$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: uuXoKYOjM/0zAMagCqdpRteCHwwlQXbK2QKrDmA9yfg= Subject key identifier: 05:AE:8C:15:D9:FB:DE:E0:1A:A2:21:51:4A:E1:EC:7B:01:10:37:68 Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 29B9E87265408787CED8F5869E0100C312D9EF74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:04:44 +0000 Manifest this update: Tue 16 Jun 2026 20:59:44 +0000 Manifest next update: Wed 17 Jun 2026 23:50:44 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) 2: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: sRtCtdCEYSmfATbD6diEdEz19vCPER6/6u/xlS4IQY8=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b9:e8:72:65:40:87:87:ce:d8:f5:86:9e:01:00:c3:12:d9:ef:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Jun 16 20:59:44 2026 GMT Not After : Jun 17 23:50:44 2026 GMT Subject: CN=05AE8C15D9FBDEE01AA221514AE1EC7B01103768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:e3:6e:0b:72:c5:07:5d:48:57:f5:23:f2: 14:42:ee:9c:02:d9:c1:5d:5e:6f:f3:ca:c3:f0:05: 53:64:0d:7c:99:8a:98:fa:8f:8a:80:88:8e:6f:11: 93:95:f5:fe:e0:9e:46:37:8c:43:b4:9e:98:84:48: 43:78:07:cb:4d:b5:0f:37:fd:88:58:ed:8b:3d:90: a1:f9:f2:6f:68:ea:bb:09:7b:09:96:6d:ca:75:56: 51:9f:0a:5c:43:6f:9d:d1:1e:0c:c2:86:9a:01:c4: aa:62:2e:3c:15:ec:21:8e:e0:fb:fd:06:26:f1:58: 49:4e:60:80:64:4b:e4:2f:51:22:9e:32:50:ab:6f: 19:93:ba:86:89:30:ae:54:ee:ad:22:1c:35:8b:d1: 56:53:3a:6a:a1:aa:bd:98:c5:54:02:db:63:fa:8c: fc:7a:73:75:6d:26:52:ac:34:09:5a:7a:13:81:67: b9:9c:bc:c1:d9:87:1e:97:45:5a:37:1f:5d:72:fc: 61:99:f2:4d:ca:8b:6e:b9:0a:b7:60:42:09:5c:02: 14:6c:49:b5:22:d0:e5:22:06:b7:6c:f8:57:d5:86: 0a:df:f9:69:55:63:c7:5f:93:e7:1c:d7:46:32:85: 08:ee:42:b8:00:4a:f1:40:40:1b:3b:a2:e9:9a:b9: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AE:8C:15:D9:FB:DE:E0:1A:A2:21:51:4A:E1:EC:7B:01:10:37:68 X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3d:b6:1b:80:6a:fb:45:c5:c2:a8:04:1d:16:a5:e1:c2:c6: 38:bd:4d:da:37:ba:12:3c:f4:c3:9b:94:13:7c:ec:6f:92:91: 15:2f:c0:59:7f:36:da:82:e0:b9:b9:eb:43:0f:5f:a9:c4:26: f7:79:79:67:8f:8e:1c:be:1c:1d:ca:f2:57:95:f1:91:cf:7f: 1a:dc:2b:9c:38:c2:54:ed:54:d4:98:37:11:32:cb:b7:15:9c: 0c:36:16:18:c4:32:62:33:c3:e2:44:a3:49:2f:f1:b9:99:a7: 3d:75:39:97:1b:d5:a2:c5:6d:66:da:84:1d:9e:fc:f5:bd:95: 1a:71:72:e5:26:e6:39:0a:05:fd:f5:56:07:92:ec:81:11:52: 9b:75:73:3f:02:07:42:bb:2d:c6:9a:f5:e0:12:99:15:1a:c4: 8f:71:4a:76:1f:96:ba:88:e7:c1:82:29:90:57:1e:2e:a0:8b: b7:aa:80:b9:2c:96:5c:43:77:5b:5a:16:46:c7:ed:a0:71:19: c9:fb:42:15:d6:8c:80:51:84:77:2a:52:1f:60:11:ce:47:f7: b1:3e:25:f8:f4:99:ff:64:b6:5d:df:36:0f:48:ff:1c:d9:e4: f8:78:ba:dd:eb:e1:e6:ee:b0:66:a9:ae:44:f6:2b:d3:cb:09: cf:88:80:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbnocmVAh4fO2PWGngEAwxLZ73QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA2MTYyMDU5NDRaFw0yNjA2MTcyMzUwNDRaMDMxMTAvBgNV BAMTKDA1QUU4QzE1RDlGQkRFRTAxQUEyMjE1MTRBRTFFQzdCMDExMDM3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiz+NuC3LFB11IV/Uj8hRC7pwC 2cFdXm/zysPwBVNkDXyZipj6j4qAiI5vEZOV9f7gnkY3jEO0npiESEN4B8tNtQ83 /YhY7Ys9kKH58m9o6rsJewmWbcp1VlGfClxDb53RHgzChpoBxKpiLjwV7CGO4Pv9 BibxWElOYIBkS+QvUSKeMlCrbxmTuoaJMK5U7q0iHDWL0VZTOmqhqr2YxVQC22P6 jPx6c3VtJlKsNAlaehOBZ7mcvMHZhx6XRVo3H11y/GGZ8k3Ki265CrdgQglcAhRs SbUi0OUiBrds+FfVhgrf+WlVY8dfk+cc10YyhQjuQrgASvFAQBs7oumauSLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBa6MFdn73uAaoiFRSuHsewEQN2gwHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg9thuAavtFxcKoBB0WpeHCxji9Tdo3uhI8 9MOblBN87G+SkRUvwFl/NtqC4Lm560MPX6nEJvd5eWePjhy+HB3K8leV8ZHPfxrc K5w4wlTtVNSYNxEyy7cVnAw2FhjEMmIzw+JEo0kv8bmZpz11OZcb1aLFbWbahB2e /PW9lRpxcuUm5jkKBf31VgeS7IERUpt1cz8CB0K7Lcaa9eASmRUaxI9xSnYflrqI 58GCKZBXHi6gi7eqgLksllxDd1taFkbH7aBxGcn7QhXWjIBRhHcqUh9gEc5H97E+ Jfj0mf9ktl3fNg9I/xzZ5Ph4ut3r4ebusGaprkT2K9PLCc+IgJE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:05 2026 by rpki-client