$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: Uu2UTBo7vv5K9jN8yfkl9M2f1uNOiIg3B2mP1qZ1uv8= Subject key identifier: EF:27:02:65:12:65:AA:79:F8:F8:ED:7B:F9:E2:FB:CD:FB:78:3D:F0 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 02347D4AC845B04B3026C919B71069F53BDF74F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 20:14:55 +0000 Manifest this update: Sat 14 Nov 2026 20:09:55 +0000 Manifest next update: Mon 16 Nov 2026 00:02:55 +0000 Files and hashes: 1: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 3: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: J+EzeKMvd40prd0slGfxIhH4n/KxqE7NZefupPn1I/U=) 4: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:34:7d:4a:c8:45:b0:4b:30:26:c9:19:b7:10:69:f5:3b:df:74:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Nov 14 20:09:55 2026 GMT Not After : Nov 16 00:02:55 2026 GMT Subject: CN=EF2702651265AA79F8F8ED7BF9E2FBCDFB783DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:ad:01:a2:33:c5:d5:ef:c6:be:2d:ba:c8: ec:a1:79:b9:7e:e4:b6:02:00:cf:32:cc:15:2f:a1: d7:bc:27:bf:f9:91:23:bf:85:d7:f5:f8:f5:55:5c: 3f:20:83:36:b3:fa:2e:8f:4b:a5:75:c2:49:97:be: f2:dd:bd:44:a9:6a:20:29:9d:ed:34:72:c3:4a:b4: 5f:82:18:3d:30:ed:a4:39:0f:e9:f8:1b:7d:25:36: 9e:e7:d2:44:f6:0b:ae:e2:1f:5e:bc:31:6d:47:52: 95:d2:89:b3:5b:d7:88:84:58:0b:e7:75:02:1a:f9: 38:b9:b7:97:a8:d3:3a:ee:bc:a0:47:8f:3b:61:27: ba:a8:19:5e:20:b0:61:b7:2a:9f:f2:f9:78:79:52: 13:dd:4b:b1:5d:f8:50:61:2e:97:68:c9:17:36:a5: 8e:13:a2:2d:96:b0:a9:08:6c:e1:4b:d3:cb:58:c5: 2f:98:31:65:64:74:0a:ba:01:e3:bd:d4:8b:fb:22: aa:b6:3e:88:aa:8a:b4:8c:79:5c:e9:26:65:5f:db: 1e:d5:0f:c0:0b:c8:b5:f2:1b:d1:df:80:db:d1:ea: 4d:76:74:f9:8b:9b:e6:4a:6c:2f:7a:5f:7a:64:1c: cd:09:df:52:c6:de:03:69:77:b2:ba:b8:47:c8:2d: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:27:02:65:12:65:AA:79:F8:F8:ED:7B:F9:E2:FB:CD:FB:78:3D:F0 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f0:b4:c4:49:40:fb:58:e9:c1:29:22:e6:95:a7:e2:f4:3b: b5:43:bf:a6:c1:0c:3b:aa:4f:8f:f9:46:ea:a0:44:67:02:a2: 63:f5:cd:b1:1d:44:5e:ec:02:c6:07:23:fc:b7:f4:04:94:09: f3:83:4d:75:d2:9b:1a:61:21:ba:60:fa:58:7d:47:25:18:0a: a8:35:da:6f:9b:f5:19:7d:d7:ab:18:a8:20:38:fa:03:3a:14: ca:2e:ce:03:08:80:ed:a0:f6:17:83:88:5d:f8:b5:d8:26:49: 04:60:55:40:42:f1:af:92:06:aa:bb:b8:37:aa:95:9f:bb:60: 19:12:c8:ed:44:4f:3a:a8:83:a1:7f:ec:d7:a3:29:4c:1e:65: c2:74:95:15:11:cb:c2:62:32:28:90:33:b5:92:31:2f:7a:54: 17:f3:bf:6e:e7:db:2d:89:54:47:f4:c3:17:3e:39:97:3c:20: 24:3c:00:2b:ff:78:7a:ba:c4:f7:66:f2:6a:dd:c8:86:93:16: 4a:2f:d2:25:a8:b4:15:59:ed:0a:7a:03:bc:db:38:31:6a:08: 93:3d:cc:33:94:2f:08:03:40:c5:48:15:02:cb:16:e3:f3:ee: bb:ba:bd:49:03:27:f9:90:f1:22:df:7b:a4:e7:0b:6d:59:bf: cb:87:be:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjR9SshFsEswJskZtxBp9TvfdPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjExMTQyMDA5NTVaFw0yNjExMTYwMDAyNTVaMDMxMTAvBgNV BAMTKEVGMjcwMjY1MTI2NUFBNzlGOEY4RUQ3QkY5RTJGQkNERkI3ODNERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFa0BojPF1e/Gvi26yOyhebl+ 5LYCAM8yzBUvode8J7/5kSO/hdf1+PVVXD8ggzaz+i6PS6V1wkmXvvLdvUSpaiAp ne00csNKtF+CGD0w7aQ5D+n4G30lNp7n0kT2C67iH168MW1HUpXSibNb14iEWAvn dQIa+Ti5t5eo0zruvKBHjzthJ7qoGV4gsGG3Kp/y+Xh5UhPdS7Fd+FBhLpdoyRc2 pY4Toi2WsKkIbOFL08tYxS+YMWVkdAq6AeO91Iv7Iqq2PoiqirSMeVzpJmVf2x7V D8ALyLXyG9HfgNvR6k12dPmLm+ZKbC96X3pkHM0J31LG3gNpd7K6uEfILVizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ycCZRJlqnn4+O17+eL7zft4PfAwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfwtMRJQPtY6cEpIuaVp+L0O7VDv6bBDDuq T4/5RuqgRGcComP1zbEdRF7sAsYHI/y39ASUCfODTXXSmxphIbpg+lh9RyUYCqg1 2m+b9Rl916sYqCA4+gM6FMouzgMIgO2g9heDiF34tdgmSQRgVUBC8a+SBqq7uDeq lZ+7YBkSyO1ETzqog6F/7NejKUweZcJ0lRURy8JiMiiQM7WSMS96VBfzv27n2y2J VEf0wxc+OZc8ICQ8ACv/eHq6xPdm8mrdyIaTFkov0iWotBVZ7Qp6A7zbODFqCJM9 zDOULwgDQMVIFQLLFuPz7ru6vUkDJ/mQ8SLfe6TnC21Zv8uHvpU= -----END CERTIFICATE-----Generated at Sun Nov 15 01:16:28 2026 by rpki-client