$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: Z09JeDLISvYNIne3gH+ZU0ty32pazVPK7f5ktMU1Jhc= Subject key identifier: DA:C4:3C:00:4C:9E:D5:FD:21:66:D0:DE:BC:7A:0D:68:2A:D8:5D:C6 Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 6D83C40D01DF35C54C1615596485DC747362DA8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 12:23:30 +0000 Manifest this update: Mon 02 Nov 2026 12:18:30 +0000 Manifest next update: Tue 03 Nov 2026 14:25:30 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) 2: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: vxeNaqE7LIsChlfUYJkr5wysSVxgvFtxS5GvX7r7baA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:83:c4:0d:01:df:35:c5:4c:16:15:59:64:85:dc:74:73:62:da:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Nov 2 12:18:30 2026 GMT Not After : Nov 3 14:25:30 2026 GMT Subject: CN=DAC43C004C9ED5FD2166D0DEBC7A0D682AD85DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:2b:91:65:d2:b1:51:27:4d:ee:fe:aa:db: 8f:22:62:0c:bf:84:58:e5:99:ab:e7:0e:b8:b1:ef: 99:96:ac:ea:9f:ac:43:61:3d:78:90:21:e1:b3:a7: c8:00:c1:bb:1a:c6:9e:e4:61:27:8e:09:70:ef:9b: 25:74:63:9c:6b:c3:a2:7e:47:f2:2f:77:0c:2b:0b: 15:7a:d5:2d:0a:a5:51:91:33:25:f8:bf:f2:af:4b: 93:65:55:2a:aa:4b:cd:d6:9e:dd:ae:41:ec:c6:e4: 7e:0d:21:61:2c:fa:8c:ba:3d:f5:c4:27:8d:cf:8e: 69:4c:82:0e:c5:e7:b8:03:58:f3:7f:86:5b:1e:6f: 76:da:e3:3d:c8:d0:b4:ff:99:8a:4d:e9:e9:64:92: d0:46:b7:4e:f4:0e:e5:a3:57:72:4a:3a:40:cc:1c: 42:98:9f:55:fc:5e:dc:3d:b7:b3:d4:b4:e7:89:13: 90:11:55:36:48:4b:43:96:37:96:3b:82:23:7b:44: 74:80:33:59:6e:c5:be:61:58:5a:bf:bc:29:2c:99: a0:d8:ee:96:f1:19:37:3b:8d:1e:52:29:eb:f7:33: 06:5e:f0:05:57:52:5f:23:44:4e:67:05:a4:ac:92: 38:c3:c1:0b:3a:1e:1e:70:c9:e5:77:58:cd:fa:43: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:3C:00:4C:9E:D5:FD:21:66:D0:DE:BC:7A:0D:68:2A:D8:5D:C6 X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:73:b5:88:86:36:a8:e1:a9:a6:eb:75:ba:d6:18:9c:fe:65: 90:24:14:94:28:83:e5:a5:d5:e9:e8:85:a8:e5:2c:e3:95:98: 1d:94:19:40:27:4e:34:a6:f6:8b:cb:e0:30:67:ee:0f:33:e8: e2:d1:9e:a3:a9:97:52:ed:30:ab:4d:bd:53:ff:36:02:7a:86: 46:82:7c:46:7d:eb:ad:e6:71:e1:95:ec:21:fa:19:aa:7a:43: ee:6a:1e:24:b1:cf:fa:3f:41:24:4c:0d:3b:ee:9c:81:a9:c4: e0:68:f9:c5:70:b5:18:fb:f2:9d:01:66:32:f9:3b:2e:9a:25: ab:48:23:87:d3:cc:47:fc:8b:8c:1e:62:2e:3a:3c:ed:f0:76: 79:2f:7a:3f:e1:f6:e1:55:79:e4:f5:bc:f3:cf:59:ac:2c:22: 07:77:03:ca:79:8b:0d:f6:4a:e4:94:48:04:c4:03:e2:8f:8d: aa:8f:02:5d:2e:6a:65:70:f0:ba:80:b6:6a:13:8f:80:75:a9: b2:d3:9c:ed:41:c4:4d:dd:c4:93:33:b0:1e:71:e3:a3:24:8a: 09:55:3a:b1:fb:d9:de:4f:a9:1f:c7:b0:37:42:0c:e7:f7:2f: d3:67:65:26:d2:2d:44:15:bd:34:0b:2c:74:4f:70:17:d2:9f: 16:a4:87:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYPEDQHfNcVMFhVZZIXcdHNi2oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjExMDIxMjE4MzBaFw0yNjExMDMxNDI1MzBaMDMxMTAvBgNV BAMTKERBQzQzQzAwNEM5RUQ1RkQyMTY2RDBERUJDN0EwRDY4MkFEODVEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZCuRZdKxUSdN7v6q248iYgy/ hFjlmavnDrix75mWrOqfrENhPXiQIeGzp8gAwbsaxp7kYSeOCXDvmyV0Y5xrw6J+ R/IvdwwrCxV61S0KpVGRMyX4v/KvS5NlVSqqS83Wnt2uQezG5H4NIWEs+oy6PfXE J43PjmlMgg7F57gDWPN/hlseb3ba4z3I0LT/mYpN6elkktBGt070DuWjV3JKOkDM HEKYn1X8Xtw9t7PUtOeJE5ARVTZIS0OWN5Y7giN7RHSAM1luxb5hWFq/vCksmaDY 7pbxGTc7jR5SKev3MwZe8AVXUl8jRE5nBaSskjjDwQs6Hh5wyeV3WM36Qx35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sQ8AEye1f0hZtDevHoNaCrYXcYwHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRztYiGNqjhqabrdbrWGJz+ZZAkFJQog+Wl 1enohajlLOOVmB2UGUAnTjSm9ovL4DBn7g8z6OLRnqOpl1LtMKtNvVP/NgJ6hkaC fEZ9663mceGV7CH6Gap6Q+5qHiSxz/o/QSRMDTvunIGpxOBo+cVwtRj78p0BZjL5 Oy6aJatII4fTzEf8i4weYi46PO3wdnkvej/h9uFVeeT1vPPPWawsIgd3A8p5iw32 SuSUSATEA+KPjaqPAl0uamVw8LqAtmoTj4B1qbLTnO1BxE3dxJMzsB5x46MkiglV OrH72d5PqR/HsDdCDOf3L9NnZSbSLUQVvTQLLHRPcBfSnxakh1o= -----END CERTIFICATE-----Generated at Tue Nov 3 02:20:24 2026 by rpki-client