$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: W69Dq96k1/qclrbZdqadHhwClELKqB22jVczSjvnoyA= Subject key identifier: FF:DE:37:47:7B:3A:A3:71:EA:90:E1:C5:29:3C:BE:BA:FA:DA:CD:6D Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 46A3C6D07E6F97E01CC9C6150B1C57DC84DBBAB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: EA Signing time: Sat 24 Oct 2026 13:25:46 +0000 Manifest this update: Sat 24 Oct 2026 13:20:46 +0000 Manifest next update: Sun 25 Oct 2026 14:13:46 +0000 Files and hashes: 1: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) 2: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) 3: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) 4: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: 4P20JVM+rrSxnWqEwYj3AXQCl7JBK8fhIdWg9ulYl7U=) 5: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a3:c6:d0:7e:6f:97:e0:1c:c9:c6:15:0b:1c:57:dc:84:db:ba:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: Oct 24 13:20:46 2026 GMT Not After : Oct 25 14:13:46 2026 GMT Subject: CN=FFDE37477B3AA371EA90E1C5293CBEBAFADACD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:c2:74:5a:03:ff:24:02:f9:ef:bc:b7:72: 65:0c:f3:f1:d4:a7:45:e5:5f:1b:70:77:bf:18:f6: a5:ba:39:eb:a3:30:58:1f:6a:d4:8b:a7:3d:0e:45: 45:a3:48:07:ce:35:47:fb:f7:d6:60:dc:0e:5c:57: f0:86:41:73:1d:0c:43:d7:4a:d7:32:55:6b:6f:a1: e6:fc:74:f1:82:b1:c8:4a:48:07:3d:75:dd:b6:15: 50:f9:59:4e:36:a4:09:91:dd:5c:32:91:b4:bc:23: 50:b1:f1:3b:a5:04:db:ea:69:9d:c1:5e:ba:7f:ae: dc:81:d8:ae:4e:1a:6a:51:e3:d2:48:74:d7:02:a4: d1:b1:3e:4f:a5:ba:27:6d:ac:08:15:d6:60:0a:7a: 6c:92:9f:34:7d:b4:2b:16:6c:87:99:64:05:ed:7b: bf:92:5f:02:c8:79:9c:97:57:1c:15:a2:c5:75:32: e4:b8:8b:f9:53:29:c3:1f:a8:54:ad:c7:58:8a:05: 55:81:22:66:ef:97:0e:9f:f2:95:13:d4:9c:d3:b9: ed:7b:96:0c:00:92:17:5a:d1:a9:1d:b7:68:77:25: 88:d9:67:52:89:02:83:35:c5:5a:46:a4:ae:68:7b: ac:6a:42:a2:ee:9d:69:6b:00:6f:a0:15:bc:0e:6c: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:37:47:7B:3A:A3:71:EA:90:E1:C5:29:3C:BE:BA:FA:DA:CD:6D X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5b:82:d7:f7:22:0b:d8:25:94:86:1c:61:82:e6:ff:cc:77: 0a:9b:9e:68:01:ac:96:89:25:dc:84:ac:85:b1:ab:e1:07:bc: 57:c3:c0:66:80:7b:3a:e1:dd:e0:d8:5c:d6:24:f2:e1:e1:97: cd:26:5e:b6:c4:22:cd:8f:4d:3d:15:11:10:e9:95:56:63:8f: 8b:1c:26:5f:f6:3a:b2:a5:9c:69:0c:86:be:78:31:7b:63:9b: a2:1d:40:11:4f:c2:9f:4d:e9:d6:d0:77:79:26:6e:4b:06:24: c7:6c:ae:4b:ee:c1:0c:5f:28:cb:7f:ea:74:d7:c2:04:f7:28: b5:16:6d:42:72:e6:af:9d:f0:c5:8f:08:2d:57:d4:a9:79:cd: d6:aa:3a:81:e4:5f:3f:c6:cd:dc:b4:44:a3:46:84:da:8c:54: e7:f9:37:03:f4:33:32:61:8f:98:b1:2a:41:25:1a:34:31:8d: ab:fc:f5:e0:0a:b2:f4:84:82:dc:7d:e3:2a:7b:ea:96:11:92: 5e:a5:3c:4e:c0:db:7d:87:34:fc:2e:0d:e0:13:39:87:8f:a3: cc:12:ab:a7:01:60:7d:aa:b6:83:11:e4:27:6a:f3:70:46:68: 4f:2c:f6:c3:ce:03:86:d6:68:90:e6:de:73:4c:bf:20:40:4e: fd:21:db:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqPG0H5vl+AcycYVCxxX3ITburcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjEwMjQxMzIwNDZaFw0yNjEwMjUxNDEzNDZaMDMxMTAvBgNV BAMTKEZGREUzNzQ3N0IzQUEzNzFFQTkwRTFDNTI5M0NCRUJBRkFEQUNENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIx8J0WgP/JAL577y3cmUM8/HU p0XlXxtwd78Y9qW6OeujMFgfatSLpz0ORUWjSAfONUf799Zg3A5cV/CGQXMdDEPX StcyVWtvoeb8dPGCschKSAc9dd22FVD5WU42pAmR3VwykbS8I1Cx8TulBNvqaZ3B Xrp/rtyB2K5OGmpR49JIdNcCpNGxPk+luidtrAgV1mAKemySnzR9tCsWbIeZZAXt e7+SXwLIeZyXVxwVosV1MuS4i/lTKcMfqFStx1iKBVWBImbvlw6f8pUT1JzTue17 lgwAkhda0akdt2h3JYjZZ1KJAoM1xVpGpK5oe6xqQqLunWlrAG+gFbwObNT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/943R3s6o3HqkOHFKTy+uvrazW0wHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVbgtf3IgvYJZSGHGGC5v/MdwqbnmgBrJaJ JdyErIWxq+EHvFfDwGaAezrh3eDYXNYk8uHhl80mXrbEIs2PTT0VERDplVZjj4sc Jl/2OrKlnGkMhr54MXtjm6IdQBFPwp9N6dbQd3kmbksGJMdsrkvuwQxfKMt/6nTX wgT3KLUWbUJy5q+d8MWPCC1X1Kl5zdaqOoHkXz/Gzdy0RKNGhNqMVOf5NwP0MzJh j5ixKkElGjQxjav89eAKsvSEgtx94yp76pYRkl6lPE7A232HNPwuDeATOYePo8wS q6cBYH2qtoMR5Cdq83BGaE8s9sPOA4bWaJDm3nNMvyBATv0h28Y= -----END CERTIFICATE-----Generated at Sun Oct 25 01:39:51 2026 by rpki-client