$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft File: 7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json) Hash identifier: kyStdEFpmnj4bUO4hGuBB//MYvKYnwSmr/JjVrjvhBA= Subject key identifier: 8D:8D:4B:D0:48:F3:10:A9:C1:F7:51:E3:2E:2F:34:15:41:59:56:0B Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF Certificate issuer: /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Certificate serial: 08F3D081E47B31A3117058FAA94833D07CAE9239 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft Manifest number: EC Signing time: Sun 25 Oct 2026 16:47:40 +0000 Manifest this update: Sun 25 Oct 2026 16:42:40 +0000 Manifest next update: Mon 26 Oct 2026 17:50:40 +0000 Files and hashes: 1: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=) 2: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=) 3: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=) 4: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: ZXb7odnr/2GpsiUYf9zI8JtSXWCMiE/Z+o3tNC+ssgo=) 5: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=) 6: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=) 7: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=) 8: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=) 9: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=) 10: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=) 11: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f3:d0:81:e4:7b:31:a3:11:70:58:fa:a9:48:33:d0:7c:ae:92:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Validity Not Before: Oct 25 16:42:40 2026 GMT Not After : Oct 26 17:50:40 2026 GMT Subject: CN=8D8D4BD048F310A9C1F751E32E2F34154159560B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:b7:8e:cd:af:5d:87:e0:f3:8e:08:db:19: af:fc:6e:ed:f2:13:63:ce:9a:68:e8:89:30:ed:1d: cd:a0:e1:ba:2a:d3:5c:3b:96:44:d1:b9:d3:33:f0: ff:fe:9c:94:2d:3c:57:cd:aa:e6:7b:ee:32:a6:d9: 0c:36:98:d2:29:f8:f4:69:43:ae:6c:d1:fd:35:33: ee:37:2f:40:4e:39:16:3d:cc:1d:b3:bc:cc:e9:62: da:d4:86:01:da:d9:41:8c:df:9f:bd:e9:43:40:eb: 10:41:79:33:c3:a7:d6:8a:d7:48:29:70:f9:c6:2e: 10:84:99:43:f4:7a:8b:bf:32:81:fa:88:69:86:97: ee:8d:63:ce:06:02:83:2d:35:2a:0a:1a:f2:c2:7b: df:db:79:cd:6c:61:87:f4:52:29:5d:06:8c:bf:3e: a4:91:13:a0:11:58:de:c4:0c:9f:90:ba:30:30:58: ba:2c:d3:71:c4:c2:fa:79:f3:27:bf:64:d8:52:e2: 31:74:fd:9f:02:7b:c8:15:65:3d:cb:68:15:a2:da: 77:69:4b:c7:3b:5f:d9:f7:ff:8e:52:ba:a3:42:ed: ae:26:c3:95:82:ae:62:06:61:15:1f:11:b5:34:da: 1b:ef:df:82:b4:7c:ce:cc:c0:f2:fd:71:f5:1e:cb: e4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8D:4B:D0:48:F3:10:A9:C1:F7:51:E3:2E:2F:34:15:41:59:56:0B X509v3 Authority Key Identifier: keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:88:e8:8a:22:e8:4e:77:e9:ee:aa:f1:59:b6:e6:9c:a2:31: 0d:6b:c2:0d:dd:67:0e:67:a5:e4:f8:a9:dd:8e:ba:af:d0:4d: 3a:95:ca:02:bc:1c:84:b0:dc:31:cd:49:06:b2:53:71:08:b8: d4:8f:ac:b6:bb:3e:21:99:3f:d3:40:95:d7:28:fb:ca:98:ed: bb:2f:61:d0:1a:69:5b:e0:0d:18:5e:c0:99:5c:e8:03:16:ff: fa:d6:09:4c:ee:ba:f6:15:93:48:87:87:c4:c6:9f:2e:3f:15: 7c:b5:7a:cf:2a:0a:91:74:38:f3:37:86:2e:b2:da:8d:92:0b: ef:f3:f7:37:3f:8f:77:64:cb:8c:4a:56:47:56:9d:8a:8d:bc: b7:a9:15:c3:cc:1b:23:af:f8:07:76:d9:bc:49:91:0c:17:38: e4:5d:a9:ec:d8:52:0e:4b:f5:b6:df:d5:2c:ff:0c:69:86:63: a2:3d:03:ff:7c:85:cb:8f:b3:9b:28:42:8d:9b:12:1b:2b:9c: 95:68:8f:a3:02:33:68:30:46:f0:7b:f2:c0:6f:f0:cd:ba:e9: ac:f8:57:77:34:99:a9:03:0a:89:3a:92:e6:38:95:05:2d:dd: 89:52:82:a4:6f:9f:c2:e5:88:dc:f3:e1:4c:58:8c:e2:9c:27: a4:b7:94:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPPQgeR7MaMRcFj6qUgz0HyukjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0 MTZBRDFERjAeFw0yNjEwMjUxNjQyNDBaFw0yNjEwMjYxNzUwNDBaMDMxMTAvBgNV BAMTKDhEOEQ0QkQwNDhGMzEwQTlDMUY3NTFFMzJFMkYzNDE1NDE1OTU2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPreOza9dh+DzjgjbGa/8bu3y E2POmmjoiTDtHc2g4boq01w7lkTRudMz8P/+nJQtPFfNquZ77jKm2Qw2mNIp+PRp Q65s0f01M+43L0BOORY9zB2zvMzpYtrUhgHa2UGM35+96UNA6xBBeTPDp9aK10gp cPnGLhCEmUP0eou/MoH6iGmGl+6NY84GAoMtNSoKGvLCe9/bec1sYYf0UildBoy/ PqSRE6ARWN7EDJ+QujAwWLos03HEwvp58ye/ZNhS4jF0/Z8Ce8gVZT3LaBWi2ndp S8c7X9n3/45SuqNC7a4mw5WCrmIGYRUfEbU02hvv34K0fM7MwPL9cfUey+QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjY1L0EjzEKnB91HjLi80FUFZVgswHwYDVR0j BBgwFoAUeo1CM5IocqiU4w5U1odL60Fq0d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJmNzFjOTEtMTYyNC00ZmMwLThjNjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5 MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0MTZBRDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QThENDIzMzkyMjg3MkE4OTRFMzBFNTRENjg3NEJFQjQxNkFE MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRC RUI0MTZBRDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6I6Ioi6E536e6q8Vm25pyiMQ1rwg3dZw5n peT4qd2Ouq/QTTqVygK8HISw3DHNSQayU3EIuNSPrLa7PiGZP9NAldco+8qY7bsv YdAaaVvgDRhewJlc6AMW//rWCUzuuvYVk0iHh8TGny4/FXy1es8qCpF0OPM3hi6y 2o2SC+/z9zc/j3dky4xKVkdWnYqNvLepFcPMGyOv+Ad22bxJkQwXOORdqezYUg5L 9bbf1Sz/DGmGY6I9A/98hcuPs5soQo2bEhsrnJVoj6MCM2gwRvB78sBv8M266az4 V3c0makDCok6kuY4lQUt3YlSgqRvn8LliNzz4UxYjOKcJ6S3lLc= -----END CERTIFICATE-----Generated at Mon Oct 26 01:44:00 2026 by rpki-client