$ rpki-client -vvvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json) Hash identifier: hZaw3186RA7oy7Fd8S7P/12khLzaG1mIsdpjvf4CAGM= Subject key identifier: 2F:C7:F0:18:BF:43:7E:4B:98:8A:79:16:D6:A8:BF:B6:FA:A8:B4:28 Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 36BD065EAF1BAC4D92B7DAC1DF6EC39CE0177646 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:55:54 +0000 Manifest this update: Thu 17 Sep 2026 01:50:54 +0000 Manifest next update: Fri 18 Sep 2026 03:09:54 +0000 Files and hashes: 1: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=) 2: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=) 3: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: 61SSAltdWff4uKp5R3ZzW6N2IyW9iULYQJjiVBAnfzw=) 4: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bd:06:5e:af:1b:ac:4d:92:b7:da:c1:df:6e:c3:9c:e0:17:76:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: Sep 17 01:50:54 2026 GMT Not After : Sep 18 03:09:54 2026 GMT Subject: CN=2FC7F018BF437E4B988A7916D6A8BFB6FAA8B428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:e1:b8:51:7f:14:a1:51:ff:82:e5:c7:bd: bf:68:b1:1b:62:25:a1:0d:20:7a:dd:74:e3:fb:89: 8f:fd:4c:ec:9e:8e:54:d0:25:17:80:44:80:86:66: 61:a7:02:22:1b:6b:d6:54:4a:f9:f0:a0:09:4e:1c: 56:8c:11:d3:70:9f:25:ac:ce:cb:c5:6b:56:a9:a5: 00:3b:21:98:90:a6:ab:0d:33:a8:e6:c8:cd:2f:0c: fe:24:2b:ed:aa:9d:ea:18:e8:b0:91:3e:14:3f:9a: cc:7c:e9:d8:1f:e7:95:8d:92:9e:52:ff:20:66:d2: cf:78:36:0f:da:f7:8d:32:33:47:eb:f0:00:ea:48: 29:ba:9e:62:28:0e:bb:4f:8a:ce:4e:9c:0f:7c:a9: ab:9b:3e:2b:21:92:ca:d4:81:78:aa:fb:96:e7:e6: 76:df:61:8a:58:f5:e6:7f:a7:15:e0:d4:bc:e3:36: ac:1e:9c:39:49:9e:ea:6a:f7:88:e7:13:b7:d2:e9: ce:53:e7:f5:8f:7f:c6:47:97:76:a6:d7:13:fb:7c: 2d:36:4a:8a:da:35:b5:ac:1b:d1:f5:a0:55:e1:40: f4:1f:b4:89:e1:93:3d:15:59:b9:11:55:28:a4:68: 0c:05:e5:aa:57:f0:eb:07:7d:59:52:c8:7c:28:fc: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:F0:18:BF:43:7E:4B:98:8A:79:16:D6:A8:BF:B6:FA:A8:B4:28 X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:00:9b:80:3e:f6:67:5a:16:1c:55:e6:2e:34:0f:15:0d:5d: 84:17:b3:cf:bc:50:7d:f7:a5:ca:dd:a0:dd:e4:8f:c1:25:2d: 8f:88:2e:a7:8d:76:3f:23:55:50:64:02:64:16:95:4f:1b:52: 51:d9:6a:1d:d1:d7:93:9f:92:49:2c:9c:b0:7f:b5:e3:66:d4: dc:79:df:b9:9a:10:2f:c1:d2:1a:0f:b3:15:29:8e:15:82:b3: 45:3f:f6:07:57:99:4c:76:56:0a:4d:74:87:1e:ff:65:dd:85: e9:6f:c0:53:1d:ce:6f:af:cf:12:7c:80:d8:29:41:56:42:ad: 94:b9:68:7d:5d:ee:ce:27:d0:d4:c6:c2:8d:c7:e5:6d:dc:37: 98:6c:83:ee:1a:f8:8c:20:26:2f:af:f8:fa:d7:4c:4c:80:d0: dd:d7:28:6e:4b:9e:8b:b8:c6:67:05:0a:1c:4e:c8:9c:db:df: 30:3c:51:5f:13:cd:ff:23:6b:b4:a6:41:eb:c3:26:73:71:fa: 0e:d7:2e:14:53:73:ef:bf:b3:84:38:12:e5:a0:5c:dd:d3:fb: d2:7a:39:66:20:fb:9e:e8:12:8f:d3:c7:a2:65:60:52:11:6f: 10:93:d9:05:40:d2:ea:35:d7:f1:dc:5a:06:01:63:68:7c:c9: 8f:79:25:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNr0GXq8brE2St9rB327DnOAXdkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjA5MTcwMTUwNTRaFw0yNjA5MTgwMzA5NTRaMDMxMTAvBgNV BAMTKDJGQzdGMDE4QkY0MzdFNEI5ODhBNzkxNkQ2QThCRkI2RkFBOEI0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvReG4UX8UoVH/guXHvb9osRti JaENIHrddOP7iY/9TOyejlTQJReARICGZmGnAiIba9ZUSvnwoAlOHFaMEdNwnyWs zsvFa1appQA7IZiQpqsNM6jmyM0vDP4kK+2qneoY6LCRPhQ/msx86dgf55WNkp5S /yBm0s94Ng/a940yM0fr8ADqSCm6nmIoDrtPis5OnA98qaubPishksrUgXiq+5bn 5nbfYYpY9eZ/pxXg1LzjNqwenDlJnupq94jnE7fS6c5T5/WPf8ZHl3am1xP7fC02 SoraNbWsG9H1oFXhQPQftInhkz0VWbkRVSikaAwF5apX8OsHfVlSyHwo/M45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL8fwGL9DfkuYinkW1qi/tvqotCgwHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMw RTIwNjcxMURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYAm4A+9mdaFhxV5i40DxUNXYQXs8+8UH33 pcrdoN3kj8ElLY+ILqeNdj8jVVBkAmQWlU8bUlHZah3R15OfkkksnLB/teNm1Nx5 37maEC/B0hoPsxUpjhWCs0U/9gdXmUx2VgpNdIce/2XdhelvwFMdzm+vzxJ8gNgp QVZCrZS5aH1d7s4n0NTGwo3H5W3cN5hsg+4a+IwgJi+v+PrXTEyA0N3XKG5Lnou4 xmcFChxOyJzb3zA8UV8Tzf8ja7SmQevDJnNx+g7XLhRTc++/s4Q4EuWgXN3T+9J6 OWYg+57oEo/Tx6JlYFIRbxCT2QVA0uo11/HcWgYBY2h8yY95JUQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:46 2026 by rpki-client