$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json) Hash identifier: HWLZDTDxgo8PoSDWeOSr+oDbEIPectpUc5tr6OODt1M= Subject key identifier: 42:92:1F:2B:BB:DA:E1:0B:70:79:C2:6F:36:90:69:82:8C:F2:C2:26 Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Certificate serial: 22BE2AC4EFDD7962E9284C9F8E572C0CEA7FDAFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 03:48:53 +0000 Manifest this update: Sun 15 Nov 2026 03:43:53 +0000 Manifest next update: Mon 16 Nov 2026 05:32:53 +0000 Files and hashes: 1: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: k17KAihlq4EGsXPoS3XVNSZh7oQJy3UxfdTIpjdogaM=) 2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:be:2a:c4:ef:dd:79:62:e9:28:4c:9f:8e:57:2c:0c:ea:7f:da:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Validity Not Before: Nov 15 03:43:53 2026 GMT Not After : Nov 16 05:32:53 2026 GMT Subject: CN=42921F2BBBDAE10B7079C26F369069828CF2C226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:f1:c3:45:1e:38:05:21:c1:fa:96:7b:77: d1:45:36:dc:b4:5d:b5:7e:23:b3:a6:10:67:9b:7e: ba:f0:cc:5b:27:17:0c:5c:d7:c7:3c:7a:20:dd:14: a7:53:f0:0c:05:b7:f5:54:90:d6:a6:52:68:58:57: 0b:a3:7a:a6:f0:80:d1:24:58:df:0a:7c:c0:69:1d: e3:ab:fa:b0:3d:9a:6e:65:6b:30:7e:d4:c7:41:d6: 01:b1:a5:c1:8b:5f:6d:d2:0e:21:3c:6c:9f:a9:c9: 68:72:82:b5:d5:d1:ef:21:1c:0f:36:0c:19:58:a7: 84:57:3b:68:31:cd:91:42:4e:3f:51:4e:f0:a1:14: 44:bf:c4:4e:c9:dd:59:af:7e:da:0c:b7:59:d8:18: 60:82:2d:b2:fa:fa:f7:52:a3:65:ad:37:df:2f:21: b4:2f:3b:cd:4f:82:4f:39:ae:71:46:38:27:5d:5a: 91:cc:56:a1:43:13:b3:b1:fd:d0:8b:60:66:2a:f9: ae:45:8c:6c:a0:ff:62:4a:ff:b4:f5:f9:bf:ec:73: c8:fd:61:84:06:43:b5:30:74:5f:e4:33:12:e8:81: a3:58:17:ba:01:67:0b:84:bf:92:d6:6b:ca:76:c1: bc:09:dd:31:87:5e:0b:05:62:7e:53:d7:5d:46:3b: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:1F:2B:BB:DA:E1:0B:70:79:C2:6F:36:90:69:82:8C:F2:C2:26 X509v3 Authority Key Identifier: keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:08:8e:b6:0b:8c:3f:84:7e:6c:04:47:72:62:50:f0:5f:d8: 07:0f:7b:82:be:1e:6b:f3:12:dd:62:4f:76:f6:b4:b2:9d:1f: 69:f2:e0:de:9e:ab:fa:dd:52:8e:d9:e0:0e:0d:b8:41:1d:d2: 6b:9e:4e:10:e3:2e:4d:7e:b2:6c:18:a2:78:8a:5b:c7:c5:c0: a5:ff:21:03:59:9c:a2:e8:73:85:2d:8d:5a:56:51:6b:1a:0e: e6:fa:d8:fb:42:0b:c6:95:6e:cb:18:c0:75:ee:0b:b8:93:58: b2:44:92:ab:65:f6:14:06:3c:3a:c1:4f:37:ce:58:17:f4:75: 0b:16:c1:cb:75:cb:16:18:9d:d5:12:c6:a1:e5:14:e1:87:60: bb:1e:2e:e4:40:73:a0:6c:e9:64:86:16:0a:05:af:fb:14:07: d0:65:a4:d6:71:d2:32:17:7b:8e:72:a1:fd:a6:f4:0b:7c:b7: fe:85:b0:10:e7:44:0d:6c:26:dc:30:31:1a:af:36:e9:ea:31: f5:b3:d6:bb:6d:4f:a1:35:87:3d:30:76:f7:e2:61:b2:3f:19: 1c:93:61:47:bc:e7:28:90:b7:dc:ff:81:05:a7:f4:f6:38:bf: 4a:dc:ce:77:7d:e3:fb:a4:50:37:47:e0:8a:19:64:0e:6a:22: 60:5b:0f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIr4qxO/deWLpKEyfjlcsDOp/2vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUy MDY2MTdFRjAeFw0yNjExMTUwMzQzNTNaFw0yNjExMTYwNTMyNTNaMDMxMTAvBgNV BAMTKDQyOTIxRjJCQkJEQUUxMEI3MDc5QzI2RjM2OTA2OTgyOENGMkMyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1m/HDRR44BSHB+pZ7d9FFNty0 XbV+I7OmEGebfrrwzFsnFwxc18c8eiDdFKdT8AwFt/VUkNamUmhYVwujeqbwgNEk WN8KfMBpHeOr+rA9mm5lazB+1MdB1gGxpcGLX23SDiE8bJ+pyWhygrXV0e8hHA82 DBlYp4RXO2gxzZFCTj9RTvChFES/xE7J3VmvftoMt1nYGGCCLbL6+vdSo2WtN98v IbQvO81Pgk85rnFGOCddWpHMVqFDE7Ox/dCLYGYq+a5FjGyg/2JK/7T1+b/sc8j9 YYQGQ7UwdF/kMxLogaNYF7oBZwuEv5LWa8p2wbwJ3TGHXgsFYn5T111GO8o7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpIfK7va4QtwecJvNpBpgozywiYwHwYDVR0j BBgwFoAUe+6ykOklTnZqfYw7IW8HhSBmF+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3MmYwMTItYTQzYS00ZmNiLTg2YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBF OTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUyMDY2MTdFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83QkVFQjI5MEU5MjU0RTc2NkE3RDhDM0IyMTZGMDc4NTIwNjYx N0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3 ODUyMDY2MTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsIjrYLjD+EfmwER3JiUPBf2AcPe4K+Hmvz Et1iT3b2tLKdH2ny4N6eq/rdUo7Z4A4NuEEd0mueThDjLk1+smwYoniKW8fFwKX/ IQNZnKLoc4UtjVpWUWsaDub62PtCC8aVbssYwHXuC7iTWLJEkqtl9hQGPDrBTzfO WBf0dQsWwct1yxYYndUSxqHlFOGHYLseLuRAc6Bs6WSGFgoFr/sUB9BlpNZx0jIX e45yof2m9At8t/6FsBDnRA1sJtwwMRqvNunqMfWz1rttT6E1hz0wdvfiYbI/GRyT YUe85yiQt9z/gQWn9PY4v0rcznd94/ukUDdH4IoZZA5qImBbDx4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:12:18 2026 by rpki-client