$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: eivqEQ1eK+V0HQxwXthAXawvVwc2JflPNBw/Bi+Qesc= Subject key identifier: 5A:A8:70:72:D9:CD:9B:7B:17:4C:D0:C3:8A:B9:47:D5:32:1A:FD:57 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 62E726E3126C006306DA4B148FAC1FB870087AFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:11:37 +0000 Manifest this update: Wed 16 Sep 2026 18:06:37 +0000 Manifest next update: Thu 17 Sep 2026 21:04:37 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: oo8lX+UFuoWQAMlTZNgXX8Thq54kDLPjak111M+84Bw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e7:26:e3:12:6c:00:63:06:da:4b:14:8f:ac:1f:b8:70:08:7a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Sep 16 18:06:37 2026 GMT Not After : Sep 17 21:04:37 2026 GMT Subject: CN=5AA87072D9CD9B7B174CD0C38AB947D5321AFD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:76:a5:f1:e1:b9:d3:c4:f1:08:bf:52:71: db:37:0a:57:d4:57:97:38:f8:aa:7c:af:c7:a1:ba: fb:b4:bd:34:77:b4:1c:26:e3:14:05:db:fe:da:c8: e0:14:e3:18:1a:2c:bb:b7:69:eb:7d:03:ca:d0:ea: f3:40:84:0e:0a:8d:a3:64:5e:81:b8:10:3e:bc:e9: 97:29:bd:05:15:c1:4d:a0:32:b3:04:59:13:37:9d: ee:03:48:de:91:6d:61:fd:ad:2d:86:bf:4f:60:db: fe:7d:05:93:a5:3c:98:07:13:0a:73:f4:4e:ef:e3: ec:3a:64:46:a7:12:00:46:16:db:c3:80:9e:ae:79: 77:e4:89:79:d1:2f:db:18:05:8b:0c:0f:e1:27:e3: ee:9e:a6:c4:25:f0:77:b4:2b:4a:4c:8f:d0:c5:e6: 00:95:81:02:81:36:b2:ce:04:ce:ce:17:f7:ec:0f: d6:e6:d8:e5:67:fb:86:b7:9a:63:b9:1c:29:d0:dd: 1d:64:89:21:1d:ad:32:f3:18:4f:d3:1f:40:d2:46: 95:87:75:2b:f6:ee:f1:1d:91:84:d7:80:f2:2e:7d: 37:fb:ab:05:b6:47:95:3d:f9:c5:4d:c9:21:e4:33: 40:70:69:d6:db:19:30:bd:1c:73:4c:be:2a:7c:5b: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:70:72:D9:CD:9B:7B:17:4C:D0:C3:8A:B9:47:D5:32:1A:FD:57 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4d:42:e8:65:63:4a:09:90:8d:85:62:ca:25:dc:56:2b:d0: b5:39:14:d8:a6:4f:e5:9c:89:42:e9:83:ac:6b:c0:21:a5:a9: 5e:0e:ca:f5:5a:42:99:e6:75:42:99:13:9b:45:63:72:d4:91: ac:99:da:2c:63:06:fd:05:21:97:9c:a0:44:a2:bd:c0:dc:c8: ac:04:97:51:48:bc:2a:8f:2d:79:66:f7:4b:ad:70:bd:6c:35: 83:2e:23:02:d4:76:26:28:e0:fb:fa:c4:39:f3:fa:a1:68:49: 58:61:c2:10:41:34:dd:53:f1:3f:74:f1:4c:64:f5:89:79:1d: 4c:b7:10:04:2b:de:55:94:12:13:93:1a:80:bc:fc:44:26:ac: 6a:3d:ed:a7:c1:b2:af:a8:a8:83:32:46:ed:2e:ac:64:45:72: 1b:f8:2d:90:2c:0e:24:6b:86:e2:58:8a:c9:8d:66:71:b1:fa: 92:8a:d4:90:8d:50:0d:f0:7c:d7:0b:dd:bf:0d:2f:42:4c:7c: 4a:cf:43:e9:d7:02:b2:7b:c1:2e:24:10:9f:38:80:85:de:21: 56:70:12:d7:35:00:c7:44:ef:05:6d:fb:2c:64:e6:e2:2a:47: ca:a0:d1:34:5b:e9:8a:64:59:54:ad:59:da:19:40:a9:4c:95: d5:5e:db:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYucm4xJsAGMG2ksUj6wfuHAIevwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjA5MTYxODA2MzdaFw0yNjA5MTcyMTA0MzdaMDMxMTAvBgNV BAMTKDVBQTg3MDcyRDlDRDlCN0IxNzRDRDBDMzhBQjk0N0Q1MzIxQUZENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QHal8eG508TxCL9Scds3ClfU V5c4+Kp8r8ehuvu0vTR3tBwm4xQF2/7ayOAU4xgaLLu3aet9A8rQ6vNAhA4KjaNk XoG4ED686ZcpvQUVwU2gMrMEWRM3ne4DSN6RbWH9rS2Gv09g2/59BZOlPJgHEwpz 9E7v4+w6ZEanEgBGFtvDgJ6ueXfkiXnRL9sYBYsMD+En4+6epsQl8He0K0pMj9DF 5gCVgQKBNrLOBM7OF/fsD9bm2OVn+4a3mmO5HCnQ3R1kiSEdrTLzGE/TH0DSRpWH dSv27vEdkYTXgPIufTf7qwW2R5U9+cVNySHkM0BwadbbGTC9HHNMvip8W7M/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqhwctnNm3sXTNDDirlH1TIa/VcwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpNQuhlY0oJkI2FYsol3FYr0LU5FNimT+Wc iULpg6xrwCGlqV4OyvVaQpnmdUKZE5tFY3LUkayZ2ixjBv0FIZecoESivcDcyKwE l1FIvCqPLXlm90utcL1sNYMuIwLUdiYo4Pv6xDnz+qFoSVhhwhBBNN1T8T908Uxk 9Yl5HUy3EAQr3lWUEhOTGoC8/EQmrGo97afBsq+oqIMyRu0urGRFchv4LZAsDiRr huJYismNZnGx+pKK1JCNUA3wfNcL3b8NL0JMfErPQ+nXArJ7wS4kEJ84gIXeIVZw Etc1AMdE7wVt+yxk5uIqR8qg0TRb6YpkWVStWdoZQKlMldVe2z8= -----END CERTIFICATE-----Generated at Thu Sep 17 13:49:58 2026 by rpki-client