$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft File: 7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft (raw, json) Hash identifier: PkMTbgEtVKbOlV/q32gbw8mY8HAb8kam40rY8lQE658= Subject key identifier: 36:2D:A5:1E:96:A6:4D:30:AC:75:64:4F:F1:C8:41:B8:DE:C0:EA:31 Authority key identifier: 72:40:F0:DF:EB:7D:58:9B:1B:6D:2C:99:BB:EF:A6:54:E9:D9:03:6E Certificate issuer: /CN=7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E Certificate serial: 1B49EC1694D7B85DFB4817FEDECC9559D904BF4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft Manifest number: 06 Signing time: Sun 15 Nov 2026 07:28:32 +0000 Manifest this update: Sun 15 Nov 2026 07:23:32 +0000 Manifest next update: Mon 16 Nov 2026 09:43:32 +0000 Files and hashes: 1: 7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.crl (hash: AxnMuSqkZchqWV3vSK9aUJbQGX3F6Cu5qyeM1WlcSrI=) 2: 3134312e3232392e322e302f32342d3234203d3e20313535303934.roa (hash: TGTyBYES2EzudNtwNtqqlQMqU3kDKoXUW7yjMC4tgGA=) 3: 3134312e3232392e322e302f32332d3233203d3e20313535303934.roa (hash: AjnLjeDXRwX8TIV9hOYcNAzhw19OMPl6a0daeWnJG+c=) 4: 3134312e3232392e332e302f32342d3234203d3e20313535303934.roa (hash: kdkNU32ubqHnIczTG6gKv++z11MuPUPFWnWe13THAtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.crl rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:49:ec:16:94:d7:b8:5d:fb:48:17:fe:de:cc:95:59:d9:04:bf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E Validity Not Before: Nov 15 07:23:32 2026 GMT Not After : Nov 16 09:43:32 2026 GMT Subject: CN=362DA51E96A64D30AC75644FF1C841B8DEC0EA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:b4:48:0f:86:2e:b0:db:1b:c2:dd:90:3c: 6a:9e:77:6b:6f:19:ea:cd:ea:82:27:77:2a:02:77: b7:bc:66:7b:33:e8:9a:5a:16:35:0f:b8:99:cf:fb: 40:00:90:d3:10:cb:15:37:b8:11:36:38:58:66:24: 74:4e:2d:d9:57:33:27:81:5b:db:ec:6b:4a:cb:51: 4c:8c:d3:14:d4:b5:62:40:b9:9b:67:bc:75:4b:ee: bc:fe:2f:3e:5f:65:30:dd:2f:73:02:f2:f6:bb:c7: 27:53:1a:e0:a5:0a:6c:cf:d5:bb:43:91:45:12:96: 95:08:d9:8e:4d:c4:21:bb:ef:75:3f:2a:42:d2:5a: 5d:52:ff:47:3b:b0:31:57:69:9e:0f:9e:66:07:d3: 25:c7:7c:f0:65:59:89:07:66:2a:0d:2d:e9:36:ed: 73:89:4a:48:f9:84:32:f5:c4:6d:73:ac:16:2a:3c: 64:10:d1:1e:60:08:1d:64:57:a9:01:46:a9:b9:e0: 41:24:6a:57:bb:6d:32:04:ba:20:f9:8c:d9:3b:dc: 4d:34:45:f8:aa:0c:db:8b:ec:a0:2c:9f:16:03:81: b3:be:08:97:db:ee:46:34:ca:6a:e1:10:4c:ac:c5: ed:65:22:c7:76:e3:5b:b7:d1:ff:19:57:c7:55:42: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:A5:1E:96:A6:4D:30:AC:75:64:4F:F1:C8:41:B8:DE:C0:EA:31 X509v3 Authority Key Identifier: keyid:72:40:F0:DF:EB:7D:58:9B:1B:6D:2C:99:BB:EF:A6:54:E9:D9:03:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb4f1529-d41d-4bc7-8278-ac481d805608/1/7240F0DFEB7D589B1B6D2C99BBEFA654E9D9036E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:16:9d:38:53:5f:1d:50:20:b5:b8:48:d1:61:0f:e8:1c:53: 26:91:76:dd:54:bc:f1:3a:68:4e:f5:80:67:7d:44:e0:5e:88: af:ba:f2:31:6b:83:54:f7:15:d7:f2:3c:98:ea:03:8d:e1:b2: 51:aa:9b:23:9a:65:6b:fc:ae:a5:f2:cc:e5:d8:89:72:44:09: b3:6d:40:92:17:bd:85:54:ad:73:eb:be:30:70:03:50:5e:2b: 44:b4:7f:ce:a8:2d:e2:94:90:b6:d3:fd:23:94:b3:b1:36:8c: 1d:69:ad:94:73:7a:96:50:dd:23:35:f5:57:f3:ba:f5:d6:93: cf:93:15:e7:65:58:3b:84:9d:66:ae:6c:dd:26:5f:ca:6c:a6: c9:cf:ad:05:1a:54:c5:5a:23:2a:3d:a6:9a:63:5e:7b:9e:e5: 27:61:c6:b7:f1:ce:c3:4c:91:48:c3:49:51:86:7b:b2:65:92: ef:78:2b:a4:23:b9:5b:4b:fd:6a:c0:1b:7b:98:93:89:a3:63: 28:f6:1e:0a:c8:d5:e8:9f:39:ec:b8:51:c3:09:52:c6:3a:60: 8e:f5:08:2d:68:1d:6c:9b:6f:e3:1e:4c:fd:3c:50:fb:e0:a1: dd:b9:31:4d:ea:29:8d:d8:63:c7:1c:5e:f1:aa:08:03:11:ba: 53:f1:7a:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0nsFpTXuF37SBf+3syVWdkEv0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0MEYwREZFQjdENTg5QjFCNkQyQzk5QkJFRkE2NTRF OUQ5MDM2RTAeFw0yNjExMTUwNzIzMzJaFw0yNjExMTYwOTQzMzJaMDMxMTAvBgNV BAMTKDM2MkRBNTFFOTZBNjREMzBBQzc1NjQ0RkYxQzg0MUI4REVDMEVBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKbRID4YusNsbwt2QPGqed2tv GerN6oIndyoCd7e8Znsz6JpaFjUPuJnP+0AAkNMQyxU3uBE2OFhmJHROLdlXMyeB W9vsa0rLUUyM0xTUtWJAuZtnvHVL7rz+Lz5fZTDdL3MC8va7xydTGuClCmzP1btD kUUSlpUI2Y5NxCG773U/KkLSWl1S/0c7sDFXaZ4PnmYH0yXHfPBlWYkHZioNLek2 7XOJSkj5hDL1xG1zrBYqPGQQ0R5gCB1kV6kBRqm54EEkale7bTIEuiD5jNk73E00 RfiqDNuL7KAsnxYDgbO+CJfb7kY0ymrhEEysxe1lIsd241u30f8ZV8dVQoTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNi2lHpamTTCsdWRP8chBuN7A6jEwHwYDVR0j BBgwFoAUckDw3+t9WJsbbSyZu++mVOnZA24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I0ZjE1MjktZDQxZC00YmM3LTgyNzgtYWM0ODFkODA1NjA4LzEvNzI0MEYwREZF QjdENTg5QjFCNkQyQzk5QkJFRkE2NTRFOUQ5MDM2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MjQwRjBERkVCN0Q1ODlCMUI2RDJDOTlCQkVGQTY1NEU5RDkw MzZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I0ZjE1MjktZDQxZC00YmM3LTgy NzgtYWM0ODFkODA1NjA4LzEvNzI0MEYwREZFQjdENTg5QjFCNkQyQzk5QkJFRkE2 NTRFOUQ5MDM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMWnThTXx1QILW4SNFhD+gcUyaRdt1UvPE6 aE71gGd9ROBeiK+68jFrg1T3FdfyPJjqA43hslGqmyOaZWv8rqXyzOXYiXJECbNt QJIXvYVUrXPrvjBwA1BeK0S0f86oLeKUkLbT/SOUs7E2jB1prZRzepZQ3SM19Vfz uvXWk8+TFedlWDuEnWaubN0mX8pspsnPrQUaVMVaIyo9pppjXnue5SdhxrfxzsNM kUjDSVGGe7Jlku94K6QjuVtL/WrAG3uYk4mjYyj2HgrI1eifOey4UcMJUsY6YI71 CC1oHWybb+MeTP08UPvgod25MU3qKY3YY8ccXvGqCAMRulPxetA= -----END CERTIFICATE-----Generated at Sun Nov 15 15:36:35 2026 by rpki-client