$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: upfF4LxHEWohoGtZSXiAtnY1Oy1soXzXopnO9/YURQ0= Subject key identifier: 8E:49:BA:22:5E:48:96:E7:F9:41:DA:79:02:95:61:DE:06:B3:1B:EB Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 24E37ADB10BDB66C5B372621989FC907AE655540 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: 0104 Signing time: Mon 09 Nov 2026 21:12:12 +0000 Manifest this update: Mon 09 Nov 2026 21:07:12 +0000 Manifest next update: Wed 11 Nov 2026 01:00:12 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) 2: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: i3ksB5wM6IQBzCGUW6uJ8QbYtDD54PaGeAkVB7d4Xac=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) 4: 3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa (hash: 1SUvsGX664dyT73KTnssj6SLYMQJcE1PRfUOLl0J8A0=) 5: 3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa (hash: QnjSCWkwabhUboJKZ28QBKGbgaSMy7Q0+XqOshpVH5I=) 6: 3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa (hash: UfSTsOVMmUHhlSuicPfv/acnVZkznnLyaQTNx0s5r/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e3:7a:db:10:bd:b6:6c:5b:37:26:21:98:9f:c9:07:ae:65:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Nov 9 21:07:12 2026 GMT Not After : Nov 11 01:00:12 2026 GMT Subject: CN=8E49BA225E4896E7F941DA79029561DE06B31BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:57:f8:6d:24:5c:1b:0c:1b:d6:a6:c9:7c: ac:1f:b9:b6:8a:2c:98:b9:f0:2e:48:8a:c5:22:d5: 12:81:d9:ff:3d:b7:5b:20:29:c4:34:02:a8:93:89: 6e:12:0e:e0:ae:87:2d:83:37:97:c6:fa:7f:d1:85: 29:2b:e3:7c:ac:0f:0d:65:28:9b:3c:5f:d1:8d:66: ca:45:33:5c:34:65:46:14:f6:9e:2c:d0:a9:d7:41: 68:d2:17:a0:ff:df:90:05:35:36:58:43:32:3e:09: 91:73:ac:c8:fe:2f:2d:c9:c0:a2:8c:36:18:0b:3e: e2:8c:f0:1f:26:b4:b4:95:63:7b:8e:2f:c9:7d:1a: 02:c4:c9:ce:c1:93:a5:7b:fc:7c:1b:18:c6:4d:15: eb:85:63:64:90:22:f9:4c:27:d6:e9:f4:78:6e:90: 3d:15:27:64:ca:fd:ac:dd:19:62:5b:0c:a6:4f:e7: 5a:fd:17:a4:1c:89:4c:8a:5c:ba:5a:00:ff:f1:48: 1e:d1:ae:2c:d7:ee:07:85:6d:4a:67:00:7f:41:02: 5f:99:fd:69:5a:ea:aa:49:06:76:5d:91:7e:2d:9f: cc:e5:9d:08:d4:ad:e6:87:8b:6f:89:af:e9:99:dc: f5:10:70:32:e3:4d:8a:92:5c:1f:a1:59:c4:4c:01: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:49:BA:22:5E:48:96:E7:F9:41:DA:79:02:95:61:DE:06:B3:1B:EB X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:62:74:4a:7f:c5:b6:9e:5b:be:d0:fc:5d:40:27:52:cc:ea: 6d:53:5b:d7:71:2e:79:72:90:8a:71:38:91:87:13:49:c2:61: 98:dc:e1:e2:6c:ac:20:56:1c:29:d8:63:ef:c7:a8:85:e9:17: 13:cd:73:1f:7e:00:c3:aa:02:8a:0e:06:a3:b0:2a:85:d7:63: 08:04:45:81:09:c9:55:76:93:4a:38:2c:80:8d:57:59:ac:aa: 4b:c0:23:e9:5d:71:00:5f:34:f5:2d:25:38:0a:f8:03:44:26: a7:8b:0d:dc:69:16:b5:cd:c7:23:ee:8e:0b:aa:90:23:27:69: 19:4c:f1:70:31:a5:f3:42:38:54:32:2e:13:8d:90:f9:87:6d: 12:db:80:5b:d8:b3:5e:50:33:db:9d:2d:56:06:d9:55:b5:89: 7e:4c:1a:63:0f:f7:76:a3:1f:74:b7:dd:29:f2:34:17:89:5c: 41:8d:ac:4d:15:41:d0:c7:31:12:7c:e2:a3:ba:d7:d1:32:ca: 0a:0c:77:1a:72:13:e1:53:69:5b:95:f9:11:0e:51:b2:2b:f1: e8:59:39:09:52:4d:54:8c:64:e4:41:b6:97:f1:10:49:0b:cf: 18:ad:60:f1:13:64:c4:c6:ea:90:11:64:e3:e4:37:0a:12:30: 4b:29:3d:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJON62xC9tmxbNyYhmJ/JB65lVUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjExMDkyMTA3MTJaFw0yNjExMTEwMTAwMTJaMDMxMTAvBgNV BAMTKDhFNDlCQTIyNUU0ODk2RTdGOTQxREE3OTAyOTU2MURFMDZCMzFCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXlf4bSRcGwwb1qbJfKwfubaK LJi58C5IisUi1RKB2f89t1sgKcQ0AqiTiW4SDuCuhy2DN5fG+n/RhSkr43ysDw1l KJs8X9GNZspFM1w0ZUYU9p4s0KnXQWjSF6D/35AFNTZYQzI+CZFzrMj+Ly3JwKKM NhgLPuKM8B8mtLSVY3uOL8l9GgLEyc7Bk6V7/HwbGMZNFeuFY2SQIvlMJ9bp9Hhu kD0VJ2TK/azdGWJbDKZP51r9F6QciUyKXLpaAP/xSB7RrizX7geFbUpnAH9BAl+Z /Wla6qpJBnZdkX4tn8zlnQjUreaHi2+Jr+mZ3PUQcDLjTYqSXB+hWcRMAXBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjkm6Il5Iluf5Qdp5ApVh3gazG+swHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhidEp/xbaeW77Q/F1AJ1LM6m1TW9dxLnly kIpxOJGHE0nCYZjc4eJsrCBWHCnYY+/HqIXpFxPNcx9+AMOqAooOBqOwKoXXYwgE RYEJyVV2k0o4LICNV1msqkvAI+ldcQBfNPUtJTgK+ANEJqeLDdxpFrXNxyPujguq kCMnaRlM8XAxpfNCOFQyLhONkPmHbRLbgFvYs15QM9udLVYG2VW1iX5MGmMP93aj H3S33SnyNBeJXEGNrE0VQdDHMRJ84qO619EyygoMdxpyE+FTaVuV+REOUbIr8ehZ OQlSTVSMZORBtpfxEEkLzxitYPETZMTG6pARZOPkNwoSMEspPVc= -----END CERTIFICATE-----Generated at Tue Nov 10 14:14:59 2026 by rpki-client