$ rpki-client -vvvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft (raw, json) Hash identifier: Hm5YW2yxl+Hx1Rz2dsb2RQCWrR9rfZoSct11Eg5UzUA= Subject key identifier: E4:5C:EE:D6:F2:10:81:98:14:B4:52:ED:2A:D4:7D:63:D3:8A:31:EB Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Certificate serial: 2EC602CB26ED1CA03AA0369E1F2E719F07E48BDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft Manifest number: 97 Signing time: Sat 22 Aug 2026 07:44:48 +0000 Manifest this update: Sat 22 Aug 2026 07:39:48 +0000 Manifest next update: Sun 23 Aug 2026 10:52:48 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: evJWabIpMG/mmDnJzLopVv/qFJyE22nbSyLLiuPqBGA=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=) 3: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl (hash: dpS7yZcE6N69cB+VaUuq5IE1Kh/i/i2Agd42heuQluk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 10:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c6:02:cb:26:ed:1c:a0:3a:a0:36:9e:1f:2e:71:9f:07:e4:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Validity Not Before: Aug 22 07:39:48 2026 GMT Not After : Aug 23 10:52:48 2026 GMT Subject: CN=E45CEED6F210819814B452ED2AD47D63D38A31EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e2:8c:35:03:b1:51:24:b8:f7:c2:81:3b:da: 6a:89:6b:2b:ff:73:62:b1:13:c3:d1:2e:d4:0c:db: b5:ea:ef:5e:f1:34:b5:d0:fd:37:52:95:b0:b8:de: 25:64:6f:d5:b1:79:4c:f0:93:6a:fd:d0:5c:42:d9: c6:b6:59:fa:8e:c0:af:02:55:12:7d:3d:7b:8a:b2: d6:72:d4:a1:69:cd:ee:00:9f:4b:b3:ee:92:77:56: e0:6b:46:f9:38:c3:8a:1a:ce:72:95:54:6a:2b:3c: 91:7d:81:48:a3:8f:fc:5b:39:b5:10:0d:0f:ed:64: 52:57:1f:f5:9c:d8:72:67:21:bc:a5:f6:47:3a:b2: b8:8d:c9:7d:30:d1:a3:f2:28:e4:26:6b:02:30:d8: f8:06:a0:5c:74:31:14:b0:0e:0b:d4:30:06:48:0e: 11:aa:c0:a7:c7:0c:00:94:71:88:bc:b1:36:10:02: 2b:7c:62:09:9c:10:9d:e2:e4:4c:7d:66:eb:2b:ad: 7a:05:9f:de:cb:d2:c8:ac:3f:e0:4b:12:73:60:2c: 7e:71:7c:69:09:48:1a:95:7e:a1:98:af:c7:96:8d: de:25:3c:df:cb:0f:d4:8f:6c:8e:fc:e7:65:eb:1d: 0b:1c:95:e1:69:3a:dc:2d:72:b7:ca:d3:1c:0a:e3: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5C:EE:D6:F2:10:81:98:14:B4:52:ED:2A:D4:7D:63:D3:8A:31:EB X509v3 Authority Key Identifier: keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1d:23:81:86:bb:ee:60:db:d7:5a:14:65:33:81:8b:5b:f7: fd:b6:53:22:1c:46:31:bd:ae:d4:40:84:d7:ae:8f:46:99:13: ea:cb:38:8c:b1:67:d8:fe:05:a8:bc:d0:0a:84:43:cd:38:e2: cc:b8:3f:8e:d1:6b:b4:f3:05:9a:e6:03:85:39:1f:ac:9f:e9: 19:4e:fe:ef:f8:b2:aa:5b:d9:c4:4b:ff:d6:e9:b2:c6:2c:b6: c0:26:82:20:0c:1a:95:cf:9e:95:2a:e6:96:17:83:09:00:51: 07:6b:7b:0b:73:8e:6d:5f:d9:3c:44:7d:ee:2f:69:87:ee:54: 01:a1:93:4d:e2:f1:18:ae:0e:9d:c5:ab:9c:59:b8:57:f1:13: f5:11:e5:b6:8a:ee:e3:04:2c:4f:a6:c3:66:b0:fe:fd:e6:60: 90:04:43:8d:87:11:56:cc:c4:9a:22:20:d9:21:e0:c4:0d:bf: 2d:a3:02:0b:1a:62:c4:85:64:19:cf:d0:6b:95:8f:5c:eb:bf: 38:2a:a9:96:18:ed:18:50:3d:e9:09:53:c6:06:60:e1:aa:be: 7e:64:8c:ae:51:85:fd:51:f0:b1:80:9c:9d:96:59:a4:4a:b0: ad:b9:38:1c:df:16:84:fa:d2:15:6b:56:d9:54:f2:71:03:c2: aa:ba:e3:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsYCyybtHKA6oDaeHy5xnwfki9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2 RUNBMTU0QTAeFw0yNjA4MjIwNzM5NDhaFw0yNjA4MjMxMDUyNDhaMDMxMTAvBgNV BAMTKEU0NUNFRUQ2RjIxMDgxOTgxNEI0NTJFRDJBRDQ3RDYzRDM4QTMxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx4ow1A7FRJLj3woE72mqJayv/ c2KxE8PRLtQM27Xq717xNLXQ/TdSlbC43iVkb9WxeUzwk2r90FxC2ca2WfqOwK8C VRJ9PXuKstZy1KFpze4An0uz7pJ3VuBrRvk4w4oaznKVVGorPJF9gUijj/xbObUQ DQ/tZFJXH/Wc2HJnIbyl9kc6sriNyX0w0aPyKOQmawIw2PgGoFx0MRSwDgvUMAZI DhGqwKfHDACUcYi8sTYQAit8YgmcEJ3i5Ex9ZusrrXoFn97L0sisP+BLEnNgLH5x fGkJSBqVfqGYr8eWjd4lPN/LD9SPbI7852XrHQscleFpOtwtcrfK0xwK40/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Fzu1vIQgZgUtFLtKtR9Y9OKMeswHwYDVR0j BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0 QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex NTRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4 NUI2RUNBMTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8dI4GGu+5g29daFGUzgYtb9/22UyIcRjG9 rtRAhNeuj0aZE+rLOIyxZ9j+Bai80AqEQ8044sy4P47Ra7TzBZrmA4U5H6yf6RlO /u/4sqpb2cRL/9bpssYstsAmgiAMGpXPnpUq5pYXgwkAUQdrewtzjm1f2TxEfe4v aYfuVAGhk03i8RiuDp3Fq5xZuFfxE/UR5baK7uMELE+mw2aw/v3mYJAEQ42HEVbM xJoiINkh4MQNvy2jAgsaYsSFZBnP0GuVj1zrvzgqqZYY7RhQPekJU8YGYOGqvn5k jK5Rhf1R8LGAnJ2WWaRKsK25OBzfFoT60hVrVtlU8nEDwqq644g= -----END CERTIFICATE-----Generated at Sat Aug 22 21:09:03 2026 by rpki-client