$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: XIrdu60CiwBJRDFBQOBTLqXID7b/xFwWsHa0D1WztF0= Subject key identifier: BC:1D:1B:F0:95:57:BD:45:F0:B8:91:6E:6B:81:78:FF:9C:84:42:A9 Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 4E11EECAC6C5CC555DEB25F76FB6A21AFA93623E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: ED Signing time: Mon 26 Oct 2026 19:45:03 +0000 Manifest this update: Mon 26 Oct 2026 19:40:03 +0000 Manifest next update: Tue 27 Oct 2026 23:28:03 +0000 Files and hashes: 1: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) 2: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 3: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: xwkNKo+vaIqazLlYz2QoXnm8dwdFVc5XTNhQFoWlzRg=) 4: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 5: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:11:ee:ca:c6:c5:cc:55:5d:eb:25:f7:6f:b6:a2:1a:fa:93:62:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Oct 26 19:40:03 2026 GMT Not After : Oct 27 23:28:03 2026 GMT Subject: CN=BC1D1BF09557BD45F0B8916E6B8178FF9C8442A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:3f:e4:d0:a8:3d:c9:5d:d2:7f:6d:73:33: 54:3b:0a:c6:33:3f:62:c8:d8:08:fa:2e:4c:46:7d: 19:88:e7:b7:22:dc:b6:17:07:20:81:32:b8:f8:35: 27:bb:a1:bd:1d:7f:86:9f:f1:5e:f0:5e:93:0e:f6: ca:7d:7a:a6:e3:58:93:df:1d:d4:f6:8e:3a:78:b4: ed:81:90:c1:25:1a:a3:71:b8:51:d0:f2:ce:ce:72: 89:e3:47:e3:fe:a0:56:e3:e8:b4:a2:ed:c5:db:ce: e0:f6:36:66:93:03:b7:98:f6:f7:af:5b:43:85:b6: e9:9e:3f:fc:a6:41:d9:29:6d:be:67:37:fb:a4:25: 23:fd:2e:97:28:60:42:69:7e:ac:3b:ca:fa:ca:e2: 73:56:bf:4f:3d:d0:bb:58:c4:9b:e6:eb:b7:66:63: 71:23:78:fe:60:48:bf:44:07:cc:c1:fd:31:6a:0c: ca:46:4d:d9:85:8e:c3:9f:9f:75:d5:61:a7:82:92: d0:4d:14:32:92:29:c4:77:61:da:01:21:82:0d:c5: 76:6a:21:7b:8c:36:4a:48:50:ee:6f:68:68:7b:dc: 3c:14:84:d4:d3:5a:4b:4c:fa:e3:ec:8a:71:8b:23: a9:86:56:fc:a4:94:d9:52:36:7b:35:22:3a:d3:48: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1D:1B:F0:95:57:BD:45:F0:B8:91:6E:6B:81:78:FF:9C:84:42:A9 X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:68:2c:65:4a:a3:43:95:43:b9:4a:2c:a8:ba:b8:bd:cf:cc: c9:09:e1:31:ae:2a:75:15:b6:14:54:09:e1:d3:ad:74:2d:a7: cc:08:fa:e5:81:b5:72:ed:6b:85:7b:7e:41:e8:47:b3:d6:87: 5a:ef:df:01:a7:f0:eb:a9:cb:3e:0f:b5:14:da:65:d6:8d:b9: c5:d2:50:c2:92:49:65:51:ea:ff:48:5d:8f:69:ab:ee:50:e3: f0:65:4a:cd:96:e8:a3:d4:79:46:ed:29:fa:21:4e:e1:f9:a6: d4:2f:e5:5b:da:23:d7:28:57:ef:a3:13:93:73:ae:81:c9:9c: fc:61:11:ff:43:2a:12:11:d6:b1:07:27:76:00:5e:c9:9f:dd: 1c:9b:b8:17:63:60:07:7c:80:02:52:4a:2f:45:c2:6d:68:85: ef:47:86:fe:37:3e:45:55:c8:36:92:b6:0d:2f:2b:5f:df:a8: 50:dc:36:a4:83:c5:4c:f1:8b:94:11:7d:b4:f4:46:31:f0:41: 99:2b:7b:13:a3:c3:7a:b5:52:4c:63:56:33:c2:28:cb:e2:6f: d5:11:1f:9d:33:ca:58:88:a0:af:71:85:93:71:ca:41:7d:80: 73:64:00:22:87:d1:43:b5:25:84:3e:ef:ae:3c:fa:f4:62:6b: 56:65:1f:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThHuysbFzFVd6yX3b7aiGvqTYj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjEwMjYxOTQwMDNaFw0yNjEwMjcyMzI4MDNaMDMxMTAvBgNV BAMTKEJDMUQxQkYwOTU1N0JENDVGMEI4OTE2RTZCODE3OEZGOUM4NDQyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnD/k0Kg9yV3Sf21zM1Q7CsYz P2LI2Aj6LkxGfRmI57ci3LYXByCBMrj4NSe7ob0df4af8V7wXpMO9sp9eqbjWJPf HdT2jjp4tO2BkMElGqNxuFHQ8s7OconjR+P+oFbj6LSi7cXbzuD2NmaTA7eY9vev W0OFtumeP/ymQdkpbb5nN/ukJSP9LpcoYEJpfqw7yvrK4nNWv0890LtYxJvm67dm Y3EjeP5gSL9EB8zB/TFqDMpGTdmFjsOfn3XVYaeCktBNFDKSKcR3YdoBIYINxXZq IXuMNkpIUO5vaGh73DwUhNTTWktM+uPsinGLI6mGVvyklNlSNns1IjrTSNaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvB0b8JVXvUXwuJFua4F4/5yEQqkwHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChoLGVKo0OVQ7lKLKi6uL3PzMkJ4TGuKnUV thRUCeHTrXQtp8wI+uWBtXLta4V7fkHoR7PWh1rv3wGn8Oupyz4PtRTaZdaNucXS UMKSSWVR6v9IXY9pq+5Q4/BlSs2W6KPUeUbtKfohTuH5ptQv5VvaI9coV++jE5Nz roHJnPxhEf9DKhIR1rEHJ3YAXsmf3RybuBdjYAd8gAJSSi9Fwm1ohe9Hhv43PkVV yDaStg0vK1/fqFDcNqSDxUzxi5QRfbT0RjHwQZkrexOjw3q1UkxjVjPCKMvib9UR H50zyliIoK9xhZNxykF9gHNkACKH0UO1JYQ+7648+vRia1ZlH4A= -----END CERTIFICATE-----Generated at Mon Oct 26 23:54:45 2026 by rpki-client