$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft File: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft (raw, json) Hash identifier: 4gfWVkvtvKYLw3aYYt2hV8AK4e97xqAtlex18OQGJ/c= Subject key identifier: 1C:D5:23:95:0E:34:C8:63:F6:EF:47:A7:B6:36:50:E4:B8:9B:9F:FA Authority key identifier: 7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 Certificate issuer: /CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Certificate serial: 6D6C4EA8C44661BB5165A0FB6E20DAA6DFA06AD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:28:18 +0000 Manifest this update: Wed 16 Sep 2026 19:23:18 +0000 Manifest next update: Thu 17 Sep 2026 22:08:18 +0000 Files and hashes: 1: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl (hash: cEb3Hoa1XF7o5553K8V37i1rUcmxL+Xj8W0tl96rmNk=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: f9D+tmlskJQe+GGM2u5fqymt4sZqzjW31b307vrzFZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6c:4e:a8:c4:46:61:bb:51:65:a0:fb:6e:20:da:a6:df:a0:6a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Validity Not Before: Sep 16 19:23:18 2026 GMT Not After : Sep 17 22:08:18 2026 GMT Subject: CN=1CD523950E34C863F6EF47A7B63650E4B89B9FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ec:1e:ae:1d:bf:a7:d0:5d:66:69:8f:81:b7: 0f:7a:c8:61:e7:d3:4a:69:be:aa:ec:ff:40:49:1b: c4:c9:19:b9:79:1f:5e:bb:7e:cd:59:0c:74:81:e5: a4:f7:b6:4e:29:a7:7f:5f:11:e6:38:fb:57:f8:34: 7a:d6:bd:68:51:6a:80:2b:9a:68:8c:f1:6e:af:28: cc:b1:f0:4e:d4:26:a2:06:9b:5e:cf:8d:b0:06:89: a6:ad:d9:e3:89:09:42:06:e1:0a:e4:56:94:1b:28: 89:64:dd:3c:b0:7b:7a:67:d1:12:26:d0:23:40:66: f8:71:00:2b:ab:d1:bb:4c:88:d8:98:2b:d3:81:36: 36:fd:5d:7e:b6:93:39:24:2c:7f:89:6d:8d:37:56: 29:63:71:6d:02:c7:2b:a6:91:32:a0:38:06:9a:18: a2:94:74:d5:e2:09:3e:03:e4:85:5e:11:4f:69:e4: 9c:38:52:9c:a8:00:58:be:c6:09:65:fb:cf:d8:ab: 76:08:29:42:78:16:8b:cb:8c:6c:95:aa:04:31:a1: b9:41:3b:81:f5:54:db:bd:26:4f:7b:23:82:d8:8d: 4f:db:61:49:69:a1:39:af:c3:93:e9:6d:61:98:fb: 8f:82:23:70:ad:90:4c:c7:22:76:0e:3c:17:e1:a5: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D5:23:95:0E:34:C8:63:F6:EF:47:A7:B6:36:50:E4:B8:9B:9F:FA X509v3 Authority Key Identifier: keyid:7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:74:44:2b:45:4d:0f:e3:85:13:3c:7f:40:eb:65:7b:e6:75: 74:c2:1e:dc:c2:97:c9:9b:5e:75:2f:a8:6a:1a:da:8f:5d:b6: 51:b6:82:74:f1:41:b8:50:39:f8:95:2e:de:01:76:f0:df:34: 2f:9e:59:f2:c2:89:d9:27:77:8f:bd:39:d0:64:d0:d9:3f:88: 22:5a:cc:5f:99:f2:51:71:03:a9:16:be:95:23:e7:38:5a:ea: 47:43:72:ac:a8:e0:0b:57:51:5f:83:17:78:70:88:0a:d1:70: ab:66:c4:f6:d5:2e:af:3c:cf:60:9d:82:70:47:11:be:41:af: cf:16:ad:4d:65:c5:19:45:c3:6f:dc:54:0c:79:92:f2:fd:22: bb:19:06:b6:96:50:c9:f0:de:9f:74:4f:4f:cb:96:34:87:a0: fa:42:2f:57:1e:af:17:5c:04:cf:69:79:9d:cf:37:27:4d:61: 03:a9:24:04:f6:de:9d:a7:b7:c0:2c:fb:a7:fa:1c:02:d9:13: bc:d2:85:4c:1b:90:5d:a3:6c:87:65:db:cd:8b:2a:4e:ca:1a: b0:5c:78:d8:23:ab:a1:92:c4:2f:67:78:aa:38:03:9d:aa:f6: eb:6a:21:5f:1a:ef:59:42:56:57:68:40:0e:20:9d:45:65:36: d0:aa:8a:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWxOqMRGYbtRZaD7biDapt+gatkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5 QjNFMkYyMDAeFw0yNjA5MTYxOTIzMThaFw0yNjA5MTcyMjA4MThaMDMxMTAvBgNV BAMTKDFDRDUyMzk1MEUzNEM4NjNGNkVGNDdBN0I2MzY1MEU0Qjg5QjlGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD27B6uHb+n0F1maY+Btw96yGHn 00ppvqrs/0BJG8TJGbl5H167fs1ZDHSB5aT3tk4pp39fEeY4+1f4NHrWvWhRaoAr mmiM8W6vKMyx8E7UJqIGm17PjbAGiaat2eOJCUIG4QrkVpQbKIlk3Tywe3pn0RIm 0CNAZvhxACur0btMiNiYK9OBNjb9XX62kzkkLH+JbY03ViljcW0CxyumkTKgOAaa GKKUdNXiCT4D5IVeEU9p5Jw4UpyoAFi+xgll+8/Yq3YIKUJ4FovLjGyVqgQxoblB O4H1VNu9Jk97I4LYjU/bYUlpoTmvw5PpbWGY+4+CI3CtkEzHInYOPBfhpaqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHNUjlQ40yGP270entjZQ5Libn/owHwYDVR0j BBgwFoAUf84+KOKZ7AcX9XiiMau2X5s+LyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMTRlM2EtNWJlMC00NmQxLTkwM2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhF Mjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5QjNFMkYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkNFM0UyOEUyOTlFQzA3MTdGNTc4QTIzMUFCQjY1RjlCM0Uy RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2 NUY5QjNFMkYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN0RCtFTQ/jhRM8f0DrZXvmdXTCHtzCl8mb XnUvqGoa2o9dtlG2gnTxQbhQOfiVLt4BdvDfNC+eWfLCidknd4+9OdBk0Nk/iCJa zF+Z8lFxA6kWvpUj5zha6kdDcqyo4AtXUV+DF3hwiArRcKtmxPbVLq88z2CdgnBH Eb5Br88WrU1lxRlFw2/cVAx5kvL9IrsZBraWUMnw3p90T0/LljSHoPpCL1cerxdc BM9peZ3PNydNYQOpJAT23p2nt8As+6f6HALZE7zShUwbkF2jbIdl282LKk7KGrBc eNgjq6GSxC9neKo4A52q9utqIV8a71lCVldoQA4gnUVlNtCqioA= -----END CERTIFICATE-----Generated at Thu Sep 17 09:12:28 2026 by rpki-client