$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: xkDEKdSD+8T4nZ4ZmlvPUBwZVWVgEfYIg7V7RfXQtcM= Subject key identifier: CD:7C:DE:12:BC:F2:CC:F2:A3:FF:C1:8F:75:89:EC:EE:F0:0A:E0:37 Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 41A58B83EC83ADF1DEC05B8278F2FD467675EF67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: EC Signing time: Sun 25 Oct 2026 18:09:22 +0000 Manifest this update: Sun 25 Oct 2026 18:04:22 +0000 Manifest next update: Mon 26 Oct 2026 21:10:22 +0000 Files and hashes: 1: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: Y9B58LZ/eQ57Q/f5zW85wWrq6r5Bw7btDvbNuykwLrY=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a5:8b:83:ec:83:ad:f1:de:c0:5b:82:78:f2:fd:46:76:75:ef:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Oct 25 18:04:22 2026 GMT Not After : Oct 26 21:10:22 2026 GMT Subject: CN=CD7CDE12BCF2CCF2A3FFC18F7589ECEEF00AE037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:e2:0d:0c:c4:4a:39:1a:7d:b4:a4:76:4d: c2:f3:c4:76:bc:3d:66:bc:42:5a:5f:10:24:d2:e1: ca:b5:96:12:2a:8c:e5:6a:e5:ef:41:f2:d1:9e:1a: 3c:ea:cb:83:d3:a7:94:37:d8:bc:55:10:e6:2d:39: 53:39:3a:3e:4e:47:70:5a:25:15:95:52:18:59:79: 0f:32:01:da:6d:57:69:eb:78:c6:c6:25:87:c8:d0: 63:e2:3d:81:e5:f7:72:1a:01:54:bb:49:94:c3:ac: 87:b8:92:45:5f:39:fa:8e:20:2e:31:4b:05:82:7c: 66:54:05:8e:e0:a5:42:23:5c:a1:8d:04:8a:4b:c4: 7d:ba:31:11:a8:48:9e:0a:d9:5d:16:96:ba:78:16: ed:c7:ef:21:4c:f0:4b:1c:2a:b0:9f:96:4a:3d:2c: 73:54:40:2b:b9:93:fe:c1:9a:0a:0e:b9:f7:ec:54: 7b:b8:02:4f:37:0a:ff:53:6b:5f:91:d4:82:f1:83: bd:4f:ae:e2:b2:9c:2a:c9:0a:2d:7e:d6:a3:66:1a: 7e:8a:b0:cf:24:32:63:7e:06:e3:92:8b:06:f6:5d: a2:88:99:74:d2:1b:fe:23:c6:48:16:1a:2a:67:d7: 85:b2:fa:e6:53:a6:e3:8f:a1:a1:d5:ed:a2:87:33: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7C:DE:12:BC:F2:CC:F2:A3:FF:C1:8F:75:89:EC:EE:F0:0A:E0:37 X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:62:6f:65:ec:d2:11:ba:48:7b:6e:51:bf:2c:a0:a4:47:46: 82:23:9b:12:23:1e:17:b9:fe:72:4a:49:39:32:c7:6c:df:a5: 3c:d5:d8:79:2c:33:8d:dc:b6:9f:71:ae:06:c6:60:c6:b1:49: bc:c7:d4:6b:ed:fe:55:10:37:65:79:d6:f8:2a:a8:fc:ce:94: 57:e5:9b:71:e3:a4:91:33:51:e8:74:23:20:1e:11:e2:3d:99: aa:4d:6b:7e:8b:2d:95:63:c7:96:c1:93:3e:1b:f6:8e:b1:9f: 2b:55:20:cf:c3:51:ee:a0:4f:14:b6:e6:e3:69:49:1c:b4:38: fd:a5:b2:ff:44:77:58:79:ca:12:db:02:b9:63:5f:ac:d0:80: 75:21:7d:5b:b1:8f:82:e4:fa:56:64:21:0a:b3:e8:52:50:6b: bf:5e:f1:e8:8e:b9:4f:a8:4f:b2:f4:dc:49:d2:97:1d:a4:35: 83:44:65:e3:77:a6:b5:1c:b4:8e:f2:ff:56:a5:96:47:b4:04: 5e:0a:4d:73:8a:c9:c2:97:51:8c:ff:0d:ad:27:2a:6a:81:bf: 75:b1:89:a6:41:1e:54:6c:55:3c:03:cb:77:6d:7a:84:db:ad: ef:b6:74:8d:f2:8d:f7:c9:28:8b:21:a2:64:a7:4a:f7:60:6b: 50:f9:61:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaWLg+yDrfHewFuCePL9RnZ172cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjEwMjUxODA0MjJaFw0yNjEwMjYyMTEwMjJaMDMxMTAvBgNV BAMTKENEN0NERTEyQkNGMkNDRjJBM0ZGQzE4Rjc1ODlFQ0VFRjAwQUUwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XuINDMRKORp9tKR2TcLzxHa8 PWa8QlpfECTS4cq1lhIqjOVq5e9B8tGeGjzqy4PTp5Q32LxVEOYtOVM5Oj5OR3Ba JRWVUhhZeQ8yAdptV2nreMbGJYfI0GPiPYHl93IaAVS7SZTDrIe4kkVfOfqOIC4x SwWCfGZUBY7gpUIjXKGNBIpLxH26MRGoSJ4K2V0Wlrp4Fu3H7yFM8EscKrCflko9 LHNUQCu5k/7BmgoOuffsVHu4Ak83Cv9Ta1+R1ILxg71PruKynCrJCi1+1qNmGn6K sM8kMmN+BuOSiwb2XaKImXTSG/4jxkgWGipn14Wy+uZTpuOPoaHV7aKHM41FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXzeErzyzPKj/8GPdYns7vAK4DcwHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExib2Xs0hG6SHtuUb8soKRHRoIjmxIjHhe5 /nJKSTkyx2zfpTzV2HksM43ctp9xrgbGYMaxSbzH1Gvt/lUQN2V51vgqqPzOlFfl m3HjpJEzUeh0IyAeEeI9mapNa36LLZVjx5bBkz4b9o6xnytVIM/DUe6gTxS25uNp SRy0OP2lsv9Ed1h5yhLbArljX6zQgHUhfVuxj4Lk+lZkIQqz6FJQa79e8eiOuU+o T7L03EnSlx2kNYNEZeN3prUctI7y/1allke0BF4KTXOKycKXUYz/Da0nKmqBv3Wx iaZBHlRsVTwDy3dteoTbre+2dI3yjffJKIshomSnSvdga1D5YZc= -----END CERTIFICATE-----Generated at Mon Oct 26 05:47:49 2026 by rpki-client