$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft File: 7CB53701F9A5E6CBB24596105D30044B647BBC84.mft (raw, json) Hash identifier: 4zTRBY8YwMExCfnQTvWpH4xQwDKwtWQsC1gcF38Itg4= Subject key identifier: AE:79:50:F0:15:06:46:AB:2B:1E:DD:3A:B6:BF:B5:41:83:35:15:63 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 432FDC2308AEFA859A26AA47614DA8540AC14B3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft Manifest number: 010D Signing time: Mon 09 Nov 2026 23:04:35 +0000 Manifest this update: Mon 09 Nov 2026 22:59:35 +0000 Manifest next update: Wed 11 Nov 2026 02:49:35 +0000 Files and hashes: 1: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: 8hOpociGJtqDE34L3JSdw+Pc3sQMSXPBrrMZuOG+ZxI=) 2: 7CB53701F9A5E6CBB24596105D30044B647BBC84.crl (hash: pFnmKQf2H/wcutSBEacpb1bsFl/FiMxexlm3jZEcuqk=) 3: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: sSRwH/T9b05X4BKvBEKgha2T5nZaqLKXo7E9Aw03Ff4=) 4: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: AaKch+igMv/uzSVkUY7IY7Mem8TQL2oJvCNmK2/amp4=) 5: 3130332e3135332e34322e302f32332d3233203d3e20313430343434.roa (hash: 4t+dKFGCIrgC9Nzebky+jsqn/Q/GxXwIZ2MFd9BNm0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 02:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2f:dc:23:08:ae:fa:85:9a:26:aa:47:61:4d:a8:54:0a:c1:4b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Nov 9 22:59:35 2026 GMT Not After : Nov 11 02:49:35 2026 GMT Subject: CN=AE7950F0150646AB2B1EDD3AB6BFB54183351563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:11:0f:30:cc:b7:e1:52:39:35:13:20:fc: 00:77:a2:43:6d:5a:ad:3d:9a:16:4c:42:eb:e8:4a: 67:3a:8a:b7:2c:07:32:d4:fd:14:2a:69:27:c8:ef: 22:99:7c:92:27:df:0c:e0:2b:ba:2b:45:2f:e2:7c: dc:78:68:9d:ec:3c:64:8e:4d:96:0b:c8:d2:d6:41: a3:de:1f:6d:d7:70:fb:68:90:17:81:a5:78:5a:45: 6d:7f:97:80:1b:03:4c:7d:fe:01:6d:16:79:e5:90: 98:7d:c7:c8:31:7e:6c:91:3a:b2:d4:a6:b5:08:18: bb:56:14:49:91:ea:09:fe:46:a3:98:5e:4a:87:42: ff:83:d1:22:ce:12:95:fc:01:c8:a7:87:29:db:08: 54:25:b2:b2:1c:9e:f3:a3:99:28:3b:f9:fe:fd:5e: f9:d3:d3:68:a0:3b:9d:90:b2:40:45:42:14:15:66: 3f:7b:50:6f:d8:3e:a5:05:11:9c:42:b7:23:ff:6d: 29:8e:32:bb:9c:a9:4d:53:d5:04:c3:f0:a9:ec:ff: fa:1a:a5:56:c5:b7:1c:e2:04:9b:15:db:57:5e:28: 82:0c:7d:1a:c8:f9:6a:1d:dc:76:15:00:f5:75:46: 05:2a:d2:a2:8c:96:74:aa:70:4c:24:ca:56:5e:0a: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:50:F0:15:06:46:AB:2B:1E:DD:3A:B6:BF:B5:41:83:35:15:63 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:97:d7:fb:5e:1e:11:5d:e0:2e:90:19:22:b4:9f:bc:b1:ef: 90:90:08:92:8e:6b:f9:9b:99:3c:ea:48:02:c5:1e:a6:b7:fc: 3e:61:e3:e2:e0:8c:aa:de:7a:71:6e:96:5d:e7:61:fa:01:15: 76:d1:fb:9e:3c:ff:63:85:bc:70:07:7b:e8:13:21:08:33:7a: be:f8:cb:b0:5a:ac:9c:7f:59:38:4b:b8:e7:78:47:44:d0:99: 3c:aa:95:29:12:ea:79:ff:20:dd:87:43:1e:29:ef:5f:58:13: 79:f0:15:db:9c:f6:14:fd:fc:55:dd:0e:08:46:8e:f9:19:b8: b2:3d:d5:cf:ed:b9:3b:c4:85:08:a9:60:80:a6:d9:f9:f3:d8: f6:7e:c4:92:18:67:e8:57:eb:54:04:4c:ab:f3:04:6f:b4:71: 98:42:58:32:80:3a:c9:89:bc:c6:1a:d4:08:73:36:d3:c9:6a: af:90:13:b1:04:3f:d1:e6:ab:77:b6:d1:5f:8b:88:9e:99:21: 8f:b5:93:10:77:96:f8:05:f6:35:37:8b:3a:1d:a7:87:a5:9a: a1:66:71:82:41:0b:4f:94:88:4c:c7:3a:38:a6:96:39:9b:51: 9a:4f:7b:ab:33:2e:6e:7a:a7:cc:f5:6f:c3:ca:5b:a5:42:23: 85:93:2b:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQy/cIwiu+oWaJqpHYU2oVArBSzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjExMDkyMjU5MzVaFw0yNjExMTEwMjQ5MzVaMDMxMTAvBgNV BAMTKEFFNzk1MEYwMTUwNjQ2QUIyQjFFREQzQUI2QkZCNTQxODMzNTE1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBxEPMMy34VI5NRMg/AB3okNt Wq09mhZMQuvoSmc6ircsBzLU/RQqaSfI7yKZfJIn3wzgK7orRS/ifNx4aJ3sPGSO TZYLyNLWQaPeH23XcPtokBeBpXhaRW1/l4AbA0x9/gFtFnnlkJh9x8gxfmyROrLU prUIGLtWFEmR6gn+RqOYXkqHQv+D0SLOEpX8AcinhynbCFQlsrIcnvOjmSg7+f79 XvnT02igO52QskBFQhQVZj97UG/YPqUFEZxCtyP/bSmOMrucqU1T1QTD8Kns//oa pVbFtxziBJsV21deKIIMfRrI+Wod3HYVAPV1RgUq0qKMlnSqcEwkylZeCi5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrnlQ8BUGRqsrHt06tr+1QYM1FWMwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0 NEI2NDdCQkM4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSX1/teHhFd4C6QGSK0n7yx75CQCJKOa/mb mTzqSALFHqa3/D5h4+LgjKreenFull3nYfoBFXbR+548/2OFvHAHe+gTIQgzer74 y7BarJx/WThLuOd4R0TQmTyqlSkS6nn/IN2HQx4p719YE3nwFduc9hT9/FXdDghG jvkZuLI91c/tuTvEhQipYICm2fnz2PZ+xJIYZ+hX61QETKvzBG+0cZhCWDKAOsmJ vMYa1AhzNtPJaq+QE7EEP9Hmq3e20V+LiJ6ZIY+1kxB3lvgF9jU3izodp4elmqFm cYJBC0+UiEzHOjimljmbUZpPe6szLm56p8z1b8PKW6VCI4WTK74= -----END CERTIFICATE-----Generated at Tue Nov 10 17:38:24 2026 by rpki-client