$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft File: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft (raw, json) Hash identifier: lXj4SPtAfEgckD25wURcpBi9T0RNlMeOc78f/0We+hM= Subject key identifier: A3:89:7F:D4:5B:15:AE:12:87:24:06:54:44:22:65:5C:92:D1:47:56 Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 028F95F90C6E48A6E65E1A7728DE526AB6A5E464 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:55:09 +0000 Manifest this update: Fri 24 Jul 2026 00:50:09 +0000 Manifest next update: Sat 25 Jul 2026 03:35:09 +0000 Files and hashes: 1: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl (hash: JWwLr8Dxbpq/+upG4Mk1sqx56c7C+1pw8sCECh5gMfM=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E=) 3: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc=) 4: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8f:95:f9:0c:6e:48:a6:e6:5e:1a:77:28:de:52:6a:b6:a5:e4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: Jul 24 00:50:09 2026 GMT Not After : Jul 25 03:35:09 2026 GMT Subject: CN=A3897FD45B15AE12872406544422655C92D14756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:0b:55:59:8d:42:1a:01:20:30:7e:45:62: ed:3e:7e:d7:8a:64:84:b7:cb:18:31:07:a9:cb:25: ba:7e:10:4e:75:1b:86:17:35:18:93:e1:df:f7:78: ec:68:20:68:37:ec:8e:98:ea:0c:c6:b4:4c:b6:b6: 96:cb:90:31:18:e5:d6:d4:5d:08:42:08:8f:f3:4e: 84:e7:96:c1:d8:ab:6d:5d:72:0b:58:d6:01:29:f5: 6d:94:40:a1:d0:54:6c:d2:90:ec:a4:d5:ec:6a:2d: 63:d3:8b:7e:78:77:8d:4f:87:c0:1d:cf:4b:3d:eb: 83:0f:61:a2:79:a3:df:42:3a:14:f4:f5:d9:c8:6b: 24:52:a9:9a:e2:fa:f4:f3:14:b4:12:45:19:7f:ef: 6d:a2:cd:19:47:68:e6:9e:b9:91:49:0e:ef:b1:41: 52:07:4c:72:38:a3:44:d8:be:2c:90:6f:1b:f0:9a: c3:ab:99:0e:b3:ef:d5:b7:95:f9:74:4f:30:a7:43: e6:6b:27:df:b7:63:ea:70:42:32:f9:74:38:6c:82: b5:b5:5b:23:ee:c8:b8:32:7c:f9:3d:65:c1:b3:01: 8a:8c:d3:4a:87:ff:01:3b:af:52:31:cd:c1:4f:9a: 71:55:8b:b0:d3:66:16:a4:57:7f:eb:b6:8e:88:fa: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:7F:D4:5B:15:AE:12:87:24:06:54:44:22:65:5C:92:D1:47:56 X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f8:8a:c0:44:c3:94:e3:e1:e0:48:f7:25:b7:bd:e3:0e:d3: e5:a3:0a:c5:4f:bf:8f:53:ca:c6:be:33:28:32:a7:d6:a4:9d: d5:f9:62:1b:a9:da:e9:aa:27:f6:4f:20:bb:f6:aa:76:44:65: 28:fc:70:a2:75:14:d9:64:da:31:67:ba:97:b8:2b:69:bb:2b: 97:23:b7:c6:9c:60:f0:8b:f9:73:3f:f6:4d:85:3f:99:bd:49: c2:0c:00:91:8b:e1:36:1a:37:3c:f5:e9:9b:36:78:e6:8f:3c: 20:de:92:de:27:85:bd:f3:87:42:4b:e4:cb:e7:b2:a3:bb:fd: a3:05:e2:f3:d6:13:d3:3a:11:ea:de:46:2c:33:ca:4c:5b:e0: ac:e6:97:0c:d9:0b:63:c2:9d:4b:bd:cf:35:1a:dd:ea:85:5d: ff:fd:1b:e7:55:21:12:36:04:97:f0:50:27:9c:30:56:c2:87: 05:48:04:19:7b:3c:14:a0:1b:af:4f:ee:79:30:00:59:93:9e: 49:fe:3f:5d:53:1a:d3:d8:c3:57:5f:65:52:e8:50:61:73:b6: 93:9f:f0:ee:a0:36:6b:ae:f1:90:0a:6f:7c:c6:df:d1:63:d3: e0:c6:11:19:ab:0e:a0:90:dd:0a:18:13:40:80:28:c9:25:a9: 17:ac:b0:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAo+V+QxuSKbmXhp3KN5Saral5GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA3MjQwMDUwMDlaFw0yNjA3MjUwMzM1MDlaMDMxMTAvBgNV BAMTKEEzODk3RkQ0NUIxNUFFMTI4NzI0MDY1NDQ0MjI2NTVDOTJEMTQ3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEgtVWY1CGgEgMH5FYu0+fteK ZIS3yxgxB6nLJbp+EE51G4YXNRiT4d/3eOxoIGg37I6Y6gzGtEy2tpbLkDEY5dbU XQhCCI/zToTnlsHYq21dcgtY1gEp9W2UQKHQVGzSkOyk1exqLWPTi354d41Ph8Ad z0s964MPYaJ5o99COhT09dnIayRSqZri+vTzFLQSRRl/722izRlHaOaeuZFJDu+x QVIHTHI4o0TYviyQbxvwmsOrmQ6z79W3lfl0TzCnQ+ZrJ9+3Y+pwQjL5dDhsgrW1 WyPuyLgyfPk9ZcGzAYqM00qH/wE7r1IxzcFPmnFVi7DTZhakV3/rto6I+hIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo4l/1FsVrhKHJAZURCJlXJLRR1YwHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFG Q0Q4MUZBMEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGP4isBEw5Tj4eBI9yW3veMO0+WjCsVPv49T ysa+Mygyp9akndX5Yhup2umqJ/ZPILv2qnZEZSj8cKJ1FNlk2jFnupe4K2m7K5cj t8acYPCL+XM/9k2FP5m9ScIMAJGL4TYaNzz16Zs2eOaPPCDekt4nhb3zh0JL5Mvn sqO7/aMF4vPWE9M6EereRiwzykxb4KzmlwzZC2PCnUu9zzUa3eqFXf/9G+dVIRI2 BJfwUCecMFbChwVIBBl7PBSgG69P7nkwAFmTnkn+P11TGtPYw1dfZVLoUGFztpOf 8O6gNmuu8ZAKb3zG39Fj0+DGERmrDqCQ3QoYE0CAKMklqRessEY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:48:34 2026 by rpki-client