$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft File: B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft (raw, json) Hash identifier: TQ+BCUEsXiPz2D7Cz0rZzAeimg6UM3+orejSFWXS8ZM= Subject key identifier: A9:DE:7A:EE:61:42:8A:0D:5E:0A:1E:D7:71:C6:4C:FB:84:AC:BF:90 Authority key identifier: B7:A1:75:54:65:FC:79:A9:61:57:44:84:31:6F:D4:B1:DE:A1:EC:EA Certificate issuer: /CN=B7A1755465FC79A961574484316FD4B1DEA1ECEA Certificate serial: 6D7DEBFED8C0425B63029825BAED9D8A3EFF4679 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A1755465FC79A961574484316FD4B1DEA1ECEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft Manifest number: EA Signing time: Sat 24 Oct 2026 18:06:45 +0000 Manifest this update: Sat 24 Oct 2026 18:01:45 +0000 Manifest next update: Sun 25 Oct 2026 19:44:45 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: C26UtSsObR8Xx7c6R6UB88yXf0cokS1cR5PidsY+IiE=) 2: B7A1755465FC79A961574484316FD4B1DEA1ECEA.crl (hash: axOk/1rrmt81t+dRo2XwcY2g0CWtvoL45yGQrzteGRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.crl rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A1755465FC79A961574484316FD4B1DEA1ECEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7d:eb:fe:d8:c0:42:5b:63:02:98:25:ba:ed:9d:8a:3e:ff:46:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A1755465FC79A961574484316FD4B1DEA1ECEA Validity Not Before: Oct 24 18:01:45 2026 GMT Not After : Oct 25 19:44:45 2026 GMT Subject: CN=A9DE7AEE61428A0D5E0A1ED771C64CFB84ACBF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:08:d4:f7:af:c7:9e:ea:f1:a7:4b:87:d6:3d: f3:82:e7:3c:ac:ce:b2:86:75:4c:84:e1:84:7d:cd: 00:4d:4b:af:df:cb:5c:a1:4d:f2:e8:cc:4a:52:ae: 49:dc:44:a6:51:bd:fe:94:e8:d6:ce:f3:c9:b3:c4: 40:9f:40:9a:30:29:9d:1b:eb:92:3f:e2:59:ae:f8: 09:82:5b:bc:9c:4e:ed:22:af:91:68:4e:3a:8f:59: 8d:20:f6:16:1f:d8:8f:3b:6b:d8:c9:8d:fd:04:88: 59:3f:ce:0b:92:66:a3:a9:8e:dc:52:4f:7b:37:f5: 74:09:95:f9:d7:df:3d:15:e6:98:b8:85:c9:61:a3: 53:b5:8b:41:b1:31:1b:ee:55:a5:94:fa:64:f0:44: 3b:50:77:69:e6:fa:ad:7f:24:f0:35:0a:7c:af:ef: 16:3f:bd:bc:15:76:f5:c8:27:29:15:df:c8:d2:af: 90:6e:27:46:f4:ac:29:2a:30:88:e1:88:4f:d6:89: 06:de:24:e4:b5:9c:f2:45:f9:9c:a9:9b:82:61:6c: 87:b1:bb:59:6a:60:67:07:ef:f1:91:5f:ab:ea:68: 38:7c:c5:da:34:3f:91:ef:d5:8a:e1:40:2e:67:05: 84:c9:8e:bf:73:aa:c1:c4:b3:90:74:59:a3:18:cf: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:7A:EE:61:42:8A:0D:5E:0A:1E:D7:71:C6:4C:FB:84:AC:BF:90 X509v3 Authority Key Identifier: keyid:B7:A1:75:54:65:FC:79:A9:61:57:44:84:31:6F:D4:B1:DE:A1:EC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A1755465FC79A961574484316FD4B1DEA1ECEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:94:4e:bc:3c:8d:c2:1e:81:ed:11:63:8a:98:02:05:dd:4d: 4a:0f:4b:6b:d6:36:db:7a:22:18:08:84:ee:74:a8:7c:23:06: ec:8c:c7:f8:20:b3:70:38:9c:58:42:42:89:45:76:26:f3:8a: 2b:03:99:0f:75:48:0c:ed:58:12:41:04:0b:15:8f:53:51:e5: 27:86:e6:f9:91:f1:05:d0:e0:eb:69:13:d0:dc:7d:9d:e7:df: b9:53:de:99:fe:17:bf:8b:c6:cd:98:68:8c:05:b0:6b:26:7d: 47:86:ea:27:77:b4:1e:75:a7:fb:bd:0a:2a:ac:ba:38:61:2c: 62:e6:a5:61:63:b1:3b:56:15:86:88:21:a3:65:a8:e6:13:c3: 1a:d8:35:b8:ef:46:76:a7:3e:ff:2e:47:42:a8:d5:57:d3:67: 14:b8:3f:9b:04:08:5f:5c:dd:b1:7e:b2:2b:cd:71:20:c1:23: 55:7e:d7:b7:4b:60:f3:87:16:f7:1e:01:46:d7:3a:56:be:f5: 34:a8:63:3d:c0:fa:ac:c9:e3:9a:93:7b:b8:4f:cb:62:08:f7: aa:fc:a9:a6:cd:7d:42:cc:b7:5c:3b:02:7c:af:22:93:a0:7d: 67:6c:60:73:a6:af:a8:93:2e:15:95:74:93:47:ae:43:51:8b: d4:a8:85:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbX3r/tjAQltjApgluu2dij7/RnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMTc1NTQ2NUZDNzlBOTYxNTc0NDg0MzE2RkQ0QjFE RUExRUNFQTAeFw0yNjEwMjQxODAxNDVaFw0yNjEwMjUxOTQ0NDVaMDMxMTAvBgNV BAMTKEE5REU3QUVFNjE0MjhBMEQ1RTBBMUVENzcxQzY0Q0ZCODRBQ0JGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpCNT3r8ee6vGnS4fWPfOC5zys zrKGdUyE4YR9zQBNS6/fy1yhTfLozEpSrkncRKZRvf6U6NbO88mzxECfQJowKZ0b 65I/4lmu+AmCW7ycTu0ir5FoTjqPWY0g9hYf2I87a9jJjf0EiFk/zguSZqOpjtxS T3s39XQJlfnX3z0V5pi4hclho1O1i0GxMRvuVaWU+mTwRDtQd2nm+q1/JPA1Cnyv 7xY/vbwVdvXIJykV38jSr5BuJ0b0rCkqMIjhiE/WiQbeJOS1nPJF+Zypm4JhbIex u1lqYGcH7/GRX6vqaDh8xdo0P5Hv1YrhQC5nBYTJjr9zqsHEs5B0WaMYz32nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqd567mFCig1eCh7XccZM+4Ssv5AwHwYDVR0j BBgwFoAUt6F1VGX8ealhV0SEMW/Usd6h7OowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRkYWRjZDAtZjFhOS00OGU0LWEyYzUtZGUxODE4YmZmZTQzLzAvQjdBMTc1NTQ2 NUZDNzlBOTYxNTc0NDg0MzE2RkQ0QjFERUExRUNFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0ExNzU1NDY1RkM3OUE5NjE1NzQ0ODQzMTZGRDRCMURFQTFF Q0VBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvQjdBMTc1NTQ2NUZDNzlBOTYxNTc0NDg0MzE2RkQ0 QjFERUExRUNFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6UTrw8jcIege0RY4qYAgXdTUoPS2vWNtt6 IhgIhO50qHwjBuyMx/ggs3A4nFhCQolFdibziisDmQ91SAztWBJBBAsVj1NR5SeG 5vmR8QXQ4OtpE9DcfZ3n37lT3pn+F7+Lxs2YaIwFsGsmfUeG6id3tB51p/u9Ciqs ujhhLGLmpWFjsTtWFYaIIaNlqOYTwxrYNbjvRnanPv8uR0Ko1VfTZxS4P5sECF9c 3bF+sivNcSDBI1V+17dLYPOHFvceAUbXOla+9TSoYz3A+qzJ45qTe7hPy2II96r8 qabNfULMt1w7AnyvIpOgfWdsYHOmr6iTLhWVdJNHrkNRi9SohVA= -----END CERTIFICATE-----Generated at Sat Oct 24 20:46:50 2026 by rpki-client