$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft File: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json) Hash identifier: f13RFHGTI5hBWqniuigkhLHO5WOFtHT7v17sEbF8258= Subject key identifier: D4:D2:36:A9:92:B1:C1:6E:06:8C:84:B6:34:F0:73:D6:8F:31:18:53 Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 Certificate issuer: /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Certificate serial: 4F3BBE5DFC1E97F5334CE5AC51C9F36DBF4AEA49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:24:16 +0000 Manifest this update: Wed 16 Sep 2026 16:19:16 +0000 Manifest next update: Thu 17 Sep 2026 20:17:16 +0000 Files and hashes: 1: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: YinfWQ/YhCTEZYI1LRzdyZ2m+07J2iBqX0WPASerIpA=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3b:be:5d:fc:1e:97:f5:33:4c:e5:ac:51:c9:f3:6d:bf:4a:ea:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9 Validity Not Before: Sep 16 16:19:16 2026 GMT Not After : Sep 17 20:17:16 2026 GMT Subject: CN=D4D236A992B1C16E068C84B634F073D68F311853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:f7:87:0f:ae:05:e6:8b:ce:49:2c:37:ce: 3e:ec:92:fa:c5:b9:28:b3:96:e5:29:4f:54:db:61: 14:b1:27:3b:ad:7e:63:b5:3f:87:dd:28:4a:4a:34: 7e:11:e5:4f:91:1d:57:a8:f5:0a:31:84:e4:25:05: 63:93:3b:e0:33:af:b2:d9:01:46:fd:6d:6e:e2:4a: 30:14:86:2b:42:9c:66:70:8b:7f:93:20:00:94:07: fe:70:d3:5a:a3:d0:93:95:64:ef:19:11:2b:5c:b5: 4b:f2:96:ab:4a:6e:9a:ef:04:69:0e:98:27:e8:60: 59:48:10:4b:5a:f7:aa:88:3b:1f:92:e1:00:c4:71: f4:9d:16:65:9b:23:07:d9:50:28:bf:23:33:fc:b5: 17:10:ed:a1:af:d0:9b:d7:22:58:bb:9e:e2:19:b4: 16:33:2b:12:21:da:92:a8:b9:d5:b9:d1:d4:df:ce: 9b:05:64:d8:7f:d1:50:84:d0:de:2c:64:1e:a1:7a: 56:67:96:e5:1a:53:29:55:85:94:02:f4:28:c8:ad: 52:93:de:49:84:40:a0:32:1f:af:01:f1:ef:92:b2: 19:75:bc:40:de:48:78:50:f8:22:6e:5d:0f:bf:28: c7:29:9f:0f:23:57:02:25:5e:0f:f8:08:16:7c:bb: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:36:A9:92:B1:C1:6E:06:8C:84:B6:34:F0:73:D6:8F:31:18:53 X509v3 Authority Key Identifier: keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:36:ed:a3:3f:9a:27:af:5a:14:31:89:50:11:b8:56:dc:c4: c3:b4:8c:b9:2a:57:83:e5:2c:a7:e3:cd:1a:bb:d8:2e:24:18: 2c:fb:3d:b0:16:c1:5b:38:1a:67:39:90:95:fc:95:b9:24:11: d6:e5:f1:6c:31:46:4a:59:99:08:1a:87:78:ed:cc:e0:c1:bd: 3b:6c:95:4b:a5:03:ae:69:8f:41:f2:da:86:76:61:45:b1:6e: 70:5e:f2:d3:26:f1:91:9a:f2:a5:a9:85:48:87:d4:97:78:bd: 88:df:0b:d8:b7:c0:9c:ab:1d:7c:31:47:3b:45:c0:44:25:0a: f4:c4:8e:1e:43:16:a8:43:da:55:2e:e3:51:b4:5b:cf:fa:d7: b4:0d:28:98:55:dc:79:b4:25:fa:1a:04:18:cd:8c:84:f1:94: f9:39:88:33:3f:0a:13:a5:e2:5f:2f:95:c7:1e:4b:60:5e:8b: 1d:6d:84:d8:dd:45:51:c5:f4:01:20:ed:72:bc:84:e3:1d:b5: a7:a3:c0:32:45:42:9c:b6:ad:60:56:71:36:b1:85:64:90:0f: 83:f4:5e:72:04:51:98:c2:9a:4e:fe:ed:5d:4e:f4:4e:f3:8f: 49:a1:18:73:c0:d8:20:5b:84:02:8b:05:d4:e6:f4:26:67:f3: ec:6e:f9:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzu+Xfwel/UzTOWsUcnzbb9K6kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1 MUVDRkFGOTAeFw0yNjA5MTYxNjE5MTZaFw0yNjA5MTcyMDE3MTZaMDMxMTAvBgNV BAMTKEQ0RDIzNkE5OTJCMUMxNkUwNjhDODRCNjM0RjA3M0Q2OEYzMTE4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTfeHD64F5ovOSSw3zj7skvrF uSizluUpT1TbYRSxJzutfmO1P4fdKEpKNH4R5U+RHVeo9QoxhOQlBWOTO+Azr7LZ AUb9bW7iSjAUhitCnGZwi3+TIACUB/5w01qj0JOVZO8ZEStctUvylqtKbprvBGkO mCfoYFlIEEta96qIOx+S4QDEcfSdFmWbIwfZUCi/IzP8tRcQ7aGv0JvXIli7nuIZ tBYzKxIh2pKoudW50dTfzpsFZNh/0VCE0N4sZB6helZnluUaUylVhZQC9CjIrVKT 3kmEQKAyH68B8e+Sshl1vEDeSHhQ+CJuXQ+/KMcpnw8jVwIlXg/4CBZ8uzrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1NI2qZKxwW4GjIS2NPBz1o8xGFMwHwYDVR0j BBgwFoAUfvZrSI7kjlcbg30rMPC1z1Hs+vkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRjYTU4NjgtNTdlOS00OWI5LWJmZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4 RUU0OEU1NzFCODM3RDJCMzBGMEI1Q0Y1MUVDRkFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUY2NkI0ODhFRTQ4RTU3MUI4MzdEMkIzMEYwQjVDRjUxRUNG QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvN0VGNjZCNDg4RUU0OEU1NzFCODM3RDJCMzBGMEI1 Q0Y1MUVDRkFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA27aM/mievWhQxiVARuFbcxMO0jLkqV4Pl LKfjzRq72C4kGCz7PbAWwVs4Gmc5kJX8lbkkEdbl8WwxRkpZmQgah3jtzODBvTts lUulA65pj0Hy2oZ2YUWxbnBe8tMm8ZGa8qWphUiH1Jd4vYjfC9i3wJyrHXwxRztF wEQlCvTEjh5DFqhD2lUu41G0W8/617QNKJhV3Hm0JfoaBBjNjITxlPk5iDM/ChOl 4l8vlcceS2Beix1thNjdRVHF9AEg7XK8hOMdtaejwDJFQpy2rWBWcTaxhWSQD4P0 XnIEUZjCmk7+7V1O9E7zj0mhGHPA2CBbhAKLBdTm9CZn8+xu+RA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:21 2026 by rpki-client