$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: VbLxOn9C+yy9GlyVLRbQ0vAoeUGMTP6yiHsSUycJty4= Subject key identifier: 7B:0C:88:CC:BB:FC:FA:24:FB:40:9F:28:E4:7C:01:45:50:09:87:27 Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 82B313978C741CCF416F465C0BE3B75ACEDCC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: EA Signing time: Sat 24 Oct 2026 15:07:59 +0000 Manifest this update: Sat 24 Oct 2026 15:02:59 +0000 Manifest next update: Sun 25 Oct 2026 16:32:59 +0000 Files and hashes: 1: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) 2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) 3: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: p1wt1ZMS0Fs3nen5NLFNn0pm+Xj4/YJDM4mvFV1RmNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82:b3:13:97:8c:74:1c:cf:41:6f:46:5c:0b:e3:b7:5a:ce:dc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Oct 24 15:02:59 2026 GMT Not After : Oct 25 16:32:59 2026 GMT Subject: CN=7B0C88CCBBFCFA24FB409F28E47C014550098727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:36:b0:cc:51:4a:a2:79:9d:73:7d:9c:e7:6b: 27:01:58:14:dc:ca:20:c5:f9:aa:6e:9a:dd:13:68: 3d:61:5d:d8:49:27:a0:22:ac:e1:42:b5:2b:10:8e: 91:6d:a4:a0:5a:bd:99:89:63:75:98:f8:a7:0c:88: c2:de:2a:35:f2:ed:b2:20:e7:d7:eb:43:6b:38:42: d8:81:1a:d1:d4:d6:48:96:38:ac:6d:9e:7c:68:39: 44:dd:5d:87:d8:8a:82:8e:da:7b:19:97:51:5b:f2: 2a:f2:c3:d3:0c:83:41:25:8a:a2:e0:8c:c3:fb:0b: b8:3d:50:9f:3b:e4:9e:a5:a5:7b:1c:72:5c:11:0c: b6:ea:e5:df:12:cf:3c:1c:f0:9f:64:a1:26:1a:ac: 4b:00:0b:4a:1c:70:60:92:f6:ed:2a:94:88:87:d5: 25:b3:7f:1e:e2:26:49:4e:ed:15:65:23:99:3d:90: d0:f7:84:0e:e6:63:0b:a8:09:b7:cc:ff:12:ee:f2: f4:82:23:7e:15:b3:8a:9a:b7:80:8d:9d:0c:38:83: 86:25:fb:85:58:31:a6:72:63:e5:74:cd:17:0f:4f: 61:d9:0d:f1:a6:91:96:95:af:a6:15:ad:39:30:fd: be:d1:af:8b:b6:50:2e:9e:7b:61:0a:90:cd:41:08: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0C:88:CC:BB:FC:FA:24:FB:40:9F:28:E4:7C:01:45:50:09:87:27 X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c5:8a:db:7a:06:a9:0d:8e:f8:09:51:84:53:86:48:9a:bb: b2:4b:df:8c:d2:6c:80:e8:9c:20:3c:1c:74:e6:f8:79:2b:47: f8:99:e7:cb:68:2d:6c:98:bf:32:ec:df:88:b4:14:4e:e5:2d: f6:c1:b3:d5:de:61:bf:9c:03:40:8f:45:a7:4d:72:55:8a:83: 15:87:bd:76:17:32:5f:62:8c:fc:e4:e4:32:51:65:1e:fa:78: 7a:79:3c:f6:8a:1d:d8:b5:a9:9e:ab:65:a8:8b:17:2b:e1:03: 8d:fa:c8:b6:40:a1:84:df:20:88:30:9e:57:b9:39:42:49:67: 8c:64:05:dc:ee:a7:43:53:53:04:a3:9c:d6:fd:ce:0d:f5:cd: 8a:af:dd:3c:98:94:08:d3:eb:31:b4:1b:6d:0c:86:ae:20:94: 38:91:49:a9:af:11:4d:e5:cd:4c:c0:fc:1c:cc:c7:95:1f:b6: df:1c:e2:19:25:f0:27:04:2f:90:27:9a:18:02:7e:5e:6f:e2: 58:3b:69:8d:a0:c6:80:54:d1:90:8e:ab:e6:65:9a:a3:fa:1e: 8d:e0:7d:5b:7a:48:0e:0a:b9:0a:a7:34:e9:41:6f:bf:bf:84: a5:ee:11:0e:7d:da:0c:c5:02:a8:55:43:b1:cd:77:17:ab:0a: 12:f8:ae:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIKzE5eMdBzPQW9GXAvjt1rO3MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjEwMjQxNTAyNTlaFw0yNjEwMjUxNjMyNTlaMDMxMTAvBgNV BAMTKDdCMEM4OENDQkJGQ0ZBMjRGQjQwOUYyOEU0N0MwMTQ1NTAwOTg3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtNrDMUUqieZ1zfZznaycBWBTc yiDF+apumt0TaD1hXdhJJ6AirOFCtSsQjpFtpKBavZmJY3WY+KcMiMLeKjXy7bIg 59frQ2s4QtiBGtHU1kiWOKxtnnxoOUTdXYfYioKO2nsZl1Fb8iryw9MMg0EliqLg jMP7C7g9UJ875J6lpXscclwRDLbq5d8Szzwc8J9koSYarEsAC0occGCS9u0qlIiH 1SWzfx7iJklO7RVlI5k9kND3hA7mYwuoCbfM/xLu8vSCI34Vs4qat4CNnQw4g4Yl +4VYMaZyY+V0zRcPT2HZDfGmkZaVr6YVrTkw/b7Rr4u2UC6ee2EKkM1BCAKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewyIzLv8+iT7QJ8o5HwBRVAJhycwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfFitt6BqkNjvgJUYRThkiau7JL34zSbIDo nCA8HHTm+HkrR/iZ58toLWyYvzLs34i0FE7lLfbBs9XeYb+cA0CPRadNclWKgxWH vXYXMl9ijPzk5DJRZR76eHp5PPaKHdi1qZ6rZaiLFyvhA436yLZAoYTfIIgwnle5 OUJJZ4xkBdzup0NTUwSjnNb9zg31zYqv3TyYlAjT6zG0G20Mhq4glDiRSamvEU3l zUzA/BzMx5Uftt8c4hkl8CcEL5AnmhgCfl5v4lg7aY2gxoBU0ZCOq+ZlmqP6Ho3g fVt6SA4KuQqnNOlBb7+/hKXuEQ592gzFAqhVQ7HNdxerChL4rqE= -----END CERTIFICATE-----Generated at Sun Oct 25 03:20:47 2026 by rpki-client