:66:e0:00:a6:dc:39:6d:1f:81:7e:11:f6:3b:a3: 96:08:6c:d1:f6:bd:92:8f:f2:07:66:85:04:a5:26: dc:e6:8b:fa:b5:48:49:56:7c:00:cc:84:ba:56:41: 59:93:94:d7:1f:93:f4:42:61:7c:7e:55:04:65:62: 6c:83:0b:32:03:bb:ca:91:e9:cf:60:2c:6f:45:25: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:DD:37:14:68:A9:63:96:B0:C8:0C:18:30:FD:25:91:3D:71:19 X509v3 Authority Key Identifier: keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:ec:e4:07:16:ea:1d:0f:39:e9:2e:ec:41:97:5f:5b:1a: 94:71:88:c2:07:6e:d2:a1:04:4d:3c:a0:00:7c:07:46:72:5c: 10:d3:52:01:40:7b:23:8d:ac:e0:7f:3c:86:27:6f:57:6a:c9: 2c:13:b3:fd:88:6a:90:20:a8:b9:ce:cc:f5:cf:69:c3:22:ad: de:db:87:b0:c2:46:a2:dc:73:74:17:00:aa:d2:4f:a7:02:04: b5:9c:e7:d8:c5:9a:47:a0:10:1c:90:57:e8:02:9b:c3:3e:77: 75:1a:4c:2d:42:f9:0f:c3:eb:fb:38:cc:b2:c5:fc:a5:35:03: 8d:06:f3:f3:cb:e4:a5:cc:47:f9:cd:1f:6d:7b:50:75:f4:a8: 80:e7:2a:f6:8b:b2:9b:3e:75:18:f3:35:1e:1a:ce:e4:73:76: e6:87:49:57:12:5c:05:c5:6b:32:af:81:b5:e7:2d:8d:8f:7b: 9e:78:22:7c:61:47:24:f5:43:ff:78:94:7f:6e:0b:38:6d:a1: 42:8e:d0:20:f9:7f:0d:d9:10:13:08:7e:00:63:e2:c6:cb:22: 5f:23:d9:b1:82:46:e5:58:4a:cf:75:7d:45:7e:ee:65:8e:9c: b6:44:e3:f9:c6:67:0c:fb:8e:97:bb:b9:24:97:03:68:4b:ab: 27:3c:78:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJQmmzESHR0ba5o6P0kzD2GPwswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1 N0MxQ0FCRDAeFw0yNjEwMjIwOTQ2MDhaFw0yNjEwMjMxMjI2MDhaMDMxMTAvBgNV BAMTKDFFNDVERDM3MTQ2OEE5NjM5NkIwQzgwQzE4MzBGRDI1OTEzRDcxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WHThRV5Dz3rsd7TfGNBAn5g9 b7No36ZCm8PM/tzE8qOKxGiFQdV4PF1qcJ8YKFAeXbCIh0QX23YEFIwCUIFk2f6k OA/F1w7IWB5wknXLSvfhonQhIAxzMsje9D4MJ1RjWvRNsW/YgWvXpQIuPG4HCeBy C5EHXM2w0zQR2oN3vNl/Nt75Ui3DoBNVMnUE+oeOUHcLQUG2ou6U3kem9aQBqfgL xnYHwiG968UUPRC92LRwooVm4ACm3DltH4F+EfY7o5YIbNH2vZKP8gdmhQSlJtzm i/q1SElWfADMhLpWQVmTlNcfk/RCYXx+VQRlYmyDCzIDu8qR6c9gLG9FJfhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkXdNxRoqWOWsMgMGDD9JZE9cRkwHwYDVR0j BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD QUJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2 QkI1N0MxQ0FCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfK7OQHFuodDznpLuxBl19bGpRxiMIHbtKh BE08oAB8B0ZyXBDTUgFAeyONrOB/PIYnb1dqySwTs/2IapAgqLnOzPXPacMird7b h7DCRqLcc3QXAKrST6cCBLWc59jFmkegEByQV+gCm8M+d3UaTC1C+Q/D6/s4zLLF /KU1A40G8/PL5KXMR/nNH217UHX0qIDnKvaLsps+dRjzNR4azuRzduaHSVcSXAXF azKvgbXnLY2Pe554InxhRyT1Q/94lH9uCzhtoUKO0CD5fw3ZEBMIfgBj4sbLIl8j 2bGCRuVYSs91fUV+7mWOnLZE4/nGZwz7jpe7uSSXA2hLqyc8eIw= -----END CERTIFICATE-----Generated at Fri Oct 23 01:21:47 2026 by rpki-client