$ rpki-client -vvvf rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft File: 7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft (raw, json) Hash identifier: GsiXxLmJWEP5DfHE8wIUe2tUWPMbpqVPGrL2BFZdSEY= Subject key identifier: 45:7D:83:0E:05:09:97:AD:A6:1D:43:7D:F8:63:5B:C7:A7:1D:1B:39 Authority key identifier: 7E:9E:B8:CF:1D:77:4F:F8:4E:5B:A7:79:B7:0A:4C:B2:9A:77:CA:E5 Certificate issuer: /CN=7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5 Certificate serial: 1F4CEBE8493BCDEAFD6B88943C6DC17EB5379EEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft Manifest number: EA Signing time: Sat 24 Oct 2026 12:03:54 +0000 Manifest this update: Sat 24 Oct 2026 11:58:54 +0000 Manifest next update: Sun 25 Oct 2026 15:51:54 +0000 Files and hashes: 1: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: ky+UMUsKKh5CljFqbxV8ILCXCq+IaYJ8oIhei4/iu5o=) 2: 7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.crl (hash: BHQAPmwUuPZSzhqo2c93YIr/VlGTXcmCfdvKEJTAuF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.crl rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4c:eb:e8:49:3b:cd:ea:fd:6b:88:94:3c:6d:c1:7e:b5:37:9e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5 Validity Not Before: Oct 24 11:58:54 2026 GMT Not After : Oct 25 15:51:54 2026 GMT Subject: CN=457D830E050997ADA61D437DF8635BC7A71D1B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:22:f7:50:41:ed:72:60:42:0f:b0:c9:ac: c7:12:e5:b9:51:76:cc:e6:7b:43:47:73:9c:85:d7: 02:46:95:01:5f:dd:99:d6:af:d4:1c:4c:74:55:51: 5b:fa:b6:a5:48:6f:25:21:32:e9:a5:67:d2:03:25: b3:57:7c:08:98:b0:9a:7d:39:4f:16:51:49:3b:28: 64:e0:c6:d8:35:72:af:fa:9a:57:06:5b:8f:5d:26: ff:ae:54:a3:fb:08:ba:11:80:8c:13:c0:3b:03:a2: a7:8e:c3:de:d9:fa:6e:7a:a8:aa:8b:c1:28:16:8f: e5:54:5c:54:59:3f:66:ff:ac:6d:c8:32:53:e5:0a: dd:00:08:ff:1b:8b:70:96:2d:dc:20:fc:c2:28:c8: be:66:04:e7:bd:36:4a:29:46:94:1b:d8:b7:5c:34: 2a:60:78:fc:7e:c5:0e:54:bf:cb:28:7e:1d:fa:73: e2:2c:9f:c6:c0:8b:a8:f5:d8:76:58:91:ed:e5:92: 87:26:a7:91:d6:cd:bd:b4:03:ec:28:69:57:22:ba: 67:2d:14:c1:53:c6:2f:d3:0b:5a:12:4d:51:eb:a4: bd:37:be:8c:19:8b:95:a7:17:91:1b:1c:0a:01:b0: 94:9c:ec:20:77:0d:7a:79:ef:96:7b:ba:57:f7:d2: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7D:83:0E:05:09:97:AD:A6:1D:43:7D:F8:63:5B:C7:A7:1D:1B:39 X509v3 Authority Key Identifier: keyid:7E:9E:B8:CF:1D:77:4F:F8:4E:5B:A7:79:B7:0A:4C:B2:9A:77:CA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:40:2c:6c:c6:19:12:12:51:91:04:31:63:28:9f:56:80:50: 77:00:e6:dc:55:8e:ff:0b:f3:6e:f3:0d:f8:cd:25:ad:b8:cb: 90:bd:8b:06:3e:c6:66:83:ac:96:eb:38:47:88:7a:18:67:2e: e1:72:d1:9d:67:11:94:65:34:ad:a3:38:35:24:56:f8:3b:51: 8e:a6:bd:cd:27:d2:9f:1f:1b:41:76:0a:e1:97:76:f8:e1:bc: c2:cb:f1:b6:81:f0:b7:79:8b:a0:ee:96:72:95:28:bf:c8:53: ff:73:be:49:b1:2f:21:26:be:98:76:59:91:9e:19:7c:83:26: f6:6b:41:79:15:a4:55:13:b7:c7:92:5d:12:00:e2:92:72:de: f8:dc:bc:0f:69:3f:d6:76:14:ab:17:81:d0:08:0d:1e:9c:2b: a9:30:a6:e8:a9:09:53:54:81:6c:60:88:46:46:69:da:48:9e: ab:b5:bf:89:16:c8:2e:e1:fc:6f:6a:ee:2b:67:95:27:d7:fb: ea:6d:55:c5:a0:50:d0:58:dc:42:ab:9f:b6:20:d3:46:82:fe: 10:84:d9:32:a7:d5:7f:ea:b9:17:a3:ed:9e:97:93:92:e1:8a: 53:5b:16:af:a3:6d:e4:bb:bd:73:d3:5a:fe:36:a9:8f:1e:d8: 5c:ca:ac:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0zr6Ek7zer9a4iUPG3BfrU3nuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5RUI4Q0YxRDc3NEZGODRFNUJBNzc5QjcwQTRDQjI5 QTc3Q0FFNTAeFw0yNjEwMjQxMTU4NTRaFw0yNjEwMjUxNTUxNTRaMDMxMTAvBgNV BAMTKDQ1N0Q4MzBFMDUwOTk3QURBNjFENDM3REY4NjM1QkM3QTcxRDFCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8iL3UEHtcmBCD7DJrMcS5blR dszme0NHc5yF1wJGlQFf3ZnWr9QcTHRVUVv6tqVIbyUhMumlZ9IDJbNXfAiYsJp9 OU8WUUk7KGTgxtg1cq/6mlcGW49dJv+uVKP7CLoRgIwTwDsDoqeOw97Z+m56qKqL wSgWj+VUXFRZP2b/rG3IMlPlCt0ACP8bi3CWLdwg/MIoyL5mBOe9NkopRpQb2Ldc NCpgePx+xQ5Uv8sofh36c+Isn8bAi6j12HZYke3lkocmp5HWzb20A+woaVciumct FMFTxi/TC1oSTVHrpL03vowZi5WnF5EbHAoBsJSc7CB3DXp575Z7ulf30j99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURX2DDgUJl62mHUN9+GNbx6cdGzkwHwYDVR0j BBgwFoAUfp64zx13T/hOW6d5twpMspp3yuUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2ZTk1YzItNDg4Ny00N2ZjLThiYWMtMTBiYjFkYTk3MDAzLzAvN0U5RUI4Q0Yx RDc3NEZGODRFNUJBNzc5QjcwQTRDQjI5QTc3Q0FFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTlFQjhDRjFENzc0RkY4NEU1QkE3NzlCNzBBNENCMjlBNzdD QUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvN0U5RUI4Q0YxRDc3NEZGODRFNUJBNzc5QjcwQTRD QjI5QTc3Q0FFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpALGzGGRISUZEEMWMon1aAUHcA5txVjv8L 827zDfjNJa24y5C9iwY+xmaDrJbrOEeIehhnLuFy0Z1nEZRlNK2jODUkVvg7UY6m vc0n0p8fG0F2CuGXdvjhvMLL8baB8Ld5i6DulnKVKL/IU/9zvkmxLyEmvph2WZGe GXyDJvZrQXkVpFUTt8eSXRIA4pJy3vjcvA9pP9Z2FKsXgdAIDR6cK6kwpuipCVNU gWxgiEZGadpInqu1v4kWyC7h/G9q7itnlSfX++ptVcWgUNBY3EKrn7Yg00aC/hCE 2TKn1X/quRej7Z6Xk5LhilNbFq+jbeS7vXPTWv42qY8e2FzKrE8= -----END CERTIFICATE-----Generated at Sun Oct 25 09:26:43 2026 by rpki-client