$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: liqCrJi4Xi1RhCxFXt1p6uOyzdoFM0jpd0rNxNFeDcE= Subject key identifier: 14:BE:98:73:65:69:22:CC:E3:71:9A:F2:8A:85:A0:19:86:60:DC:E8 Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 5AD6ACA3F85FD9103D2BC43582049CD250743740 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: EA Signing time: Sat 24 Oct 2026 12:14:09 +0000 Manifest this update: Sat 24 Oct 2026 12:09:09 +0000 Manifest next update: Sun 25 Oct 2026 12:34:09 +0000 Files and hashes: 1: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: bs452bXoCjQvTIE8xdrKSg1rMbgiUpVshZ8Gt+JhsIo=) 2: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) 3: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) 4: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) 5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 6: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 12:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d6:ac:a3:f8:5f:d9:10:3d:2b:c4:35:82:04:9c:d2:50:74:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: Oct 24 12:09:09 2026 GMT Not After : Oct 25 12:34:09 2026 GMT Subject: CN=14BE9873656922CCE3719AF28A85A0198660DCE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:f3:f9:e7:9e:d6:3a:bd:20:21:06:0c:93: f3:00:a0:11:0d:06:64:15:59:92:e5:93:d9:8c:b7: e9:29:8c:4a:4b:34:76:2d:73:51:27:ba:7a:63:d0: 7c:14:e0:3c:7c:94:15:6a:63:0d:77:19:58:5e:69: 65:9f:a7:b6:ce:2b:00:42:da:7b:75:c9:96:f4:f7: a5:7a:b4:c9:44:33:af:6d:85:2e:9c:7a:4f:13:f2: 78:f6:9c:8e:a7:4a:6a:0d:9d:c1:5b:ac:4b:22:04: 4f:52:bc:30:38:ad:62:cf:53:2e:6c:27:6a:3b:c8: 79:c7:ca:55:be:32:07:c6:9d:5d:74:4b:c2:9f:0c: 87:5f:c6:d7:43:8d:68:99:f8:2a:8d:d4:10:8c:83: 0b:a3:c2:da:c0:15:b4:a3:87:dc:11:c4:b4:d2:f6: 7d:2f:7b:11:4d:78:44:06:e9:5e:33:da:e4:32:58: 23:89:8d:c6:f6:e1:dd:5b:a5:ae:cb:0b:6c:e8:c5: b8:66:15:37:d1:dc:aa:b3:e5:99:71:7f:db:d4:0c: 32:62:b8:80:2f:e3:09:93:24:77:eb:04:09:79:2a: f8:77:77:3f:c3:2d:0c:67:95:7d:7d:30:ca:ce:de: 49:32:5a:95:7a:e3:4c:2c:1b:12:33:71:91:bf:0b: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BE:98:73:65:69:22:CC:E3:71:9A:F2:8A:85:A0:19:86:60:DC:E8 X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a6:59:ec:e6:63:06:42:d0:0c:59:42:da:74:82:6b:25:35: 53:f5:93:79:1d:75:28:f4:0f:51:76:f6:eb:82:17:3a:3b:d6: 67:3b:cd:1d:b3:fe:37:52:ad:1c:c0:58:e4:62:4b:ce:26:15: 92:23:be:ee:b1:1c:31:33:5e:1f:cd:5d:90:8a:06:89:92:e4: 94:1c:b2:20:23:74:7f:d4:d7:6b:8e:d0:0d:ef:bf:f8:e7:86: 51:67:31:98:83:17:ed:ab:95:1f:1d:4b:26:70:73:88:19:03: 16:8a:cd:39:c2:68:dc:eb:1e:3a:63:8e:46:8f:2e:42:24:be: 94:b4:ef:c9:fa:fc:0f:fe:ae:4e:5c:db:ad:96:e8:5f:82:01: c1:7c:85:45:e5:cc:b7:e0:5c:e4:f9:a7:03:46:25:8b:98:3c: 68:6a:b9:88:f1:e2:31:1c:0c:4b:21:db:ce:09:0d:50:8f:a7: 4f:46:99:e9:b2:cf:a7:b2:76:6b:98:6a:f8:8f:47:cc:48:c4: 24:84:13:0e:95:84:ea:67:db:36:f8:86:fc:ae:d5:16:8a:fc: f7:40:0a:ee:42:f2:28:ad:a8:c6:c0:5a:5c:44:6d:8c:6e:92: cb:ed:d6:02:90:7e:88:f3:eb:83:02:33:de:de:07:83:79:b6: e0:ab:9f:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtaso/hf2RA9K8Q1ggSc0lB0N0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjEwMjQxMjA5MDlaFw0yNjEwMjUxMjM0MDlaMDMxMTAvBgNV BAMTKDE0QkU5ODczNjU2OTIyQ0NFMzcxOUFGMjhBODVBMDE5ODY2MERDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujfP5557WOr0gIQYMk/MAoBEN BmQVWZLlk9mMt+kpjEpLNHYtc1Enunpj0HwU4Dx8lBVqYw13GVheaWWfp7bOKwBC 2nt1yZb096V6tMlEM69thS6cek8T8nj2nI6nSmoNncFbrEsiBE9SvDA4rWLPUy5s J2o7yHnHylW+MgfGnV10S8KfDIdfxtdDjWiZ+CqN1BCMgwujwtrAFbSjh9wRxLTS 9n0vexFNeEQG6V4z2uQyWCOJjcb24d1bpa7LC2zoxbhmFTfR3Kqz5Zlxf9vUDDJi uIAv4wmTJHfrBAl5Kvh3dz/DLQxnlX19MMrO3kkyWpV640wsGxIzcZG/C06LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFL6Yc2VpIszjcZryioWgGYZg3OgwHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAemWezmYwZC0AxZQtp0gmslNVP1k3kddSj0 D1F29uuCFzo71mc7zR2z/jdSrRzAWORiS84mFZIjvu6xHDEzXh/NXZCKBomS5JQc siAjdH/U12uO0A3vv/jnhlFnMZiDF+2rlR8dSyZwc4gZAxaKzTnCaNzrHjpjjkaP LkIkvpS078n6/A/+rk5c262W6F+CAcF8hUXlzLfgXOT5pwNGJYuYPGhquYjx4jEc DEsh284JDVCPp09Gmemyz6eydmuYaviPR8xIxCSEEw6VhOpn2zb4hvyu1RaK/PdA Cu5C8iitqMbAWlxEbYxuksvt1gKQfojz64MCM97eB4N5tuCrn5k= -----END CERTIFICATE-----Generated at Sun Oct 25 04:58:49 2026 by rpki-client