$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: p/9fhwM5G2dUtmosBzecBfhwXv3paqAd63hA/bvTEJw= Subject key identifier: 40:66:63:78:28:31:DD:44:0A:64:92:52:68:39:B0:4F:A1:4B:2E:0E Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 58154F0BBE459311E846362D9A453B15F2F8DF60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:00:35 +0000 Manifest this update: Thu 18 Jun 2026 02:55:35 +0000 Manifest next update: Fri 19 Jun 2026 06:42:35 +0000 Files and hashes: 1: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: Lba5XRqMjTr2dmkZgClzjIHzhptvSQWXAeqHQkZpcTM=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:15:4f:0b:be:45:93:11:e8:46:36:2d:9a:45:3b:15:f2:f8:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Jun 18 02:55:35 2026 GMT Not After : Jun 19 06:42:35 2026 GMT Subject: CN=406663782831DD440A6492526839B04FA14B2E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:03:38:35:a5:53:73:6b:57:c2:fe:9b:4b: 11:b4:06:82:88:1b:cd:ca:70:b6:97:3d:32:9d:4c: 8f:a6:c1:ba:fb:eb:01:cc:03:4b:b0:5b:c9:d6:66: 67:2c:59:6d:56:e3:13:3f:6a:92:17:72:5d:14:98: 8c:0d:e9:87:00:db:cf:6e:1b:3d:b3:cc:90:f6:58: 9f:b5:2d:f6:17:fa:87:d9:b9:37:75:e2:db:77:59: 52:a2:e9:b4:cb:9e:98:00:42:6f:60:56:48:fc:73: e7:53:a5:7d:c8:8f:db:7d:f4:35:e5:85:7a:ee:99: 22:ad:e0:da:7d:fc:ae:bb:bc:7a:e7:f8:52:eb:c3: 42:5d:c4:42:83:4e:1a:f6:eb:a7:76:b8:5f:3c:62: a2:b6:d1:e2:c0:ce:45:49:f9:93:17:f8:ca:85:4f: 60:b2:18:b1:0c:75:2c:90:a2:13:ee:c6:68:49:12: 0b:85:8c:05:42:f1:5d:d2:51:be:b8:7b:65:ae:7b: 33:67:b8:1e:bd:20:36:e7:b9:32:62:2c:f1:71:dc: b4:d7:89:ca:49:b4:7d:b2:1b:da:7d:70:2f:da:17: 03:fa:b2:fb:5c:5c:64:0f:a7:3c:c0:7d:9b:c2:c2: bd:c3:b3:3b:b2:54:8a:2c:98:1d:00:b2:1c:70:f1: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:63:78:28:31:DD:44:0A:64:92:52:68:39:B0:4F:A1:4B:2E:0E X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:bd:0c:ed:6d:61:f6:de:0a:eb:d1:85:7e:b0:b9:66:73: 2a:a5:40:e2:f4:cd:1b:46:e3:a0:b6:60:c8:51:29:f0:bc:35: 1c:25:e2:0c:9b:cd:4a:be:0a:35:41:40:40:21:e0:48:7e:52: 6c:4e:21:40:3f:49:f2:0a:3e:b0:8b:aa:ff:23:d3:b6:cd:99: dc:70:e6:81:67:e4:27:d8:29:39:e0:5c:a9:65:9b:df:dd:56: 35:c7:77:8e:71:08:24:b5:81:d7:82:dc:97:71:67:d3:b4:41: f5:12:a1:9f:21:56:0d:83:74:79:92:f7:92:be:3d:31:79:d3: b5:2a:a4:f3:bd:64:87:6d:47:21:e8:48:2c:0c:b3:a2:b3:b1: 80:c5:ee:4a:c9:1f:6f:28:9d:ef:64:75:51:ce:93:8e:32:a0: c1:de:cd:3d:eb:08:da:e9:8b:71:ed:02:c1:91:45:a1:d4:4d: 05:23:86:71:7d:a7:93:11:ab:e5:9e:71:45:d5:49:67:ab:bd: 1c:ae:9e:f4:a2:5b:d7:72:31:12:fb:81:e5:ac:52:1a:6d:00: ce:d4:15:40:db:ff:13:8f:58:08:16:a4:c4:2a:2d:d3:f1:20: 3a:d2:4d:46:d4:67:e4:d0:ed:31:af:9b:46:05:3d:52:39:9b: 93:98:0e:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBVPC75FkxHoRjYtmkU7FfL432AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA2MTgwMjU1MzVaFw0yNjA2MTkwNjQyMzVaMDMxMTAvBgNV BAMTKDQwNjY2Mzc4MjgzMURENDQwQTY0OTI1MjY4MzlCMDRGQTE0QjJFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUwM4NaVTc2tXwv6bSxG0BoKI G83KcLaXPTKdTI+mwbr76wHMA0uwW8nWZmcsWW1W4xM/apIXcl0UmIwN6YcA289u Gz2zzJD2WJ+1LfYX+ofZuTd14tt3WVKi6bTLnpgAQm9gVkj8c+dTpX3Ij9t99DXl hXrumSKt4Np9/K67vHrn+FLrw0JdxEKDThr266d2uF88YqK20eLAzkVJ+ZMX+MqF T2CyGLEMdSyQohPuxmhJEguFjAVC8V3SUb64e2WuezNnuB69IDbnuTJiLPFx3LTX icpJtH2yG9p9cC/aFwP6svtcXGQPpzzAfZvCwr3DszuyVIosmB0Ashxw8ZgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGZjeCgx3UQKZJJSaDmwT6FLLg4wHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx8vQztbWH23grr0YV+sLlmcyqlQOL0zRtG 46C2YMhRKfC8NRwl4gybzUq+CjVBQEAh4Eh+UmxOIUA/SfIKPrCLqv8j07bNmdxw 5oFn5CfYKTngXKllm9/dVjXHd45xCCS1gdeC3JdxZ9O0QfUSoZ8hVg2DdHmS95K+ PTF507UqpPO9ZIdtRyHoSCwMs6KzsYDF7krJH28one9kdVHOk44yoMHezT3rCNrp i3HtAsGRRaHUTQUjhnF9p5MRq+WecUXVSWervRyunvSiW9dyMRL7geWsUhptAM7U FUDb/xOPWAgWpMQqLdPxIDrSTUbUZ+TQ7TGvm0YFPVI5m5OYDkk= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:09 2026 by rpki-client