$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: NR7xoGQtf1yRu6F9z6SI5Lq2kGn3vpSnELHODfve7CY= Subject key identifier: D9:E1:ED:15:66:B4:19:CC:F9:E5:FD:28:D1:8B:47:3E:17:E6:F2:49 Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 36D370F87617A2F4AE74ADC21722D0B436277C54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 13:58:27 +0000 Manifest this update: Wed 23 Sep 2026 13:53:27 +0000 Manifest next update: Thu 24 Sep 2026 15:31:27 +0000 Files and hashes: 1: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: HI4NPOaDH3KqnimxjbP9rDRzJPTW+B/DSe5LmgELzEI=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d3:70:f8:76:17:a2:f4:ae:74:ad:c2:17:22:d0:b4:36:27:7c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Sep 23 13:53:27 2026 GMT Not After : Sep 24 15:31:27 2026 GMT Subject: CN=D9E1ED1566B419CCF9E5FD28D18B473E17E6F249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:56:ee:98:88:8b:04:67:77:3e:c9:3f:9c: b1:88:91:33:42:42:45:dd:6a:25:5e:a5:72:14:c1: d5:29:11:4d:8b:76:d0:01:c1:2b:46:41:83:b2:20: a3:35:0e:99:f3:a3:4b:ac:dd:f0:55:7b:8b:48:3d: 14:4e:28:5e:81:85:91:51:ee:0c:8c:e9:3e:ca:d3: e1:bd:c3:65:29:46:a2:04:54:77:4b:4c:ca:15:ae: 7a:32:71:49:82:17:a7:f4:41:03:7b:77:b3:35:a9: d2:4c:c4:10:f9:38:39:a3:d0:ec:35:e5:cd:f9:11: 75:e7:2f:a7:c5:95:3c:0e:b4:c9:13:6d:fc:8d:45: 18:cc:46:31:97:76:39:55:8d:55:39:4a:7b:2f:25: a3:3a:fe:f1:89:4b:fe:50:bc:2c:8c:95:f9:63:d4: 0f:46:10:46:f1:d5:c0:ed:dc:70:91:c8:41:a1:84: 85:af:86:c9:bc:ee:02:34:21:b5:40:fb:d8:05:c1: 10:55:4b:37:94:72:be:c4:55:5d:9f:aa:b8:39:41: 77:2a:63:5c:58:5b:cc:36:a9:4b:e0:8a:b1:43:96: b7:30:b5:f6:43:01:3e:cd:76:c6:3c:28:ba:2f:06: b1:19:32:ba:ec:64:08:b1:ea:ee:dd:10:fb:7e:23: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:ED:15:66:B4:19:CC:F9:E5:FD:28:D1:8B:47:3E:17:E6:F2:49 X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9d:7a:c2:34:53:27:15:97:07:d5:1d:f4:b9:de:85:1c:d4: 2b:b6:38:d0:16:bc:57:97:2b:e8:c8:c1:a3:4d:00:86:44:18: c5:7f:98:7f:21:a7:b7:6b:01:75:76:28:93:e2:7d:c1:b3:b1: 93:c9:9a:0b:35:37:e0:99:30:ff:4b:73:94:22:df:6e:1f:1f: 20:1d:43:95:fe:4f:4c:7d:99:bb:50:55:27:a1:65:41:1b:2b: 88:10:cb:14:25:f8:4c:4d:2c:68:a3:b1:84:eb:5a:66:26:c1: 50:d7:3e:27:1f:2b:32:85:7c:f5:33:fb:bf:91:96:0c:10:81: 6a:21:6a:c0:0a:6b:bf:2e:97:8f:bc:87:b3:3f:dd:01:b0:86: b8:15:b0:43:b0:94:ee:53:a5:db:7e:f4:97:8f:91:8d:2f:6b: 30:97:73:d4:d7:0d:77:2b:d5:7e:48:ed:57:a6:2e:01:4a:d4: e6:b3:69:9b:ca:02:28:1e:2f:0f:2a:18:71:83:f4:4f:ec:6a: c2:54:72:7e:7a:c1:dd:32:ab:56:83:d3:52:3b:0f:2b:15:56: 41:5d:7e:50:26:4d:d9:dc:45:a0:da:16:94:5b:d6:80:ff:f7: 64:a8:35:76:0e:ba:e1:14:b0:2d:f9:0f:14:a0:a2:56:42:ab: 7f:8b:d7:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtNw+HYXovSudK3CFyLQtDYnfFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA5MjMxMzUzMjdaFw0yNjA5MjQxNTMxMjdaMDMxMTAvBgNV BAMTKEQ5RTFFRDE1NjZCNDE5Q0NGOUU1RkQyOEQxOEI0NzNFMTdFNkYyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3VbumIiLBGd3Psk/nLGIkTNC QkXdaiVepXIUwdUpEU2LdtABwStGQYOyIKM1Dpnzo0us3fBVe4tIPRROKF6BhZFR 7gyM6T7K0+G9w2UpRqIEVHdLTMoVrnoycUmCF6f0QQN7d7M1qdJMxBD5ODmj0Ow1 5c35EXXnL6fFlTwOtMkTbfyNRRjMRjGXdjlVjVU5SnsvJaM6/vGJS/5QvCyMlflj 1A9GEEbx1cDt3HCRyEGhhIWvhsm87gI0IbVA+9gFwRBVSzeUcr7EVV2fqrg5QXcq Y1xYW8w2qUvgirFDlrcwtfZDAT7NdsY8KLovBrEZMrrsZAix6u7dEPt+I0SRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2eHtFWa0Gcz55f0o0YtHPhfm8kkwHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJydesI0UycVlwfVHfS53oUc1Cu2ONAWvFeX K+jIwaNNAIZEGMV/mH8hp7drAXV2KJPifcGzsZPJmgs1N+CZMP9Lc5Qi324fHyAd Q5X+T0x9mbtQVSehZUEbK4gQyxQl+ExNLGijsYTrWmYmwVDXPicfKzKFfPUz+7+R lgwQgWohasAKa78ul4+8h7M/3QGwhrgVsEOwlO5Tpdt+9JePkY0vazCXc9TXDXcr 1X5I7VemLgFK1OazaZvKAigeLw8qGHGD9E/sasJUcn56wd0yq1aD01I7DysVVkFd flAmTdncRaDaFpRb1oD/92SoNXYOuuEUsC35DxSgolZCq3+L17I= -----END CERTIFICATE-----Generated at Wed Sep 23 23:47:00 2026 by rpki-client