$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft File: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft (raw, json) Hash identifier: Ahe831BGYDjSZddpzKNLl2POvurPG+ZRmBoWKdXr+yg= Subject key identifier: DD:80:93:09:72:85:D5:01:8B:9C:8C:98:5F:A9:07:D1:B5:3B:48:BE Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 0E31D94F6AF9A9262E7E90A6BA539827F0E3A1AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 23:44:54 +0000 Manifest this update: Thu 24 Sep 2026 23:39:54 +0000 Manifest next update: Sat 26 Sep 2026 03:27:54 +0000 Files and hashes: 1: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E=) 3: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl (hash: DCOmVy67YSK2iUa5s81cqHU6hH2mkJKf1xme4yh2d6A=) 4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:31:d9:4f:6a:f9:a9:26:2e:7e:90:a6:ba:53:98:27:f0:e3:a1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: Sep 24 23:39:54 2026 GMT Not After : Sep 26 03:27:54 2026 GMT Subject: CN=DD8093097285D5018B9C8C985FA907D1B53B48BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:6b:9f:16:19:ec:4b:79:00:55:94:01:a3: c4:d5:cb:95:62:6b:92:98:72:8e:29:f1:33:89:72: 0d:fa:c1:ec:bf:b4:fa:e4:3b:f1:45:7b:1c:a7:bd: 5d:0f:72:fa:9d:43:34:8d:77:40:e8:1c:fe:96:96: 15:10:5f:85:69:7b:db:21:16:7d:ba:9a:7e:8c:68: 5f:5b:a8:a1:bd:fe:ad:d5:cb:05:e9:5b:13:fd:6e: ab:ee:4e:a7:01:c5:d2:0b:71:ef:dd:3f:d5:f1:74: 21:18:00:6f:04:b8:b7:18:98:63:dc:4a:eb:09:94: 00:f7:7f:b6:7e:5a:9f:e1:94:48:e8:2e:e9:9f:92: 50:18:9e:07:38:53:30:67:c2:ed:e1:63:c6:d9:ba: 9f:32:af:78:b3:bf:82:4c:83:c9:d4:7b:c0:43:75: ba:b4:6e:cb:3b:b6:8b:45:f5:2f:4f:85:fb:7c:91: 37:86:ac:b3:43:03:02:a5:6d:2a:d2:19:61:6f:c8: 21:f9:66:3e:c2:86:0b:13:46:93:b6:98:9e:aa:81: aa:4b:fe:b2:65:53:7b:31:37:6c:db:37:49:04:3c: 54:69:da:72:1f:0b:57:9c:1f:f7:31:11:dc:02:45: 1e:fd:c2:d3:a1:f9:3f:62:20:26:2f:e3:8a:ce:25: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:80:93:09:72:85:D5:01:8B:9C:8C:98:5F:A9:07:D1:B5:3B:48:BE X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c5:f6:3e:34:cb:8f:f5:e5:4f:2f:26:18:91:03:07:6b:f1: 96:a9:00:f6:65:06:0b:17:72:97:37:ca:85:94:55:a2:1c:ec: da:d3:01:41:34:a4:dd:34:b2:8c:67:25:17:5a:d1:9c:13:b3: 2e:b1:9e:67:e8:1e:5d:81:eb:6b:6a:f4:ad:84:6c:5c:e9:b3: 6f:5c:f3:62:54:a9:54:e3:54:1d:49:ce:57:4a:92:36:bd:30: 10:93:8e:04:ad:97:77:15:b2:22:47:44:bb:f0:f0:f2:02:9f: 64:34:56:3a:8d:cd:74:d8:81:08:2c:74:dd:1f:41:1b:92:80: ac:99:40:57:c9:e4:08:41:da:2f:6b:c0:d2:0f:e6:de:f0:6d: 7b:ef:e1:fa:4d:16:d6:df:db:f7:97:1b:3e:23:64:8d:b3:0b: fe:5f:c1:9e:e3:e5:9e:ae:8c:85:3f:3d:7d:57:32:cd:7f:66: 2b:48:7e:f6:a9:98:22:3d:89:48:08:5d:49:9a:64:61:df:bb: da:85:c1:72:4a:b8:0d:71:a3:4f:d2:bc:1a:0b:e3:83:1c:aa: 49:5b:c5:cf:59:a2:f6:ed:00:bd:68:e3:c7:f7:4d:7d:e4:d8: 97:b5:78:8b:ba:72:f1:63:d3:25:03:b7:69:14:d1:54:24:a7: e6:b5:f8:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjHZT2r5qSYufpCmulOYJ/Djoa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA5MjQyMzM5NTRaFw0yNjA5MjYwMzI3NTRaMDMxMTAvBgNV BAMTKEREODA5MzA5NzI4NUQ1MDE4QjlDOEM5ODVGQTkwN0QxQjUzQjQ4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKmufFhnsS3kAVZQBo8TVy5Vi a5KYco4p8TOJcg36wey/tPrkO/FFexynvV0PcvqdQzSNd0DoHP6WlhUQX4Vpe9sh Fn26mn6MaF9bqKG9/q3VywXpWxP9bqvuTqcBxdILce/dP9XxdCEYAG8EuLcYmGPc SusJlAD3f7Z+Wp/hlEjoLumfklAYngc4UzBnwu3hY8bZup8yr3izv4JMg8nUe8BD dbq0bss7totF9S9Phft8kTeGrLNDAwKlbSrSGWFvyCH5Zj7ChgsTRpO2mJ6qgapL /rJlU3sxN2zbN0kEPFRp2nIfC1ecH/cxEdwCRR79wtOh+T9iICYv44rOJdOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YCTCXKF1QGLnIyYX6kH0bU7SL4wHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFG Q0Q4MUZBMEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzF9j40y4/15U8vJhiRAwdr8ZapAPZlBgsX cpc3yoWUVaIc7NrTAUE0pN00soxnJRda0ZwTsy6xnmfoHl2B62tq9K2EbFzps29c 82JUqVTjVB1JzldKkja9MBCTjgStl3cVsiJHRLvw8PICn2Q0VjqNzXTYgQgsdN0f QRuSgKyZQFfJ5AhB2i9rwNIP5t7wbXvv4fpNFtbf2/eXGz4jZI2zC/5fwZ7j5Z6u jIU/PX1XMs1/ZitIfvapmCI9iUgIXUmaZGHfu9qFwXJKuA1xo0/SvBoL44Mcqklb xc9ZovbtAL1o48f3TX3k2Je1eIu6cvFj0yUDt2kU0VQkp+a1+Do= -----END CERTIFICATE-----Generated at Fri Sep 25 05:48:07 2026 by rpki-client