$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft File: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft (raw, json) Hash identifier: njinKx+8fCl04MOA/DCRii6tfYHqVkBDclN2ndQp6hA= Subject key identifier: 2E:7A:B3:C9:D5:81:C4:9D:4A:B7:93:80:F0:4C:39:D6:D7:6A:29:83 Authority key identifier: 7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 Certificate issuer: /CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Certificate serial: 1384E347517EC19365ED54927EA2C9FC76DDDA79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:51:08 +0000 Manifest this update: Fri 25 Sep 2026 00:46:08 +0000 Manifest next update: Sat 26 Sep 2026 01:30:08 +0000 Files and hashes: 1: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl (hash: ifdcs7LkLIGJ8qjH5HnAzpXlUzo8eTlCZ68c2TCGazY=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: f9D+tmlskJQe+GGM2u5fqymt4sZqzjW31b307vrzFZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:84:e3:47:51:7e:c1:93:65:ed:54:92:7e:a2:c9:fc:76:dd:da:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Validity Not Before: Sep 25 00:46:08 2026 GMT Not After : Sep 26 01:30:08 2026 GMT Subject: CN=2E7AB3C9D581C49D4AB79380F04C39D6D76A2983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:c4:78:53:e1:1d:86:2d:db:38:99:8b:36: b5:46:c0:de:1b:d2:4e:79:1d:67:b0:ab:69:86:c7: 8a:35:2e:3f:14:d4:ae:a9:6e:54:55:b2:9f:0c:d7: 6b:2c:12:7f:7b:15:54:98:a1:7d:bd:16:c2:98:9b: 38:f8:73:8b:d6:92:9a:19:f0:79:e8:aa:4e:e9:12: c9:7b:87:37:c5:7f:8b:41:4f:48:2a:57:79:9c:5c: df:af:98:4d:9b:95:b1:67:61:cb:28:24:5f:41:6b: ac:c3:8c:ac:2f:1e:05:cf:64:fa:ba:f7:d4:0e:07: 27:1c:db:61:c8:fa:22:a5:68:f6:c8:09:8f:d8:3b: 46:68:d4:57:11:cb:be:50:23:fa:40:08:58:1f:83: a5:9c:01:73:60:2f:6e:7a:90:c1:1b:88:d4:01:e0: 5a:8e:07:77:70:b6:64:56:11:59:5b:95:a2:9d:60: a4:25:7e:45:27:29:0b:57:14:0d:8a:55:6a:f5:75: 6c:05:95:6d:42:13:df:ce:16:c6:4d:24:66:56:26: 76:2a:62:27:6c:33:4f:a5:fa:7e:11:ac:5c:d0:cb: dc:57:9c:a6:68:9a:ee:b4:32:8c:6b:09:50:2e:8f: 46:61:b2:db:15:ba:cf:e6:9c:d2:27:95:34:38:3d: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7A:B3:C9:D5:81:C4:9D:4A:B7:93:80:F0:4C:39:D6:D7:6A:29:83 X509v3 Authority Key Identifier: keyid:7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:4a:bf:f6:56:1e:ed:6e:e0:c8:03:0a:6a:a4:2c:47:e1: 1f:2e:ab:8d:cb:16:9e:56:e0:76:4c:6b:ed:fc:c7:de:55:3b: 9c:ba:f2:ae:2d:1c:9b:4d:20:48:45:07:38:88:ee:1a:0e:68: e1:3b:6f:ad:02:16:0a:a7:79:f0:e6:18:45:db:c1:0c:c1:7d: 13:2d:a7:51:be:71:31:a1:3e:aa:01:cf:89:73:7b:19:a4:ac: c7:f6:7b:c9:ce:f0:f9:82:7a:03:53:5c:06:b5:2e:e7:02:f6: 90:91:09:c9:78:28:5f:5f:70:7d:9f:57:e3:e8:3a:a1:64:73: d5:ac:d8:e0:39:d3:13:27:5e:bd:8b:ab:57:a9:22:53:63:f7: 08:94:46:46:4b:76:21:a1:2d:9e:5d:f1:99:db:e6:ed:6f:a7: d1:64:d9:2d:ed:9e:e1:87:27:88:de:17:a7:f2:18:6f:af:55: 34:a4:d8:a6:65:7e:04:3b:b5:93:b0:cb:bf:d1:80:8d:fd:04: 54:09:30:a6:88:bf:cc:a2:12:31:60:92:65:b5:a0:62:91:53: 07:56:e8:85:85:52:48:39:ea:33:6b:4f:88:1a:d5:a8:7a:25: e0:24:05:18:a2:6f:c8:4a:5a:5c:38:e0:4d:4b:0c:c0:71:39: a3:06:ef:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4TjR1F+wZNl7VSSfqLJ/Hbd2nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5 QjNFMkYyMDAeFw0yNjA5MjUwMDQ2MDhaFw0yNjA5MjYwMTMwMDhaMDMxMTAvBgNV BAMTKDJFN0FCM0M5RDU4MUM0OUQ0QUI3OTM4MEYwNEMzOUQ2RDc2QTI5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKscR4U+Edhi3bOJmLNrVGwN4b 0k55HWewq2mGx4o1Lj8U1K6pblRVsp8M12ssEn97FVSYoX29FsKYmzj4c4vWkpoZ 8Hnoqk7pEsl7hzfFf4tBT0gqV3mcXN+vmE2blbFnYcsoJF9Ba6zDjKwvHgXPZPq6 99QOBycc22HI+iKlaPbICY/YO0Zo1FcRy75QI/pACFgfg6WcAXNgL256kMEbiNQB 4FqOB3dwtmRWEVlblaKdYKQlfkUnKQtXFA2KVWr1dWwFlW1CE9/OFsZNJGZWJnYq YidsM0+l+n4RrFzQy9xXnKZomu60MoxrCVAuj0ZhstsVus/mnNInlTQ4PeXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULnqzydWBxJ1Kt5OA8Ew51tdqKYMwHwYDVR0j BBgwFoAUf84+KOKZ7AcX9XiiMau2X5s+LyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMTRlM2EtNWJlMC00NmQxLTkwM2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhF Mjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5QjNFMkYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkNFM0UyOEUyOTlFQzA3MTdGNTc4QTIzMUFCQjY1RjlCM0Uy RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2 NUY5QjNFMkYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT0Sr/2Vh7tbuDIAwpqpCxH4R8uq43LFp5W 4HZMa+38x95VO5y68q4tHJtNIEhFBziI7hoOaOE7b60CFgqnefDmGEXbwQzBfRMt p1G+cTGhPqoBz4lzexmkrMf2e8nO8PmCegNTXAa1LucC9pCRCcl4KF9fcH2fV+Po OqFkc9Ws2OA50xMnXr2Lq1epIlNj9wiURkZLdiGhLZ5d8Znb5u1vp9Fk2S3tnuGH J4jeF6fyGG+vVTSk2KZlfgQ7tZOwy7/RgI39BFQJMKaIv8yiEjFgkmW1oGKRUwdW 6IWFUkg56jNrT4ga1ah6JeAkBRiib8hKWlw44E1LDMBxOaMG7z4= -----END CERTIFICATE-----Generated at Fri Sep 25 06:51:06 2026 by rpki-client