$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json) Hash identifier: lYz+/zQN5nutmgkWcR7z/q/rEVrL48mkJGpkBYXopdw= Subject key identifier: 7C:78:D1:87:6A:45:09:D9:D3:77:37:AB:0B:6B:4E:9D:33:40:40:9C Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Certificate serial: 7B7329ECBE0E93F5CD26848FDE873299374D7613 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft Manifest number: EB Signing time: Sun 25 Oct 2026 08:57:35 +0000 Manifest this update: Sun 25 Oct 2026 08:52:35 +0000 Manifest next update: Mon 26 Oct 2026 12:02:35 +0000 Files and hashes: 1: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=) 2: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: OnOLP6UDxd/h5XlbXw7OheBjeprZruojjBjYTrv5JYw=) 3: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=) 4: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:73:29:ec:be:0e:93:f5:cd:26:84:8f:de:87:32:99:37:4d:76:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Validity Not Before: Oct 25 08:52:35 2026 GMT Not After : Oct 26 12:02:35 2026 GMT Subject: CN=7C78D1876A4509D9D37737AB0B6B4E9D3340409C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:50:d1:d8:82:ad:04:ad:18:a9:3e:9f:df: a9:8d:a6:02:56:36:94:70:c9:79:fb:9a:c7:7d:5b: 04:6a:9b:73:fd:b3:29:a7:ab:eb:6c:c7:28:1e:7f: e1:f3:8c:a7:7c:0d:03:5c:f7:a5:cf:a7:db:c4:91: 9c:40:e8:20:9c:44:69:73:55:18:7c:e2:dd:e4:b6: 6e:8e:96:b3:99:00:cf:85:5a:cf:f1:ff:4d:1a:37: 67:a7:f4:a0:d0:6c:72:8a:ee:b6:bc:40:6c:5b:76: 8d:b3:94:a6:c3:25:ad:c8:f8:db:e9:e0:64:07:8e: 6f:72:62:83:7a:9c:4d:31:6d:37:eb:bb:73:b3:2c: ed:5a:10:b8:61:78:8f:f3:64:ac:bf:2b:f6:ea:a1: c8:d6:ff:59:9a:34:e6:61:34:9c:ed:dd:88:30:7c: 2e:56:1c:b3:f3:7f:56:f1:c4:c9:37:e0:4b:48:86: d1:88:24:c2:7e:56:ab:91:42:cb:48:e8:3e:08:e9: ca:3d:a1:8a:b9:91:4a:cb:70:22:03:68:3b:76:7b: 08:3b:a0:86:37:c5:97:a7:26:e7:28:79:5f:8b:d3: 0e:7f:4c:19:38:e4:c3:95:cc:1c:0f:d6:c8:d7:e2: d6:ef:5d:92:99:b4:9a:d3:58:bc:4f:1b:8f:b6:fa: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:D1:87:6A:45:09:D9:D3:77:37:AB:0B:6B:4E:9D:33:40:40:9C X509v3 Authority Key Identifier: keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:dc:65:c3:a9:b7:74:7e:8d:f9:5c:16:8d:ba:20:30:eb:d0: 41:27:85:7e:1f:dd:93:bd:fe:4c:e6:f6:6d:e6:5a:5e:f7:1f: e0:8e:98:14:e8:cd:f1:2b:eb:d5:a6:96:73:7b:75:cb:0b:12: f1:68:15:63:36:b2:7d:b0:d3:7c:b1:b0:3e:3e:df:86:10:ec: b0:c7:52:74:6c:c1:6c:e1:fd:8c:af:91:3d:45:99:db:8c:ed: df:9f:24:7c:6b:de:04:ed:ec:05:ad:ef:d8:c8:e1:6b:f6:c4: 68:23:87:44:0d:03:d1:30:68:22:27:3e:97:0c:58:21:5e:97: e3:4a:44:07:76:5c:1c:e4:b7:1f:5f:c1:32:15:ec:65:01:28: 81:fa:27:da:c5:4e:9f:71:b6:a7:60:2b:6d:5c:8a:ad:f1:d1: cb:3e:d9:84:80:2a:1b:13:b6:e8:07:4e:aa:34:5e:5d:59:ea: 58:9e:c6:5a:75:9f:ef:4a:a1:0f:f4:e2:39:af:68:5a:2e:a0: 38:77:34:08:5c:84:4b:58:a4:45:42:93:53:60:b7:1f:da:7d: 5b:1e:0c:58:8e:ee:9f:30:2f:0a:1c:0d:6e:a5:90:5f:c8:12: bb:46:53:da:37:29:13:0a:5d:d4:d6:a5:0b:04:76:a8:55:21: c8:12:fc:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3Mp7L4Ok/XNJoSP3ocymTdNdhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2 NzI4MTZBNzAeFw0yNjEwMjUwODUyMzVaFw0yNjEwMjYxMjAyMzVaMDMxMTAvBgNV BAMTKDdDNzhEMTg3NkE0NTA5RDlEMzc3MzdBQjBCNkI0RTlEMzM0MDQwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXVDR2IKtBK0YqT6f36mNpgJW NpRwyXn7msd9WwRqm3P9symnq+tsxygef+HzjKd8DQNc96XPp9vEkZxA6CCcRGlz VRh84t3ktm6OlrOZAM+FWs/x/00aN2en9KDQbHKK7ra8QGxbdo2zlKbDJa3I+Nvp 4GQHjm9yYoN6nE0xbTfru3OzLO1aELhheI/zZKy/K/bqocjW/1maNOZhNJzt3Ygw fC5WHLPzf1bxxMk34EtIhtGIJMJ+VquRQstI6D4I6co9oYq5kUrLcCIDaDt2ewg7 oIY3xZenJucoeV+L0w5/TBk45MOVzBwP1sjX4tbvXZKZtJrTWLxPG4+2+iITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHjRh2pFCdnTdzerC2tOnTNAQJwwHwYDVR0j BBgwFoAUVAlyAG7E0c4O3cfaEdFBn2coFqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk3MThmNmItYjUxNi00M2FlLWI1ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2 RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2NzI4MTZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDA5NzIwMDZFQzREMUNFMEVEREM3REExMUQxNDE5RjY3Mjgx NkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQx OUY2NzI4MTZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDcZcOpt3R+jflcFo26IDDr0EEnhX4f3ZO9 /kzm9m3mWl73H+COmBTozfEr69WmlnN7dcsLEvFoFWM2sn2w03yxsD4+34YQ7LDH UnRswWzh/YyvkT1FmduM7d+fJHxr3gTt7AWt79jI4Wv2xGgjh0QNA9EwaCInPpcM WCFel+NKRAd2XBzktx9fwTIV7GUBKIH6J9rFTp9xtqdgK21ciq3x0cs+2YSAKhsT tugHTqo0Xl1Z6liexlp1n+9KoQ/04jmvaFouoDh3NAhchEtYpEVCk1Ngtx/afVse DFiO7p8wLwocDW6lkF/IErtGU9o3KRMKXdTWpQsEdqhVIcgS/MU= -----END CERTIFICATE-----Generated at Sun Oct 25 19:46:08 2026 by rpki-client