$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json) Hash identifier: nKvCE4D1wF9uyPkk5dwIr3LrgngMt4E251H9uviiw6Y= Subject key identifier: D4:2A:C9:9C:62:2A:37:C6:AB:49:69:00:24:D7:4B:55:E8:84:28:57 Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Certificate serial: 257F2D3AF385912CD19F3B356E4489D1D8AD0DA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft Manifest number: EB Signing time: Sun 25 Oct 2026 09:07:56 +0000 Manifest this update: Sun 25 Oct 2026 09:02:56 +0000 Manifest next update: Mon 26 Oct 2026 11:27:56 +0000 Files and hashes: 1: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: MTItH7h6Vx4Wok5ZRhizVGNg8fQM7JIL3KDVfZpYJA8=) 2: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=) 3: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=) 4: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7f:2d:3a:f3:85:91:2c:d1:9f:3b:35:6e:44:89:d1:d8:ad:0d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Validity Not Before: Oct 25 09:02:56 2026 GMT Not After : Oct 26 11:27:56 2026 GMT Subject: CN=D42AC99C622A37C6AB49690024D74B55E8842857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:6d:9a:a2:fa:d0:cf:62:82:da:cc:e6:b9: fa:dc:46:ad:c3:3d:66:68:d4:45:2d:78:91:5e:04: a4:dc:68:47:bd:53:3c:99:44:09:1c:8c:16:5c:0f: ad:f2:81:a6:b6:a3:64:17:98:18:29:3a:d3:b4:4a: ac:a0:e8:dc:52:e3:79:7d:60:1c:a0:cc:6b:db:ca: f1:ec:b6:3b:41:40:8a:d7:fb:7e:50:3d:e9:b1:50: b2:9a:18:c9:67:e4:ed:b7:32:01:7e:67:e9:67:00: 97:d5:6c:cb:e3:af:0b:b8:0b:20:32:68:0d:11:11: a4:b5:43:e2:7a:95:4d:c0:27:e6:de:f2:0b:cb:e9: 0b:fa:39:f4:e3:ec:48:6c:a4:7b:88:90:de:7d:9f: 56:8e:8c:0b:21:43:33:51:45:d2:d7:7e:3d:84:14: de:5f:85:19:c1:17:80:9c:79:db:e3:1c:d4:69:36: d9:09:9e:31:be:67:ce:96:4c:27:9c:2d:90:09:b9: de:08:8a:87:d4:48:e9:d0:6a:a3:14:d4:bf:fd:94: 4f:7c:8b:1a:d5:9c:eb:2d:db:6f:9f:47:1f:a9:12: 10:9d:5e:ee:17:cc:49:ea:54:ba:88:27:6d:55:16: 3b:e3:9e:e7:a4:aa:40:10:5f:4c:ea:0f:1b:6b:79: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2A:C9:9C:62:2A:37:C6:AB:49:69:00:24:D7:4B:55:E8:84:28:57 X509v3 Authority Key Identifier: keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bb:e6:34:56:bf:ae:03:89:72:58:30:5a:dc:2a:8b:85:4e: 63:9c:94:cd:aa:7b:ca:99:05:8d:66:3a:b5:5f:05:d9:4b:ff: df:c0:d2:bb:2d:15:4a:15:76:a0:2b:47:1e:73:42:0f:b6:c1: 03:9d:52:46:92:fb:02:e8:aa:74:18:d8:64:e5:96:b3:d9:1e: a7:d2:b4:d6:a8:8d:0d:d4:07:f5:ec:35:6b:15:ca:ea:98:a6: a2:d4:10:20:c0:53:c8:ee:d1:1f:38:e6:78:e4:d7:6e:98:e7: 80:54:95:4f:68:ef:9c:2f:8e:af:ce:a0:b6:db:b6:f6:89:8d: ab:f7:12:4b:56:00:ec:cf:58:f4:58:b8:ca:4e:c7:9a:aa:49: dc:b2:b3:a8:a8:c0:1a:6d:f0:55:19:39:12:9c:ea:77:d5:c3: 32:54:3c:af:2a:eb:41:33:fe:b0:4a:47:e1:e3:25:b6:ae:06: 3a:b6:4e:a7:f7:22:9c:21:30:ed:1d:04:4e:a4:fc:aa:8d:be: 1c:e4:6f:22:ee:f2:6e:66:54:06:a4:f2:bc:b4:44:e1:95:28: 76:13:d9:ff:5e:79:63:87:7c:54:77:78:22:0b:4b:11:97:a9: df:bf:2d:14:e7:fd:c3:54:40:fc:fb:bf:ff:a5:c6:4a:ff:ab: 30:05:32:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJX8tOvOFkSzRnzs1bkSJ0ditDaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIxQkJF MjhFRUQzQTAeFw0yNjEwMjUwOTAyNTZaFw0yNjEwMjYxMTI3NTZaMDMxMTAvBgNV BAMTKEQ0MkFDOTlDNjIyQTM3QzZBQjQ5NjkwMDI0RDc0QjU1RTg4NDI4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwm2aovrQz2KC2szmufrcRq3D PWZo1EUteJFeBKTcaEe9UzyZRAkcjBZcD63ygaa2o2QXmBgpOtO0Sqyg6NxS43l9 YBygzGvbyvHstjtBQIrX+35QPemxULKaGMln5O23MgF+Z+lnAJfVbMvjrwu4CyAy aA0REaS1Q+J6lU3AJ+be8gvL6Qv6OfTj7EhspHuIkN59n1aOjAshQzNRRdLXfj2E FN5fhRnBF4CcedvjHNRpNtkJnjG+Z86WTCecLZAJud4IiofUSOnQaqMU1L/9lE98 ixrVnOst22+fRx+pEhCdXu4XzEnqVLqIJ21VFjvjnuekqkAQX0zqDxtreV31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1CrJnGIqN8arSWkAJNdLVeiEKFcwHwYDVR0j BBgwFoAU0Ae3aPZ2t4ZQqoKPo9Sxu+KO7TowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdhNmIyM2ItYzQxZS00NDQ5LWExNDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhG Njc2Qjc4NjUwQUE4MjhGQTNENEIxQkJFMjhFRUQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDA3Qjc2OEY2NzZCNzg2NTBBQTgyOEZBM0Q0QjFCQkUyOEVF RDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIx QkJFMjhFRUQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIS75jRWv64DiXJYMFrcKouFTmOclM2qe8qZ BY1mOrVfBdlL/9/A0rstFUoVdqArRx5zQg+2wQOdUkaS+wLoqnQY2GTllrPZHqfS tNaojQ3UB/XsNWsVyuqYpqLUECDAU8ju0R845njk126Y54BUlU9o75wvjq/OoLbb tvaJjav3EktWAOzPWPRYuMpOx5qqSdyys6iowBpt8FUZORKc6nfVwzJUPK8q60Ez /rBKR+HjJbauBjq2Tqf3IpwhMO0dBE6k/KqNvhzkbyLu8m5mVAak8ry0ROGVKHYT 2f9eeWOHfFR3eCILSxGXqd+/LRTn/cNUQPz7v/+lxkr/qzAFMjA= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:49 2026 by rpki-client