$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json) Hash identifier: ZN7dZvIWwlX7zJ9uBJMRpRZZFDM4Gt0E5KBlCXY6RMY= Subject key identifier: 6C:A0:8F:BF:45:E5:97:5C:69:67:D8:C9:89:78:23:93:C6:86:ED:70 Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Certificate serial: 6763E189E69855C56513F1781C45DD02B536C11F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft Manifest number: EC Signing time: Sun 25 Oct 2026 09:02:48 +0000 Manifest this update: Sun 25 Oct 2026 08:57:48 +0000 Manifest next update: Mon 26 Oct 2026 11:33:48 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=) 2: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: NItdHImT4thHv0lDoT/LqGRq9PAOvXdQtLYcgOrr5so=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:63:e1:89:e6:98:55:c5:65:13:f1:78:1c:45:dd:02:b5:36:c1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Validity Not Before: Oct 25 08:57:48 2026 GMT Not After : Oct 26 11:33:48 2026 GMT Subject: CN=6CA08FBF45E5975C6967D8C989782393C686ED70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:06:80:4b:83:8c:51:5b:9c:62:cb:29:71: ac:83:bc:37:59:8b:95:bf:a6:cf:94:14:14:0e:87: 36:3a:e9:8f:b8:ca:0b:b1:68:d1:40:9a:32:53:71: 68:b0:97:65:10:8a:ae:43:39:a0:5a:87:58:14:d2: ee:7e:23:ec:3a:c0:e8:b9:98:54:ec:f3:ea:c5:81: 62:79:3c:4e:1f:db:26:59:bd:d2:0d:24:aa:fb:95: d1:38:c0:58:9a:53:9a:4a:39:1a:a8:94:ce:d9:f3: e9:2b:d5:ee:99:66:54:0f:f5:96:bd:24:dc:93:1e: ef:d1:79:c6:01:47:23:ab:da:f7:24:b4:1c:48:fb: 82:db:01:d4:eb:33:15:58:9c:4f:2e:e0:97:21:f9: 28:aa:cf:55:1d:6e:a6:e6:a9:43:b8:3f:7a:65:2e: 23:03:e8:8a:32:91:77:19:e5:8f:69:2a:19:01:b6: c9:9b:db:02:87:e5:a1:00:88:ae:92:84:9a:69:26: 21:13:10:eb:70:f3:7a:bf:ec:47:dd:fb:73:6e:08: 92:fb:fb:e8:76:61:4f:b8:b7:63:b6:b4:47:ad:54: c6:38:ea:22:90:b6:53:1d:a9:5b:16:d1:49:86:0e: db:62:16:9f:35:a7:66:48:32:2f:a6:f7:8b:a1:b5: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A0:8F:BF:45:E5:97:5C:69:67:D8:C9:89:78:23:93:C6:86:ED:70 X509v3 Authority Key Identifier: keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:40:18:55:a3:9c:85:98:53:12:c3:54:5a:b2:51:ad:00: fc:99:47:d0:38:2b:8f:f9:b0:96:ba:7c:82:b2:85:3e:39:62: 3d:b2:e8:50:62:70:f2:27:a0:de:d4:a4:da:bd:c8:e0:41:42: 0d:b2:7f:89:1f:61:b4:20:2b:fb:17:53:7d:7e:82:68:0f:42: 16:b8:a6:f9:cb:9b:79:55:63:92:c9:82:a9:dd:e5:3e:b2:89: 55:23:d0:3d:d5:2f:11:ae:df:6b:0f:f7:b8:df:d1:f4:94:6f: 00:7a:bc:b7:73:ea:9b:18:97:9e:f5:37:9c:74:d7:0d:28:51: a1:d8:1b:24:92:23:a9:a5:b8:74:37:28:42:f5:4a:ed:54:7a: da:b6:d0:f5:c0:b5:92:06:d4:45:6c:a2:40:09:d4:f8:23:72: a6:ef:75:4a:d1:af:b4:0e:14:ef:6f:22:94:02:83:9a:a8:ec: 75:5d:2f:95:62:1d:fa:9b:9b:09:3d:a6:84:03:cc:47:41:a5: 6a:cc:be:63:81:a3:cd:36:9e:e7:f9:23:3c:8a:89:b5:51:3e: 4a:08:9c:ce:25:03:a1:88:e0:60:cb:fa:3a:65:3a:64:03:bf: 25:0d:c4:26:bf:c7:f6:78:e0:d5:7c:3e:12:49:b4:d1:27:06: 36:0b:e5:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2PhieaYVcVlE/F4HEXdArU2wR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0 NURBMzA5MDAeFw0yNjEwMjUwODU3NDhaFw0yNjEwMjYxMTMzNDhaMDMxMTAvBgNV BAMTKDZDQTA4RkJGNDVFNTk3NUM2OTY3RDhDOTg5NzgyMzkzQzY4NkVENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUQaAS4OMUVucYsspcayDvDdZ i5W/ps+UFBQOhzY66Y+4yguxaNFAmjJTcWiwl2UQiq5DOaBah1gU0u5+I+w6wOi5 mFTs8+rFgWJ5PE4f2yZZvdINJKr7ldE4wFiaU5pKORqolM7Z8+kr1e6ZZlQP9Za9 JNyTHu/RecYBRyOr2vcktBxI+4LbAdTrMxVYnE8u4Jch+Siqz1UdbqbmqUO4P3pl LiMD6IoykXcZ5Y9pKhkBtsmb2wKH5aEAiK6ShJppJiETEOtw83q/7Efd+3NuCJL7 ++h2YU+4t2O2tEetVMY46iKQtlMdqVsW0UmGDttiFp81p2ZIMi+m94uhtbmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKCPv0Xll1xpZ9jJiXgjk8aG7XAwHwYDVR0j BBgwFoAUfYXw+2ph1dIsjzbWL+kiOUXaMJAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhiNDQxYWQtZjFhYS00OGQzLTllZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2 QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0NURBMzA5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDg1RjBGQjZBNjFENUQyMkM4RjM2RDYyRkU5MjIzOTQ1REEz MDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIy Mzk0NURBMzA5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+6QBhVo5yFmFMSw1RaslGtAPyZR9A4K4/5 sJa6fIKyhT45Yj2y6FBicPInoN7UpNq9yOBBQg2yf4kfYbQgK/sXU31+gmgPQha4 pvnLm3lVY5LJgqnd5T6yiVUj0D3VLxGu32sP97jf0fSUbwB6vLdz6psYl571N5x0 1w0oUaHYGySSI6mluHQ3KEL1Su1Uetq20PXAtZIG1EVsokAJ1PgjcqbvdUrRr7QO FO9vIpQCg5qo7HVdL5ViHfqbmwk9poQDzEdBpWrMvmOBo802nuf5IzyKibVRPkoI nM4lA6GI4GDL+jplOmQDvyUNxCa/x/Z44NV8PhJJtNEnBjYL5aE= -----END CERTIFICATE-----Generated at Sun Oct 25 20:56:05 2026 by rpki-client