$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json) Hash identifier: UJbnCqt5JloPKPqWNhxFHmsWq5y6UxtUpngTFxj6pDc= Subject key identifier: 91:C3:AD:DE:44:DB:1D:AA:93:85:00:4B:F2:1A:E6:0C:CB:0D:B0:2C Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Certificate serial: 3A6F3C9800A4E3F836DB74C27816289A8195356C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 20:19:29 +0000 Manifest this update: Sat 24 Oct 2026 20:14:29 +0000 Manifest next update: Sun 25 Oct 2026 22:21:29 +0000 Files and hashes: 1: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=) 2: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: uW1cU0FioHtOyd82E/8D8qemYfzhzHH1x94u8J4Gghg=) 3: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6f:3c:98:00:a4:e3:f8:36:db:74:c2:78:16:28:9a:81:95:35:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Validity Not Before: Oct 24 20:14:29 2026 GMT Not After : Oct 25 22:21:29 2026 GMT Subject: CN=91C3ADDE44DB1DAA9385004BF21AE60CCB0DB02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:6e:a8:e8:6a:76:b6:c2:d7:18:65:ac:f0: 0d:25:10:7c:19:23:3a:3c:1e:b4:86:b1:16:43:69: 95:3f:81:7b:16:52:8b:a5:fa:a3:e1:e0:82:83:7d: 91:3d:d4:49:e5:87:79:9a:7b:59:36:90:d5:4e:7c: 74:d8:bd:a7:36:87:39:52:84:dc:64:73:73:cf:dc: 87:4d:e9:a4:1e:17:cb:a1:65:53:c7:d5:c7:2d:56: ad:e1:52:7e:1e:df:48:56:04:e3:71:33:45:98:be: 61:fc:eb:8f:65:b6:ef:84:fa:e2:f8:6a:80:18:c4: ab:e2:da:c0:09:1d:c7:28:9a:0a:f1:4c:6e:64:d9: 94:3e:b6:b2:86:6a:35:0f:53:9a:72:b5:49:d7:d8: 4f:9c:c0:41:f7:2b:af:a1:39:14:ff:3e:aa:72:03: 37:9d:fe:3b:24:f3:0a:e6:2a:cb:56:0c:5d:a9:04: 27:8e:16:e5:bb:83:42:20:c7:f3:78:bf:da:b7:7e: e1:de:c3:7e:36:cd:da:e7:2c:48:03:f2:b1:53:ba: 7f:b1:bf:ed:bc:40:97:88:6b:a2:56:5b:3b:b0:1c: e9:bc:83:80:54:fa:be:83:a6:5d:b8:49:30:b3:37: 5f:d2:54:b8:65:c2:a9:20:7a:66:ab:e4:6f:85:6a: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:AD:DE:44:DB:1D:AA:93:85:00:4B:F2:1A:E6:0C:CB:0D:B0:2C X509v3 Authority Key Identifier: keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:de:03:26:03:05:47:be:29:2c:f3:d6:0b:ce:16:f9:0c:f9: 69:e3:cd:d7:b4:d5:56:1f:41:2a:f2:71:8b:f5:8f:1a:37:1a: 02:0f:00:81:7c:50:bf:da:50:7f:eb:6a:db:0c:ab:5a:3c:6f: 2f:09:e8:3a:ca:2d:85:4a:93:4e:14:68:eb:7c:16:2b:55:56: af:d0:0d:c6:fc:8c:7e:9a:0c:aa:43:0a:8a:ec:a3:27:49:e5: b6:41:73:fa:de:44:dd:fe:d3:64:fb:2a:6d:bf:62:ad:29:9f: f1:47:c5:54:cc:3e:be:2e:75:0d:fb:51:a6:cc:eb:e7:26:0a: 8d:55:a3:09:4b:dc:12:c2:23:67:88:3d:cf:4e:6d:ba:04:d5: d8:33:74:0f:42:97:73:99:00:20:5b:f0:83:7a:f3:f2:15:b7: 22:f3:dd:d1:09:8f:0c:ba:49:f9:a4:30:ca:54:44:d0:7b:f5: 62:5a:82:3b:eb:d8:cf:69:67:67:ba:94:34:b2:2a:07:9a:3e: cd:be:eb:f7:38:40:c0:39:5f:25:78:39:63:e4:d1:d2:25:28: 72:a8:89:da:d1:55:7f:a3:3b:cc:3b:87:46:b8:3d:c7:d8:dc: 5f:64:b6:41:4e:5f:bc:ed:2d:96:19:bd:7c:97:89:7a:f1:87: 78:0e:47:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOm88mACk4/g223TCeBYomoGVNWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJB RjYxOTE4MDAeFw0yNjEwMjQyMDE0MjlaFw0yNjEwMjUyMjIxMjlaMDMxMTAvBgNV BAMTKDkxQzNBRERFNDREQjFEQUE5Mzg1MDA0QkYyMUFFNjBDQ0IwREIwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveW6o6Gp2tsLXGGWs8A0lEHwZ Izo8HrSGsRZDaZU/gXsWUoul+qPh4IKDfZE91Enlh3mae1k2kNVOfHTYvac2hzlS hNxkc3PP3IdN6aQeF8uhZVPH1cctVq3hUn4e30hWBONxM0WYvmH8649ltu+E+uL4 aoAYxKvi2sAJHccomgrxTG5k2ZQ+trKGajUPU5pytUnX2E+cwEH3K6+hORT/Pqpy Azed/jsk8wrmKstWDF2pBCeOFuW7g0Igx/N4v9q3fuHew342zdrnLEgD8rFTun+x v+28QJeIa6JWWzuwHOm8g4BU+r6Dpl24STCzN1/SVLhlwqkgemar5G+FaqOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkcOt3kTbHaqThQBL8hrmDMsNsCwwHwYDVR0j BBgwFoAU1/BEPoRPWEE/7mECPGbzwq9hkYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzZhNDYtMzhmZi00NDk2LTk3MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4 NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJBRjYxOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0YwNDQzRTg0NEY1ODQxM0ZFRTYxMDIzQzY2RjNDMkFGNjE5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYz QzJBRjYxOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDeAyYDBUe+KSzz1gvOFvkM+Wnjzde01VYf QSrycYv1jxo3GgIPAIF8UL/aUH/ratsMq1o8by8J6DrKLYVKk04UaOt8FitVVq/Q Dcb8jH6aDKpDCorsoydJ5bZBc/reRN3+02T7Km2/Yq0pn/FHxVTMPr4udQ37UabM 6+cmCo1VowlL3BLCI2eIPc9ObboE1dgzdA9Cl3OZACBb8IN68/IVtyLz3dEJjwy6 SfmkMMpURNB79WJagjvr2M9pZ2e6lDSyKgeaPs2+6/c4QMA5XyV4OWPk0dIlKHKo idrRVX+jO8w7h0a4PcfY3F9ktkFOX7ztLZYZvXyXiXrxh3gOR74= -----END CERTIFICATE-----Generated at Sun Oct 25 03:23:32 2026 by rpki-client