$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: +fMrHfnJ//3itx6lS9XIS34W9WVwGczH61UMHFvT0YE= Subject key identifier: 98:FC:E3:5A:50:63:95:55:AC:AF:78:09:35:CE:E0:7C:B2:7B:10:D1 Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 73629D576B06B24DD57E589BF3E7EFE14A0C66BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: 5B Signing time: Wed 08 Jul 2026 11:33:15 +0000 Manifest this update: Wed 08 Jul 2026 11:28:15 +0000 Manifest next update: Thu 09 Jul 2026 14:51:15 +0000 Files and hashes: 1: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: LDGGz6u8orFKxFIGuAY6UiAlb7WkOKAkIMwMbP8zxP8=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 07:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:62:9d:57:6b:06:b2:4d:d5:7e:58:9b:f3:e7:ef:e1:4a:0c:66:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Jul 8 11:28:15 2026 GMT Not After : Jul 9 14:51:15 2026 GMT Subject: CN=98FCE35A50639555ACAF780935CEE07CB27B10D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:3b:89:40:31:0c:e6:93:3a:8e:3f:10:aa: 52:26:d5:04:1f:1e:0a:8e:a6:78:83:5c:90:57:05: 9c:f1:1a:a1:15:bd:a5:c3:06:89:93:62:19:30:73: 21:c5:7f:d7:7f:9a:1e:2b:5f:df:ea:67:50:52:1b: a2:a5:c5:5f:92:20:1e:32:8c:84:25:79:a1:a8:54: 5e:ed:c4:6b:18:be:52:e6:23:ce:c4:0e:6a:84:10: df:34:a6:1e:c3:e8:40:1b:65:a1:10:1a:f9:21:91: 21:b0:0f:0d:f3:2b:c8:c1:03:1b:cb:72:4c:6f:d5: ee:a2:00:b8:d2:9c:28:3b:c3:58:c4:1c:b6:da:a4: c4:49:a4:50:d0:85:2e:53:5b:d5:6c:20:b3:66:83: 43:b1:49:f8:63:ce:51:f9:53:ee:28:5e:54:07:f4: dc:0c:25:af:68:aa:ed:70:93:ff:d9:80:67:aa:6f: a7:48:38:b0:7b:5a:68:c2:1a:e7:9e:96:e7:13:f9: 7f:60:57:1a:e9:3b:db:66:77:0f:6e:67:0b:80:98: 67:af:e4:e1:ed:8a:ee:bd:38:6f:fc:bd:ee:f7:0d: 14:1b:12:7a:24:7d:bf:3c:a8:54:8c:06:1e:d4:93: 05:cb:50:b7:d2:1e:79:75:44:8f:b0:8d:27:90:92: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FC:E3:5A:50:63:95:55:AC:AF:78:09:35:CE:E0:7C:B2:7B:10:D1 X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1a:9e:20:aa:6b:dc:15:48:5a:15:79:55:1a:62:08:19:6d: 55:1f:f4:53:d3:b3:66:da:72:8c:f1:e9:b0:15:7c:b4:6b:ad: d3:d5:9f:18:6f:d7:16:a0:e6:2c:31:94:1b:27:22:20:d6:17: 83:cd:65:93:0d:d3:7b:fa:8d:e2:0f:46:69:c1:cc:48:68:25: 53:98:0d:54:4b:91:c2:ed:77:8b:83:fb:4b:05:95:d9:fc:86: 0a:79:03:f1:df:53:6a:00:a8:b1:a8:ed:3f:8e:b5:cd:ef:64: 3d:4d:0f:83:94:7b:89:64:2a:e2:a9:fb:b0:39:f2:5b:00:09: 68:04:1f:bd:27:59:d5:3b:6e:24:6d:79:b2:37:53:78:18:cf: b2:77:34:14:1c:fc:81:a7:0f:29:d1:58:5f:57:98:35:71:77: a5:db:98:32:2f:21:e1:e2:a0:08:1c:e8:46:c8:f8:f9:b4:8f: ce:6e:02:65:4f:bf:d3:01:9e:a8:4d:83:a5:4e:7d:e1:40:ad: f3:91:09:c3:17:78:09:ad:8c:27:db:70:a4:41:15:ed:c2:47: 2d:a2:a8:23:a9:6f:b1:f3:09:53:32:07:16:98:36:85:20:f2: 5a:39:d4:00:a0:3a:c7:fe:36:78:6c:ab:2b:f4:dc:96:e7:04: 5f:55:98:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2KdV2sGsk3Vflib8+fv4UoMZrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA3MDgxMTI4MTVaFw0yNjA3MDkxNDUxMTVaMDMxMTAvBgNV BAMTKDk4RkNFMzVBNTA2Mzk1NTVBQ0FGNzgwOTM1Q0VFMDdDQjI3QjEwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSjuJQDEM5pM6jj8QqlIm1QQf HgqOpniDXJBXBZzxGqEVvaXDBomTYhkwcyHFf9d/mh4rX9/qZ1BSG6KlxV+SIB4y jIQleaGoVF7txGsYvlLmI87EDmqEEN80ph7D6EAbZaEQGvkhkSGwDw3zK8jBAxvL ckxv1e6iALjSnCg7w1jEHLbapMRJpFDQhS5TW9VsILNmg0OxSfhjzlH5U+4oXlQH 9NwMJa9oqu1wk//ZgGeqb6dIOLB7WmjCGueelucT+X9gVxrpO9tmdw9uZwuAmGev 5OHtiu69OG/8ve73DRQbEnokfb88qFSMBh7UkwXLULfSHnl1RI+wjSeQkondAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmPzjWlBjlVWsr3gJNc7gfLJ7ENEwHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYaniCqa9wVSFoVeVUaYggZbVUf9FPTs2ba cozx6bAVfLRrrdPVnxhv1xag5iwxlBsnIiDWF4PNZZMN03v6jeIPRmnBzEhoJVOY DVRLkcLtd4uD+0sFldn8hgp5A/HfU2oAqLGo7T+Otc3vZD1ND4OUe4lkKuKp+7A5 8lsACWgEH70nWdU7biRtebI3U3gYz7J3NBQc/IGnDynRWF9XmDVxd6XbmDIvIeHi oAgc6EbI+Pm0j85uAmVPv9MBnqhNg6VOfeFArfORCcMXeAmtjCfbcKRBFe3CRy2i qCOpb7HzCVMyBxaYNoUg8lo51ACgOsf+Nnhsqyv03JbnBF9VmJI= -----END CERTIFICATE-----Generated at Wed Jul 8 18:30:10 2026 by rpki-client