$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json) Hash identifier: cHWIozwahyseI86ASIhtNLeJOT+DDF6KJLibh+YFRww= Subject key identifier: 5C:5C:8B:40:03:D5:AF:7C:7B:73:60:06:46:D7:BE:F5:46:69:43:5A Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Certificate serial: 1F08FDF252579304862AD762143827F91AA15D38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 21:42:46 +0000 Manifest this update: Mon 09 Nov 2026 21:37:46 +0000 Manifest next update: Tue 10 Nov 2026 22:39:46 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=) 2: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: zhVgOT5UbYp1IdnU790QVoR202/dqu5PmK7GeeG/UOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 22:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:08:fd:f2:52:57:93:04:86:2a:d7:62:14:38:27:f9:1a:a1:5d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Validity Not Before: Nov 9 21:37:46 2026 GMT Not After : Nov 10 22:39:46 2026 GMT Subject: CN=5C5C8B4003D5AF7C7B73600646D7BEF54669435A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:53:d5:f5:69:35:86:54:2b:99:93:77:9d: b0:13:dd:2e:a9:2e:21:c8:c7:60:85:47:be:0b:46: 70:75:0a:21:3c:d9:fe:73:56:35:8a:02:f6:bc:de: 79:52:9e:99:76:0d:17:9b:5f:a8:f1:a4:cc:0d:73: ed:fa:15:e1:69:6e:d1:2d:af:ce:41:3f:06:0e:13: ae:dd:54:99:13:cf:13:59:27:8d:cf:86:cd:5d:99: 13:33:9a:65:25:a7:0f:3b:0a:de:8e:2b:f2:2c:09: b4:d9:12:19:0d:f9:c7:d8:6c:b4:02:49:a9:bb:cc: 15:49:b5:da:aa:db:cb:81:a8:72:8e:52:c1:a7:1c: e2:5b:4d:84:c6:7e:3e:06:6b:9f:3d:c8:b1:8c:6b: 19:03:c1:54:e4:43:22:43:f3:8a:6a:27:87:52:a9: 09:4b:84:44:d7:1b:7f:e9:5f:c6:ba:9f:56:0d:52: 99:41:24:63:0d:bc:28:b7:15:b3:f7:ad:18:eb:d5: 45:26:44:00:9c:e2:27:40:44:6b:79:53:65:d9:81: 42:06:5a:cc:ee:88:67:53:0b:b4:04:1e:3c:e3:a2: 33:fc:ea:d5:c5:d2:c8:c6:f3:a8:ee:9f:cd:93:67: c3:69:2b:45:82:56:ae:2a:53:93:d7:af:57:55:aa: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:8B:40:03:D5:AF:7C:7B:73:60:06:46:D7:BE:F5:46:69:43:5A X509v3 Authority Key Identifier: keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:3b:54:4e:74:a7:19:16:3e:9b:f2:b4:af:9b:40:bb:3d:a3: 0a:bb:27:59:2c:de:e9:cc:06:3e:41:4a:f9:74:ac:23:2e:1c: 4e:13:cf:70:d3:e5:26:0a:d0:47:5d:4f:49:19:c6:49:d2:a5: 38:dc:54:84:4a:a4:2c:46:e8:de:e7:33:e9:12:1c:88:40:3e: 77:f2:8f:59:16:0c:d3:c6:0d:46:26:5f:45:75:cf:7e:a1:c8: 9d:67:5b:df:45:b1:0c:e8:00:fd:37:98:02:d4:1f:c4:ba:5d: e5:6e:2d:2c:33:32:f4:e6:86:53:4f:6e:9f:68:c7:59:33:29: 9f:6a:d1:ec:7b:4f:af:3f:bc:e2:e1:8d:56:19:d1:25:c3:6a: 79:bd:15:ed:a6:78:79:ed:81:04:c4:6b:a9:a6:39:23:07:05: 62:f8:a0:e7:6b:90:32:87:53:67:a0:2a:60:7f:56:c7:4a:87: f7:a9:e9:2f:c8:64:d4:67:66:3e:ed:35:1b:88:22:b5:03:f6: 46:ca:99:bb:d0:69:74:b4:0a:d5:2d:2a:8e:63:c5:0b:f9:66: 8b:0a:1a:ae:2a:f3:70:c2:6c:8b:94:37:c9:50:85:ae:1f:b1: d8:ca:66:cf:1a:66:9d:a6:d7:d2:9d:f5:50:cc:63:4f:fe:4e: 00:68:dd:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwj98lJXkwSGKtdiFDgn+RqhXTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2 RjJGMUVDRjAeFw0yNjExMDkyMTM3NDZaFw0yNjExMTAyMjM5NDZaMDMxMTAvBgNV BAMTKDVDNUM4QjQwMDNENUFGN0M3QjczNjAwNjQ2RDdCRUY1NDY2OTQzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYn1PV9Wk1hlQrmZN3nbAT3S6p LiHIx2CFR74LRnB1CiE82f5zVjWKAva83nlSnpl2DRebX6jxpMwNc+36FeFpbtEt r85BPwYOE67dVJkTzxNZJ43Phs1dmRMzmmUlpw87Ct6OK/IsCbTZEhkN+cfYbLQC Sam7zBVJtdqq28uBqHKOUsGnHOJbTYTGfj4Ga589yLGMaxkDwVTkQyJD84pqJ4dS qQlLhETXG3/pX8a6n1YNUplBJGMNvCi3FbP3rRjr1UUmRACc4idARGt5U2XZgUIG WszuiGdTC7QEHjzjojP86tXF0sjG86jun82TZ8NpK0WCVq4qU5PXr1dVqsetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFyLQAPVr3x7c2AGRte+9UZpQ1owHwYDVR0j BBgwFoAUfSGdtIzfdDiYo2/udPqIv28vHs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQyYjRmNzctNzRkMC00Nzk3LWFlZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4 Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2RjJGMUVDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDIxOURCNDhDREY3NDM4OThBMzZGRUU3NEZBODhCRjZGMkYx RUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4 QkY2RjJGMUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALg7VE50pxkWPpvytK+bQLs9owq7J1ks3unM Bj5BSvl0rCMuHE4Tz3DT5SYK0EddT0kZxknSpTjcVIRKpCxG6N7nM+kSHIhAPnfy j1kWDNPGDUYmX0V1z36hyJ1nW99FsQzoAP03mALUH8S6XeVuLSwzMvTmhlNPbp9o x1kzKZ9q0ex7T68/vOLhjVYZ0SXDanm9Fe2meHntgQTEa6mmOSMHBWL4oOdrkDKH U2egKmB/VsdKh/ep6S/IZNRnZj7tNRuIIrUD9kbKmbvQaXS0CtUtKo5jxQv5ZosK Gq4q83DCbIuUN8lQha4fsdjKZs8aZp2m19Kd9VDMY0/+TgBo3XE= -----END CERTIFICATE-----Generated at Tue Nov 10 03:55:18 2026 by rpki-client