$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: hYVTn6BG3ikxTD9nukzhj5VafQRxsTA1UePvDG3UFcM= Subject key identifier: B9:27:E9:5F:2E:49:C1:D6:18:E0:FA:AF:F5:53:06:5D:24:A4:64:7A Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 343D01162B46290F466CDE266D09A6697510F6AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 05:48:00 +0000 Manifest this update: Tue 10 Nov 2026 05:43:00 +0000 Manifest next update: Wed 11 Nov 2026 07:24:00 +0000 Files and hashes: 1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) 2: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: 4UV9c11Y/kUJDC5v51wXYKJhJm+xSqTli29VpspygGA=) 3: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3d:01:16:2b:46:29:0f:46:6c:de:26:6d:09:a6:69:75:10:f6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Nov 10 05:43:00 2026 GMT Not After : Nov 11 07:24:00 2026 GMT Subject: CN=B927E95F2E49C1D618E0FAAFF553065D24A4647A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:58:77:00:17:fa:05:90:ee:99:87:5b:06: 4a:3e:91:46:cf:65:10:6d:da:5c:5c:07:8e:96:6e: 84:dc:1c:8f:4d:23:8d:6b:87:3f:d9:da:95:29:60: 72:31:63:51:9f:f2:cf:68:f8:47:e5:75:03:df:b4: 9e:c6:6e:b9:a5:67:48:12:48:90:b7:47:45:49:28: e3:92:38:d5:05:30:f9:00:cb:04:ba:44:de:bd:1a: d7:6b:88:17:be:1f:47:f6:8a:e9:44:83:8b:c0:d7: 8f:39:4e:b9:28:58:1d:13:2f:23:38:a0:4e:b0:5a: f5:47:0c:98:08:8d:18:43:f9:55:96:12:25:04:c0: 37:be:08:98:95:9c:7a:e0:5f:8d:ff:ac:13:b7:1f: 4d:a1:2e:b9:01:74:6a:01:b4:26:54:3f:73:9a:f7: a0:34:69:42:14:9f:d2:9a:83:0a:2b:b5:d7:4e:00: 6a:13:f5:77:7c:11:cd:01:5f:bd:79:54:9b:0b:d7: 61:6d:b8:6c:14:93:72:c0:4a:43:a3:70:24:a8:b4: 0e:aa:e3:5e:3c:4b:14:14:39:24:e9:66:fb:ce:b6: ec:01:76:5b:76:88:b9:ee:ef:65:d7:d7:a9:2c:c5: 1a:e6:2d:fb:4d:c6:94:fe:26:76:9b:6e:f6:fc:61: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:E9:5F:2E:49:C1:D6:18:E0:FA:AF:F5:53:06:5D:24:A4:64:7A X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:63:59:99:2a:79:a3:e3:01:cc:96:33:77:15:c0:82:54:32: 15:88:91:f7:a8:8c:f8:df:8d:23:01:7b:4a:bf:bb:73:bf:2a: 09:0f:41:37:07:6f:b6:93:a2:b6:76:d2:55:4a:f8:aa:25:18: 00:eb:fb:87:5c:69:e9:61:fc:c5:03:ac:cf:08:d5:48:27:01: 97:1b:c7:ee:75:c1:8d:f7:79:3e:98:3a:58:fb:c0:82:5c:97: 0b:4a:f4:40:45:8c:a7:78:8e:a5:77:e7:ca:66:f9:d7:e7:c8: e0:34:1a:f3:81:81:14:e4:e1:96:7d:75:a0:56:94:09:03:d9: d2:45:81:52:65:9a:80:89:0c:b1:3b:20:44:62:a6:b0:c4:cd: ce:63:d5:1b:8f:ff:a8:d1:46:73:e5:35:0d:9a:c1:36:33:fa: a6:71:c0:de:15:23:bb:7d:3b:9b:1a:e4:bb:82:4a:6e:4e:5c: 1a:bd:a9:09:20:80:d8:57:d6:3f:1a:74:b8:21:26:58:05:88: d0:a3:35:95:51:e5:07:ea:d3:43:89:10:1f:6c:f0:b5:12:01: 02:75:0b:e8:e6:ab:ed:20:8f:af:40:c7:de:02:c9:c2:f4:52: 2e:06:3d:98:10:17:31:b8:f6:86:17:31:99:6e:46:8b:3a:9f: 55:d5:e5:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUND0BFitGKQ9GbN4mbQmmaXUQ9q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjExMTAwNTQzMDBaFw0yNjExMTEwNzI0MDBaMDMxMTAvBgNV BAMTKEI5MjdFOTVGMkU0OUMxRDYxOEUwRkFBRkY1NTMwNjVEMjRBNDY0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuFh3ABf6BZDumYdbBko+kUbP ZRBt2lxcB46WboTcHI9NI41rhz/Z2pUpYHIxY1Gf8s9o+EfldQPftJ7GbrmlZ0gS SJC3R0VJKOOSONUFMPkAywS6RN69GtdriBe+H0f2iulEg4vA1485TrkoWB0TLyM4 oE6wWvVHDJgIjRhD+VWWEiUEwDe+CJiVnHrgX43/rBO3H02hLrkBdGoBtCZUP3Oa 96A0aUIUn9KagwortddOAGoT9Xd8Ec0BX715VJsL12FtuGwUk3LASkOjcCSotA6q 4148SxQUOSTpZvvOtuwBdlt2iLnu72XX16ksxRrmLftNxpT+Jnabbvb8YcJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSfpXy5JwdYY4Pqv9VMGXSSkZHowHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9jWZkqeaPjAcyWM3cVwIJUMhWIkfeojPjf jSMBe0q/u3O/KgkPQTcHb7aTorZ20lVK+KolGADr+4dcaelh/MUDrM8I1UgnAZcb x+51wY33eT6YOlj7wIJclwtK9EBFjKd4jqV358pm+dfnyOA0GvOBgRTk4ZZ9daBW lAkD2dJFgVJlmoCJDLE7IERiprDEzc5j1RuP/6jRRnPlNQ2awTYz+qZxwN4VI7t9 O5sa5LuCSm5OXBq9qQkggNhX1j8adLghJlgFiNCjNZVR5Qfq00OJEB9s8LUSAQJ1 C+jmq+0gj69Ax94CycL0Ui4GPZgQFzG49oYXMZluRos6n1XV5ZU= -----END CERTIFICATE-----Generated at Tue Nov 10 10:19:47 2026 by rpki-client