$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft File: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft (raw, json) Hash identifier: 1c/Emofowg4f6InIuRI8oA36+pI4cZqGBPLnzijgbL8= Subject key identifier: 60:1F:6B:79:AA:E2:18:89:48:AD:C9:DC:F1:0C:C5:E0:22:F7:44:A3 Authority key identifier: 79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F Certificate issuer: /CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F Certificate serial: 40DE87061916F121737A496FFB9130989DA1AA2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 12:47:04 +0000 Manifest this update: Tue 10 Nov 2026 12:42:04 +0000 Manifest next update: Wed 11 Nov 2026 13:18:04 +0000 Files and hashes: 1: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl (hash: TEefRflcryauyIAH7XY5X4rJ8wS1uYrUGch2QLl3bz8=) 2: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: ogtnejoe1lu/pUVl9hn0Y1Pmvr2UyFdPnQq+gSyIODw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 11:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:de:87:06:19:16:f1:21:73:7a:49:6f:fb:91:30:98:9d:a1:aa:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F Validity Not Before: Nov 10 12:42:04 2026 GMT Not After : Nov 11 13:18:04 2026 GMT Subject: CN=601F6B79AAE2188948ADC9DCF10CC5E022F744A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:ce:cf:db:1c:f5:48:fb:22:e0:d8:51:98: 27:4c:0a:99:02:5f:8c:f5:28:53:37:fa:bb:bd:4a: fa:ad:20:08:aa:de:66:53:9f:26:d3:f0:95:d8:33: 7d:af:51:8d:3c:bd:d4:f5:36:0f:94:a2:ac:13:63: 0e:ac:51:eb:b4:8a:4b:83:7a:06:39:cc:7e:96:af: ad:66:6f:3a:65:b1:63:72:67:ad:9b:38:cc:5c:ad: db:02:bb:5c:c7:81:1e:5a:ad:95:15:10:c9:68:8e: c5:ae:05:13:ec:5c:b2:13:c6:cf:6c:df:67:13:0d: b0:4c:e9:4f:5d:4c:37:6a:fb:31:82:a8:28:9f:4e: 8e:f2:60:d9:65:8a:eb:4b:c8:14:58:dd:c0:ce:75: 6d:d1:5f:b9:00:2a:5a:c9:af:95:59:12:94:60:cb: 78:f7:ee:e9:b6:21:09:fc:b5:21:16:af:54:4d:6c: 99:b4:95:c9:c0:ed:f2:84:74:7d:bb:4e:13:6b:df: d3:c9:76:d1:17:43:d0:7c:76:a7:cd:33:6f:af:9a: 08:28:03:62:8f:ac:03:97:3b:50:0b:d2:c5:f2:2c: 5c:8c:92:3a:73:96:6b:d5:11:01:e1:9c:1f:a4:e1: a6:22:b6:30:76:cd:23:3e:0a:23:89:31:bc:4f:5d: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:6B:79:AA:E2:18:89:48:AD:C9:DC:F1:0C:C5:E0:22:F7:44:A3 X509v3 Authority Key Identifier: keyid:79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:98:30:dd:24:50:91:9f:26:24:b3:f4:ef:41:71:50:eb:f6: 3b:d3:82:91:71:f8:e5:60:ce:0e:82:c6:40:bf:7c:cb:1b:b8: 0f:d0:6f:54:02:f6:ee:eb:63:75:77:ae:ff:de:8f:2c:20:4d: 86:cf:6c:f2:8d:01:e1:7e:dc:af:4b:c0:a1:0a:d0:f9:ca:c7: eb:bf:0a:84:d9:90:55:51:84:ae:da:45:c9:8e:47:2b:59:e2: f8:29:18:04:62:e3:af:84:33:09:d2:09:8e:e0:c7:62:64:60: 71:d2:bc:d3:71:e3:d8:66:3e:06:52:90:1b:bf:f0:7b:55:34: 13:02:f9:f5:75:d4:b8:8d:a3:3d:41:36:a3:3c:c4:75:cb:f6: f4:ec:b6:55:6f:df:b6:7d:39:61:77:c9:e0:a1:54:16:8a:dc: 32:31:5f:bf:3b:98:31:fd:33:1a:b8:84:c6:5a:46:04:60:f3: 03:20:12:e7:20:6e:94:e6:53:ae:1d:41:f8:0c:43:00:35:3d: 41:f3:37:6e:5b:f2:40:e2:f9:2e:2c:a1:6b:cc:01:4b:cb:fa: b2:4c:f7:7c:c9:9c:b6:33:9d:49:6f:0d:18:63:63:3c:75:3d: d6:0e:90:85:12:44:1c:2f:1f:d4:bb:b9:e3:42:d3:8f:b1:21: 8d:37:42:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQN6HBhkW8SFzeklv+5EwmJ2hqi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkyQkVBQjY0NTQ0NkUxQTlBNkUxQkFGNzY3NEJDNjkw NEM4QkUxRjAeFw0yNjExMTAxMjQyMDRaFw0yNjExMTExMzE4MDRaMDMxMTAvBgNV BAMTKDYwMUY2Qjc5QUFFMjE4ODk0OEFEQzlEQ0YxMENDNUUwMjJGNzQ0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAM7P2xz1SPsi4NhRmCdMCpkC X4z1KFM3+ru9SvqtIAiq3mZTnybT8JXYM32vUY08vdT1Ng+UoqwTYw6sUeu0ikuD egY5zH6Wr61mbzplsWNyZ62bOMxcrdsCu1zHgR5arZUVEMlojsWuBRPsXLITxs9s 32cTDbBM6U9dTDdq+zGCqCifTo7yYNlliutLyBRY3cDOdW3RX7kAKlrJr5VZEpRg y3j37um2IQn8tSEWr1RNbJm0lcnA7fKEdH27ThNr39PJdtEXQ9B8dqfNM2+vmggo A2KPrAOXO1AL0sXyLFyMkjpzlmvVEQHhnB+k4aYitjB2zSM+CiOJMbxPXdP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYB9reariGIlIrcnc8QzF4CL3RKMwHwYDVR0j BBgwFoAUeSvqtkVEbhqabhuvdnS8aQTIvh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU0YWJhMGEtMWMyYy00ZjhhLWE0YjQtZWE3MmQ5YjJhNjBhLzAvNzkyQkVBQjY0 NTQ0NkUxQTlBNkUxQkFGNzY3NEJDNjkwNEM4QkUxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83OTJCRUFCNjQ1NDQ2RTFBOUE2RTFCQUY3Njc0QkM2OTA0QzhC RTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0 YjQtZWE3MmQ5YjJhNjBhLzAvNzkyQkVBQjY0NTQ0NkUxQTlBNkUxQkFGNzY3NEJD NjkwNEM4QkUxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmYMN0kUJGfJiSz9O9BcVDr9jvTgpFx+OVg zg6CxkC/fMsbuA/Qb1QC9u7rY3V3rv/ejywgTYbPbPKNAeF+3K9LwKEK0PnKx+u/ CoTZkFVRhK7aRcmORytZ4vgpGARi46+EMwnSCY7gx2JkYHHSvNNx49hmPgZSkBu/ 8HtVNBMC+fV11LiNoz1BNqM8xHXL9vTstlVv37Z9OWF3yeChVBaK3DIxX787mDH9 Mxq4hMZaRgRg8wMgEucgbpTmU64dQfgMQwA1PUHzN25b8kDi+S4soWvMAUvL+rJM 93zJnLYznUlvDRhjYzx1PdYOkIUSRBwvH9S7ueNC04+xIY03Qrg= -----END CERTIFICATE-----Generated at Tue Nov 10 16:45:55 2026 by rpki-client