$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: CXMyH757qy28PzTZ2NFqYmERAbNMVdbUbplmlvzfMAY= Subject key identifier: F0:BC:04:9C:42:C3:BA:5B:65:FC:0C:18:71:75:AB:F4:2A:85:09:07 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 08DFBCF916E6F589C2E74559EC48A3CFE8E3C161 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 19:45:23 +0000 Manifest this update: Mon 09 Nov 2026 19:40:23 +0000 Manifest next update: Tue 10 Nov 2026 22:48:23 +0000 Files and hashes: 1: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 2: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: DJ4ItVbC7u6UH21p8hv6VoMJ+gZeocFx70lqfIxLRts=) 3: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 22:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:df:bc:f9:16:e6:f5:89:c2:e7:45:59:ec:48:a3:cf:e8:e3:c1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Nov 9 19:40:23 2026 GMT Not After : Nov 10 22:48:23 2026 GMT Subject: CN=F0BC049C42C3BA5B65FC0C187175ABF42A850907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:d0:eb:bf:09:d4:be:83:3c:aa:31:ee:59: 3b:41:80:81:27:40:eb:f1:0e:20:9f:33:9c:f4:ea: f5:4f:63:2c:06:be:9b:14:53:4f:72:27:66:11:67: 4d:17:8e:a9:d3:45:9e:ee:3d:38:15:10:f8:c1:bb: c2:6f:c3:30:51:70:85:fe:1a:87:cd:cd:94:6f:06: dc:58:4a:8d:8a:53:bd:b3:f0:9b:1c:cf:47:83:67: 9e:df:a2:e7:fe:ca:49:06:94:1a:e1:b2:54:a1:e1: f6:df:30:7e:c7:8f:32:60:23:2f:28:9d:90:c3:db: 03:b8:37:15:7b:0f:63:d9:1a:7a:6d:f3:e8:ac:24: 92:9f:6d:d3:ae:16:78:74:c8:74:8c:7f:a7:5c:82: ea:2b:d7:e2:ed:78:a4:e7:1e:bd:af:04:3a:c4:2a: 55:9e:15:59:31:07:83:e4:71:b7:ba:15:32:76:da: f7:76:44:84:38:a9:d7:d0:97:ee:11:0c:0a:6c:c7: c1:d6:e8:28:13:76:cc:04:cf:18:50:45:cc:a2:b4: 78:b1:a5:09:de:c6:fe:68:e3:67:a8:2c:6d:4d:b2: cc:d6:e8:9f:32:45:d7:a1:60:cf:ed:23:f7:a6:2f: 19:3e:90:ff:20:d6:e8:43:81:e3:1d:a0:9c:3d:38: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:04:9C:42:C3:BA:5B:65:FC:0C:18:71:75:AB:F4:2A:85:09:07 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:3e:95:a4:4b:c1:fe:6c:4c:e9:1e:ed:c6:a9:cb:ad:c5: a8:6b:54:3e:26:2d:19:55:81:f5:40:bc:33:de:dc:77:4b:fc: 92:43:a6:b3:82:d8:42:86:db:37:58:cd:8b:46:27:87:7f:de: 65:98:ba:79:00:d7:5e:41:d2:15:3e:d1:7f:65:a4:b7:68:86: ce:40:d6:8f:aa:be:33:7e:50:5a:26:28:61:90:cd:a2:27:f7: a5:b1:6c:0b:53:32:e1:33:fa:8a:2f:77:56:d9:df:87:5e:cc: 60:5c:22:24:8d:d7:e4:4d:82:6c:8a:62:98:82:31:9b:cd:af: 77:90:66:3e:a9:c4:a0:aa:40:12:e1:d1:5f:6f:88:88:c8:5b: 95:00:70:7b:ff:af:4e:05:cf:2b:6b:36:4c:77:1a:ee:76:9e: 40:2a:8c:f6:a4:0d:b2:3e:b5:14:a3:00:6d:44:6a:53:0d:db: db:8c:2d:1b:e7:a5:72:f6:8e:e2:a4:e8:11:e7:c6:24:0e:c5: b5:cc:e6:e7:fc:b0:9e:42:93:1d:8a:de:e6:e5:92:b2:d1:87: 9e:97:f4:70:4c:14:e0:5f:77:d4:c8:13:d8:12:b2:f6:a1:64: 32:38:72:79:0f:6d:70:15:fe:7a:42:67:d3:be:10:a1:39:cf: 8b:f5:2c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCN+8+Rbm9YnC50VZ7Eijz+jjwWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjExMDkxOTQwMjNaFw0yNjExMTAyMjQ4MjNaMDMxMTAvBgNV BAMTKEYwQkMwNDlDNDJDM0JBNUI2NUZDMEMxODcxNzVBQkY0MkE4NTA5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqdDrvwnUvoM8qjHuWTtBgIEn QOvxDiCfM5z06vVPYywGvpsUU09yJ2YRZ00XjqnTRZ7uPTgVEPjBu8JvwzBRcIX+ GofNzZRvBtxYSo2KU72z8Jscz0eDZ57fouf+ykkGlBrhslSh4fbfMH7HjzJgIy8o nZDD2wO4NxV7D2PZGnpt8+isJJKfbdOuFnh0yHSMf6dcguor1+LteKTnHr2vBDrE KlWeFVkxB4Pkcbe6FTJ22vd2RIQ4qdfQl+4RDApsx8HW6CgTdswEzxhQRcyitHix pQnexv5o42eoLG1NsszW6J8yRdehYM/tI/emLxk+kP8g1uhDgeMdoJw9OH8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8LwEnELDultl/AwYcXWr9CqFCQcwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtKPpWkS8H+bEzpHu3GqcutxahrVD4mLRlV gfVAvDPe3HdL/JJDprOC2EKG2zdYzYtGJ4d/3mWYunkA115B0hU+0X9lpLdohs5A 1o+qvjN+UFomKGGQzaIn96WxbAtTMuEz+oovd1bZ34dezGBcIiSN1+RNgmyKYpiC MZvNr3eQZj6pxKCqQBLh0V9viIjIW5UAcHv/r04FzytrNkx3Gu52nkAqjPakDbI+ tRSjAG1EalMN29uMLRvnpXL2juKk6BHnxiQOxbXM5uf8sJ5Ckx2K3ublkrLRh56X 9HBMFOBfd9TIE9gSsvahZDI4cnkPbXAV/npCZ9O+EKE5z4v1LCA= -----END CERTIFICATE-----Generated at Tue Nov 10 16:33:42 2026 by rpki-client