$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json) Hash identifier: 83spV91MOKtGTpXE+v6+qL5gyod2hdn5DeE6MKeZUz0= Subject key identifier: 8D:DA:6B:AB:6C:15:CC:2F:57:C4:0A:55:49:6A:02:E4:AD:17:B3:11 Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Certificate serial: 1FFD476BF7B395DF2D00D2575EC790161EF50849 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 21:47:55 +0000 Manifest this update: Mon 09 Nov 2026 21:42:55 +0000 Manifest next update: Wed 11 Nov 2026 01:19:55 +0000 Files and hashes: 1: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: m+kqSKZm1ck5dcW28KBKcu0nAPmvPetHNAWq6VbONGU=) 2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fd:47:6b:f7:b3:95:df:2d:00:d2:57:5e:c7:90:16:1e:f5:08:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Validity Not Before: Nov 9 21:42:55 2026 GMT Not After : Nov 11 01:19:55 2026 GMT Subject: CN=8DDA6BAB6C15CC2F57C40A55496A02E4AD17B311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:15:57:91:ff:d1:2f:44:4c:ab:78:70:e8: 74:b1:04:f7:0c:d3:df:a2:08:25:63:3e:6b:0f:e3: 92:bd:bb:85:d4:5d:f9:6c:83:9a:24:f8:65:f7:f0: 88:ad:d0:f4:72:a4:ee:64:ec:e8:f1:52:72:b3:c9: a7:c2:e7:ce:3e:14:9f:09:fc:62:28:91:19:84:45: 1a:89:6f:a7:b8:c7:6e:24:36:6f:1e:0f:40:68:20: ba:b9:77:58:30:33:97:00:81:5a:4d:e4:f2:23:c6: e5:d9:a6:ac:2f:c7:dd:ec:53:8b:d5:8e:ba:65:e9: fa:98:a9:f4:3b:b9:50:68:27:5c:5c:9c:9b:f1:21: 49:24:66:ec:d6:14:c2:b2:3b:49:de:48:23:e7:6c: 11:b4:2d:78:5d:92:36:f5:0b:a3:4d:dc:b1:5c:0e: a3:99:9e:46:24:2d:2b:98:f6:45:3b:a2:36:8d:4b: ef:3f:69:db:0f:7c:d2:91:0a:2a:eb:ee:78:76:fb: 97:d1:e4:c9:07:9e:35:39:22:66:8f:ba:83:bf:f9: db:fc:fe:19:60:8d:7f:b5:dc:37:51:33:46:01:96: 32:49:54:0c:7d:5f:c7:5c:e6:06:a3:10:9b:40:d1: 58:e8:6f:08:91:6d:b9:d2:b6:28:b1:e6:aa:36:6a: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DA:6B:AB:6C:15:CC:2F:57:C4:0A:55:49:6A:02:E4:AD:17:B3:11 X509v3 Authority Key Identifier: keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:81:1c:50:1b:e5:e3:83:d5:4e:3b:89:c1:af:a6:41:f7:2a: 82:17:20:0a:57:fd:4b:f7:67:6f:7a:9e:37:23:b1:a7:34:1f: 7e:7e:1c:7b:0e:ab:a9:92:38:a9:b9:e1:b0:83:76:c3:c2:30: f3:04:1d:d0:53:33:85:92:8c:6e:16:f4:42:b1:2a:b4:90:41: ce:d8:d9:83:f0:19:77:59:9c:be:81:4e:eb:9e:78:74:6a:24: c4:98:9c:bb:75:6e:74:19:b6:f2:4a:aa:78:48:ef:49:15:7f: bf:f4:b0:6c:14:d9:85:7b:b9:30:1a:8f:8c:27:c6:2e:a2:5a: 0b:09:ca:5b:9d:70:20:c5:3c:87:f3:e1:1f:6c:94:81:db:29: 95:35:56:ce:69:8f:3e:71:33:81:61:df:d6:2c:77:c8:5b:9f: c4:b6:2f:78:26:44:e4:75:46:e2:12:bc:b1:df:10:88:aa:d5: 9d:ec:02:1c:7d:02:8e:dc:e4:20:82:ef:48:e2:0c:a1:f6:27: 60:62:bd:8b:12:5e:33:1c:8a:a3:5e:08:ab:29:1e:d7:d4:6a: bb:e7:1c:a9:05:38:58:70:fa:83:97:7d:8e:e0:83:aa:7d:5b: 40:6d:95:b5:05:c2:5c:ca:20:b5:f8:99:72:c1:2b:e0:a7:42: 75:06:09:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/1Ha/ezld8tANJXXseQFh71CEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC QkExRUMwQTAeFw0yNjExMDkyMTQyNTVaFw0yNjExMTEwMTE5NTVaMDMxMTAvBgNV BAMTKDhEREE2QkFCNkMxNUNDMkY1N0M0MEE1NTQ5NkEwMkU0QUQxN0IzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBBVXkf/RL0RMq3hw6HSxBPcM 09+iCCVjPmsP45K9u4XUXflsg5ok+GX38Iit0PRypO5k7OjxUnKzyafC584+FJ8J /GIokRmERRqJb6e4x24kNm8eD0BoILq5d1gwM5cAgVpN5PIjxuXZpqwvx93sU4vV jrpl6fqYqfQ7uVBoJ1xcnJvxIUkkZuzWFMKyO0neSCPnbBG0LXhdkjb1C6NN3LFc DqOZnkYkLSuY9kU7ojaNS+8/adsPfNKRCirr7nh2+5fR5MkHnjU5ImaPuoO/+dv8 /hlgjX+13DdRM0YBljJJVAx9X8dc5gajEJtA0VjobwiRbbnStiix5qo2akqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdprq2wVzC9XxApVSWoC5K0XsxEwHwYDVR0j BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4 Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSBHFAb5eOD1U47icGvpkH3KoIXIApX/Uv3 Z296njcjsac0H35+HHsOq6mSOKm54bCDdsPCMPMEHdBTM4WSjG4W9EKxKrSQQc7Y 2YPwGXdZnL6BTuueeHRqJMSYnLt1bnQZtvJKqnhI70kVf7/0sGwU2YV7uTAaj4wn xi6iWgsJyludcCDFPIfz4R9slIHbKZU1Vs5pjz5xM4Fh39Ysd8hbn8S2L3gmROR1 RuISvLHfEIiq1Z3sAhx9Ao7c5CCC70jiDKH2J2BivYsSXjMciqNeCKspHtfUarvn HKkFOFhw+oOXfY7gg6p9W0BtlbUFwlzKILX4mXLBK+CnQnUGCUY= -----END CERTIFICATE-----Generated at Tue Nov 10 05:29:18 2026 by rpki-client