$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: gycIj+o2tfdC3YgQW5+Q7qkZAHI2btiHnDwvIEpv4So= Subject key identifier: 11:22:F3:E7:75:7C:AD:B4:1E:55:7F:A7:C7:18:4D:CB:BF:42:70:05 Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 69C0908EEFD5A1B01A6EAA443048BF9C7296EB9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 02:39:52 +0000 Manifest this update: Tue 22 Sep 2026 02:34:52 +0000 Manifest next update: Wed 23 Sep 2026 04:50:52 +0000 Files and hashes: 1: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: YPzh5WYLf8g/08/LFXb+S+wl3EOecpGcfcKFfOlURqk=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c0:90:8e:ef:d5:a1:b0:1a:6e:aa:44:30:48:bf:9c:72:96:eb:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Sep 22 02:34:52 2026 GMT Not After : Sep 23 04:50:52 2026 GMT Subject: CN=1122F3E7757CADB41E557FA7C7184DCBBF427005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:d4:ee:ae:3e:93:5e:5d:eb:fb:04:95:ab: 71:01:79:9f:4f:63:3c:88:81:05:5e:10:43:80:ca: e1:2c:a7:a3:6b:47:cb:5d:d9:6b:de:c3:c9:ff:62: e8:9e:65:93:40:e4:58:3b:f2:4f:87:9f:0b:1d:aa: 32:df:55:8a:38:be:05:62:0a:09:4e:2d:f2:52:8c: 94:df:c7:c9:05:c4:11:e5:d7:13:8d:72:f4:c4:07: 8a:3c:f8:a0:9a:f5:5e:01:bd:15:78:7c:ae:b5:3d: f4:02:b9:9f:17:a8:6a:f9:60:60:3c:86:6b:f1:c7: 41:2c:45:f2:f7:99:70:fd:81:ed:0f:6b:10:3c:2a: 85:3c:5f:7b:bf:7f:53:e6:5e:86:0e:ed:87:6f:ec: e6:4c:f7:ec:4a:fa:ca:9c:02:fd:76:28:dc:b0:45: 55:f6:d7:95:bd:90:e3:3d:35:b7:4c:63:5d:11:bf: 1e:4c:b2:6a:5e:87:81:1d:73:71:a8:30:a1:8c:33: 3e:66:c5:7f:67:f0:42:76:a2:e5:6e:32:c7:6f:12: ea:62:0a:ad:eb:55:07:54:cd:1e:10:73:97:cc:7a: e1:ed:a8:59:92:dc:9b:6b:04:e5:69:3a:43:fd:55: 53:04:cd:7d:11:c6:83:be:0a:cc:98:0b:6e:f7:a2: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:22:F3:E7:75:7C:AD:B4:1E:55:7F:A7:C7:18:4D:CB:BF:42:70:05 X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:53:fc:77:f2:1a:55:f2:c5:ff:9f:ff:af:95:ae:3c:44:2c: 88:17:e4:ed:67:2b:7c:98:91:c9:eb:b1:3b:1e:1d:eb:59:eb: aa:8b:1e:91:23:a7:f7:92:d1:e9:13:23:01:50:ba:0d:4f:00: b7:13:56:96:94:c0:ae:47:da:75:38:41:10:bb:3e:ab:e3:5d: fc:fe:d0:25:74:c9:6d:11:68:b5:02:71:e2:8b:51:7d:f2:ed: 8b:9d:51:b8:24:08:9a:27:2b:28:4a:5f:29:28:31:ed:99:a5: 28:88:bb:30:97:40:6c:d0:dd:de:28:0b:c5:f1:f6:5b:55:09: ce:9b:46:9a:76:b5:97:88:c0:3b:c4:52:20:5f:ea:fb:6d:56: 3c:45:08:6c:2f:24:cd:b6:af:e6:ff:fb:a5:0b:96:4f:99:28: 5b:4c:f1:21:c8:29:20:0a:fa:d7:25:b8:1e:d7:11:c9:dd:f5: a2:50:f3:54:e9:a0:5d:73:43:b5:08:a8:21:d8:a2:56:46:fb: 6b:7b:21:63:63:70:69:a9:3f:1b:98:f1:bb:83:b0:1c:3c:9b: e0:df:01:47:2f:e8:2c:32:4e:00:13:95:1e:fc:a3:50:fd:5e: 1f:7a:61:9d:31:98:5d:e1:6f:3a:49:6b:41:d1:1b:87:17:19: 0d:7a:71:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacCQju/VobAabqpEMEi/nHKW650wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA5MjIwMjM0NTJaFw0yNjA5MjMwNDUwNTJaMDMxMTAvBgNV BAMTKDExMjJGM0U3NzU3Q0FEQjQxRTU1N0ZBN0M3MTg0RENCQkY0MjcwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMd9Turj6TXl3r+wSVq3EBeZ9P YzyIgQVeEEOAyuEsp6NrR8td2Wvew8n/YuieZZNA5Fg78k+HnwsdqjLfVYo4vgVi CglOLfJSjJTfx8kFxBHl1xONcvTEB4o8+KCa9V4BvRV4fK61PfQCuZ8XqGr5YGA8 hmvxx0EsRfL3mXD9ge0PaxA8KoU8X3u/f1PmXoYO7Ydv7OZM9+xK+sqcAv12KNyw RVX215W9kOM9NbdMY10Rvx5Msmpeh4Edc3GoMKGMMz5mxX9n8EJ2ouVuMsdvEupi Cq3rVQdUzR4Qc5fMeuHtqFmS3JtrBOVpOkP9VVMEzX0RxoO+CsyYC273ogh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESLz53V8rbQeVX+nxxhNy79CcAUwHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBT/HfyGlXyxf+f/6+VrjxELIgX5O1nK3yY kcnrsTseHetZ66qLHpEjp/eS0ekTIwFQug1PALcTVpaUwK5H2nU4QRC7PqvjXfz+ 0CV0yW0RaLUCceKLUX3y7YudUbgkCJonKyhKXykoMe2ZpSiIuzCXQGzQ3d4oC8Xx 9ltVCc6bRpp2tZeIwDvEUiBf6vttVjxFCGwvJM22r+b/+6ULlk+ZKFtM8SHIKSAK +tcluB7XEcnd9aJQ81TpoF1zQ7UIqCHYolZG+2t7IWNjcGmpPxuY8buDsBw8m+Df AUcv6CwyTgATlR78o1D9Xh96YZ0xmF3hbzpJa0HRG4cXGQ16cY0= -----END CERTIFICATE-----Generated at Tue Sep 22 15:01:40 2026 by rpki-client