$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: 2Ftd1LoJrdNMYBpRDOXPliViEMMWVhwuULn9UmOBrZk= Subject key identifier: 3B:FB:7D:9A:78:D2:C0:E3:BC:E0:60:B4:DD:E1:17:B2:B6:90:CB:05 Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 267B0DCF3F7204CA2E091974C33E1FDED8642D59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: BF Signing time: Mon 21 Sep 2026 08:01:36 +0000 Manifest this update: Mon 21 Sep 2026 07:56:36 +0000 Manifest next update: Tue 22 Sep 2026 10:36:36 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) 2: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: 2NkjCrhTC/kAqHIqhMj1FYA3FY81XcmXn/V8AQ3qZss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:7b:0d:cf:3f:72:04:ca:2e:09:19:74:c3:3e:1f:de:d8:64:2d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Sep 21 07:56:36 2026 GMT Not After : Sep 22 10:36:36 2026 GMT Subject: CN=3BFB7D9A78D2C0E3BCE060B4DDE117B2B690CB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:b0:8d:a7:9a:d0:2c:15:79:92:54:08:a0: 25:4c:1e:bf:ab:6d:38:2e:29:f8:72:f6:3d:ee:91: 0c:64:13:c1:7b:eb:cb:45:5a:dd:60:aa:94:0f:7a: c1:ed:11:3a:c3:09:6e:2e:3b:c9:e3:39:bf:e9:08: 57:d3:8b:c0:8c:92:f1:2b:06:95:37:f0:93:92:41: 0b:85:27:ce:c6:e8:3b:65:cb:02:e9:e7:fe:6d:ae: 1c:29:4d:22:17:5c:54:e3:3f:73:24:95:8f:1c:c5: 0d:d2:11:ba:5c:18:70:0f:3f:bb:33:e3:f4:24:97: f0:8f:e6:ac:65:a2:9b:ab:56:60:49:74:e6:f9:ef: df:d9:05:c3:75:bd:0e:6a:46:bf:0d:6b:92:5c:5c: fb:f4:f9:d7:dc:ff:bc:74:2e:73:d2:d0:99:d0:fe: e0:80:f8:cc:8e:e1:26:ec:95:32:e9:f6:c0:fc:81: f9:71:c0:a8:47:32:d2:90:61:cc:dc:4a:54:dc:20: 36:fe:e8:56:88:c3:c7:34:99:21:00:cb:44:b9:31: 2a:cd:75:8b:8f:be:75:1c:10:82:3d:49:36:8f:39: 38:d6:c8:82:e2:50:91:27:fb:42:79:22:e5:47:bb: e9:0f:ee:bf:5b:1f:0d:ea:03:b6:9a:58:6d:c8:dc: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FB:7D:9A:78:D2:C0:E3:BC:E0:60:B4:DD:E1:17:B2:B6:90:CB:05 X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6c:4d:6d:66:fe:a1:cc:f0:fe:d4:41:75:1c:47:65:05:ae: b9:a3:31:d8:16:20:fa:02:56:1a:85:e8:ca:e3:a7:30:06:d8: 13:f0:ee:3c:93:61:a2:75:aa:88:d9:fd:4c:6c:4a:71:77:47: d0:24:cb:c7:32:50:a5:5b:12:69:e9:0c:67:a9:0e:e7:54:fc: 03:80:c7:82:c9:83:bc:09:07:80:5c:43:28:71:4f:a7:fc:82: 29:a3:34:2c:09:c8:66:94:58:ba:e8:dd:f3:c0:9a:6b:ee:22: ce:ba:3b:17:92:6d:85:d8:cc:6e:ff:f5:9d:76:ab:5c:57:32: d8:dc:b6:ae:ed:6c:af:8e:e4:69:cc:fd:e9:d4:60:52:48:92: d2:5b:40:c7:ea:a5:3f:34:99:39:a6:95:29:32:c7:7f:db:dd: 42:9d:c7:aa:dd:fa:e1:6e:6f:83:84:97:ce:bb:aa:a8:ad:23: 21:37:83:79:48:54:eb:4d:f1:83:ea:f0:23:66:3e:a3:b4:5a: 2e:70:dc:be:ec:9a:7b:b4:b5:3b:cc:91:56:fb:43:0f:df:69: 56:fe:f3:55:17:7f:14:46:b5:fc:38:d8:07:5d:00:29:2d:5b: 13:15:fb:8d:3a:1c:b2:a6:9d:f4:02:d6:de:04:da:86:97:7c: 19:94:4b:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnsNzz9yBMouCRl0wz4f3thkLVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA5MjEwNzU2MzZaFw0yNjA5MjIxMDM2MzZaMDMxMTAvBgNV BAMTKDNCRkI3RDlBNzhEMkMwRTNCQ0UwNjBCNERERTExN0IyQjY5MENCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PLCNp5rQLBV5klQIoCVMHr+r bTguKfhy9j3ukQxkE8F768tFWt1gqpQPesHtETrDCW4uO8njOb/pCFfTi8CMkvEr BpU38JOSQQuFJ87G6DtlywLp5/5trhwpTSIXXFTjP3MklY8cxQ3SEbpcGHAPP7sz 4/Qkl/CP5qxlopurVmBJdOb579/ZBcN1vQ5qRr8Na5JcXPv0+dfc/7x0LnPS0JnQ /uCA+MyO4SbslTLp9sD8gflxwKhHMtKQYczcSlTcIDb+6FaIw8c0mSEAy0S5MSrN dYuPvnUcEII9STaPOTjWyILiUJEn+0J5IuVHu+kP7r9bHw3qA7aaWG3I3AM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/t9mnjSwOO84GC03eEXsraQywUwHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1sTW1m/qHM8P7UQXUcR2UFrrmjMdgWIPoC VhqF6MrjpzAG2BPw7jyTYaJ1qojZ/UxsSnF3R9Aky8cyUKVbEmnpDGepDudU/AOA x4LJg7wJB4BcQyhxT6f8gimjNCwJyGaUWLro3fPAmmvuIs66OxeSbYXYzG7/9Z12 q1xXMtjctq7tbK+O5GnM/enUYFJIktJbQMfqpT80mTmmlSkyx3/b3UKdx6rd+uFu b4OEl867qqitIyE3g3lIVOtN8YPq8CNmPqO0Wi5w3L7smnu0tTvMkVb7Qw/faVb+ 81UXfxRGtfw42AddACktWxMV+406HLKmnfQC1t4E2oaXfBmUS0I= -----END CERTIFICATE-----Generated at Mon Sep 21 12:25:38 2026 by rpki-client