$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft (raw, json) Hash identifier: h7HVX6Cq/TtbcPSPEDKNtqZXFVYFoNeiaYIqF+9Av6s= Subject key identifier: 19:45:14:B1:F5:08:1C:8A:E0:5A:6B:7C:C1:96:F4:66:85:DE:DE:DA Authority key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 Certificate issuer: /CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Certificate serial: 1F828D4326CE0CA6ECA8BB083238DBA48D2B984C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft Manifest number: EB Signing time: Sun 25 Oct 2026 00:29:44 +0000 Manifest this update: Sun 25 Oct 2026 00:24:44 +0000 Manifest next update: Mon 26 Oct 2026 03:37:44 +0000 Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: ljFouV7ZlSbTbdDcS0zoJf3jqUeKDHqtCtUhcsruCg4=) 2: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl (hash: UqSTbN2sm2QjNjqeAZ2MCLEW06+KMw0NTOoyGqI+AK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:82:8d:43:26:ce:0c:a6:ec:a8:bb:08:32:38:db:a4:8d:2b:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Validity Not Before: Oct 25 00:24:44 2026 GMT Not After : Oct 26 03:37:44 2026 GMT Subject: CN=194514B1F5081C8AE05A6B7CC196F46685DEDEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:ce:0b:4a:79:e2:45:6a:14:00:8d:69:6d: 4b:58:96:e4:e1:c5:b3:1c:aa:ae:ec:0e:ce:3b:9d: 3f:b7:4d:57:ee:5a:05:71:ae:d5:7c:de:d4:09:f5: d9:83:2f:08:0a:32:39:7d:1b:c6:65:bc:6d:82:32: 7a:fa:77:41:b9:8b:4c:0e:2f:6c:69:0f:01:34:e7: 60:f1:3b:d4:0a:6b:ab:20:62:07:98:b6:97:d9:d4: ad:92:42:47:d7:8b:3e:92:b4:95:87:59:3e:89:7c: 70:51:0f:77:9f:37:4b:14:f7:64:89:c0:4e:e2:7b: 3f:74:0a:31:7b:6b:06:68:91:a5:3b:4d:d4:60:ac: d6:27:c5:f2:76:2f:15:c8:fd:63:e0:eb:21:27:b3: 77:9f:4b:ac:22:29:43:58:8f:aa:c9:0f:e3:af:0c: d9:1a:0f:65:25:59:e0:74:77:f7:e8:be:74:93:7f: ef:c0:26:04:99:e1:23:26:e0:be:a8:fd:75:0a:05: 60:9a:4f:ac:5c:92:a7:37:88:51:7d:1e:44:ce:c9: e2:85:d0:9e:d8:b7:5d:ba:48:4f:fd:f8:8c:7d:8a: f6:21:8a:3c:87:60:f0:9f:4d:a9:81:f1:58:70:c5: 6a:a0:0d:2f:44:8c:03:09:57:a2:6c:df:6b:8d:13: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:45:14:B1:F5:08:1C:8A:E0:5A:6B:7C:C1:96:F4:66:85:DE:DE:DA X509v3 Authority Key Identifier: keyid:B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d0:ca:bd:d1:09:e3:25:06:58:e6:4f:9f:eb:93:26:b7:2e: b3:34:03:98:81:f8:2e:5c:cf:bb:5d:6f:46:c1:9a:d7:e1:29: 5d:2e:67:42:d3:86:e2:a9:78:28:04:4b:66:dc:2c:e5:6d:d2: a9:9e:8c:41:b2:b8:04:1d:e1:c9:df:c2:b2:40:3c:e7:e8:80: ce:3d:fd:80:ff:c9:90:e2:42:4f:0a:ee:cc:14:38:ec:c3:06: 91:d3:b2:45:96:7d:40:92:97:0d:11:be:20:a5:6f:15:f8:32: e1:b1:ad:a6:ab:5c:f5:d8:b9:37:b1:6d:56:ce:f0:46:f4:01: 44:56:cd:cc:70:08:d7:f1:42:54:53:99:f0:b0:06:74:02:f0: bd:ca:a5:85:fb:da:35:f4:55:97:3d:40:7e:66:4c:96:a5:99: 27:85:0c:22:da:c8:42:a2:02:3c:a2:f6:f5:e2:5e:bf:6c:ee: 0c:8d:d1:bd:f5:93:0f:eb:d4:96:0f:e5:71:00:82:7f:73:82: 1d:a8:99:d4:6a:9a:39:72:ec:b8:b6:27:f5:19:fa:a1:90:e7: 70:1b:e2:18:7b:4c:08:fe:38:29:c6:83:fc:4b:fc:62:36:f5: e9:8c:2d:4c:0b:d6:6d:03:74:12:7b:a9:8e:9f:b8:ad:e3:56: 75:55:00:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4KNQybODKbsqLsIMjjbpI0rmEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3 RjMxNTFGODAeFw0yNjEwMjUwMDI0NDRaFw0yNjEwMjYwMzM3NDRaMDMxMTAvBgNV BAMTKDE5NDUxNEIxRjUwODFDOEFFMDVBNkI3Q0MxOTZGNDY2ODVERURFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUj84LSnniRWoUAI1pbUtYluTh xbMcqq7sDs47nT+3TVfuWgVxrtV83tQJ9dmDLwgKMjl9G8ZlvG2CMnr6d0G5i0wO L2xpDwE052DxO9QKa6sgYgeYtpfZ1K2SQkfXiz6StJWHWT6JfHBRD3efN0sU92SJ wE7iez90CjF7awZokaU7TdRgrNYnxfJ2LxXI/WPg6yEns3efS6wiKUNYj6rJD+Ov DNkaD2UlWeB0d/fovnSTf+/AJgSZ4SMm4L6o/XUKBWCaT6xckqc3iFF9HkTOyeKF 0J7Yt126SE/9+Ix9ivYhijyHYPCfTamB8VhwxWqgDS9EjAMJV6Js32uNE6nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUUUsfUIHIrgWmt8wZb0ZoXe3towHwYDVR0j BBgwFoAUt9Dd/pAUbgbTvqE8LHlLUn8xUfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjEwODcxNTktMzBkZC00MWJhLTk5NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5 MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3RjMxNTFGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0QwRERGRTkwMTQ2RTA2RDNCRUExM0MyQzc5NEI1MjdGMzE1 MUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRC NTI3RjMxNTFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrQyr3RCeMlBljmT5/rkya3LrM0A5iB+C5c z7tdb0bBmtfhKV0uZ0LThuKpeCgES2bcLOVt0qmejEGyuAQd4cnfwrJAPOfogM49 /YD/yZDiQk8K7swUOOzDBpHTskWWfUCSlw0RviClbxX4MuGxraarXPXYuTexbVbO 8Eb0AURWzcxwCNfxQlRTmfCwBnQC8L3KpYX72jX0VZc9QH5mTJalmSeFDCLayEKi Ajyi9vXiXr9s7gyN0b31kw/r1JYP5XEAgn9zgh2omdRqmjly7Li2J/UZ+qGQ53Ab 4hh7TAj+OCnGg/xL/GI29emMLUwL1m0DdBJ7qY6fuK3jVnVVAF8= -----END CERTIFICATE-----Generated at Sun Oct 25 10:47:22 2026 by rpki-client