$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: BO95o/M+jWumKvJo6MHg0ZceNTO4tTdKuNjI48rt1So= Subject key identifier: B1:FD:9F:4D:6F:CA:10:7D:F4:76:26:F8:C4:C6:75:14:9A:AC:FF:2A Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 3C60C5D6E123A3ECAB1B5A6E156F0E6B49B78D19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 15:03:18 +0000 Manifest this update: Sat 14 Nov 2026 14:58:18 +0000 Manifest next update: Sun 15 Nov 2026 17:53:18 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) 2: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: TrZn6VsfkSdf3kz/ZF/RG21fLbJmue3G/nFlQyEk418=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:60:c5:d6:e1:23:a3:ec:ab:1b:5a:6e:15:6f:0e:6b:49:b7:8d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Nov 14 14:58:18 2026 GMT Not After : Nov 15 17:53:18 2026 GMT Subject: CN=B1FD9F4D6FCA107DF47626F8C4C675149AACFF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:21:bb:e4:fc:91:96:a3:1a:bd:46:4a:e2: da:dc:87:9a:3c:81:6d:ae:53:25:d2:bc:9f:41:a4: 9a:bd:10:61:01:4d:3d:6a:b5:8b:36:ec:f0:e1:d3: 97:48:3c:03:79:e6:d5:aa:16:61:ce:f3:1c:f5:40: 6e:f9:19:cc:1e:4b:a0:40:d9:b2:55:24:9a:88:1c: ec:f3:fc:d2:e3:8b:78:3b:9f:a5:b2:f6:2a:fe:a9: af:e0:3f:27:b7:fa:78:ac:5e:23:d2:87:fc:ae:23: 4e:5b:0e:05:d7:3a:e4:b8:68:cf:93:4d:a5:94:d6: 32:c9:33:2a:9f:73:54:fb:b7:b8:fb:1f:3a:98:cd: 56:fb:7e:9b:9a:64:68:a0:8f:18:56:bd:08:b5:a7: ce:4e:1d:20:82:cc:bf:7e:5b:bd:86:c7:c7:2d:35: 5a:92:29:66:34:99:f6:de:be:d8:8e:82:68:d6:1b: a0:48:2d:18:18:47:8a:19:d7:46:df:a4:77:e4:12: d1:8b:83:10:da:f7:df:1d:8b:b2:a4:a2:29:d4:47: 0d:00:8e:c9:b4:97:87:e8:ec:a2:73:f9:51:ac:e7: 8d:84:15:6f:b5:fa:de:15:c9:6c:4e:5a:01:ff:b7: 19:f4:52:aa:f6:5b:74:65:ab:9e:d8:e5:75:da:b0: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:9F:4D:6F:CA:10:7D:F4:76:26:F8:C4:C6:75:14:9A:AC:FF:2A X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:27:40:7b:45:12:8c:30:a3:de:d0:0e:6a:77:6b:65:61:b6: ed:de:34:a7:74:40:4c:2d:de:ed:f6:9b:95:47:45:4a:55:ec: 7d:b3:92:cf:73:7f:3a:32:24:57:40:99:f5:a2:d6:dd:b2:96: 7b:6f:3b:e0:03:7f:f2:a6:3b:64:3d:3e:0b:ec:7f:77:88:07: 96:1f:ba:36:b5:40:1e:0b:73:32:57:aa:6c:87:52:fa:62:58: bf:03:2d:f0:95:f3:8d:a3:fc:f1:c1:f1:e1:ef:08:8b:58:c3: 01:27:95:76:6f:b4:39:71:c3:23:de:b3:9c:ff:72:7b:42:ea: ab:04:67:a1:c0:16:9d:8c:0c:1c:a1:9e:93:0c:e1:93:9e:11: 76:56:e2:ee:4f:10:c2:d7:2b:d8:72:2b:4b:58:15:0d:9d:cd: a5:aa:4d:c6:b0:b8:46:2c:60:53:2b:fe:78:cc:94:d4:22:2d: c1:bc:bb:90:96:66:07:a7:a8:2b:0e:27:f1:8b:e5:3b:9a:65: c7:56:44:cc:0e:d2:b6:bf:05:8a:4d:3c:74:9c:36:4a:c9:15: 84:95:a4:77:43:72:f3:c7:67:4e:df:96:35:1f:bd:36:29:ce: b6:60:29:c8:1b:62:88:34:e6:2b:5d:a1:d0:0b:3f:2b:7a:9b: ab:62:d5:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGDF1uEjo+yrG1puFW8Oa0m3jRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjExMTQxNDU4MThaFw0yNjExMTUxNzUzMThaMDMxMTAvBgNV BAMTKEIxRkQ5RjRENkZDQTEwN0RGNDc2MjZGOEM0QzY3NTE0OUFBQ0ZGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsCG75PyRlqMavUZK4trch5o8 gW2uUyXSvJ9BpJq9EGEBTT1qtYs27PDh05dIPAN55tWqFmHO8xz1QG75GcweS6BA 2bJVJJqIHOzz/NLji3g7n6Wy9ir+qa/gPye3+nisXiPSh/yuI05bDgXXOuS4aM+T TaWU1jLJMyqfc1T7t7j7HzqYzVb7fpuaZGigjxhWvQi1p85OHSCCzL9+W72Gx8ct NVqSKWY0mfbevtiOgmjWG6BILRgYR4oZ10bfpHfkEtGLgxDa998di7KkoinURw0A jsm0l4fo7KJz+VGs542EFW+1+t4VyWxOWgH/txn0Uqr2W3Rlq57Y5XXasB1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsf2fTW/KEH30dib4xMZ1FJqs/yowHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMnQHtFEowwo97QDmp3a2Vhtu3eNKd0QEwt 3u32m5VHRUpV7H2zks9zfzoyJFdAmfWi1t2ylntvO+ADf/KmO2Q9Pgvsf3eIB5Yf uja1QB4LczJXqmyHUvpiWL8DLfCV842j/PHB8eHvCItYwwEnlXZvtDlxwyPes5z/ cntC6qsEZ6HAFp2MDByhnpMM4ZOeEXZW4u5PEMLXK9hyK0tYFQ2dzaWqTcawuEYs YFMr/njMlNQiLcG8u5CWZgenqCsOJ/GL5TuaZcdWRMwO0ra/BYpNPHScNkrJFYSV pHdDcvPHZ07fljUfvTYpzrZgKcgbYog05itdodALPyt6m6ti1Rk= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:14 2026 by rpki-client