$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft File: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json) Hash identifier: DE+OrrB4t9EkFG57ZkX3y2D2CLGmuiFsdzPtoqpTlmE= Subject key identifier: B1:DD:B6:58:71:AD:42:4D:AA:41:89:A7:77:BB:04:D3:F7:C5:51:D2 Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 Certificate issuer: /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Certificate serial: 53390B3FAED8295E9C19B7308E5338F2BF3E432E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:57:58 +0000 Manifest this update: Thu 24 Sep 2026 09:52:58 +0000 Manifest next update: Fri 25 Sep 2026 11:11:58 +0000 Files and hashes: 1: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: umYQ301ROOmiopiNrEDntI9MrU0W7ICjF5WFKXMz+Y8=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:39:0b:3f:ae:d8:29:5e:9c:19:b7:30:8e:53:38:f2:bf:3e:43:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Validity Not Before: Sep 24 09:52:58 2026 GMT Not After : Sep 25 11:11:58 2026 GMT Subject: CN=B1DDB65871AD424DAA4189A777BB04D3F7C551D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:f6:f4:37:f4:a3:b0:21:4f:26:b5:c9:51: a8:a4:4e:6f:ec:b6:55:ad:2d:44:3f:8f:e0:3a:b3: 99:b5:6e:fc:0c:b3:1f:73:65:e5:2b:54:5d:79:6a: ce:d1:64:d2:cf:a8:72:25:11:00:2a:67:ab:82:0d: 80:ce:4a:07:22:8d:cd:6b:07:91:a9:6b:9c:a9:d7: b7:ac:1d:c1:3c:49:b2:69:21:53:09:93:96:90:b2: cf:79:19:eb:7c:5c:5b:74:8c:69:5f:09:53:44:18: d0:12:ca:c0:b8:d6:aa:20:90:63:0e:ac:34:36:60: 69:7a:30:74:c9:78:28:b3:e3:b9:99:45:34:54:af: 73:bc:3d:91:b2:ab:e7:2c:9a:8f:c1:36:85:37:67: 69:94:10:e2:10:ba:7e:b2:3e:99:e0:79:c8:b8:1d: 2e:bc:a0:c7:a2:28:ea:0a:be:b4:8d:3a:6b:6a:ee: c0:87:ac:d8:b2:0e:55:78:55:2d:af:db:93:f0:a7: 08:86:2c:be:72:3a:8a:8c:0a:ae:2a:6f:59:15:d7: 46:c8:15:d0:ba:20:6f:f4:20:78:d4:97:00:ee:60: 8d:ec:ad:44:7d:67:36:d0:9e:ea:d7:5e:c3:f5:65: d2:83:ec:c7:be:31:14:97:b3:a6:4c:0e:34:b9:0e: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DD:B6:58:71:AD:42:4D:AA:41:89:A7:77:BB:04:D3:F7:C5:51:D2 X509v3 Authority Key Identifier: keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:14:ca:ad:9b:9f:d4:d3:e0:33:d1:27:ee:a9:12:2b:b0:8a: 92:56:50:e9:a8:66:7a:7f:22:3a:c0:db:b5:2e:f3:84:80:52: 95:b6:1c:a1:a4:dd:00:66:2a:61:00:93:7e:6c:df:15:2c:23: af:79:d6:c0:de:87:41:a3:4a:5a:7f:bb:96:7b:90:6e:f0:a9: 97:13:aa:12:a9:ea:b6:19:e2:fb:89:fa:f3:34:60:ed:b8:64: 38:d3:88:b2:d6:da:67:24:ff:0b:4f:9a:b6:7a:2e:2d:07:bd: 17:7e:62:aa:94:bd:93:ce:bb:ed:71:15:6f:1e:ce:6c:f4:da: 81:34:b5:1a:9c:d9:93:56:81:f1:5f:00:20:d3:3f:54:c0:94: 38:11:31:84:d5:94:f1:28:39:03:bc:68:70:4f:c7:05:e2:a9: ca:41:eb:9b:da:03:2a:4a:bf:de:6d:06:cd:5a:27:c0:f6:78: d2:a5:08:b7:21:c6:6a:d8:1c:1a:aa:87:fe:59:d1:ce:ea:40: 2f:c4:d8:7d:7e:59:91:38:ad:ea:55:ad:f6:12:bb:05:3c:06: 29:e9:ae:37:db:30:8e:97:27:be:4e:fb:c4:30:1a:6e:7e:85: e8:c0:dd:15:7b:94:16:29:c9:56:05:57:76:3d:fe:28:b8:8b: 69:5c:33:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzkLP67YKV6cGbcwjlM48r8+Qy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1 MUVDRkFGOTAeFw0yNjA5MjQwOTUyNThaFw0yNjA5MjUxMTExNThaMDMxMTAvBgNV BAMTKEIxRERCNjU4NzFBRDQyNERBQTQxODlBNzc3QkIwNEQzRjdDNTUxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZkPb0N/SjsCFPJrXJUaikTm/s tlWtLUQ/j+A6s5m1bvwMsx9zZeUrVF15as7RZNLPqHIlEQAqZ6uCDYDOSgcijc1r B5Gpa5yp17esHcE8SbJpIVMJk5aQss95Get8XFt0jGlfCVNEGNASysC41qogkGMO rDQ2YGl6MHTJeCiz47mZRTRUr3O8PZGyq+csmo/BNoU3Z2mUEOIQun6yPpngeci4 HS68oMeiKOoKvrSNOmtq7sCHrNiyDlV4VS2v25PwpwiGLL5yOoqMCq4qb1kV10bI FdC6IG/0IHjUlwDuYI3srUR9ZzbQnurXXsP1ZdKD7Me+MRSXs6ZMDjS5DgNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsd22WHGtQk2qQYmnd7sE0/fFUdIwHwYDVR0j BBgwFoAUfvZrSI7kjlcbg30rMPC1z1Hs+vkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRjYTU4NjgtNTdlOS00OWI5LWJmZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4 RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1MUVDRkFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUY2NkI0ODhFRTQ4RTU3MUI4MzdEMkIzMEYwQjVDRjUxRUNG QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1 Q0Y1MUVDRkFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoUyq2bn9TT4DPRJ+6pEiuwipJWUOmoZnp/ IjrA27Uu84SAUpW2HKGk3QBmKmEAk35s3xUsI6951sDeh0GjSlp/u5Z7kG7wqZcT qhKp6rYZ4vuJ+vM0YO24ZDjTiLLW2mck/wtPmrZ6Li0HvRd+YqqUvZPOu+1xFW8e zmz02oE0tRqc2ZNWgfFfACDTP1TAlDgRMYTVlPEoOQO8aHBPxwXiqcpB65vaAypK v95tBs1aJ8D2eNKlCLchxmrYHBqqh/5Z0c7qQC/E2H1+WZE4repVrfYSuwU8Binp rjfbMI6XJ75O+8QwGm5+hejA3RV7lBYpyVYFV3Y9/ii4i2lcM54= -----END CERTIFICATE-----Generated at Fri Sep 25 02:52:24 2026 by rpki-client