$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: +k+kcF2vAoEgPYS7gg+zYcPlhDSDzRAfdYO96o3NlXA= Subject key identifier: 84:D4:66:8D:D5:51:E6:E9:04:42:A3:E1:CF:D1:A4:B1:04:9B:55:E4 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 6C95D1F7017A39CF393AC845A826065BEEB95BB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 02:11:54 +0000 Manifest this update: Sun 15 Nov 2026 02:06:54 +0000 Manifest next update: Mon 16 Nov 2026 02:32:54 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 2: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: XKrQqTxrV7GbbGDeq5EaZcOOCBUCPdC1b7LAZ9TIJY0=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:95:d1:f7:01:7a:39:cf:39:3a:c8:45:a8:26:06:5b:ee:b9:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Nov 15 02:06:54 2026 GMT Not After : Nov 16 02:32:54 2026 GMT Subject: CN=84D4668DD551E6E90442A3E1CFD1A4B1049B55E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:e7:66:69:10:e8:20:fc:c5:26:83:cf:fe: e2:25:25:ea:32:5a:30:b8:38:12:29:5b:34:a8:57: 26:54:d7:23:e8:22:94:b4:12:e4:ef:9a:cc:e2:35: ae:03:70:bd:e2:42:cb:b9:b7:59:34:19:24:fb:8f: 57:e2:91:50:15:90:9b:58:82:09:52:e5:86:5a:3c: ea:9c:fe:28:8d:58:ab:ba:48:54:71:34:29:b5:57: 2c:50:a3:37:b1:18:57:2a:8a:68:20:b4:1e:6b:12: 97:0b:3e:c2:40:d7:3e:7f:8a:bb:ea:70:2e:ac:e4: d8:6d:1e:a8:63:44:6b:06:42:6c:1c:f9:01:15:7d: bd:63:d5:ca:53:89:56:47:97:2b:7e:c2:be:04:f3: bc:50:95:aa:37:db:d2:c0:ca:80:e1:06:5f:64:1e: f5:d0:79:1a:4b:5f:42:9b:67:3c:bd:50:42:d4:2d: 53:7a:d4:b0:6d:fc:83:43:05:e5:45:3e:24:0e:a5: d8:c8:8c:3b:4b:9d:89:26:8c:37:d4:2f:d5:c0:a6: 08:c7:e8:47:68:70:6c:39:b1:cb:a9:5f:ce:df:56: 50:ec:cb:5d:0b:fe:25:5e:21:63:43:5a:c2:e6:e0: 00:a8:67:99:17:7c:2d:b8:1f:3a:58:9e:40:a6:73: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D4:66:8D:D5:51:E6:E9:04:42:A3:E1:CF:D1:A4:B1:04:9B:55:E4 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:96:ca:71:40:26:c4:27:2f:16:d5:98:64:23:8e:e8:70:81: 62:11:ba:aa:e2:a1:07:15:ed:9a:a2:83:bf:9a:9a:29:d8:f5: 77:71:2f:61:72:58:51:b0:4b:e0:dd:60:b1:13:05:eb:10:48: 2b:f5:d1:df:fa:f7:95:39:43:47:39:11:fb:5a:93:cb:5d:bd: c4:80:7b:e3:1d:88:f2:fe:f2:88:99:90:e2:fe:5e:6c:ba:89: 4b:5b:89:df:f9:74:3e:53:da:55:4d:19:bf:d0:d7:ad:f0:18: 67:d8:16:52:71:e9:c4:a8:6d:0c:90:34:d1:72:48:02:9a:d4: fc:a3:fd:33:89:4e:65:0d:23:71:e6:07:8c:6e:f0:a9:77:9f: 45:0d:89:66:ac:2a:c4:2e:c3:3d:b3:15:1a:93:6a:3b:b4:bc: d3:22:11:a0:b8:40:6b:9a:4b:18:fe:f8:dd:da:49:04:1b:b6: 38:3e:9c:ff:0a:60:5a:7f:c1:bc:2a:19:2b:20:c4:40:52:3e: f3:2d:ef:fc:55:e6:ac:2d:80:b5:77:a6:3f:19:45:46:42:2b: fc:20:1b:38:0b:8a:93:c7:8e:19:8e:d6:89:e3:21:31:49:6f: 64:a9:73:be:e0:08:fd:cb:ca:94:84:e1:17:36:41:bd:32:b7: d6:b8:11:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJXR9wF6Oc85OshFqCYGW+65W7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjExMTUwMjA2NTRaFw0yNjExMTYwMjMyNTRaMDMxMTAvBgNV BAMTKDg0RDQ2NjhERDU1MUU2RTkwNDQyQTNFMUNGRDFBNEIxMDQ5QjU1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGpudmaRDoIPzFJoPP/uIlJeoy WjC4OBIpWzSoVyZU1yPoIpS0EuTvmsziNa4DcL3iQsu5t1k0GST7j1fikVAVkJtY gglS5YZaPOqc/iiNWKu6SFRxNCm1VyxQozexGFcqimggtB5rEpcLPsJA1z5/irvq cC6s5NhtHqhjRGsGQmwc+QEVfb1j1cpTiVZHlyt+wr4E87xQlao329LAyoDhBl9k HvXQeRpLX0KbZzy9UELULVN61LBt/INDBeVFPiQOpdjIjDtLnYkmjDfUL9XApgjH 6EdocGw5scupX87fVlDsy10L/iVeIWNDWsLm4ACoZ5kXfC24HzpYnkCmcx2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNRmjdVR5ukEQqPhz9GksQSbVeQwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiWynFAJsQnLxbVmGQjjuhwgWIRuqrioQcV 7Zqig7+aminY9XdxL2FyWFGwS+DdYLETBesQSCv10d/695U5Q0c5Eftak8tdvcSA e+MdiPL+8oiZkOL+Xmy6iUtbid/5dD5T2lVNGb/Q163wGGfYFlJx6cSobQyQNNFy SAKa1Pyj/TOJTmUNI3HmB4xu8Kl3n0UNiWasKsQuwz2zFRqTaju0vNMiEaC4QGua Sxj++N3aSQQbtjg+nP8KYFp/wbwqGSsgxEBSPvMt7/xV5qwtgLV3pj8ZRUZCK/wg GzgLipPHjhmO1onjITFJb2Spc77gCP3LypSE4Rc2Qb0yt9a4Ecs= -----END CERTIFICATE-----Generated at Sun Nov 15 12:16:53 2026 by rpki-client