$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft File: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json) Hash identifier: vwRj99szPeDdk8Jh520FhU5mOfqGcK3Sai9MZHKEpRU= Subject key identifier: D5:43:78:30:63:3C:26:4E:D4:B6:F2:12:3F:AA:56:0C:46:BC:F6:D0 Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 Certificate issuer: /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Certificate serial: 51ECCC6BC09451927588F9F59D4BD93BCA46FE1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:06:38 +0000 Manifest this update: Mon 21 Sep 2026 08:01:38 +0000 Manifest next update: Tue 22 Sep 2026 10:29:38 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=) 2: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: E7TKT4DEsoWrFRmUJ/HUt1fJgVjL+0lPo4aSPONKHmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ec:cc:6b:c0:94:51:92:75:88:f9:f5:9d:4b:d9:3b:ca:46:fe:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Validity Not Before: Sep 21 08:01:38 2026 GMT Not After : Sep 22 10:29:38 2026 GMT Subject: CN=D5437830633C264ED4B6F2123FAA560C46BCF6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:a4:ba:b2:d7:56:48:9b:8e:11:a2:79:95: c3:2a:df:3d:6c:a2:76:4a:af:b4:0b:14:d5:22:f3: ea:15:0d:ee:cf:2a:b0:3c:71:70:4c:f2:30:6d:97: bf:5b:6c:4a:3f:85:b0:3e:06:55:ee:5e:e3:b8:25: f7:6c:db:6a:85:ba:98:87:e5:79:f1:30:04:86:bf: e8:a9:b6:0d:55:78:2b:71:80:9b:e7:58:70:ae:3a: ff:63:16:63:cb:b4:90:6d:5d:80:00:5b:cc:56:9e: ee:26:8e:dc:11:ad:ee:75:30:3c:16:6d:07:42:dd: ce:7b:be:f8:a3:e1:86:49:bf:2b:d3:2c:c5:2f:e7: 35:75:c5:8f:44:71:c6:bc:ac:e0:eb:9f:c1:01:89: a3:75:a2:df:02:50:f0:71:ae:36:b6:32:9c:28:93: 8f:2a:10:16:e2:57:f1:93:c6:cf:78:31:f1:80:2f: 32:2d:a1:30:f4:7e:b3:c7:fa:d2:3e:7c:71:86:6b: 53:8b:a6:6b:47:f3:77:87:06:41:02:71:5d:78:e9: 7c:3d:b0:e6:5f:13:c2:ed:06:88:f5:ca:cc:90:17: 49:28:79:30:79:14:8c:76:0e:fb:0a:38:40:43:aa: ce:5b:72:cc:7b:ed:d5:07:51:4d:12:e7:2d:2b:af: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:78:30:63:3C:26:4E:D4:B6:F2:12:3F:AA:56:0C:46:BC:F6:D0 X509v3 Authority Key Identifier: keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:fb:50:9f:aa:5a:c8:f5:6e:f9:73:46:05:82:41:7d:3c: 3b:86:c3:29:bf:18:b9:ad:fc:96:6b:b5:e4:a3:94:26:b1:e9: 3a:77:4e:67:36:c5:d9:72:2e:4a:b1:cf:e0:84:c4:3c:7d:c8: e5:d7:e3:e9:6f:2f:10:8a:ec:9f:74:c9:b3:90:fe:f7:8e:fe: 67:bb:aa:33:16:3f:c5:78:52:c4:9e:2e:66:8a:e7:69:89:e5: 7f:71:ec:f5:59:22:eb:e4:98:11:38:0a:77:51:61:ea:15:2f: 2a:73:84:99:47:6d:1a:29:fe:36:0d:38:7f:6a:42:a5:cf:b0: 77:a4:ea:93:da:e8:67:0b:66:54:77:af:f3:c4:f7:f4:db:81: 1f:16:3a:db:fd:68:b1:15:cc:4b:d1:d6:cd:1e:fc:f1:47:fe: 12:5d:b4:f2:bc:05:5d:d6:71:64:eb:78:86:b6:7e:e9:fd:7b: c9:51:28:a9:b0:03:ab:33:9f:7c:f9:c6:ff:07:bb:44:2e:83: b2:c5:79:35:12:4a:28:b2:19:57:da:71:97:59:e5:d8:fb:a7: fb:5f:f0:9c:ad:6a:18:81:51:82:68:c3:84:79:e6:ca:6d:cb: 3a:5f:a8:7d:fa:3c:73:b8:a2:b4:8c:1a:b0:4c:26:ea:c2:22: a5:0b:15:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUezMa8CUUZJ1iPn1nUvZO8pG/h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1 MUVDRkFGOTAeFw0yNjA5MjEwODAxMzhaFw0yNjA5MjIxMDI5MzhaMDMxMTAvBgNV BAMTKEQ1NDM3ODMwNjMzQzI2NEVENEI2RjIxMjNGQUE1NjBDNDZCQ0Y2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bKS6stdWSJuOEaJ5lcMq3z1s onZKr7QLFNUi8+oVDe7PKrA8cXBM8jBtl79bbEo/hbA+BlXuXuO4Jfds22qFupiH 5XnxMASGv+iptg1VeCtxgJvnWHCuOv9jFmPLtJBtXYAAW8xWnu4mjtwRre51MDwW bQdC3c57vvij4YZJvyvTLMUv5zV1xY9Ecca8rODrn8EBiaN1ot8CUPBxrja2Mpwo k48qEBbiV/GTxs94MfGALzItoTD0frPH+tI+fHGGa1OLpmtH83eHBkECcV146Xw9 sOZfE8LtBoj1ysyQF0koeTB5FIx2DvsKOEBDqs5bcsx77dUHUU0S5y0rr4FBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UN4MGM8Jk7UtvISP6pWDEa89tAwHwYDVR0j BBgwFoAUfvZrSI7kjlcbg30rMPC1z1Hs+vkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRjYTU4NjgtNTdlOS00OWI5LWJmZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4 RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1MUVDRkFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUY2NkI0ODhFRTQ4RTU3MUI4MzdEMkIzMEYwQjVDRjUxRUNG QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1 Q0Y1MUVDRkFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqY+1CfqlrI9W75c0YFgkF9PDuGwym/GLmt /JZrteSjlCax6Tp3Tmc2xdlyLkqxz+CExDx9yOXX4+lvLxCK7J90ybOQ/veO/me7 qjMWP8V4UsSeLmaK52mJ5X9x7PVZIuvkmBE4CndRYeoVLypzhJlHbRop/jYNOH9q QqXPsHek6pPa6GcLZlR3r/PE9/TbgR8WOtv9aLEVzEvR1s0e/PFH/hJdtPK8BV3W cWTreIa2fun9e8lRKKmwA6szn3z5xv8Hu0Qug7LFeTUSSiiyGVfacZdZ5dj7p/tf 8JytahiBUYJow4R55sptyzpfqH36PHO4orSMGrBMJurCIqULFYQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:26 2026 by rpki-client