$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft File: 7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft (raw, json) Hash identifier: 0vB23FYVRCfBfBQWOxR+FJOUo/D6+8LFvhSjQE8zZwU= Subject key identifier: 2B:A0:4E:28:F7:53:CE:73:31:00:0A:DA:2E:71:59:BA:04:14:FB:A8 Authority key identifier: 7E:3B:0E:F5:65:3A:FA:25:B9:FF:DD:DD:B4:00:14:3F:76:50:A5:A4 Certificate issuer: /CN=7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4 Certificate serial: 5763EAD0216CB9214DFAC7B3B9D35EC40E07C66E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 08:49:57 +0000 Manifest this update: Sat 24 Oct 2026 08:44:57 +0000 Manifest next update: Sun 25 Oct 2026 11:53:57 +0000 Files and hashes: 1: 7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl (hash: hdyOuENyZ2P0+B0E7FRYvL3OU9jW8twg698TxvfLOgE=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: ZqUeA+GYRIxCIgCsH9WqtyaWh6HnVZhzhgf8aY+NnIg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:63:ea:d0:21:6c:b9:21:4d:fa:c7:b3:b9:d3:5e:c4:0e:07:c6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4 Validity Not Before: Oct 24 08:44:57 2026 GMT Not After : Oct 25 11:53:57 2026 GMT Subject: CN=2BA04E28F753CE7331000ADA2E7159BA0414FBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:bb:0e:3d:4c:ba:df:21:0f:b9:95:a1:b5: 36:80:57:8b:71:36:2d:e0:84:cc:45:a2:8f:b3:36: cb:7b:90:9b:38:9c:52:26:f3:18:48:06:9d:b9:bd: 05:2e:06:f2:1d:79:93:e2:74:df:6b:63:29:0d:f6: 38:38:5d:64:8b:7f:3f:df:60:d2:f1:13:cf:bc:3b: aa:a6:5a:f1:71:1c:ad:87:43:c4:51:ee:88:0d:41: 49:06:88:a6:12:8a:af:3a:5b:21:35:18:1b:02:64: 5c:db:53:4c:09:22:0f:66:51:f5:cf:2c:3b:da:20: 44:19:45:fe:8c:d6:a6:53:bb:b6:a9:a2:28:ae:03: cf:d2:3c:23:73:87:2f:d5:c3:ed:0b:d8:b4:56:1a: 67:3d:aa:47:6a:47:68:a6:3d:0a:aa:fb:31:fa:03: de:9c:31:be:0c:3b:a2:3c:f9:54:a8:85:58:9d:41: c2:19:88:d7:c6:45:d0:0f:58:69:c5:54:e4:b3:d8: 17:bb:52:a1:c0:83:e6:cb:7f:68:57:16:33:59:01: b6:d2:4f:42:3a:46:f0:7e:93:5f:0b:81:ad:e4:d1: 61:fd:28:33:81:61:57:c6:0b:da:a5:7b:04:c0:23: ee:2b:b7:26:47:39:16:79:20:fa:43:83:34:08:a7: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A0:4E:28:F7:53:CE:73:31:00:0A:DA:2E:71:59:BA:04:14:FB:A8 X509v3 Authority Key Identifier: keyid:7E:3B:0E:F5:65:3A:FA:25:B9:FF:DD:DD:B4:00:14:3F:76:50:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/7E3B0EF5653AFA25B9FFDDDDB400143F7650A5A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:34:dd:93:b9:1e:c9:ff:3a:bc:ec:04:f4:be:02:a7:4a:d3: cf:bc:e4:28:55:79:70:2c:7e:b8:8a:9d:55:d3:72:f8:e8:a7: 1b:95:74:36:fd:db:7d:ce:49:a3:83:88:bc:6e:b9:f7:81:b2: 95:41:37:42:c6:63:67:53:68:1e:da:47:2e:26:c4:26:e7:df: 34:ce:04:7b:67:e2:9b:a9:0f:e7:dc:6c:be:13:62:4e:79:5c: a5:ba:8d:dc:0d:ad:ca:69:2d:59:63:b9:0a:f8:22:55:d7:9f: fa:a7:98:ab:bd:09:4b:ac:97:7f:3a:5e:f9:53:07:5e:f9:32: 5c:69:df:55:f9:d6:2f:ee:65:8f:01:c7:dc:8c:cf:cb:94:48: 0e:0e:45:32:14:e6:2e:eb:3a:3c:a2:6b:12:50:d1:6a:d1:3b: 57:aa:3a:b5:f6:8b:ed:35:03:ed:fc:28:fc:0b:6a:d0:da:be: b4:5a:0a:21:16:9a:fe:53:43:21:22:3d:52:b3:bf:72:a7:c9: 00:c1:c2:77:15:bd:90:c8:3b:55:40:14:8a:e6:eb:2a:8a:2f: fe:77:49:1b:42:0d:d8:73:e8:7a:fa:35:f9:bf:ff:1a:52:11: f5:29:c6:6f:7b:7a:bc:17:6b:d1:a2:c8:4f:2b:65:4a:75:f1: 94:78:55:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2Pq0CFsuSFN+sezudNexA4Hxm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UzQjBFRjU2NTNBRkEyNUI5RkZEREREQjQwMDE0M0Y3 NjUwQTVBNDAeFw0yNjEwMjQwODQ0NTdaFw0yNjEwMjUxMTUzNTdaMDMxMTAvBgNV BAMTKDJCQTA0RTI4Rjc1M0NFNzMzMTAwMEFEQTJFNzE1OUJBMDQxNEZCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxLsOPUy63yEPuZWhtTaAV4tx Ni3ghMxFoo+zNst7kJs4nFIm8xhIBp25vQUuBvIdeZPidN9rYykN9jg4XWSLfz/f YNLxE8+8O6qmWvFxHK2HQ8RR7ogNQUkGiKYSiq86WyE1GBsCZFzbU0wJIg9mUfXP LDvaIEQZRf6M1qZTu7apoiiuA8/SPCNzhy/Vw+0L2LRWGmc9qkdqR2imPQqq+zH6 A96cMb4MO6I8+VSohVidQcIZiNfGRdAPWGnFVOSz2Be7UqHAg+bLf2hXFjNZAbbS T0I6RvB+k18Lga3k0WH9KDOBYVfGC9qlewTAI+4rtyZHORZ5IPpDgzQIp0+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6BOKPdTznMxAAraLnFZugQU+6gwHwYDVR0j BBgwFoAUfjsO9WU6+iW5/93dtAAUP3ZQpaQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkNTk0MzAtZGU3OC00NTMyLThlMWEtMzRiNTNiOGYyNmZhLzAvN0UzQjBFRjU2 NTNBRkEyNUI5RkZEREREQjQwMDE0M0Y3NjUwQTVBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTNCMEVGNTY1M0FGQTI1QjlGRkRERERCNDAwMTQzRjc2NTBB NUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvN0UzQjBFRjU2NTNBRkEyNUI5RkZEREREQjQwMDE0 M0Y3NjUwQTVBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI03ZO5Hsn/OrzsBPS+AqdK08+85ChVeXAs friKnVXTcvjopxuVdDb9233OSaODiLxuufeBspVBN0LGY2dTaB7aRy4mxCbn3zTO BHtn4pupD+fcbL4TYk55XKW6jdwNrcppLVljuQr4IlXXn/qnmKu9CUusl386XvlT B175Mlxp31X51i/uZY8Bx9yMz8uUSA4ORTIU5i7rOjyiaxJQ0WrRO1eqOrX2i+01 A+38KPwLatDavrRaCiEWmv5TQyEiPVKzv3KnyQDBwncVvZDIO1VAFIrm6yqKL/53 SRtCDdhz6Hr6Nfm//xpSEfUpxm97erwXa9GiyE8rZUp18ZR4VX0= -----END CERTIFICATE-----Generated at Sat Oct 24 20:38:42 2026 by rpki-client