$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json) Hash identifier: p/E4vWrfjKb88HEIRqLBM+TugPu1LztYAYVheJPuzQU= Subject key identifier: 51:64:73:C0:25:D1:84:52:8E:F7:62:01:08:AF:BD:55:10:0A:03:74 Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Certificate serial: 5658B3166A7B7A3F133CED72A9B85B115437AD3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 06:46:35 +0000 Manifest this update: Thu 08 Oct 2026 06:41:35 +0000 Manifest next update: Fri 09 Oct 2026 07:37:35 +0000 Files and hashes: 1: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: ptMtY3ZODPJZKt8YCQCnxCShMKRAKxrPkQNeBneKYYU=) 2: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=) 4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 07:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:58:b3:16:6a:7b:7a:3f:13:3c:ed:72:a9:b8:5b:11:54:37:ad:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Validity Not Before: Oct 8 06:41:35 2026 GMT Not After : Oct 9 07:37:35 2026 GMT Subject: CN=516473C025D184528EF7620108AFBD55100A0374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7a:1a:9c:25:10:1e:b2:0e:bd:91:26:f6:35: 27:5b:a7:47:b2:e5:01:c5:f6:d5:85:35:24:ec:5e: e1:c5:03:69:90:de:f5:2b:73:6b:3a:6b:0e:04:9f: 1e:33:89:ce:79:e0:3c:e7:a2:91:a5:44:64:ed:d9: 17:a6:ed:5f:af:19:29:ad:9a:48:16:30:fd:95:d2: e3:a8:c0:af:f7:e0:68:22:84:c4:65:41:10:f7:64: 66:b0:8f:72:61:a9:00:ab:77:e4:36:04:38:43:8f: c2:e1:21:b9:f6:9c:f9:b3:f5:ce:4b:d7:67:a0:37: 22:d2:25:8f:b0:2e:95:38:7c:d6:11:ec:a6:eb:f0: a6:60:50:a4:e3:73:ca:b1:d2:22:f8:19:e5:bf:4f: 44:e3:af:58:80:16:bb:f6:fb:2d:1a:07:56:18:68: 65:b1:0c:32:ef:20:b3:e4:aa:1b:9d:75:da:98:6b: dd:59:2f:a0:0d:50:67:88:e8:30:16:02:67:61:76: 98:af:e4:23:37:84:ca:f2:5e:f0:92:db:68:5c:6a: 20:8f:bd:4b:c8:3d:97:f5:26:7d:7e:f1:b7:6e:6b: de:1a:83:da:d1:e9:0d:4d:84:2c:fb:7d:a8:0e:c6: 0a:9a:fd:db:fc:5b:90:3b:b5:42:f4:38:58:d3:0d: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:64:73:C0:25:D1:84:52:8E:F7:62:01:08:AF:BD:55:10:0A:03:74 X509v3 Authority Key Identifier: keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4b:41:46:4a:50:02:19:0f:c8:c1:20:fb:42:66:7d:80:9d: 18:5b:f2:40:f0:17:9e:0e:aa:05:93:80:c4:d2:08:fd:b4:d6: b7:a3:e1:55:8a:fa:de:1b:7f:ed:77:c5:c9:60:0a:31:81:32: fe:0b:b7:4f:64:3d:3c:9a:bd:0c:31:38:a4:3f:43:cc:98:c5: 96:46:19:e2:c4:54:1b:bd:9e:e3:85:b3:14:e3:7c:18:16:57: 29:f9:7b:45:a6:eb:6c:3a:90:03:25:3e:d6:ef:fe:96:0f:77: 70:65:05:aa:44:d2:73:14:d9:d9:7b:c9:cd:f5:3b:d3:ec:fb: ad:31:cf:e5:55:18:26:31:66:1b:e7:3b:24:c6:4e:94:b0:77: 9d:8e:c1:76:ac:57:1b:35:4d:f2:df:ca:56:e0:79:2d:c4:e3: 3a:a9:3d:1c:72:96:ed:97:f3:be:8e:c8:98:79:29:d7:10:33: 65:51:7f:a7:de:12:3c:bc:f9:6c:5b:a0:3d:1f:be:65:bd:71: ca:1a:ad:a8:45:8a:c6:29:a7:68:fa:82:2a:dd:4a:bd:af:84: fc:79:6d:5b:9e:bd:94:cd:c8:e1:12:dc:2f:7f:38:b8:c6:43: 65:a5:3d:ab:0c:68:ce:12:34:66:82:6b:11:26:7e:5e:70:85: cd:ac:8f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlizFmp7ej8TPO1yqbhbEVQ3rTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYyQThE Mzg4NEEyQzAeFw0yNjEwMDgwNjQxMzVaFw0yNjEwMDkwNzM3MzVaMDMxMTAvBgNV BAMTKDUxNjQ3M0MwMjVEMTg0NTI4RUY3NjIwMTA4QUZCRDU1MTAwQTAzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmehqcJRAesg69kSb2NSdbp0ey 5QHF9tWFNSTsXuHFA2mQ3vUrc2s6aw4Enx4zic554DznopGlRGTt2Rem7V+vGSmt mkgWMP2V0uOowK/34GgihMRlQRD3ZGawj3JhqQCrd+Q2BDhDj8LhIbn2nPmz9c5L 12egNyLSJY+wLpU4fNYR7Kbr8KZgUKTjc8qx0iL4GeW/T0Tjr1iAFrv2+y0aB1YY aGWxDDLvILPkqhudddqYa91ZL6ANUGeI6DAWAmdhdpiv5CM3hMryXvCS22hcaiCP vUvIPZf1Jn1+8bdua94ag9rR6Q1NhCz7fagOxgqa/dv8W5A7tUL0OFjTDW6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWRzwCXRhFKO92IBCK+9VRAKA3QwHwYDVR0j BBgwFoAUAA57fr9UPzes8RN10oRiqNOISiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0YzMzYjgtOWQ0Mi00MjA4LThhYzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VC RjU0M0YzN0FDRjExMzc1RDI4NDYyQThEMzg4NEEyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBFN0I3RUJGNTQzRjM3QUNGMTEzNzVEMjg0NjJBOEQzODg0 QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYy QThEMzg4NEEyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhLQUZKUAIZD8jBIPtCZn2AnRhb8kDwF54O qgWTgMTSCP201rej4VWK+t4bf+13xclgCjGBMv4Lt09kPTyavQwxOKQ/Q8yYxZZG GeLEVBu9nuOFsxTjfBgWVyn5e0Wm62w6kAMlPtbv/pYPd3BlBapE0nMU2dl7yc31 O9Ps+60xz+VVGCYxZhvnOyTGTpSwd52OwXasVxs1TfLfylbgeS3E4zqpPRxylu2X 876OyJh5KdcQM2VRf6feEjy8+WxboD0fvmW9ccoarahFisYpp2j6girdSr2vhPx5 bVuevZTNyOES3C9/OLjGQ2WlPasMaM4SNGaCaxEmfl5whc2sj84= -----END CERTIFICATE-----Generated at Thu Oct 8 15:56:59 2026 by rpki-client