$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft File: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft (raw, json) Hash identifier: ngHlxbt8N+wYsUEy48y5F6rh5tcHYXjzLkm+ufwtbec= Subject key identifier: 4A:18:0D:01:56:32:67:CA:00:BF:CA:FF:15:88:E8:2E:0A:C0:AD:45 Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 32C76DEC8AE49DB1C2D81AA5FE223F543BD748A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:37:16 +0000 Manifest this update: Wed 16 Sep 2026 18:32:16 +0000 Manifest next update: Thu 17 Sep 2026 22:04:16 +0000 Files and hashes: 1: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E=) 3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s=) 4: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl (hash: Spxt8ucTB3L4EplB4eRdYFlZPBShmVULIuitEUArE/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c7:6d:ec:8a:e4:9d:b1:c2:d8:1a:a5:fe:22:3f:54:3b:d7:48:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: Sep 16 18:32:16 2026 GMT Not After : Sep 17 22:04:16 2026 GMT Subject: CN=4A180D01563267CA00BFCAFF1588E82E0AC0AD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:cf:1e:9d:d6:d5:c2:9c:3a:1e:6e:53:8c: 1e:24:3d:bb:9b:42:76:8a:e9:c6:83:7e:24:82:79: 10:4f:17:a6:34:f6:be:fb:30:8a:1b:89:66:ed:5a: ee:49:e3:58:c3:ef:e5:17:17:28:f1:57:b7:0a:c1: fb:a0:8e:35:87:36:50:96:08:b0:11:8e:f9:d3:13: e0:a5:8e:fe:b3:ec:b8:ca:2e:9c:13:10:fb:51:b2: 68:ec:5a:f2:1d:f0:c5:df:39:fd:3a:c5:66:07:ab: 86:80:2a:31:ac:1a:cf:8b:ea:eb:78:b8:f1:91:7d: 1f:f0:cb:45:a3:81:30:3b:db:9a:0a:60:09:40:d4: 0a:8e:80:75:92:c7:22:ee:8c:68:55:e3:fe:6e:f6: 6e:66:cf:ff:35:51:01:3e:80:04:f6:1f:d3:25:d5: 88:cd:0c:84:87:46:98:ba:70:ee:4c:ee:8d:d4:6a: 54:31:bd:51:85:a4:02:59:b5:7f:bc:dc:03:f0:d9: 96:20:69:aa:36:92:ef:5c:63:82:7d:a1:82:25:14: 62:af:89:db:59:75:90:a3:40:9d:de:68:4d:6f:8f: 0f:84:8e:b7:ad:34:d8:ce:23:82:ac:a8:22:16:2a: 94:86:88:81:12:4a:89:05:24:a8:56:c9:2a:60:f1: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:0D:01:56:32:67:CA:00:BF:CA:FF:15:88:E8:2E:0A:C0:AD:45 X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f5:52:f4:63:6f:6d:da:ea:22:2d:5d:37:d1:ae:7c:18:d1: 94:33:80:b0:bb:92:10:81:f4:d2:91:ad:d1:fa:49:46:02:0a: 4c:af:50:b2:bc:c3:6e:59:d3:57:a2:03:94:b2:30:55:0f:93: 5a:7f:bd:ea:b8:9b:33:73:ee:45:09:e9:d5:fd:52:d7:21:8d: 29:97:c4:4c:4c:fa:5d:16:aa:c3:b6:4d:28:f1:80:c5:8e:92: f9:5c:e1:a2:bf:f9:b9:3b:76:54:7f:19:10:87:7d:7c:7e:69: 4b:5d:b5:47:49:2c:b3:75:76:e7:ce:f2:d1:18:0a:4a:aa:4b: 6e:ce:2d:b4:53:87:f6:49:3c:cd:e4:54:c8:e5:74:14:ab:1f: c1:5f:73:43:8f:13:81:b8:3e:e5:32:e0:0e:7b:b8:83:75:5b: c9:a6:83:42:9b:5c:bf:ce:05:20:ad:85:4f:cc:7b:6b:34:35: 56:d3:c5:6e:98:ee:c1:40:a5:43:5f:31:93:0d:77:d4:b5:11: a6:3a:6e:c8:0f:6c:bc:9f:85:30:f8:64:0b:e8:b1:93:fa:6f: b7:c5:e7:0f:5b:64:db:5f:ec:06:11:78:9e:60:59:ca:da:ce: 1d:9e:f6:fb:5a:80:01:a6:75:9e:ad:8d:4f:61:50:03:8c:27: 37:24:02:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsdt7IrknbHC2Bql/iI/VDvXSKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA5MTYxODMyMTZaFw0yNjA5MTcyMjA0MTZaMDMxMTAvBgNV BAMTKDRBMTgwRDAxNTYzMjY3Q0EwMEJGQ0FGRjE1ODhFODJFMEFDMEFENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylc8endbVwpw6Hm5TjB4kPbub QnaK6caDfiSCeRBPF6Y09r77MIobiWbtWu5J41jD7+UXFyjxV7cKwfugjjWHNlCW CLARjvnTE+Cljv6z7LjKLpwTEPtRsmjsWvId8MXfOf06xWYHq4aAKjGsGs+L6ut4 uPGRfR/wy0WjgTA725oKYAlA1AqOgHWSxyLujGhV4/5u9m5mz/81UQE+gAT2H9Ml 1YjNDISHRpi6cO5M7o3UalQxvVGFpAJZtX+83APw2ZYgaao2ku9cY4J9oYIlFGKv idtZdZCjQJ3eaE1vjw+EjretNNjOI4KsqCIWKpSGiIESSokFJKhWySpg8WdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUShgNAVYyZ8oAv8r/FYjoLgrArUUwHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFG Q0Q4MUZBMEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP1UvRjb23a6iItXTfRrnwY0ZQzgLC7khCB 9NKRrdH6SUYCCkyvULK8w25Z01eiA5SyMFUPk1p/veq4mzNz7kUJ6dX9UtchjSmX xExM+l0WqsO2TSjxgMWOkvlc4aK/+bk7dlR/GRCHfXx+aUtdtUdJLLN1dufO8tEY CkqqS27OLbRTh/ZJPM3kVMjldBSrH8Ffc0OPE4G4PuUy4A57uIN1W8mmg0KbXL/O BSCthU/Me2s0NVbTxW6Y7sFApUNfMZMNd9S1EaY6bsgPbLyfhTD4ZAvosZP6b7fF 5w9bZNtf7AYReJ5gWcrazh2e9vtagAGmdZ6tjU9hUAOMJzckAhE= -----END CERTIFICATE-----Generated at Thu Sep 17 15:26:04 2026 by rpki-client