$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft File: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft (raw, json) Hash identifier: RteaAhskgoY98doZMtJ3uIPtF+yZODJOgoYotmtQrkY= Subject key identifier: 18:00:32:BA:EC:52:4A:46:51:1F:8A:AC:08:CB:CB:B0:1C:7E:A6:CD Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 112AE75AA7ADA197DF5188A2D60BDE7D72828262 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:16:46 +0000 Manifest this update: Wed 17 Jun 2026 03:11:46 +0000 Manifest next update: Thu 18 Jun 2026 04:17:46 +0000 Files and hashes: 1: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s=) 2: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl (hash: hYjsD2Eo4gcV+0B9zE5+9gQkmn57armYlH3z8mAqKac=) 3: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E=) 4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2a:e7:5a:a7:ad:a1:97:df:51:88:a2:d6:0b:de:7d:72:82:82:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: Jun 17 03:11:46 2026 GMT Not After : Jun 18 04:17:46 2026 GMT Subject: CN=180032BAEC524A46511F8AAC08CBCBB01C7EA6CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:fc:12:f0:b4:0b:21:18:67:79:ca:8e:3c: 12:bf:e4:92:41:23:06:e1:5d:db:27:6e:fd:33:99: c5:f9:5b:4e:eb:74:53:b7:88:61:c1:7b:ea:43:2a: 3d:f4:47:58:c7:fe:37:85:b0:64:93:a7:76:70:4b: da:03:bf:29:0c:29:2d:53:3a:bb:35:0c:51:f3:09: 18:45:a4:72:13:b0:c0:79:39:48:9d:d5:c9:2a:29: 9c:88:b8:9c:6d:ea:67:9a:ef:8d:19:df:86:d9:64: 96:83:f1:de:76:e4:33:37:48:26:48:d7:01:5a:cf: e0:c3:1a:dd:81:13:1f:02:f7:f0:c3:ff:06:77:cb: 4d:07:6f:db:37:8f:ae:9b:46:c4:6c:78:ba:8e:a8: 20:fd:b9:5a:d2:73:4f:88:89:ba:79:5f:1f:1b:4d: bd:e7:69:80:c6:ea:15:48:81:6c:60:e2:33:33:df: 1c:49:20:ec:51:eb:20:2c:97:9d:ea:77:86:93:ba: 65:ee:12:1a:6b:01:cd:63:34:96:49:7f:70:45:b9: 47:b4:5e:af:40:d3:4a:df:aa:c2:93:2c:29:f8:56: 6a:5f:99:2e:98:59:b9:34:89:be:db:73:92:42:ee: a8:5e:66:b7:3a:40:cc:29:75:53:ab:0a:2d:79:82: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:00:32:BA:EC:52:4A:46:51:1F:8A:AC:08:CB:CB:B0:1C:7E:A6:CD X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:34:39:8e:6e:27:47:e4:87:ef:9d:1b:0e:ca:92:5b:7e:a3: 5a:24:78:3e:4f:3d:ac:67:1b:41:65:05:ec:aa:f7:66:c2:c2: 7c:16:38:03:78:4e:b7:a9:86:64:cb:4a:e9:f8:7e:ee:78:68: e9:6b:35:fe:b6:d3:af:86:a9:09:40:b8:1a:7a:f0:e3:56:73: 0d:77:1a:55:15:f3:f8:08:ad:c9:7f:fa:c4:f1:a7:cc:55:5d: 36:c8:7f:58:7c:65:ee:86:d7:db:6e:1c:85:14:29:02:df:b0: 98:f4:86:ae:c1:6d:d3:96:6c:7e:fa:f7:01:c7:6f:a1:8d:f8: 49:05:fd:aa:9d:f9:a3:b1:55:f0:8a:a5:0e:07:e6:22:40:11: e6:96:79:e4:c9:10:2e:18:ea:af:71:55:b1:a1:42:86:94:d8: 99:90:d3:87:78:50:fe:9d:e2:66:6a:78:32:28:72:cc:78:e4: 9d:9f:d1:14:41:4f:45:04:1d:eb:37:ca:84:61:da:e0:6b:32: a8:79:0f:73:29:38:37:2b:6c:9c:4c:25:40:a9:42:92:86:a2: 07:17:99:d5:44:56:a9:be:03:47:dc:89:12:48:5c:6a:21:a5: b9:30:a8:00:a5:1b:9e:e4:f2:8f:a6:c8:0b:c6:6b:ab:2a:69: 78:b6:c5:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESrnWqetoZffUYii1gvefXKCgmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA2MTcwMzExNDZaFw0yNjA2MTgwNDE3NDZaMDMxMTAvBgNV BAMTKDE4MDAzMkJBRUM1MjRBNDY1MTFGOEFBQzA4Q0JDQkIwMUM3RUE2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3/wS8LQLIRhnecqOPBK/5JJB IwbhXdsnbv0zmcX5W07rdFO3iGHBe+pDKj30R1jH/jeFsGSTp3ZwS9oDvykMKS1T Ors1DFHzCRhFpHITsMB5OUid1ckqKZyIuJxt6mea740Z34bZZJaD8d525DM3SCZI 1wFaz+DDGt2BEx8C9/DD/wZ3y00Hb9s3j66bRsRseLqOqCD9uVrSc0+Iibp5Xx8b Tb3naYDG6hVIgWxg4jMz3xxJIOxR6yAsl53qd4aTumXuEhprAc1jNJZJf3BFuUe0 Xq9A00rfqsKTLCn4VmpfmS6YWbk0ib7bc5JC7qheZrc6QMwpdVOrCi15gt/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGAAyuuxSSkZRH4qsCMvLsBx+ps0wHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFG Q0Q4MUZBMEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA0OY5uJ0fkh++dGw7Kklt+o1okeD5PPaxn G0FlBeyq92bCwnwWOAN4TrephmTLSun4fu54aOlrNf6206+GqQlAuBp68ONWcw13 GlUV8/gIrcl/+sTxp8xVXTbIf1h8Ze6G19tuHIUUKQLfsJj0hq7BbdOWbH769wHH b6GN+EkF/aqd+aOxVfCKpQ4H5iJAEeaWeeTJEC4Y6q9xVbGhQoaU2JmQ04d4UP6d 4mZqeDIocsx45J2f0RRBT0UEHes3yoRh2uBrMqh5D3MpODcrbJxMJUCpQpKGogcX mdVEVqm+A0fciRJIXGohpbkwqAClG57k8o+myAvGa6sqaXi2xY0= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:27 2026 by rpki-client