$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: OVd0ELiaX/OlrRJdf5ORiXIf1/Bfli5y4hvEhFX8zjQ= Subject key identifier: F1:8B:E2:A1:D4:D4:58:11:35:CE:A3:6D:39:B7:39:35:18:A7:57:FD Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 1FF7923580DCF70836548D5ADD94019247AA3C7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:35:10 +0000 Manifest this update: Wed 23 Sep 2026 19:30:10 +0000 Manifest next update: Thu 24 Sep 2026 22:04:10 +0000 Files and hashes: 1: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: kYQnEG+xBG8qh8ThQfUgpnfcwPaAJuCzSjkjxecu6gI=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f7:92:35:80:dc:f7:08:36:54:8d:5a:dd:94:01:92:47:aa:3c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Sep 23 19:30:10 2026 GMT Not After : Sep 24 22:04:10 2026 GMT Subject: CN=F18BE2A1D4D4581135CEA36D39B7393518A757FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:dc:c6:9b:2e:5d:3c:e2:4b:4c:b9:9a:20: 8e:d1:96:a4:47:b9:43:7a:9e:55:95:53:93:59:42: b6:4f:d9:de:69:3e:e9:73:ff:87:7a:88:8a:e2:36: b3:3f:af:bc:62:5d:6a:d5:11:7f:28:3d:ed:c5:ba: 9f:81:60:bc:a4:05:a2:dd:da:e8:4b:3a:31:7c:b6: bf:e9:c9:d0:d0:56:05:4b:e7:d4:39:97:68:96:ce: ff:3e:80:09:f0:45:f4:6f:7c:c6:44:36:61:93:15: ab:50:c9:44:bc:b4:7c:4e:08:03:1a:86:f2:b3:28: 84:13:4a:88:f2:1a:04:fd:fc:19:65:b7:92:52:23: fd:26:cf:e7:6e:c6:03:80:2e:28:58:a9:e0:f2:33: 45:6f:b1:1c:16:d1:d0:30:a1:3d:a7:48:96:20:af: 46:74:f0:d1:53:68:cf:86:8e:b2:79:73:38:ba:66: f6:92:63:1c:de:ba:14:6d:d7:19:c3:ba:4f:7b:42: 7c:ec:8c:c9:63:c5:64:63:20:11:ff:0c:e3:15:29: 90:48:fc:ad:03:c8:60:3d:27:27:69:70:74:3a:df: dc:4a:7c:6b:45:8d:fc:35:90:be:a6:98:3e:c5:17: 99:25:57:d6:a1:4e:d9:ff:39:41:ae:4e:4c:df:67: cd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:E2:A1:D4:D4:58:11:35:CE:A3:6D:39:B7:39:35:18:A7:57:FD X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2d:51:43:17:0c:df:0d:70:18:06:2b:8f:80:d5:15:ff:1a: a8:d0:9a:42:95:2e:76:d5:c7:31:5c:e1:71:0e:2e:82:66:05: f2:bc:af:58:19:f5:71:30:e7:0c:42:18:84:4f:76:6e:56:dd: 86:e9:0f:3c:ae:df:dd:4d:69:6e:81:68:47:88:f3:9f:6b:24: 46:7d:24:6b:a9:6a:7c:28:83:64:33:af:88:ac:2b:2f:27:f8: 14:9f:8d:eb:b4:c0:cc:e5:a2:e1:23:50:cb:8f:20:9b:55:50: 27:c5:93:79:df:27:08:55:55:98:30:0b:05:3d:62:fd:a3:4b: dd:e9:6b:16:70:d7:90:48:ac:f9:52:ef:03:13:61:36:ec:28: 23:53:c9:fc:d4:e5:5a:50:6f:95:53:8d:c3:17:3a:55:9f:d7: 94:e8:5e:36:e5:d2:36:0e:dc:da:ee:5c:a0:dd:09:2c:fb:e0: 72:2c:20:63:0e:a7:66:8d:29:ed:de:30:c9:1b:78:f2:bc:81: 5a:0d:a2:ff:bb:e6:3e:40:4b:9d:0e:cf:b9:01:2a:70:4e:e0: bf:3d:ce:18:f5:71:b8:04:7d:83:dd:df:d0:7c:61:6e:55:fe: 99:23:73:2b:4d:3e:39:87:e7:0f:63:ae:6c:a9:2e:3f:f5:71: 86:ea:2a:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/eSNYDc9wg2VI1a3ZQBkkeqPH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA5MjMxOTMwMTBaFw0yNjA5MjQyMjA0MTBaMDMxMTAvBgNV BAMTKEYxOEJFMkExRDRENDU4MTEzNUNFQTM2RDM5QjczOTM1MThBNzU3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DNzGmy5dPOJLTLmaII7RlqRH uUN6nlWVU5NZQrZP2d5pPulz/4d6iIriNrM/r7xiXWrVEX8oPe3Fup+BYLykBaLd 2uhLOjF8tr/pydDQVgVL59Q5l2iWzv8+gAnwRfRvfMZENmGTFatQyUS8tHxOCAMa hvKzKIQTSojyGgT9/Bllt5JSI/0mz+duxgOALihYqeDyM0VvsRwW0dAwoT2nSJYg r0Z08NFTaM+GjrJ5czi6ZvaSYxzeuhRt1xnDuk97QnzsjMljxWRjIBH/DOMVKZBI /K0DyGA9JydpcHQ639xKfGtFjfw1kL6mmD7FF5klV9ahTtn/OUGuTkzfZ83bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8YviodTUWBE1zqNtObc5NRinV/0wHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgtUUMXDN8NcBgGK4+A1RX/GqjQmkKVLnbV xzFc4XEOLoJmBfK8r1gZ9XEw5wxCGIRPdm5W3YbpDzyu391NaW6BaEeI859rJEZ9 JGupanwog2Qzr4isKy8n+BSfjeu0wMzlouEjUMuPIJtVUCfFk3nfJwhVVZgwCwU9 Yv2jS93paxZw15BIrPlS7wMTYTbsKCNTyfzU5VpQb5VTjcMXOlWf15ToXjbl0jYO 3NruXKDdCSz74HIsIGMOp2aNKe3eMMkbePK8gVoNov+75j5AS50Oz7kBKnBO4L89 zhj1cbgEfYPd39B8YW5V/pkjcytNPjmH5w9jrmypLj/1cYbqKrU= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:47 2026 by rpki-client