$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft File: 607EB065616BF1A985E6E549EC540E1C94E94819.mft (raw, json) Hash identifier: CX+yQp4KvVLofz3r1eEzEuL5+g17iaymI782YepoJuw= Subject key identifier: AF:56:28:8B:CD:1E:0D:93:53:06:B8:85:65:D8:CC:2F:A7:D6:F9:B0 Authority key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 Certificate issuer: /CN=607EB065616BF1A985E6E549EC540E1C94E94819 Certificate serial: 24628D835C58B8C5B221FB3300B3288581AD108B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 09:35:59 +0000 Manifest this update: Sat 24 Oct 2026 09:30:59 +0000 Manifest next update: Sun 25 Oct 2026 11:51:59 +0000 Files and hashes: 1: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: 8jyMA8Gmhc97Vi1yoxS8QxZYiktn7eC0pGgFqwBSsy8=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: jjNj0cEM+Wj64PDL2yAGNM6cCQQfvKyXt4I1SVLIB/E=) 3: 607EB065616BF1A985E6E549EC540E1C94E94819.crl (hash: LNT+2HH+U01ZVJj/kSjoyDvoJT103fe0z7ENtnRz8iQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:62:8d:83:5c:58:b8:c5:b2:21:fb:33:00:b3:28:85:81:ad:10:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607EB065616BF1A985E6E549EC540E1C94E94819 Validity Not Before: Oct 24 09:30:59 2026 GMT Not After : Oct 25 11:51:59 2026 GMT Subject: CN=AF56288BCD1E0D935306B88565D8CC2FA7D6F9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:f2:9f:5e:e2:dc:9a:0a:a6:02:fb:b7:89: 04:94:1b:a6:75:e4:0b:4c:1c:3f:bc:69:4c:12:15: a9:59:ec:e3:ca:9c:e7:eb:86:26:d7:82:44:bd:87: 59:b6:92:92:a7:11:9b:ec:f3:09:d2:9b:6c:1b:b7: ed:92:e1:dc:1b:45:90:99:19:52:80:d4:0e:52:a2: 94:8b:0a:0d:cf:49:dc:ec:23:c4:0b:6c:86:0f:8d: 36:0e:f9:63:35:e7:d8:94:47:5b:c0:83:ca:d6:1e: b6:57:74:28:32:60:1f:6d:dc:5f:97:21:1d:83:30: be:93:8d:95:50:21:db:1b:96:c8:49:3f:51:ee:86: ca:b5:33:55:b6:63:fb:e0:d8:93:9d:1f:bb:08:78: fb:b4:a8:fb:7d:01:df:5d:8f:f9:04:27:99:51:f9: 4f:f4:82:4f:58:35:9d:89:80:35:af:27:ed:2d:f8: dc:00:77:6f:07:62:cc:8d:7d:53:c5:8d:ca:86:74: 4a:7e:e4:3b:2f:1d:2f:c4:67:bc:6a:51:9b:26:42: 5f:ea:19:57:b1:e1:26:f5:f7:15:a9:4e:31:11:98: 31:9b:a7:d5:3d:35:3b:96:47:9e:a4:00:75:d5:c1: 10:bb:62:81:b1:eb:55:9a:1b:d1:e8:8d:d5:f5:75: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:28:8B:CD:1E:0D:93:53:06:B8:85:65:D8:CC:2F:A7:D6:F9:B0 X509v3 Authority Key Identifier: keyid:60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:01:cd:60:a4:cf:00:fe:6e:11:37:95:49:ec:25:8e:d6:46: 1b:d8:33:a4:4c:4b:24:d8:92:85:21:e4:38:79:9d:4b:52:5a: 6f:e1:1d:cd:71:c9:61:3b:c4:b0:96:fb:7d:eb:d8:e4:7a:c0: f6:42:ae:9d:f1:f4:09:1c:a4:1d:8c:19:2e:6d:30:d1:67:0e: be:de:d0:36:56:94:e3:cb:9f:3d:8d:ee:c3:70:64:c8:43:20: d1:f1:ae:ce:a6:79:a4:58:d3:b0:6d:34:32:0b:f6:a9:13:12: b7:b3:bc:50:44:27:66:97:55:a6:4f:7e:09:42:97:0d:22:6e: 9c:69:a2:4e:21:b0:d4:cf:0a:32:4d:e2:af:58:d6:9d:e7:dd: 7f:25:fb:68:c5:57:e3:e5:27:78:ff:f2:ee:34:0b:7c:77:10: 34:1a:5e:3f:35:dd:b0:c6:5e:d2:b9:b1:30:35:5b:69:d8:50: b9:36:7b:cf:da:66:02:74:be:44:97:18:2d:9d:3f:68:ea:df: 40:63:cd:2e:6e:99:54:a9:80:c8:e6:9d:19:5f:f4:95:d2:cf: 31:7b:51:50:24:b8:7d:72:3e:42:d0:7f:af:8c:d5:6c:aa:41: 13:e8:60:42:a3:4c:69:cb:44:7b:4a:63:4d:c9:46:98:67:b1: d5:88:bf:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGKNg1xYuMWyIfszALMohYGtEIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA3RUIwNjU2MTZCRjFBOTg1RTZFNTQ5RUM1NDBFMUM5 NEU5NDgxOTAeFw0yNjEwMjQwOTMwNTlaFw0yNjEwMjUxMTUxNTlaMDMxMTAvBgNV BAMTKEFGNTYyODhCQ0QxRTBEOTM1MzA2Qjg4NTY1RDhDQzJGQTdENkY5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgfKfXuLcmgqmAvu3iQSUG6Z1 5AtMHD+8aUwSFalZ7OPKnOfrhibXgkS9h1m2kpKnEZvs8wnSm2wbt+2S4dwbRZCZ GVKA1A5SopSLCg3PSdzsI8QLbIYPjTYO+WM159iUR1vAg8rWHrZXdCgyYB9t3F+X IR2DML6TjZVQIdsblshJP1Huhsq1M1W2Y/vg2JOdH7sIePu0qPt9Ad9dj/kEJ5lR +U/0gk9YNZ2JgDWvJ+0t+NwAd28HYsyNfVPFjcqGdEp+5DsvHS/EZ7xqUZsmQl/q GVex4Sb19xWpTjERmDGbp9U9NTuWR56kAHXVwRC7YoGx61WaG9HojdX1dYA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr1Yoi80eDZNTBriFZdjML6fW+bAwHwYDVR0j BBgwFoAUYH6wZWFr8amF5uVJ7FQOHJTpSBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU4OTVjZWItMjc3Ny00YWQ5LTkyZGItNDg3M2U0ODVjMWY2LzAvNjA3RUIwNjU2 MTZCRjFBOTg1RTZFNTQ5RUM1NDBFMUM5NEU5NDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDdFQjA2NTYxNkJGMUE5ODVFNkU1NDlFQzU0MEUxQzk0RTk0 ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvNjA3RUIwNjU2MTZCRjFBOTg1RTZFNTQ5RUM1NDBF MUM5NEU5NDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoBzWCkzwD+bhE3lUnsJY7WRhvYM6RMSyTY koUh5Dh5nUtSWm/hHc1xyWE7xLCW+33r2OR6wPZCrp3x9AkcpB2MGS5tMNFnDr7e 0DZWlOPLnz2N7sNwZMhDINHxrs6meaRY07BtNDIL9qkTErezvFBEJ2aXVaZPfglC lw0ibpxpok4hsNTPCjJN4q9Y1p3n3X8l+2jFV+PlJ3j/8u40C3x3EDQaXj813bDG XtK5sTA1W2nYULk2e8/aZgJ0vkSXGC2dP2jq30BjzS5umVSpgMjmnRlf9JXSzzF7 UVAkuH1yPkLQf6+M1WyqQRPoYEKjTGnLRHtKY03JRphnsdWIv4k= -----END CERTIFICATE-----Generated at Sat Oct 24 18:48:59 2026 by rpki-client