$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft File: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft (raw, json) Hash identifier: ZQDgmQHb2dQtNIU07eXOFpVvg33wHPhecF4gjSYIHi0= Subject key identifier: EE:9B:04:6D:94:E1:F5:2E:39:A5:A1:A0:9D:E4:2C:8F:75:07:24:F1 Authority key identifier: 7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 Certificate issuer: /CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Certificate serial: 3008D3A006FF90B99DF55A9F9E6A9374379B8339 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft Manifest number: BD Signing time: Sun 20 Sep 2026 10:19:55 +0000 Manifest this update: Sun 20 Sep 2026 10:14:55 +0000 Manifest next update: Mon 21 Sep 2026 13:53:55 +0000 Files and hashes: 1: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl (hash: FmSa+2KhUQZAVWixoIIQZc+pfStVwVclfj0OVjQE7Ec=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: f9D+tmlskJQe+GGM2u5fqymt4sZqzjW31b307vrzFZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:d3:a0:06:ff:90:b9:9d:f5:5a:9f:9e:6a:93:74:37:9b:83:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Validity Not Before: Sep 20 10:14:55 2026 GMT Not After : Sep 21 13:53:55 2026 GMT Subject: CN=EE9B046D94E1F52E39A5A1A09DE42C8F750724F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:4f:ce:7b:8b:24:fb:51:4c:1c:5e:4b:db: c9:ae:69:e9:b9:b4:5a:02:26:90:69:82:c2:df:6e: bb:06:9c:7f:ec:fd:ec:d4:e4:d4:4d:37:ad:a7:29: eb:c8:45:01:c9:be:76:03:6c:7c:3b:5e:b5:81:19: ab:75:be:dc:ed:d1:12:0b:67:26:ce:88:55:c8:72: 6f:17:a7:bf:9f:56:01:da:96:b0:74:ea:8d:05:d1: f6:14:44:d3:53:2a:70:da:02:45:ec:93:f9:07:f3: 19:28:5c:1c:e5:11:87:2d:e7:e9:da:1b:be:35:e8: b9:25:70:39:5e:39:7a:fa:d6:82:7f:70:74:07:59: 67:2a:19:76:18:0f:f0:18:db:67:b4:1e:b7:98:2e: 7d:b1:38:ad:0b:f9:86:db:57:e9:ba:98:7f:eb:6e: 98:db:78:9d:ff:ec:c2:e5:18:91:eb:28:34:76:26: d1:71:dd:91:0c:5e:01:34:12:02:d2:14:ce:1d:2d: da:ad:d8:17:0e:0a:41:02:49:fd:a3:d9:e9:e5:15: 92:a5:0f:17:7d:de:d8:62:93:84:7c:ba:2a:fc:30: dc:79:e7:de:c1:0d:9f:3f:86:e9:8d:d8:66:c1:d3: c4:af:2e:f1:b8:ce:b8:ce:29:63:1e:d3:8a:97:86: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9B:04:6D:94:E1:F5:2E:39:A5:A1:A0:9D:E4:2C:8F:75:07:24:F1 X509v3 Authority Key Identifier: keyid:7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c7:9e:8f:bc:fb:58:2a:ab:a8:b4:df:5f:a6:84:e4:ff:77: 8f:e9:d5:1a:21:97:04:74:fc:06:98:60:29:27:f9:8f:f2:db: 16:55:d8:6c:cb:32:4c:a1:fe:4d:a3:1d:54:43:11:f1:a3:f1: c4:c3:02:80:13:4d:77:b6:a1:e2:d3:ce:4e:23:0c:8d:b4:77: d4:6a:ea:a9:12:d9:9e:2b:d1:ae:ad:19:f3:8a:9f:a5:df:8f: 57:c5:ff:57:b0:53:ba:41:19:d3:9f:23:8c:f3:3b:01:a3:10: bb:03:83:b9:e9:57:56:2b:54:b4:56:8e:69:31:5e:bd:87:da: af:a5:51:f9:e2:d9:b7:db:c3:e4:0f:d0:87:5a:fc:81:c9:1f: 29:53:83:32:0c:be:0c:17:1c:76:48:48:0e:24:4f:1e:3f:46: e1:a5:76:7c:3d:3a:9f:0f:9d:63:c9:85:8a:3c:3e:a9:e1:24: 39:6f:bc:03:e5:cd:e0:ba:04:cf:f9:62:ee:34:82:c7:9a:19: 6f:20:28:31:c5:06:ab:7a:94:27:7e:b6:61:c2:b6:43:a1:7d: 18:89:95:b0:2b:0b:14:90:d4:14:1b:12:8e:38:bd:0c:bf:37: df:69:86:95:cc:38:7f:93:4e:fd:fa:a0:7a:d3:70:a5:b8:02: 3a:61:35:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAjToAb/kLmd9VqfnmqTdDebgzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5 QjNFMkYyMDAeFw0yNjA5MjAxMDE0NTVaFw0yNjA5MjExMzUzNTVaMDMxMTAvBgNV BAMTKEVFOUIwNDZEOTRFMUY1MkUzOUE1QTFBMDlERTQyQzhGNzUwNzI0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Xk/Oe4sk+1FMHF5L28muaem5 tFoCJpBpgsLfbrsGnH/s/ezU5NRNN62nKevIRQHJvnYDbHw7XrWBGat1vtzt0RIL ZybOiFXIcm8Xp7+fVgHalrB06o0F0fYURNNTKnDaAkXsk/kH8xkoXBzlEYct5+na G7416LklcDleOXr61oJ/cHQHWWcqGXYYD/AY22e0HreYLn2xOK0L+YbbV+m6mH/r bpjbeJ3/7MLlGJHrKDR2JtFx3ZEMXgE0EgLSFM4dLdqt2BcOCkECSf2j2enlFZKl Dxd93thik4R8uir8MNx5597BDZ8/humN2GbB08SvLvG4zrjOKWMe04qXhlyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7psEbZTh9S45paGgneQsj3UHJPEwHwYDVR0j BBgwFoAUf84+KOKZ7AcX9XiiMau2X5s+LyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMTRlM2EtNWJlMC00NmQxLTkwM2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhF Mjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5QjNFMkYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkNFM0UyOEUyOTlFQzA3MTdGNTc4QTIzMUFCQjY1RjlCM0Uy RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2 NUY5QjNFMkYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/Hno+8+1gqq6i031+mhOT/d4/p1RohlwR0 /AaYYCkn+Y/y2xZV2GzLMkyh/k2jHVRDEfGj8cTDAoATTXe2oeLTzk4jDI20d9Rq 6qkS2Z4r0a6tGfOKn6Xfj1fF/1ewU7pBGdOfI4zzOwGjELsDg7npV1YrVLRWjmkx Xr2H2q+lUfni2bfbw+QP0Ida/IHJHylTgzIMvgwXHHZISA4kTx4/RuGldnw9Op8P nWPJhYo8PqnhJDlvvAPlzeC6BM/5Yu40gseaGW8gKDHFBqt6lCd+tmHCtkOhfRiJ lbArCxSQ1BQbEo44vQy/N99phpXMOH+TTv36oHrTcKW4AjphNaM= -----END CERTIFICATE-----Generated at Sun Sep 20 22:07:58 2026 by rpki-client