$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft File: 7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft (raw, json) Hash identifier: i1mwBlRRY05OXJcpWrtFZxb+U1sdfhazzp7It9v/m8k= Subject key identifier: 1A:B5:16:E8:8C:BC:BE:26:3A:3A:22:FE:3A:B1:69:CD:A4:9D:85:62 Authority key identifier: 7E:3B:0E:F5:65:3A:FA:25:B9:FF:DD:DD:B4:00:14:3F:76:50:A5:A4 Certificate issuer: /CN=7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4 Certificate serial: 77BFFEC3132EA2FAA57D4D7585A544A34DA36367 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:57:33 +0000 Manifest this update: Tue 22 Sep 2026 04:52:33 +0000 Manifest next update: Wed 23 Sep 2026 05:55:33 +0000 Files and hashes: 1: 7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl (hash: ACyzcj5ABH03ZqnAzecwXWVURZk+UEBHqMMMe8N/FlQ=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: ZqUeA+GYRIxCIgCsH9WqtyaWh6HnVZhzhgf8aY+NnIg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bf:fe:c3:13:2e:a2:fa:a5:7d:4d:75:85:a5:44:a3:4d:a3:63:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4 Validity Not Before: Sep 22 04:52:33 2026 GMT Not After : Sep 23 05:55:33 2026 GMT Subject: CN=1AB516E88CBCBE263A3A22FE3AB169CDA49D8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:1a:c3:8b:2b:10:b4:fe:ad:0d:9f:f9:d0: fa:35:85:1f:12:65:28:3e:3e:3e:6a:73:ec:8e:46: 38:bc:c3:e8:a1:c5:97:51:a0:86:04:14:1b:d8:13: b8:42:57:29:eb:b9:68:4b:2b:5f:84:bf:3b:08:b7: 39:12:00:ae:4b:c3:35:e3:49:18:58:0a:21:d0:07: 01:80:a4:63:8b:a7:b8:89:12:fa:1a:b6:63:0b:d2: 0b:49:b5:c0:e5:36:20:13:c5:9c:8d:cc:7d:bf:11: 43:ef:cb:f8:75:e9:94:b9:6a:eb:82:84:dd:b9:59: 46:07:be:af:85:fb:db:09:49:f2:0c:a8:4a:16:d4: d8:52:4b:fa:ae:34:fb:7e:17:60:4d:4f:e6:03:0e: ca:2c:62:c9:92:11:59:f5:8d:a5:bc:f7:8b:83:2f: 3f:a3:01:7c:96:13:6e:2a:9f:1b:d9:3a:99:3a:e4: e6:5c:cb:82:b7:ca:da:3a:cb:94:c0:10:87:38:33: ae:f3:8c:c5:d2:7e:6d:d2:1d:fa:bf:16:e5:95:4d: 36:a9:42:3b:10:88:e0:18:c3:43:78:8b:aa:d2:18: 06:e3:70:e8:e3:23:7f:c1:7e:c6:b7:ea:d3:4a:64: d4:99:30:d3:4f:80:35:ba:65:62:33:15:b1:7e:aa: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:16:E8:8C:BC:BE:26:3A:3A:22:FE:3A:B1:69:CD:A4:9D:85:62 X509v3 Authority Key Identifier: keyid:7E:3B:0E:F5:65:3A:FA:25:B9:FF:DD:DD:B4:00:14:3F:76:50:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d8:d0:af:e0:87:f8:16:31:fe:ed:e9:38:59:48:1b:4b:78: 24:07:a0:15:12:10:a3:fb:85:42:5e:df:cf:1f:66:08:6c:70: e8:db:28:86:6c:49:fc:07:d8:dd:d7:e7:7d:6f:78:4d:87:1d: 20:ef:f3:5a:65:bf:6c:06:3a:d8:c8:98:6d:11:d3:51:b1:a1: 69:b0:1b:02:ab:96:42:3f:db:5e:75:a5:20:6d:1b:81:fe:6e: 32:a9:6b:16:f7:ff:d4:e8:65:35:e7:db:90:c9:5b:9a:aa:47: f2:0e:3a:9f:f1:e1:01:98:d7:3f:3c:9c:81:77:65:50:7b:1a: 7a:a1:0f:ef:a9:ec:1d:f3:ec:26:2a:9c:1e:dc:e8:da:b3:23: b9:3c:a7:09:f4:e3:ee:9f:bc:ca:f1:60:38:e1:01:7f:2e:0c: c4:29:b1:d2:87:b8:43:5c:07:f0:88:e9:16:c8:23:3c:69:2e: 99:69:35:21:2c:bb:7b:48:71:be:5c:09:15:e9:f7:23:d0:8a: 8b:fe:8c:29:f7:55:29:b6:57:d7:02:6c:a0:ee:fc:4a:12:7c: da:7b:1d:4a:f6:8b:3d:4b:6a:d0:d8:c3:8f:52:9e:da:b8:d1: f8:a2:69:b4:e0:ae:70:05:30:4f:82:d1:67:3f:b0:c2:9a:55: db:cf:33:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7/+wxMuovqlfU11haVEo02jY2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UzQjBFRjU2NTNBRkEyNUI5RkZEREREQjQwMDE0M0Y3 NjUwQTVBNDAeFw0yNjA5MjIwNDUyMzNaFw0yNjA5MjMwNTU1MzNaMDMxMTAvBgNV BAMTKDFBQjUxNkU4OENCQ0JFMjYzQTNBMjJGRTNBQjE2OUNEQTQ5RDg1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsABrDiysQtP6tDZ/50Po1hR8S ZSg+Pj5qc+yORji8w+ihxZdRoIYEFBvYE7hCVynruWhLK1+EvzsItzkSAK5LwzXj SRhYCiHQBwGApGOLp7iJEvoatmML0gtJtcDlNiATxZyNzH2/EUPvy/h16ZS5auuC hN25WUYHvq+F+9sJSfIMqEoW1NhSS/quNPt+F2BNT+YDDsosYsmSEVn1jaW894uD Lz+jAXyWE24qnxvZOpk65OZcy4K3yto6y5TAEIc4M67zjMXSfm3SHfq/FuWVTTap QjsQiOAYw0N4i6rSGAbjcOjjI3/Bfsa36tNKZNSZMNNPgDW6ZWIzFbF+qmepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrUW6Iy8viY6OiL+OrFpzaSdhWIwHwYDVR0j BBgwFoAUfjsO9WU6+iW5/93dtAAUP3ZQpaQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkNTk0MzAtZGU3OC00NTMyLThlMWEtMzRiNTNiOGYyNmZhLzAvN0UzQjBFRjU2 NTNBRkEyNUI5RkZEREREQjQwMDE0M0Y3NjUwQTVBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTNCMEVGNTY1M0FGQTI1QjlGRkRERERCNDAwMTQzRjc2NTBB NUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvN0UzQjBFRjU2NTNBRkEyNUI5RkZEREREQjQwMDE0 M0Y3NjUwQTVBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfY0K/gh/gWMf7t6ThZSBtLeCQHoBUSEKP7 hUJe388fZghscOjbKIZsSfwH2N3X531veE2HHSDv81plv2wGOtjImG0R01GxoWmw GwKrlkI/2151pSBtG4H+bjKpaxb3/9ToZTXn25DJW5qqR/IOOp/x4QGY1z88nIF3 ZVB7GnqhD++p7B3z7CYqnB7c6NqzI7k8pwn04+6fvMrxYDjhAX8uDMQpsdKHuENc B/CI6RbIIzxpLplpNSEsu3tIcb5cCRXp9yPQiov+jCn3VSm2V9cCbKDu/EoSfNp7 HUr2iz1LatDYw49Sntq40fiiabTgrnAFME+C0Wc/sMKaVdvPM+s= -----END CERTIFICATE-----Generated at Tue Sep 22 15:54:13 2026 by rpki-client