$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: NtjKRXlu3vN7nYgljR1Qu053V3kcX7Kz+J42qFk61dY= Subject key identifier: E4:E4:43:12:36:60:9B:35:47:0A:B0:0C:7D:AD:51:E8:FA:67:F9:0E Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 5FF30AE21E0AAC9F47FA3A868B159F4F1E0C3D81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:30:24 +0000 Manifest this update: Wed 29 Jul 2026 03:25:24 +0000 Manifest next update: Thu 30 Jul 2026 04:36:24 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) 2: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: dUrQEaeqg8zZUJ0T01Va2a3Emf0pKMk3SuXW4gANM8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f3:0a:e2:1e:0a:ac:9f:47:fa:3a:86:8b:15:9f:4f:1e:0c:3d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Jul 29 03:25:24 2026 GMT Not After : Jul 30 04:36:24 2026 GMT Subject: CN=E4E4431236609B35470AB00C7DAD51E8FA67F90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:ab:54:9f:2f:a9:a9:0c:a1:bd:e5:b9:28: 34:fe:b1:79:58:cc:5c:15:aa:bf:c7:2c:ba:78:b1: 10:24:68:a8:cc:53:85:c9:04:d1:c6:d9:9e:6e:4a: e1:c1:9c:51:3e:9d:64:ff:f5:ca:6f:4e:38:82:03: 5c:9e:40:69:84:cc:c7:39:ed:e0:77:0d:d8:14:28: 09:53:70:e3:ef:67:10:85:41:d6:f6:59:92:7e:3c: b3:3a:b7:38:fd:72:8f:e9:fe:64:e5:d0:00:f8:62: 91:a5:53:c6:78:a1:21:8c:08:2e:7a:9c:38:4f:ad: bc:95:d2:3c:89:c6:d5:41:70:22:db:71:14:08:04: e7:25:5c:fa:32:b7:de:f4:3f:4c:79:c7:5c:aa:a2: e0:2f:de:b5:c2:39:fc:d0:f5:9d:46:d0:1b:6e:ee: a8:69:de:c8:b8:2f:b7:4a:e3:77:13:14:5b:d8:6a: 8e:98:32:d7:00:5e:b3:af:bd:60:57:30:53:c3:d4: 68:1c:81:62:e3:be:45:fd:e4:40:76:85:eb:de:e7: b1:58:63:55:9b:10:76:3e:e3:af:fa:b7:af:4b:fc: 73:b6:66:dd:95:68:bb:87:a4:0f:16:0e:69:64:b9: d8:02:0d:b8:a0:45:25:07:0a:88:0b:87:d7:e6:cd: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E4:43:12:36:60:9B:35:47:0A:B0:0C:7D:AD:51:E8:FA:67:F9:0E X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:92:77:c2:da:b2:3a:20:f4:ee:c5:d4:04:50:9e:de:1e: 3c:db:d7:78:b2:2c:e1:1b:94:30:b8:12:6f:bd:8f:29:3a:c9: 96:51:1e:41:b8:3f:96:da:86:53:ca:a0:2e:2a:1c:7f:eb:7c: 5a:df:1e:1d:6c:0f:82:32:5c:a1:6a:46:d4:c0:aa:4a:59:1f: d4:c3:b9:53:70:7b:c4:a9:1e:b6:30:66:f9:9e:bd:0f:a0:e7: 4a:93:01:36:11:e6:21:a0:5f:53:d1:d7:a6:b4:e8:91:e6:5c: 7e:7f:16:23:e3:08:ca:5f:fa:72:bc:67:ae:f4:48:3e:2c:bc: ae:55:0f:4c:ca:77:89:02:55:07:bc:9e:dc:5b:96:20:99:43: a4:17:f8:cb:fb:23:c5:29:7f:09:ac:6a:1c:0c:50:33:bf:d6: b2:4c:ab:ac:d2:f9:bd:20:80:26:1b:09:1c:37:4b:ca:e9:4a: c0:1b:8e:27:02:f1:16:3c:c5:77:e0:e1:57:25:55:a1:c1:ef: 7d:e6:58:22:5b:21:38:55:68:b6:8d:bd:10:37:ea:9e:97:53: a6:65:83:47:39:9e:06:df:e8:b5:5c:a1:ad:50:40:82:95:bb: 6e:74:b4:73:9b:bf:11:b8:75:66:2a:5f:43:b7:fb:5c:a5:70: d7:1d:48:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/MK4h4KrJ9H+jqGixWfTx4MPYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA3MjkwMzI1MjRaFw0yNjA3MzAwNDM2MjRaMDMxMTAvBgNV BAMTKEU0RTQ0MzEyMzY2MDlCMzU0NzBBQjAwQzdEQUQ1MUU4RkE2N0Y5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmW6tUny+pqQyhveW5KDT+sXlY zFwVqr/HLLp4sRAkaKjMU4XJBNHG2Z5uSuHBnFE+nWT/9cpvTjiCA1yeQGmEzMc5 7eB3DdgUKAlTcOPvZxCFQdb2WZJ+PLM6tzj9co/p/mTl0AD4YpGlU8Z4oSGMCC56 nDhPrbyV0jyJxtVBcCLbcRQIBOclXPoyt970P0x5x1yqouAv3rXCOfzQ9Z1G0Btu 7qhp3si4L7dK43cTFFvYao6YMtcAXrOvvWBXMFPD1GgcgWLjvkX95EB2heve57FY Y1WbEHY+46/6t69L/HO2Zt2VaLuHpA8WDmlkudgCDbigRSUHCogLh9fmzajLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ORDEjZgmzVHCrAMfa1R6Ppn+Q4wHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbJknfC2rI6IPTuxdQEUJ7eHjzb13iyLOEb lDC4Em+9jyk6yZZRHkG4P5bahlPKoC4qHH/rfFrfHh1sD4IyXKFqRtTAqkpZH9TD uVNwe8SpHrYwZvmevQ+g50qTATYR5iGgX1PR16a06JHmXH5/FiPjCMpf+nK8Z670 SD4svK5VD0zKd4kCVQe8ntxbliCZQ6QX+Mv7I8UpfwmsahwMUDO/1rJMq6zS+b0g gCYbCRw3S8rpSsAbjicC8RY8xXfg4VclVaHB733mWCJbIThVaLaNvRA36p6XU6Zl g0c5ngbf6LVcoa1QQIKVu250tHObvxG4dWYqX0O3+1ylcNcdSDQ= -----END CERTIFICATE-----Generated at Wed Jul 29 07:02:58 2026 by rpki-client