$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft (raw, json) Hash identifier: NFG9KNEh+NBZt3S1ICBdrbh81MqDaqR/j4BzBwzQaQA= Subject key identifier: D5:1C:87:C6:C4:85:05:D5:43:67:12:72:E6:4C:AB:19:04:A4:DC:3E Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 Certificate issuer: /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Certificate serial: 7923C0FDECD1987E5C3FE24CA9135B15FE4CF4A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft Manifest number: FF Signing time: Mon 09 Nov 2026 11:50:29 +0000 Manifest this update: Mon 09 Nov 2026 11:45:29 +0000 Manifest next update: Tue 10 Nov 2026 14:21:29 +0000 Files and hashes: 1: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl (hash: /Y3PtEGr4dkfeFhbokwGd0ixiSfrKquCMVjRPeaouVc=) 2: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=) 3: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=) 4: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: 1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=) 5: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 0QGECZtZ4NpVwUmkTwNZiQAD/nvM6N9DYMd+ulfiukw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:23:c0:fd:ec:d1:98:7e:5c:3f:e2:4c:a9:13:5b:15:fe:4c:f4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Validity Not Before: Nov 9 11:45:29 2026 GMT Not After : Nov 10 14:21:29 2026 GMT Subject: CN=D51C87C6C48505D543671272E64CAB1904A4DC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:1b:50:60:8c:7c:0e:61:f5:27:63:1f:9f: 6c:69:88:63:5b:89:23:c5:86:d1:a0:ce:91:10:5e: 4c:4c:ea:99:25:d5:a6:0b:3e:c8:bc:3d:af:43:4b: 48:20:df:78:04:58:64:f8:09:3d:7d:01:00:6b:a7: 93:57:02:df:42:e7:36:ad:09:ff:0f:99:e6:a6:ee: 1a:e9:31:8a:a1:3d:46:26:8f:a5:fe:66:dd:d9:26: bd:49:db:4e:b7:85:c7:fc:83:d9:f2:d7:48:0e:b0: e6:85:cf:ae:ef:aa:b8:13:07:dc:b2:d2:d1:f1:e3: 53:7e:bd:d2:47:63:e3:13:de:f7:bd:07:56:0f:ca: 8f:e6:dd:19:2b:31:98:fe:51:49:0e:22:0f:70:3c: 3f:93:70:93:2b:98:8f:c7:6f:12:17:65:70:4f:f1: ba:fd:1c:f9:ad:2b:e3:d2:1a:b4:d3:46:39:f5:77: 67:ad:b2:44:f6:52:ad:d6:5d:61:12:8d:a3:74:11: 76:a0:37:9b:72:72:80:b3:b5:cc:fd:ad:0e:93:f7: b2:71:8c:cb:d2:25:40:2c:24:a2:fe:26:c6:64:18: 00:2b:c6:06:6c:1b:d2:05:16:a6:4a:22:bd:e5:23: f5:04:ca:02:ea:89:a0:03:f0:61:46:5f:e7:22:f8: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:87:C6:C4:85:05:D5:43:67:12:72:E6:4C:AB:19:04:A4:DC:3E X509v3 Authority Key Identifier: keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:30:04:21:7e:18:1a:25:c0:a4:d4:1b:87:6d:00:09:30:87: 37:c9:23:af:d4:b9:59:51:a2:8b:d4:fc:ac:62:f8:a6:91:64: 3a:c5:c6:42:13:b9:a3:f4:9d:0d:c8:ae:6e:51:b0:09:97:b5: 3f:bd:3a:f5:4f:d8:16:aa:6e:89:b0:8f:b1:f5:3c:da:aa:96: 8b:8f:01:2e:bb:8a:30:87:a7:0e:92:e6:fd:a7:b4:64:92:35: f7:77:c0:c4:7d:9f:e3:20:c4:99:0d:9e:fd:0e:cc:74:77:dc: 7e:7e:9a:88:a1:01:b6:e3:92:10:45:b8:3b:1b:21:3b:b5:77: 78:08:32:a8:da:86:6b:58:62:32:af:3f:97:bd:b5:cc:2a:d1: 6b:6b:8b:38:f1:95:d2:33:13:39:2d:78:f7:89:66:3e:a8:e8: 5d:ea:a1:e0:1a:3e:55:37:0c:34:28:fc:00:21:08:fb:f8:07: 01:61:82:bf:04:a6:3a:aa:58:22:fc:08:88:31:58:d4:3f:85: a3:ac:cf:61:b3:4f:0a:f6:90:f1:1a:46:e0:a3:0b:59:af:67: 7e:b4:62:3e:4a:bc:44:97:8f:75:ad:1d:26:f6:99:75:9a:eb: 9b:b6:1c:f7:ac:30:41:27:c5:c0:18:2b:d0:75:df:c8:cf:e1: 2c:a0:b3:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSPA/ezRmH5cP+JMqRNbFf5M9KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1 Q0JGMkRGNTAeFw0yNjExMDkxMTQ1MjlaFw0yNjExMTAxNDIxMjlaMDMxMTAvBgNV BAMTKEQ1MUM4N0M2QzQ4NTA1RDU0MzY3MTI3MkU2NENBQjE5MDRBNERDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rhtQYIx8DmH1J2Mfn2xpiGNb iSPFhtGgzpEQXkxM6pkl1aYLPsi8Pa9DS0gg33gEWGT4CT19AQBrp5NXAt9C5zat Cf8Pmeam7hrpMYqhPUYmj6X+Zt3ZJr1J2063hcf8g9ny10gOsOaFz67vqrgTB9yy 0tHx41N+vdJHY+MT3ve9B1YPyo/m3RkrMZj+UUkOIg9wPD+TcJMrmI/HbxIXZXBP 8br9HPmtK+PSGrTTRjn1d2etskT2Uq3WXWESjaN0EXagN5tycoCztcz9rQ6T97Jx jMvSJUAsJKL+JsZkGAArxgZsG9IFFqZKIr3lI/UEygLqiaAD8GFGX+ci+Iw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RyHxsSFBdVDZxJy5kyrGQSk3D4wHwYDVR0j BBgwFoAUeTKQ5+wVX/ccRNtkaM7XmFy/LfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU5OGIzYmQtMjg0ZC00YTdkLTlmMjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdF QzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1Q0JGMkRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OTMyOTBFN0VDMTU1RkY3MUM0NERCNjQ2OENFRDc5ODVDQkYy REY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3 OTg1Q0JGMkRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEwBCF+GBolwKTUG4dtAAkwhzfJI6/UuVlR oovU/Kxi+KaRZDrFxkITuaP0nQ3Irm5RsAmXtT+9OvVP2Baqbomwj7H1PNqqlouP AS67ijCHpw6S5v2ntGSSNfd3wMR9n+MgxJkNnv0OzHR33H5+moihAbbjkhBFuDsb ITu1d3gIMqjahmtYYjKvP5e9tcwq0WtrizjxldIzEzktePeJZj6o6F3qoeAaPlU3 DDQo/AAhCPv4BwFhgr8EpjqqWCL8CIgxWNQ/haOsz2GzTwr2kPEaRuCjC1mvZ360 Yj5KvESXj3WtHSb2mXWa65u2HPesMEEnxcAYK9B138jP4Sygsw0= -----END CERTIFICATE-----Generated at Mon Nov 9 17:18:47 2026 by rpki-client