$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae253d8c-a936-48c0-ab96-fa90b0dcc6d2/0/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.mft File: 7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.mft (raw, json) Hash identifier: VPMon+4DobF/otNOTiGIoKqSo2+fOEx5u+b+d/On9dY= Subject key identifier: 2C:D1:7A:34:0A:C7:6C:77:AB:84:82:4C:DF:85:96:13:91:8A:B6:2F Authority key identifier: 7F:99:29:BE:C1:BC:C9:3D:FD:AC:BB:41:7F:8D:0A:CB:13:05:12:68 Certificate issuer: /CN=7F9929BEC1BCC93DFDACBB417F8D0ACB13051268 Certificate serial: 59801EB053546FDE8D6D835865FADD7EC6084A80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae253d8c-a936-48c0-ab96-fa90b0dcc6d2/0/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.mft Manifest number: 0B Signing time: Tue 10 Nov 2026 10:13:45 +0000 Manifest this update: Tue 10 Nov 2026 10:08:45 +0000 Manifest next update: Wed 11 Nov 2026 12:13:45 +0000 Files and hashes: 1: 3138302e3231342e3136352e302f32342d3234203d3e20313535303538.roa (hash: As5Xfpc0RmDZFuqx4yEWHX4YLjSzXIczD5kAIWMNWlk=) 2: 7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.crl (hash: hLQUV29oobXFPXBH+tMFIlTwUcyqziI/Kl0fzY4mCxU=) 3: 323030313a6466373a633463303a3a2f34382d3438203d3e20313535303538.roa (hash: uHbGjzKPxl77ye6hJ9c3qFsAHIlKJlD0qTXihTEap1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae253d8c-a936-48c0-ab96-fa90b0dcc6d2/0/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.crl rsync://rpki-rsync.idnic.net/repo/ae253d8c-a936-48c0-ab96-fa90b0dcc6d2/0/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:80:1e:b0:53:54:6f:de:8d:6d:83:58:65:fa:dd:7e:c6:08:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9929BEC1BCC93DFDACBB417F8D0ACB13051268 Validity Not Before: Nov 10 10:08:45 2026 GMT Not After : Nov 11 12:13:45 2026 GMT Subject: CN=2CD17A340AC76C77AB84824CDF859613918AB62F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:10:df:b9:79:f4:40:ae:bd:78:89:66:94: 7a:83:ae:da:a4:65:7c:83:02:7b:72:55:5e:0a:ec: 04:3d:20:94:cd:45:32:47:13:f3:a0:01:f4:cd:1f: a2:c1:1d:c4:02:b9:e0:b4:07:ec:11:72:dc:e4:e6: 7f:5e:10:e8:10:cb:81:fe:08:4f:ce:7e:66:6c:ad: 16:2c:34:b2:54:2e:cc:24:c7:43:49:09:3a:30:1d: d9:12:e2:38:c2:75:9a:8c:eb:5f:bc:30:38:44:53: a5:eb:cf:0f:ef:84:05:29:86:8d:b9:64:65:e9:3a: 61:dd:f8:63:38:dc:c0:56:72:9d:68:bb:74:49:8f: a4:ba:dc:df:49:b4:61:94:17:be:cd:be:7f:a1:39: 2a:06:77:f4:5b:ea:92:2a:0f:1e:68:25:c4:7c:b9: 7f:34:05:d5:27:00:04:b1:9f:f6:cd:9a:55:1e:cf: 9f:8e:5d:7e:78:93:2e:7a:a8:8d:c2:fc:46:b8:22: a1:b7:32:af:b9:ce:b7:e6:14:7b:12:5f:62:e9:d8: 53:07:a1:4d:11:e7:be:5c:70:52:ee:9f:e4:6f:92: 95:20:8d:f3:14:3d:14:09:f5:93:a4:6e:39:f1:e1: d1:b1:e4:83:ef:c9:0b:50:25:85:a8:86:6b:36:4e: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:7A:34:0A:C7:6C:77:AB:84:82:4C:DF:85:96:13:91:8A:B6:2F X509v3 Authority Key Identifier: keyid:7F:99:29:BE:C1:BC:C9:3D:FD:AC:BB:41:7F:8D:0A:CB:13:05:12:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae253d8c-a936-48c0-ab96-fa90b0dcc6d2/0/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae253d8c-a936-48c0-ab96-fa90b0dcc6d2/0/7F9929BEC1BCC93DFDACBB417F8D0ACB13051268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:16:75:15:8e:ad:a8:01:ec:ee:8b:a8:a5:f8:ec:12:68:41: 75:26:64:26:39:41:96:73:06:88:30:d8:93:90:f4:5a:3e:fd: aa:0d:95:ed:cf:ac:ee:b8:f1:dc:c1:72:4c:c7:1f:fb:a6:23: 93:77:3d:5d:45:d1:95:ce:c2:84:d2:82:60:42:7a:3c:a9:d6: d6:8b:1e:ac:67:df:64:d8:24:25:71:ea:fa:d4:33:17:38:8d: 0e:4e:04:c3:4c:5d:6d:b4:a6:f9:c8:25:c4:9e:f4:11:50:cb: fc:5e:5d:64:c0:c4:fd:01:27:01:1d:c9:45:09:63:47:ed:8e: 8d:71:9e:ef:07:af:9d:f3:48:c3:14:41:13:4d:87:0f:0f:59: b2:78:cf:1a:8a:8e:ba:85:3e:11:3a:71:18:2d:07:12:e7:ba: d2:c2:b0:3e:55:a5:28:a3:71:c5:b7:75:89:4a:ba:f8:c6:3e: b3:27:ef:4d:20:25:71:5b:61:94:9e:ea:bc:cc:a1:86:dd:0a: 2b:4c:e8:09:6f:63:6e:1d:d0:c9:f4:4b:5e:74:57:b1:7b:db: d5:c5:88:08:78:89:e2:c4:e4:f6:e4:6a:3e:45:0d:d2:28:b3: d0:27:ef:c4:ed:96:74:92:ea:a5:d3:29:93:62:54:02:61:98: 39:a6:c0:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYAesFNUb96NbYNYZfrdfsYISoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5OTI5QkVDMUJDQzkzREZEQUNCQjQxN0Y4RDBBQ0Ix MzA1MTI2ODAeFw0yNjExMTAxMDA4NDVaFw0yNjExMTExMjEzNDVaMDMxMTAvBgNV BAMTKDJDRDE3QTM0MEFDNzZDNzdBQjg0ODI0Q0RGODU5NjEzOTE4QUI2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMLBDfuXn0QK69eIlmlHqDrtqk ZXyDAntyVV4K7AQ9IJTNRTJHE/OgAfTNH6LBHcQCueC0B+wRctzk5n9eEOgQy4H+ CE/OfmZsrRYsNLJULswkx0NJCTowHdkS4jjCdZqM61+8MDhEU6Xrzw/vhAUpho25 ZGXpOmHd+GM43MBWcp1ou3RJj6S63N9JtGGUF77Nvn+hOSoGd/Rb6pIqDx5oJcR8 uX80BdUnAASxn/bNmlUez5+OXX54ky56qI3C/Ea4IqG3Mq+5zrfmFHsSX2Lp2FMH oU0R575ccFLun+RvkpUgjfMUPRQJ9ZOkbjnx4dGx5IPvyQtQJYWohms2TiJRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULNF6NArHbHerhIJM34WWE5GKti8wHwYDVR0j BBgwFoAUf5kpvsG8yT39rLtBf40KyxMFEmgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUyNTNkOGMtYTkzNi00OGMwLWFiOTYtZmE5MGIwZGNjNmQyLzAvN0Y5OTI5QkVD MUJDQzkzREZEQUNCQjQxN0Y4RDBBQ0IxMzA1MTI2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjk5MjlCRUMxQkNDOTNERkRBQ0JCNDE3RjhEMEFDQjEzMDUx MjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUyNTNkOGMtYTkzNi00OGMwLWFi OTYtZmE5MGIwZGNjNmQyLzAvN0Y5OTI5QkVDMUJDQzkzREZEQUNCQjQxN0Y4RDBB Q0IxMzA1MTI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgWdRWOragB7O6LqKX47BJoQXUmZCY5QZZz Bogw2JOQ9Fo+/aoNle3PrO648dzBckzHH/umI5N3PV1F0ZXOwoTSgmBCejyp1taL Hqxn32TYJCVx6vrUMxc4jQ5OBMNMXW20pvnIJcSe9BFQy/xeXWTAxP0BJwEdyUUJ Y0ftjo1xnu8Hr53zSMMUQRNNhw8PWbJ4zxqKjrqFPhE6cRgtBxLnutLCsD5VpSij ccW3dYlKuvjGPrMn700gJXFbYZSe6rzMoYbdCitM6AlvY24d0Mn0S150V7F729XF iAh4ieLE5Pbkaj5FDdIos9An78TtlnSS6qXTKZNiVAJhmDmmwMU= -----END CERTIFICATE-----Generated at Tue Nov 10 19:40:51 2026 by rpki-client