$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: vBEYx9hjB4podyXJKSQrgCxBfIPFOWnPS4H1k6cz6dE= Subject key identifier: 40:30:82:83:C8:6F:14:C9:C4:30:B4:94:66:91:FA:24:F0:D9:A5:BC Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 377C6C7A29168DC44963892B3D7AB0D317815A6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: FF Signing time: Mon 09 Nov 2026 12:05:53 +0000 Manifest this update: Mon 09 Nov 2026 12:00:53 +0000 Manifest next update: Tue 10 Nov 2026 14:12:53 +0000 Files and hashes: 1: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 4: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: WNaYjKGaime7DTqbh3EZkUIsSh5Hey0zjgrq8P754c8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 14:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7c:6c:7a:29:16:8d:c4:49:63:89:2b:3d:7a:b0:d3:17:81:5a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Nov 9 12:00:53 2026 GMT Not After : Nov 10 14:12:53 2026 GMT Subject: CN=40308283C86F14C9C430B4946691FA24F0D9A5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:d8:2e:7d:5b:75:bd:34:9e:17:b7:34:e9: 10:d7:18:9a:86:ea:a1:69:f3:82:09:59:03:48:86: 60:30:5a:42:0c:45:40:48:51:5e:ef:58:ef:2b:66: f0:cc:57:be:a1:e9:56:35:b3:1d:24:8b:2c:b7:8b: 24:a2:6d:64:cc:33:26:a5:2a:8b:c0:e3:af:42:92: bf:c6:58:be:5d:20:9d:95:68:42:e5:c1:74:18:81: 89:df:f6:e0:b0:62:a3:5a:0f:93:39:cc:a2:8c:d8: ec:2c:9c:76:7c:ee:c6:7c:b5:4f:7d:7b:79:cc:47: ea:e7:a7:9a:39:aa:5e:a6:a4:c0:76:d7:00:81:a8: 15:de:2a:33:66:de:b8:57:37:7e:2f:35:33:76:8d: 55:e5:fa:49:2f:81:a5:87:6e:b3:ab:4f:8c:4e:70: 17:be:26:74:c7:84:8a:9d:81:bc:b9:ce:ff:5c:ee: 86:b3:38:93:2e:c1:02:c1:fc:c5:b0:04:58:6e:97: b5:17:11:04:94:a3:ce:20:e5:6f:6b:2c:5e:2f:50: f2:12:33:80:d7:b6:2b:0a:90:92:a9:e9:e4:f0:eb: 47:d5:30:73:70:4c:75:17:c2:5a:20:ba:b8:eb:f7: 17:8c:3c:ff:ea:67:49:ba:63:4a:17:89:31:72:ac: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:82:83:C8:6F:14:C9:C4:30:B4:94:66:91:FA:24:F0:D9:A5:BC X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5e:92:70:b9:ba:ac:c4:7f:93:7a:40:66:2b:8b:c2:3a:11: b0:98:db:17:92:fc:de:c2:68:f8:bf:69:e7:30:0b:f9:61:eb: 20:fa:0c:f8:41:5b:5a:b2:54:3e:45:a8:85:05:1d:c1:eb:bf: 34:af:ce:39:f7:f7:ef:fe:f9:8b:bf:ba:96:e0:cf:1f:c7:49: ff:67:5f:99:b9:af:06:69:31:95:58:78:d4:99:97:de:03:af: f8:2a:8d:57:cf:44:12:bf:62:40:ce:aa:58:4b:28:12:32:81: 95:96:18:04:2a:23:da:df:e0:c8:2c:f8:58:a3:ec:2f:7a:46: ad:0b:c1:1d:4c:0f:dc:1b:94:05:18:8c:a4:da:ca:4b:58:44: b9:9b:30:1c:1c:eb:32:37:9a:c7:9b:5a:b1:4c:60:5f:9b:74: f8:e2:30:83:06:11:da:83:72:1c:38:ff:6b:18:76:78:16:6f: 89:a8:7e:91:b9:36:f0:d8:7e:bb:ec:55:a8:22:06:4a:8f:b4: 16:e4:e3:44:db:66:02:8b:82:1a:11:3e:c6:34:4f:a0:ca:31: 56:6e:f4:3c:55:1e:3b:4b:4c:97:9e:36:ff:28:8a:ae:c5:3c: 0c:54:7e:f3:57:43:6a:c2:e0:ec:84:1b:6a:f9:6c:0e:8a:54: 5e:1f:35:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3xseikWjcRJY4krPXqw0xeBWm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjExMDkxMjAwNTNaFw0yNjExMTAxNDEyNTNaMDMxMTAvBgNV BAMTKDQwMzA4MjgzQzg2RjE0QzlDNDMwQjQ5NDY2OTFGQTI0RjBEOUE1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX09gufVt1vTSeF7c06RDXGJqG 6qFp84IJWQNIhmAwWkIMRUBIUV7vWO8rZvDMV76h6VY1sx0kiyy3iySibWTMMyal KovA469Ckr/GWL5dIJ2VaELlwXQYgYnf9uCwYqNaD5M5zKKM2OwsnHZ87sZ8tU99 e3nMR+rnp5o5ql6mpMB21wCBqBXeKjNm3rhXN34vNTN2jVXl+kkvgaWHbrOrT4xO cBe+JnTHhIqdgby5zv9c7oazOJMuwQLB/MWwBFhul7UXEQSUo84g5W9rLF4vUPIS M4DXtisKkJKp6eTw60fVMHNwTHUXwlogurjr9xeMPP/qZ0m6Y0oXiTFyrP+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDCCg8hvFMnEMLSUZpH6JPDZpbwwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5eknC5uqzEf5N6QGYri8I6EbCY2xeS/N7C aPi/aecwC/lh6yD6DPhBW1qyVD5FqIUFHcHrvzSvzjn39+/++Yu/upbgzx/HSf9n X5m5rwZpMZVYeNSZl94Dr/gqjVfPRBK/YkDOqlhLKBIygZWWGAQqI9rf4Mgs+Fij 7C96Rq0LwR1MD9wblAUYjKTayktYRLmbMBwc6zI3msebWrFMYF+bdPjiMIMGEdqD chw4/2sYdngWb4mofpG5NvDYfrvsVagiBkqPtBbk40TbZgKLghoRPsY0T6DKMVZu 9DxVHjtLTJeeNv8oiq7FPAxUfvNXQ2rC4OyEG2r5bA6KVF4fNXA= -----END CERTIFICATE-----Generated at Tue Nov 10 03:19:27 2026 by rpki-client