$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft File: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft (raw, json) Hash identifier: OcY2tYQgDLegYQHegp80ZYD+K7JoovSpl7n6i6fylsQ= Subject key identifier: D2:AB:74:38:CB:16:8C:83:90:3C:E9:3C:44:2E:39:B7:E3:E9:D3:99 Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 3BDA65B4DD588A5FE896C4F545CF231329B386A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 19:29:33 +0000 Manifest this update: Fri 25 Sep 2026 19:24:33 +0000 Manifest next update: Sat 26 Sep 2026 20:24:33 +0000 Files and hashes: 1: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E=) 2: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc=) 3: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl (hash: nKtQUDJFZz3WgRDGXzggPUZZOyKEegAIAe+R+vAytfY=) 4: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:da:65:b4:dd:58:8a:5f:e8:96:c4:f5:45:cf:23:13:29:b3:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: Sep 25 19:24:33 2026 GMT Not After : Sep 26 20:24:33 2026 GMT Subject: CN=D2AB7438CB168C83903CE93C442E39B7E3E9D399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:fd:f7:e2:9b:80:a6:e8:10:91:9f:b1:52: cb:81:bb:c6:94:c7:00:d9:01:d6:77:e3:4b:47:df: d8:14:91:35:6f:6b:b6:13:37:81:bd:56:5b:e6:7f: 73:c4:14:9e:05:fd:7d:ee:60:c5:bf:aa:6d:a0:1c: 57:be:2c:4d:3d:c3:17:17:57:21:7f:e7:f1:07:de: 34:51:e0:5a:08:5b:01:ae:84:c6:80:05:9c:ef:86: ad:9a:5d:6d:78:3f:a3:3e:75:7e:a5:37:85:35:b8: c5:bd:e2:b8:39:d3:7a:ac:e1:46:a3:79:0a:28:ae: 84:33:d3:8f:65:1f:75:e6:83:11:bc:cb:3b:af:27: 4c:95:54:bc:db:de:b6:1a:9d:5d:63:9a:ba:cf:e3: 52:17:a6:bf:b3:0c:4a:39:f5:61:c3:37:e0:f2:be: 6d:1d:12:54:57:7c:78:9e:08:f2:74:63:f3:51:19: 83:18:61:da:ab:8b:d7:f6:94:0b:46:ac:f1:bd:31: 2c:f9:f1:a3:c4:a1:d0:ba:8d:fd:1b:76:54:6a:e6: 56:83:b4:0a:b8:72:62:df:75:a4:e5:a4:e5:4c:33: 06:75:84:cf:e0:d4:4a:2a:5d:f4:53:69:ac:9a:a9: 1a:f8:54:51:7a:08:32:61:14:0b:29:39:22:a9:b6: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AB:74:38:CB:16:8C:83:90:3C:E9:3C:44:2E:39:B7:E3:E9:D3:99 X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b5:eb:fe:d7:40:8e:a6:5d:6a:75:48:ce:35:44:12:c1:ee: ef:0c:f6:c5:eb:77:60:7a:08:8a:8e:cf:21:9f:b6:c9:41:7c: 37:8e:a3:2c:0d:c2:bd:8e:6e:4e:b2:0c:2b:50:b6:c7:e4:57: a2:01:13:df:5b:12:0c:5f:c1:56:7d:30:68:83:6b:58:f6:8b: c8:c6:d0:b6:8b:99:80:8c:f0:59:5a:53:33:f6:71:66:30:5a: a1:ce:a4:37:24:2b:4f:8d:0b:18:c9:c3:ff:7e:70:eb:7f:42: 2a:3e:31:6b:a0:33:88:d9:4c:d3:57:31:de:5d:db:46:6d:c2: bd:7e:48:42:26:8c:d4:07:68:2b:37:84:bf:0a:2a:f8:97:9d: a1:a7:c8:ec:ff:f0:7c:cc:ea:c4:34:0b:f5:57:39:37:26:91: 63:fd:bd:0d:21:5d:d6:82:56:ce:2e:6a:3a:69:fb:6f:ba:e0: 1d:d6:1d:50:79:2c:23:73:ae:50:b7:01:b7:ad:4b:c3:44:63: 65:70:80:ca:56:fd:f4:a7:80:8f:bd:86:e5:3f:fc:23:cb:12: 0f:2c:1e:da:36:0c:a3:33:66:f4:35:34:40:ac:82:bc:cd:e4: 78:77:a3:ad:ad:dd:ae:9f:63:95:5e:e5:26:78:ac:45:96:c1: ac:7e:63:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9pltN1Yil/olsT1Rc8jEymzhqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA5MjUxOTI0MzNaFw0yNjA5MjYyMDI0MzNaMDMxMTAvBgNV BAMTKEQyQUI3NDM4Q0IxNjhDODM5MDNDRTkzQzQ0MkUzOUI3RTNFOUQzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY0v334puApugQkZ+xUsuBu8aU xwDZAdZ340tH39gUkTVva7YTN4G9Vlvmf3PEFJ4F/X3uYMW/qm2gHFe+LE09wxcX VyF/5/EH3jRR4FoIWwGuhMaABZzvhq2aXW14P6M+dX6lN4U1uMW94rg503qs4Uaj eQooroQz049lH3XmgxG8yzuvJ0yVVLzb3rYanV1jmrrP41IXpr+zDEo59WHDN+Dy vm0dElRXfHieCPJ0Y/NRGYMYYdqri9f2lAtGrPG9MSz58aPEodC6jf0bdlRq5laD tAq4cmLfdaTlpOVMMwZ1hM/g1EoqXfRTaayaqRr4VFF6CDJhFAspOSKptndfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0qt0OMsWjIOQPOk8RC45t+Pp05kwHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFG Q0Q4MUZBMEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy16/7XQI6mXWp1SM41RBLB7u8M9sXrd2B6 CIqOzyGftslBfDeOoywNwr2Obk6yDCtQtsfkV6IBE99bEgxfwVZ9MGiDa1j2i8jG 0LaLmYCM8FlaUzP2cWYwWqHOpDckK0+NCxjJw/9+cOt/Qio+MWugM4jZTNNXMd5d 20Ztwr1+SEImjNQHaCs3hL8KKviXnaGnyOz/8HzM6sQ0C/VXOTcmkWP9vQ0hXdaC Vs4uajpp+2+64B3WHVB5LCNzrlC3AbetS8NEY2VwgMpW/fSngI+9huU//CPLEg8s Hto2DKMzZvQ1NECsgrzN5Hh3o62t3a6fY5Ve5SZ4rEWWwax+Yzo= -----END CERTIFICATE-----Generated at Sat Sep 26 11:16:13 2026 by rpki-client