$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft File: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft (raw, json) Hash identifier: 0wJz3W7u29pirhiwp+oolnaL2UBIZZ2dn2hxo6XGv/k= Subject key identifier: 1E:A3:AA:6B:F5:B3:2C:09:FF:80:57:3D:57:65:99:5D:D8:06:9C:3B Authority key identifier: 7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD Certificate issuer: /CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD Certificate serial: 6F45D2CA94DD5DA23B8BC3F873F1218BDF5F28AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 21:23:04 +0000 Manifest this update: Tue 10 Nov 2026 21:18:04 +0000 Manifest next update: Wed 11 Nov 2026 22:42:04 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: FY38IH9sB6rTVzYUxtZnvzqXTN96oHyScnEbXRWQmXQ=) 2: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl (hash: G0pd3APTc0Ykabh//AejG6BrjtGik0M9Pz6R87jDx1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:45:d2:ca:94:dd:5d:a2:3b:8b:c3:f8:73:f1:21:8b:df:5f:28:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD Validity Not Before: Nov 10 21:18:04 2026 GMT Not After : Nov 11 22:42:04 2026 GMT Subject: CN=1EA3AA6BF5B32C09FF80573D5765995DD8069C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:75:6c:5e:00:b0:55:7a:91:46:df:4f:1b: 52:ad:a4:25:d3:92:fc:9d:a0:fc:1a:29:3c:e8:77: 49:4c:2f:aa:74:18:27:b6:89:e3:7c:cb:24:98:64: 73:00:99:28:e6:f5:cc:e7:e3:b5:b6:37:de:79:7f: 0d:64:18:b8:ba:b6:c2:80:66:70:ef:50:bf:e0:03: 11:00:ce:0c:ee:54:f7:e3:56:76:b0:d4:4a:50:84: a0:00:fc:62:5d:b6:93:e7:9f:29:fe:12:54:52:62: 77:4d:9f:3b:1b:25:80:e9:5b:40:81:25:cd:8e:14: 6e:1c:ee:a1:cc:55:b9:be:a0:14:b8:80:87:92:fb: 61:b4:d9:1f:f5:26:a8:4f:75:64:33:9c:e2:1a:d1: bd:28:26:13:71:6a:d1:52:12:b0:46:0e:62:34:d7: b2:e2:09:e3:a2:e7:fb:16:68:6d:29:5c:6d:39:95: 28:73:51:78:18:96:3c:0d:a9:a6:1b:ea:d0:2d:d7: a7:38:b6:c7:24:e5:de:49:74:95:33:03:76:bc:5d: 43:e6:2d:73:a2:fd:a7:a8:62:b5:44:3f:34:83:05: 63:a9:75:4b:14:d8:76:22:01:c6:59:b8:b6:c7:08: 7e:9e:3d:cc:60:8b:f8:4a:8c:e3:e4:64:86:0e:91: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:AA:6B:F5:B3:2C:09:FF:80:57:3D:57:65:99:5D:D8:06:9C:3B X509v3 Authority Key Identifier: keyid:7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6c:ee:93:83:1c:ce:79:db:9f:3c:c1:d8:18:10:df:dc:32: 48:fb:65:75:ae:83:a5:ab:45:4d:fb:86:37:52:08:98:47:bd: d6:92:71:f4:36:43:c6:b2:2a:c3:0f:fd:40:9f:af:26:23:55: 78:7c:5c:8e:19:cb:35:1a:56:1c:2c:3e:eb:51:73:14:f0:89: bb:86:7f:33:b8:77:da:dd:68:88:e7:d1:43:6f:b8:29:d8:5b: e8:00:c2:37:78:31:23:b7:24:78:5b:67:7d:e9:7e:6d:d4:6f: de:2d:a3:95:7e:8f:19:e9:fc:3e:44:07:24:4c:3b:21:1b:3e: 60:dc:a9:c5:83:bc:a6:db:4e:9d:90:81:eb:7e:e1:45:67:7e: 08:5a:4e:24:ed:5e:db:d1:42:22:0b:7a:f7:b6:63:c7:3b:05: 0a:b7:22:db:44:0a:b6:73:e2:ab:59:4a:b3:56:31:58:4c:78: 33:5f:3b:db:28:b8:3d:da:c2:70:83:f2:d1:40:43:01:a8:08: fc:38:4b:1a:65:ae:8e:4a:0b:5b:9d:85:83:31:01:98:a5:d4: 37:72:9e:f2:42:ee:cb:82:39:37:d3:0f:06:d4:61:fd:05:74: 58:fa:82:85:2e:f6:c0:3e:a8:c2:5f:a9:78:00:e9:91:71:0a: 74:89:21:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0XSypTdXaI7i8P4c/Ehi99fKKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZENjI4OTlGMkREMURBRDNGNkEzNTU3QTgwMzYxOERF RDQ0RjVBRDAeFw0yNjExMTAyMTE4MDRaFw0yNjExMTEyMjQyMDRaMDMxMTAvBgNV BAMTKDFFQTNBQTZCRjVCMzJDMDlGRjgwNTczRDU3NjU5OTVERDgwNjlDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmg3VsXgCwVXqRRt9PG1KtpCXT kvydoPwaKTzod0lML6p0GCe2ieN8yySYZHMAmSjm9czn47W2N955fw1kGLi6tsKA ZnDvUL/gAxEAzgzuVPfjVnaw1EpQhKAA/GJdtpPnnyn+ElRSYndNnzsbJYDpW0CB Jc2OFG4c7qHMVbm+oBS4gIeS+2G02R/1JqhPdWQznOIa0b0oJhNxatFSErBGDmI0 17LiCeOi5/sWaG0pXG05lShzUXgYljwNqaYb6tAt16c4tsck5d5JdJUzA3a8XUPm LXOi/aeoYrVEPzSDBWOpdUsU2HYiAcZZuLbHCH6ePcxgi/hKjOPkZIYOkdZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqOqa/WzLAn/gFc9V2WZXdgGnDswHwYDVR0j BBgwFoAUf9YomfLdHa0/ajVXqANhje1E9a0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1MGYwZjUtYjg4My00YjI0LTk3OTItN2U5NTdhZjg4YmY4LzAvN0ZENjI4OTlG MkREMURBRDNGNkEzNTU3QTgwMzYxOERFRDQ0RjVBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkQ2Mjg5OUYyREQxREFEM0Y2QTM1NTdBODAzNjE4REVENDRG NUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvN0ZENjI4OTlGMkREMURBRDNGNkEzNTU3QTgwMzYx OERFRDQ0RjVBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5s7pODHM552588wdgYEN/cMkj7ZXWug6Wr RU37hjdSCJhHvdaScfQ2Q8ayKsMP/UCfryYjVXh8XI4ZyzUaVhwsPutRcxTwibuG fzO4d9rdaIjn0UNvuCnYW+gAwjd4MSO3JHhbZ33pfm3Ub94to5V+jxnp/D5EByRM OyEbPmDcqcWDvKbbTp2Qget+4UVnfghaTiTtXtvRQiILeve2Y8c7BQq3IttECrZz 4qtZSrNWMVhMeDNfO9souD3awnCD8tFAQwGoCPw4Sxplro5KC1udhYMxAZil1Ddy nvJC7suCOTfTDwbUYf0FdFj6goUu9sA+qMJfqXgA6ZFxCnSJIWc= -----END CERTIFICATE-----Generated at Tue Nov 10 23:13:11 2026 by rpki-client