$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: qNKzuK+pOHwhBBwc4vNi2/Gg7HOpmePUFpw2a43EpU4= Subject key identifier: 1B:62:BD:25:C0:97:6A:09:A2:FE:CE:CA:B3:3F:B9:DF:5D:83:10:6F Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 60442166AA4A221BED0E73DD38F1045A27CE2BE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:08:09 +0000 Manifest this update: Sun 20 Sep 2026 17:03:09 +0000 Manifest next update: Mon 21 Sep 2026 18:46:09 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) 2: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: TXqyNXEf00EifrUQCUq9R9CftT5Oyl4bS77Pgis5zlE=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:44:21:66:aa:4a:22:1b:ed:0e:73:dd:38:f1:04:5a:27:ce:2b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Sep 20 17:03:09 2026 GMT Not After : Sep 21 18:46:09 2026 GMT Subject: CN=1B62BD25C0976A09A2FECECAB33FB9DF5D83106F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:0b:24:c2:0c:ca:88:aa:d7:db:70:be:6f: c9:59:74:20:07:64:9b:4f:5e:86:1d:e5:ac:a5:00: 53:77:2d:fb:9f:64:3f:f0:06:02:09:3d:b6:7a:26: f9:66:5f:d4:8d:b7:c5:68:6e:b1:8e:38:80:92:f8: 33:99:4e:db:8d:72:f6:f1:c0:a3:6c:2b:f9:2a:f8: 92:75:e2:98:53:61:bf:42:95:2b:c7:17:14:bf:9b: 0c:c4:20:17:e5:21:ab:a2:0b:e8:67:87:05:5b:d9: af:65:94:80:59:46:13:50:e0:0b:85:34:12:71:58: ae:55:1e:08:d7:96:59:74:c3:4b:89:e4:12:77:8e: 73:1a:d5:28:f5:f8:56:9f:5a:c1:19:b5:0d:af:d8: 87:fb:bf:95:6d:a9:46:2b:dc:32:73:4f:fe:ca:ed: 0f:44:2c:b7:ad:3a:2a:05:66:23:64:fb:85:53:97: b6:73:1d:ae:fd:5c:35:b3:e1:ec:23:d0:74:f7:30: da:51:59:fe:6c:31:ae:f1:8a:e0:96:e4:2b:63:05: 3f:cb:c3:dd:c5:5c:76:59:41:8d:f2:b6:d0:15:00: 05:56:3f:04:c8:cc:3a:cd:88:1a:c4:48:e4:f7:20: a4:f0:c2:82:cd:c0:b7:0f:87:11:da:d2:36:c3:f4: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:62:BD:25:C0:97:6A:09:A2:FE:CE:CA:B3:3F:B9:DF:5D:83:10:6F X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:56:43:20:5e:d6:8e:c0:b6:af:c2:02:e0:d5:82:15:22:05: db:45:87:e6:bf:c0:4b:72:dc:a9:3b:dc:86:5b:9c:00:98:87: 9c:08:1c:0b:aa:77:ab:47:58:3c:dc:5c:b6:07:b8:3c:0b:9b: b1:11:b6:4c:1e:fc:7a:32:c0:39:a7:ac:4d:cf:4a:c8:5c:8b: 33:28:94:26:3f:10:9d:97:ea:fc:36:67:06:dc:0e:c2:8d:65: f0:36:2c:46:d7:ad:54:19:01:78:c7:97:45:48:4e:c5:8a:ed: c8:01:c8:2c:3c:62:06:fe:ab:9f:c1:a9:d5:62:09:f1:24:75: 24:fd:ac:96:5b:6e:db:ec:86:27:4d:3c:29:74:c2:af:3a:07: bb:72:13:52:66:84:4b:17:3e:aa:fc:8f:99:f0:3c:77:05:41: 07:1d:7c:7a:48:17:c6:55:77:c7:ff:99:1e:58:cf:d4:5b:c0: 9b:91:9c:90:5f:20:ea:84:f8:d1:ec:57:b0:cd:ae:7f:51:3d: 96:9c:41:b3:b0:f1:57:ec:b8:47:64:7f:de:06:82:cb:70:69: c8:e6:98:2c:68:44:28:35:a8:e3:3f:6f:23:2d:b2:6a:e6:f5: e5:3c:0a:e7:3b:e1:3c:77:d1:82:5e:7f:4e:b1:d4:d3:3b:97: e5:fd:a5:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEQhZqpKIhvtDnPdOPEEWifOK+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA5MjAxNzAzMDlaFw0yNjA5MjExODQ2MDlaMDMxMTAvBgNV BAMTKDFCNjJCRDI1QzA5NzZBMDlBMkZFQ0VDQUIzM0ZCOURGNUQ4MzEwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqwskwgzKiKrX23C+b8lZdCAH ZJtPXoYd5aylAFN3LfufZD/wBgIJPbZ6JvlmX9SNt8VobrGOOICS+DOZTtuNcvbx wKNsK/kq+JJ14phTYb9ClSvHFxS/mwzEIBflIauiC+hnhwVb2a9llIBZRhNQ4AuF NBJxWK5VHgjXlll0w0uJ5BJ3jnMa1Sj1+FafWsEZtQ2v2If7v5VtqUYr3DJzT/7K 7Q9ELLetOioFZiNk+4VTl7ZzHa79XDWz4ewj0HT3MNpRWf5sMa7xiuCW5CtjBT/L w93FXHZZQY3yttAVAAVWPwTIzDrNiBrESOT3IKTwwoLNwLcPhxHa0jbD9AaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2K9JcCXagmi/s7Ksz+5312DEG8wHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtWQyBe1o7Atq/CAuDVghUiBdtFh+a/wEty 3Kk73IZbnACYh5wIHAuqd6tHWDzcXLYHuDwLm7ERtkwe/HoywDmnrE3PSshcizMo lCY/EJ2X6vw2ZwbcDsKNZfA2LEbXrVQZAXjHl0VITsWK7cgByCw8Ygb+q5/BqdVi CfEkdST9rJZbbtvshidNPCl0wq86B7tyE1JmhEsXPqr8j5nwPHcFQQcdfHpIF8ZV d8f/mR5Yz9RbwJuRnJBfIOqE+NHsV7DNrn9RPZacQbOw8VfsuEdkf94Ggstwacjm mCxoRCg1qOM/byMtsmrm9eU8Cuc74Tx30YJef06x1NM7l+X9peQ= -----END CERTIFICATE-----Generated at Mon Sep 21 04:54:01 2026 by rpki-client