$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: AWz/0sxH3nAix1VSl+yAN+koYpQZrXcfmpaB6I5B+L0= Subject key identifier: 05:C3:20:D3:00:80:9E:A8:3F:70:C3:BD:A5:D2:BB:62:70:80:35:74 Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 100B06F6EE1EC97F619CECF7FFF038C971BA588A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: ED Signing time: Tue 27 Oct 2026 00:46:21 +0000 Manifest this update: Tue 27 Oct 2026 00:41:21 +0000 Manifest next update: Wed 28 Oct 2026 04:43:21 +0000 Files and hashes: 1: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: nQxItiKOkw75ugrfY+9LO5MVEbijFXTJPdlz4TmIvlQ=) 2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) 3: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:06:f6:ee:1e:c9:7f:61:9c:ec:f7:ff:f0:38:c9:71:ba:58:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Oct 27 00:41:21 2026 GMT Not After : Oct 28 04:43:21 2026 GMT Subject: CN=05C320D300809EA83F70C3BDA5D2BB6270803574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:90:1c:53:f7:eb:ec:a2:ef:e4:4f:34:24: 7d:00:b8:bc:84:8c:d7:32:e8:35:86:43:ae:8f:46: e5:b5:42:a1:8e:05:4b:80:25:7f:c0:99:ce:63:93: c4:e0:d2:08:02:6e:69:ca:b2:a9:76:c4:9c:62:4b: e0:19:a0:18:a3:0d:f8:96:7b:06:d4:30:f8:62:4e: 5e:4a:f8:e1:7e:fe:f4:23:4d:50:d4:80:2b:7c:f6: 8f:6b:a4:ac:8f:60:44:99:25:ef:e0:99:00:80:bd: ed:a8:1c:cd:5a:90:c6:4d:17:3d:65:0f:0b:aa:ca: f9:96:23:42:2f:fc:25:33:11:02:89:18:fa:d8:a2: b8:94:fc:3c:9e:88:14:5c:7c:62:2b:b6:a5:3e:22: 9d:f4:ab:b9:d3:37:2f:4c:99:72:33:ea:c1:4f:df: 79:ed:75:25:c3:55:76:84:e3:68:e8:14:47:03:ef: ea:ba:c6:ec:25:b5:19:22:42:22:9f:a5:d8:b5:a9: 4f:9e:a2:f0:0f:c3:98:83:89:c5:15:d7:b5:9b:db: f9:35:3b:1e:52:d0:f5:46:94:20:50:6f:59:09:b7: bb:1a:04:af:2a:fc:28:78:97:2d:2f:92:cf:a4:31: 31:04:46:fc:fc:07:c9:63:c7:f0:b6:e0:ce:50:eb: b2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:20:D3:00:80:9E:A8:3F:70:C3:BD:A5:D2:BB:62:70:80:35:74 X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:15:48:b9:c7:6e:93:3e:21:b0:d1:b9:33:1f:17:bf:56:a5: 49:53:dd:f7:ae:6c:4f:83:f0:83:46:74:54:78:b1:a2:34:9f: 7c:2f:69:75:93:87:90:cf:e6:31:e7:9c:b8:2c:e4:aa:16:3d: 3d:2d:6c:e8:bf:e7:2f:ec:f4:99:df:75:33:a5:52:8b:ae:52: b6:4b:cd:87:69:80:ea:d0:0c:04:60:da:c2:03:16:70:cb:81: a2:91:e3:a6:06:0f:17:bb:5e:6f:ce:22:7e:66:f2:0d:69:9d: ee:64:34:aa:1d:ad:76:11:07:75:14:d5:cb:70:82:b2:44:27: 4a:db:32:ce:35:e1:26:e6:b1:dc:a9:9a:22:60:af:48:d1:f3: 71:f0:6e:06:38:32:16:17:55:4c:f0:8e:79:ff:c5:eb:4c:2e: 72:0e:dd:78:9b:e3:e6:6c:40:e5:35:86:09:31:c9:cf:d2:53: 62:e0:52:b3:e4:f9:0b:07:c6:56:d5:50:45:86:31:8a:80:89: 02:97:28:0f:ab:d8:ec:b3:19:09:a9:97:e8:f0:b8:1c:12:07: 51:03:e8:86:1d:e1:b5:06:0e:30:25:37:e3:01:57:44:7f:51: 06:bf:0b:9e:93:b4:66:d9:2e:b1:59:78:1e:b2:2d:4c:19:4b: 3d:8d:0a:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAsG9u4eyX9hnOz3//A4yXG6WIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjEwMjcwMDQxMjFaFw0yNjEwMjgwNDQzMjFaMDMxMTAvBgNV BAMTKDA1QzMyMEQzMDA4MDlFQTgzRjcwQzNCREE1RDJCQjYyNzA4MDM1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOJAcU/fr7KLv5E80JH0AuLyE jNcy6DWGQ66PRuW1QqGOBUuAJX/Amc5jk8Tg0ggCbmnKsql2xJxiS+AZoBijDfiW ewbUMPhiTl5K+OF+/vQjTVDUgCt89o9rpKyPYESZJe/gmQCAve2oHM1akMZNFz1l DwuqyvmWI0Iv/CUzEQKJGPrYoriU/DyeiBRcfGIrtqU+Ip30q7nTNy9MmXIz6sFP 33ntdSXDVXaE42joFEcD7+q6xuwltRkiQiKfpdi1qU+eovAPw5iDicUV17Wb2/k1 Ox5S0PVGlCBQb1kJt7saBK8q/Ch4ly0vks+kMTEERvz8B8ljx/C24M5Q67LPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcMg0wCAnqg/cMO9pdK7YnCANXQwHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkVSLnHbpM+IbDRuTMfF79WpUlT3feubE+D 8INGdFR4saI0n3wvaXWTh5DP5jHnnLgs5KoWPT0tbOi/5y/s9JnfdTOlUouuUrZL zYdpgOrQDARg2sIDFnDLgaKR46YGDxe7Xm/OIn5m8g1pne5kNKodrXYRB3UU1ctw grJEJ0rbMs414SbmsdypmiJgr0jR83HwbgY4MhYXVUzwjnn/xetMLnIO3Xib4+Zs QOU1hgkxyc/SU2LgUrPk+QsHxlbVUEWGMYqAiQKXKA+r2OyzGQmpl+jwuBwSB1ED 6IYd4bUGDjAlN+MBV0R/UQa/C56TtGbZLrFZeB6yLUwZSz2NChU= -----END CERTIFICATE-----Generated at Tue Oct 27 22:27:35 2026 by rpki-client