$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: cAZ98CjbTmQpgh1Rqw6zZ8CWbiXENGxpoR5r8W0wtME= Subject key identifier: 91:75:CA:9E:C9:FD:B8:1C:8B:8D:96:D2:06:E9:E4:AC:31:A3:B0:FA Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 01655EA3D6AC76784C8D4B78B10D0D6B7B2FB374 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: EC Signing time: Mon 26 Oct 2026 01:23:33 +0000 Manifest this update: Mon 26 Oct 2026 01:18:33 +0000 Manifest next update: Tue 27 Oct 2026 03:41:33 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 2: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 4: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) 5: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: bCew/HzAvmRPkHO2tgFPxBGTEx/X1DjqNpmMMLS091M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 03:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:65:5e:a3:d6:ac:76:78:4c:8d:4b:78:b1:0d:0d:6b:7b:2f:b3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Oct 26 01:18:33 2026 GMT Not After : Oct 27 03:41:33 2026 GMT Subject: CN=9175CA9EC9FDB81C8B8D96D206E9E4AC31A3B0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:b1:76:35:95:64:3f:7f:00:1e:3a:6e:7c: 21:9d:68:b2:81:11:e8:d6:8f:82:94:96:8c:45:6b: 73:22:ad:d8:b4:cd:62:cd:0c:02:c2:0d:c1:aa:d8: fb:59:f2:84:35:70:a0:eb:e0:cf:e2:8e:59:b4:24: 71:cc:e2:ed:91:50:32:aa:ea:1e:d9:c7:92:cb:93: d1:3b:00:1e:22:e2:85:31:cc:8f:18:5f:6a:de:84: 81:d4:65:b2:f9:55:1e:c0:2c:4f:fa:5f:59:08:58: 73:45:76:bc:7e:a9:cb:22:78:62:a4:86:47:e7:81: 7d:2b:26:1e:ae:a6:99:4b:87:66:3a:db:c5:d2:76: ae:b9:a9:4f:f2:d8:7a:81:10:70:54:2a:20:e6:cb: fb:9b:59:30:7a:c4:fa:8f:e0:6f:6b:cb:c2:3b:22: d7:6b:9e:fa:8e:7f:89:e5:53:ed:4e:5c:0b:e4:2c: a8:0e:7e:db:04:ba:83:a1:22:fc:68:e3:ae:1d:86: 0e:9e:9f:49:c9:35:0c:99:de:f9:29:ab:2f:c8:ec: 26:f0:6b:82:06:63:b9:d3:60:74:fe:b0:84:ca:e2: 03:9d:41:54:bf:78:77:19:d0:45:42:bc:0b:67:e8: f4:db:8f:be:3f:8e:ab:a7:ba:16:1b:1a:fb:4e:a7: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:CA:9E:C9:FD:B8:1C:8B:8D:96:D2:06:E9:E4:AC:31:A3:B0:FA X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ac:29:ef:fe:8d:27:5b:ae:9d:9d:ae:a0:16:1c:9f:93:45: 13:43:32:ff:de:f5:1e:50:b1:35:a8:2a:90:ea:cc:ef:77:b0: 80:b8:07:47:4f:3d:96:a1:9c:1f:c7:47:0b:06:39:58:42:e4: 85:a9:4c:70:27:dd:8d:a9:e9:6d:63:c4:0f:92:a3:c7:dc:12: ec:77:6b:7a:3f:c1:79:a0:c8:3b:5b:ed:59:0d:fe:d9:50:2d: b7:8a:7f:20:69:42:d5:06:89:59:cb:dc:a3:48:00:d5:07:9d: 4c:d0:0c:4f:e7:ef:c7:1c:cd:fc:2e:ab:7a:0e:98:34:84:71: 4f:04:bc:75:ea:cd:ef:1a:04:7d:87:25:03:cf:50:01:c7:b1: c1:84:ae:9a:af:2a:b3:13:47:ff:ab:dc:05:b5:b2:d9:a6:09: 94:e1:2b:93:ee:ba:e7:90:f9:01:73:09:df:77:36:3c:63:06: 78:16:c6:b8:15:dd:72:1c:94:26:82:91:38:15:aa:42:98:97: 99:b3:aa:53:a2:56:a0:1d:18:5a:fb:70:bf:16:b2:eb:69:32: cd:c9:f8:e1:87:a8:a7:5a:ee:18:87:39:2b:2c:49:32:09:e4: 8d:ea:54:43:3f:8c:43:a2:3b:1d:d1:1d:8a:8a:cc:69:f0:1d: e4:43:ee:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWVeo9asdnhMjUt4sQ0Na3svs3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjEwMjYwMTE4MzNaFw0yNjEwMjcwMzQxMzNaMDMxMTAvBgNV BAMTKDkxNzVDQTlFQzlGREI4MUM4QjhEOTZEMjA2RTlFNEFDMzFBM0IwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTLF2NZVkP38AHjpufCGdaLKB EejWj4KUloxFa3Mirdi0zWLNDALCDcGq2PtZ8oQ1cKDr4M/ijlm0JHHM4u2RUDKq 6h7Zx5LLk9E7AB4i4oUxzI8YX2rehIHUZbL5VR7ALE/6X1kIWHNFdrx+qcsieGKk hkfngX0rJh6upplLh2Y628XSdq65qU/y2HqBEHBUKiDmy/ubWTB6xPqP4G9ry8I7 ItdrnvqOf4nlU+1OXAvkLKgOftsEuoOhIvxo464dhg6en0nJNQyZ3vkpqy/I7Cbw a4IGY7nTYHT+sITK4gOdQVS/eHcZ0EVCvAtn6PTbj74/jqunuhYbGvtOpwhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXXKnsn9uByLjZbSBunkrDGjsPowHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+sKe/+jSdbrp2drqAWHJ+TRRNDMv/e9R5Q sTWoKpDqzO93sIC4B0dPPZahnB/HRwsGOVhC5IWpTHAn3Y2p6W1jxA+So8fcEux3 a3o/wXmgyDtb7VkN/tlQLbeKfyBpQtUGiVnL3KNIANUHnUzQDE/n78cczfwuq3oO mDSEcU8EvHXqze8aBH2HJQPPUAHHscGErpqvKrMTR/+r3AW1stmmCZThK5PuuueQ +QFzCd93NjxjBngWxrgV3XIclCaCkTgVqkKYl5mzqlOiVqAdGFr7cL8WsutpMs3J +OGHqKda7hiHOSssSTIJ5I3qVEM/jEOiOx3RHYqKzGnwHeRD7is= -----END CERTIFICATE-----Generated at Mon Oct 26 12:44:15 2026 by rpki-client