$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft File: 7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft (raw, json) Hash identifier: GcmjyfUcbQmZZzwOQYCEOcM5VLaaQUwjl+clchpjQkg= Subject key identifier: 78:49:D1:B0:5A:4A:71:E9:29:1B:7A:2E:DB:B4:0A:DF:6F:98:54:13 Authority key identifier: 7E:39:6D:C0:80:63:D8:9F:8D:A9:7A:09:F6:73:9E:4E:6E:A0:0B:F9 Certificate issuer: /CN=7E396DC08063D89F8DA97A09F6739E4E6EA00BF9 Certificate serial: 0A5FBA0D3E3D827C47F4B0E25DF66135D4101580 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft Manifest number: BE Signing time: Sun 20 Sep 2026 18:24:32 +0000 Manifest this update: Sun 20 Sep 2026 18:19:32 +0000 Manifest next update: Mon 21 Sep 2026 19:29:32 +0000 Files and hashes: 1: 7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl (hash: PNZ1SrksDKFf9oliYJE6i7jnaq+A0Ey0oi7gqQdBbUc=) 2: 3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (hash: nSbG5Aubx/R8t9wZYLZJODyqF5GhZgVw7+j6TizEJ40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5f:ba:0d:3e:3d:82:7c:47:f4:b0:e2:5d:f6:61:35:d4:10:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E396DC08063D89F8DA97A09F6739E4E6EA00BF9 Validity Not Before: Sep 20 18:19:32 2026 GMT Not After : Sep 21 19:29:32 2026 GMT Subject: CN=7849D1B05A4A71E9291B7A2EDBB40ADF6F985413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:5e:45:2e:9e:0a:46:8f:42:11:68:13:76: 67:e0:da:5e:59:36:f8:e5:74:72:de:12:6e:f0:7d: 4f:d8:0d:39:7e:7f:de:b7:f3:89:68:95:af:2e:c1: 1a:c2:40:88:b4:b7:62:88:3c:c1:63:08:80:1b:90: 50:d6:10:ed:60:e6:41:0a:4b:dc:9d:f8:13:e1:24: 06:2f:6a:45:2e:00:46:3f:5d:0b:a9:c2:3a:4f:0f: f6:55:f1:1a:da:3a:63:52:10:75:94:a1:e3:45:5f: 9b:fd:bd:ff:fd:c6:d8:20:15:cf:a7:49:13:b8:2b: 12:71:ee:be:72:f2:3d:74:bb:6e:27:86:53:c4:b3: 8f:fc:34:ce:08:2a:8a:e9:4f:bb:33:4c:c5:d5:9e: 29:df:23:fc:70:9d:e3:b2:54:2b:a7:38:d0:cb:93: 7d:bd:f3:a7:37:2f:d8:df:e4:c8:bb:1e:48:14:d0: 56:33:3d:3e:6a:c5:0d:ae:de:09:a8:f1:8c:01:36: c3:e9:27:d2:fe:8f:e1:87:b9:a3:35:52:79:20:c9: f6:29:04:fe:8a:47:09:1e:92:bd:a8:ca:6a:f0:eb: 40:81:35:90:49:a2:e1:83:b1:b6:8c:fd:81:d2:73: 94:40:45:47:52:cb:00:05:b2:12:bd:08:e4:cb:5a: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:49:D1:B0:5A:4A:71:E9:29:1B:7A:2E:DB:B4:0A:DF:6F:98:54:13 X509v3 Authority Key Identifier: keyid:7E:39:6D:C0:80:63:D8:9F:8D:A9:7A:09:F6:73:9E:4E:6E:A0:0B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1a:b3:ea:87:5a:db:34:79:02:54:00:70:c3:1a:ee:24:fe: 49:b4:84:33:c7:fc:55:3d:c8:00:51:8f:f7:19:5e:69:59:28: 58:1d:ab:f9:b4:d9:81:49:b4:8e:07:01:8c:56:ee:a0:ee:02: c2:2f:45:00:4a:a6:08:e8:c8:47:2b:54:54:cd:42:67:28:f3: 1e:8c:5d:58:23:06:a2:a3:fa:28:e6:d9:b3:86:26:52:1a:90: 52:e2:61:34:81:52:9e:60:4e:f7:5e:7e:2c:a2:7a:c0:d4:95: 3d:e8:f3:86:64:74:15:35:0b:13:96:d1:cc:0c:13:32:37:0c: 3b:cd:37:f7:27:57:18:ce:c8:f4:d7:ff:f5:1d:ae:1e:08:36: a9:7b:db:47:41:79:34:b1:ca:66:a3:f9:a9:12:88:1c:39:33: 67:1c:2c:5c:7c:2c:19:d3:a0:c9:91:01:e2:12:db:51:f2:cf: d4:5d:12:26:84:fa:76:d7:17:9d:de:3e:ec:51:2e:6f:44:4e: 0d:b9:84:63:23:c4:ba:a5:04:04:7e:64:50:a7:7f:cf:c2:cf: 5a:9e:33:c2:bc:e8:88:1a:e2:6d:63:1e:f5:f2:42:a4:77:da: e3:41:27:20:52:20:41:18:77:74:09:f7:0a:29:1c:2e:58:5a: c1:69:ed:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCl+6DT49gnxH9LDiXfZhNdQQFYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UzOTZEQzA4MDYzRDg5RjhEQTk3QTA5RjY3MzlFNEU2 RUEwMEJGOTAeFw0yNjA5MjAxODE5MzJaFw0yNjA5MjExOTI5MzJaMDMxMTAvBgNV BAMTKDc4NDlEMUIwNUE0QTcxRTkyOTFCN0EyRURCQjQwQURGNkY5ODU0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLwV5FLp4KRo9CEWgTdmfg2l5Z NvjldHLeEm7wfU/YDTl+f96384lola8uwRrCQIi0t2KIPMFjCIAbkFDWEO1g5kEK S9yd+BPhJAYvakUuAEY/XQupwjpPD/ZV8RraOmNSEHWUoeNFX5v9vf/9xtggFc+n SRO4KxJx7r5y8j10u24nhlPEs4/8NM4IKorpT7szTMXVninfI/xwneOyVCunONDL k32986c3L9jf5Mi7HkgU0FYzPT5qxQ2u3gmo8YwBNsPpJ9L+j+GHuaM1UnkgyfYp BP6KRwkekr2oymrw60CBNZBJouGDsbaM/YHSc5RARUdSywAFshK9COTLWiXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEnRsFpKcekpG3ou27QK32+YVBMwHwYDVR0j BBgwFoAUfjltwIBj2J+NqXoJ9nOeTm6gC/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MTgwNmMtNDNkMC00NjQ2LThjOGQtNjExMTdjMjM0MWEwLzAvN0UzOTZEQzA4 MDYzRDg5RjhEQTk3QTA5RjY3MzlFNEU2RUEwMEJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTM5NkRDMDgwNjNEODlGOERBOTdBMDlGNjczOUU0RTZFQTAw QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MTgwNmMtNDNkMC00NjQ2LThj OGQtNjExMTdjMjM0MWEwLzAvN0UzOTZEQzA4MDYzRDg5RjhEQTk3QTA5RjY3MzlF NEU2RUEwMEJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYas+qHWts0eQJUAHDDGu4k/km0hDPH/FU9 yABRj/cZXmlZKFgdq/m02YFJtI4HAYxW7qDuAsIvRQBKpgjoyEcrVFTNQmco8x6M XVgjBqKj+ijm2bOGJlIakFLiYTSBUp5gTvdefiyiesDUlT3o84ZkdBU1CxOW0cwM EzI3DDvNN/cnVxjOyPTX//Udrh4INql720dBeTSxymaj+akSiBw5M2ccLFx8LBnT oMmRAeIS21Hyz9RdEiaE+nbXF53ePuxRLm9ETg25hGMjxLqlBAR+ZFCnf8/Cz1qe M8K86Iga4m1jHvXyQqR32uNBJyBSIEEYd3QJ9wopHC5YWsFp7U4= -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:47 2026 by rpki-client