$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft File: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft (raw, json) Hash identifier: rjvsCN8Wa1Ge276j3X0CwuUsqZTySPMS65aevHF6FNs= Subject key identifier: A4:57:C2:FF:CE:17:00:8E:96:5F:A0:6B:BD:82:27:2E:F1:79:70:58 Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 Certificate issuer: /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Certificate serial: 3E9B14CBCDD527AFBBD677C4DD1306FF4C0DBB1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 17:15:43 +0000 Manifest this update: Sat 24 Oct 2026 17:10:43 +0000 Manifest next update: Sun 25 Oct 2026 20:11:43 +0000 Files and hashes: 1: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=) 2: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=) 3: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: FuJt3vcY9L09+RmWxid8u8pgisIt7rO49/5ndQMSY6Q=) 4: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: nFLDPD776WE/L2X/jlMFqVRg6eI7I+qoNOVFN/HkArY=) 5: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl (hash: VsAO080sds6H5dbQNXLEnt1fVtjlbbQrsEurtj6L+WI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9b:14:cb:cd:d5:27:af:bb:d6:77:c4:dd:13:06:ff:4c:0d:bb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Validity Not Before: Oct 24 17:10:43 2026 GMT Not After : Oct 25 20:11:43 2026 GMT Subject: CN=A457C2FFCE17008E965FA06BBD82272EF1797058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:b2:5b:d3:b9:08:16:26:de:b8:9c:6c:5c: 08:f5:33:b0:ef:10:cb:9c:3b:1e:37:a4:09:ea:09: dd:9d:fc:84:51:12:e1:4e:cd:d1:7b:e3:58:44:53: da:08:ac:92:a5:5f:05:2b:c0:41:2f:a1:0f:80:b4: 9c:3f:07:0f:86:00:b1:32:fd:d1:10:cd:20:91:37: f3:eb:89:2a:8d:9a:05:6e:2c:c0:22:53:8f:68:2b: f7:4a:d5:55:fb:65:87:37:3f:92:72:43:ab:85:16: c4:4a:37:d5:4b:3e:64:e7:97:1d:e9:b7:74:58:00: 47:c3:2e:e3:18:00:e9:47:76:13:cc:c4:06:41:bd: 54:32:bd:f6:44:47:e8:fa:c3:1d:0c:eb:eb:80:e6: a6:91:69:a8:74:58:f5:52:55:01:ab:b7:6c:37:93: 77:3e:5d:95:cc:b7:85:bd:99:94:5e:91:6c:23:49: ca:e4:d8:55:85:e1:6b:df:2f:76:79:79:b4:ce:df: ae:dc:05:a8:bb:d3:f6:19:1b:4c:c9:74:44:04:a2: 3b:1a:03:07:c5:4e:17:4f:5b:37:7a:2b:ad:62:d4: 3f:06:b7:06:81:4a:7c:ac:62:bd:5c:62:b0:9f:37: b2:17:49:19:fc:b3:22:53:f1:0d:96:0e:8a:3b:62: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:57:C2:FF:CE:17:00:8E:96:5F:A0:6B:BD:82:27:2E:F1:79:70:58 X509v3 Authority Key Identifier: keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:02:0c:32:a7:95:35:74:7f:c0:8d:73:61:b4:7c:02:b1:81: cc:63:a9:c4:43:18:ca:f3:01:be:5c:d8:1c:c0:e3:c4:7d:d9: 76:e8:6f:d8:fc:1b:17:92:d7:f1:94:36:25:4d:29:38:24:4b: de:83:09:7b:6e:c4:d1:a0:c7:2d:df:db:49:78:9e:d0:81:3b: 6b:54:8e:64:10:f5:d6:0a:03:5b:d2:4d:bb:6d:92:a4:da:89: 10:1f:09:63:be:8a:cf:7b:5d:ae:d8:c9:fb:01:37:90:d0:03: 91:d0:db:a6:7f:17:be:b1:24:ef:90:a1:2a:eb:96:1e:24:f3: 6b:f9:67:18:37:93:35:11:4e:eb:86:d7:ba:df:04:c9:a0:d9: be:08:19:16:4c:0e:3b:16:1f:3a:f0:cf:78:0e:6c:3a:6b:de: 25:ce:44:77:41:81:e4:f6:0b:40:b2:01:eb:dc:10:ad:e0:21: 32:39:ab:af:0c:c9:da:37:d5:bf:52:d3:9f:37:ba:c1:0e:fd: 3c:e1:0e:a7:cf:b7:59:93:9e:f4:06:31:3e:69:79:d0:55:94: 33:4b:68:2f:2d:57:38:a4:48:d4:4a:3c:a4:89:20:cc:c2:f6: 93:2d:6a:aa:73:a2:b6:8e:84:a9:0b:bf:15:7c:d9:c5:36:f9: 26:71:61:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpsUy83VJ6+71nfE3RMG/0wNux4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNEODEw NDQ3NUY1MzAeFw0yNjEwMjQxNzEwNDNaFw0yNjEwMjUyMDExNDNaMDMxMTAvBgNV BAMTKEE0NTdDMkZGQ0UxNzAwOEU5NjVGQTA2QkJEODIyNzJFRjE3OTcwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC087Jb07kIFibeuJxsXAj1M7Dv EMucOx43pAnqCd2d/IRREuFOzdF741hEU9oIrJKlXwUrwEEvoQ+AtJw/Bw+GALEy /dEQzSCRN/PriSqNmgVuLMAiU49oK/dK1VX7ZYc3P5JyQ6uFFsRKN9VLPmTnlx3p t3RYAEfDLuMYAOlHdhPMxAZBvVQyvfZER+j6wx0M6+uA5qaRaah0WPVSVQGrt2w3 k3c+XZXMt4W9mZRekWwjScrk2FWF4WvfL3Z5ebTO367cBai70/YZG0zJdEQEojsa AwfFThdPWzd6K61i1D8GtwaBSnysYr1cYrCfN7IXSRn8syJT8Q2WDoo7YsQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpFfC/84XAI6WX6BrvYInLvF5cFgwHwYDVR0j BBgwFoAUfSoCz6rNUfousdeuxw7NgQRHX1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJhNDhlNGUtZmM5NS00YWNmLWJlYWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZB QUNENTFGQTJFQjFEN0FFQzcwRUNEODEwNDQ3NUY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDJBMDJDRkFBQ0Q1MUZBMkVCMUQ3QUVDNzBFQ0Q4MTA0NDc1 RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNE ODEwNDQ3NUY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgCDDKnlTV0f8CNc2G0fAKxgcxjqcRDGMrz Ab5c2BzA48R92Xbob9j8GxeS1/GUNiVNKTgkS96DCXtuxNGgxy3f20l4ntCBO2tU jmQQ9dYKA1vSTbttkqTaiRAfCWO+is97Xa7YyfsBN5DQA5HQ26Z/F76xJO+QoSrr lh4k82v5Zxg3kzURTuuG17rfBMmg2b4IGRZMDjsWHzrwz3gObDpr3iXORHdBgeT2 C0CyAevcEK3gITI5q68Mydo31b9S0583usEO/TzhDqfPt1mTnvQGMT5pedBVlDNL aC8tVzikSNRKPKSJIMzC9pMtaqpzoraOhKkLvxV82cU2+SZxYbo= -----END CERTIFICATE-----Generated at Sun Oct 25 05:11:28 2026 by rpki-client