$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: Dci+4numN4oChWKfjCbvYsQaEHF27S7PCHHFxK9wBKI= Subject key identifier: 57:46:F0:D3:43:58:7D:8D:E1:46:88:78:6F:35:3C:B2:B6:19:B3:04 Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 7D02DEE86C22FF8EA0CFC086AE4EF22D5B6FF732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 10:09:58 +0000 Manifest this update: Sun 02 Aug 2026 10:04:58 +0000 Manifest next update: Mon 03 Aug 2026 10:54:58 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) 2: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: d/AoHbdmAxlcSycwCjPOuz7yO8UOMyfoztkyNjNvWHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:02:de:e8:6c:22:ff:8e:a0:cf:c0:86:ae:4e:f2:2d:5b:6f:f7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Aug 2 10:04:58 2026 GMT Not After : Aug 3 10:54:58 2026 GMT Subject: CN=5746F0D343587D8DE14688786F353CB2B619B304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:a6:ed:03:d4:03:64:a0:3d:26:4e:8e:f6: 0a:e9:63:23:d6:56:0d:da:e0:f8:50:3e:b2:0f:fa: 11:34:6c:13:6a:98:c5:4c:af:d5:49:c7:e3:5a:47: 7f:7e:3a:d7:0c:d1:c4:43:ae:11:c2:0a:46:94:55: 6a:1c:57:50:18:e0:98:fa:f4:91:aa:c3:88:d7:94: a2:d2:18:4f:ce:80:c6:fc:7d:83:21:3d:5b:11:c5: 70:97:0e:a7:30:ee:c9:28:74:e3:1b:f7:02:a4:98: 90:c6:f3:24:79:d0:bd:b2:0a:60:b6:3c:46:88:d2: 73:e3:0b:60:73:0d:b7:9a:e8:c6:11:23:c0:da:0f: 9f:a7:10:58:09:b0:67:d8:7e:5f:63:d5:99:31:23: af:e1:5a:6e:c5:b3:6c:3f:49:97:cb:a4:af:50:b4: 15:59:b4:4d:34:a8:90:02:37:72:78:b5:42:08:a6: 43:54:71:f1:54:d2:52:2b:0e:3f:ec:36:25:e7:18: 5f:c7:46:67:5c:4f:e4:41:ea:bf:99:89:b0:8a:b0: 37:bf:78:99:02:6a:c8:31:72:d7:5d:90:b8:e3:a0: 7a:e4:b7:6d:c8:15:63:2a:bb:58:da:e4:96:b1:ed: c8:9c:7a:1e:cd:4e:f6:ea:60:98:f2:bf:6b:77:c2: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:46:F0:D3:43:58:7D:8D:E1:46:88:78:6F:35:3C:B2:B6:19:B3:04 X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:36:da:9c:c1:42:16:be:28:b1:86:03:3f:e0:53:41:b5: 8f:a2:54:e0:05:5a:14:2c:a5:92:cb:27:cf:b6:45:c9:63:4d: a3:c7:33:89:8c:9a:fd:ac:df:25:78:13:04:e1:2f:3c:9d:24: e6:6b:fb:61:58:9b:a8:a6:41:cd:4e:d8:55:14:52:fb:02:d9: 4d:cf:b0:88:6f:0c:f8:1d:ff:f3:8b:af:65:09:ad:d7:ec:2c: 55:e2:f8:1c:40:76:5e:ed:f2:e3:34:c1:be:43:70:18:99:8b: b4:b8:b6:7e:0e:bd:46:84:d9:03:e6:f1:0c:cf:83:81:5e:9e: ab:a8:a8:d5:9b:d3:c3:ce:11:0c:76:86:ab:e3:80:54:73:4e: 47:81:09:bf:1f:bc:5b:7e:45:1e:c5:e5:81:ed:e4:ef:0d:bd: d4:45:a7:f8:97:39:ca:f6:98:fc:ab:d0:76:df:d7:e4:f9:71: 6e:6e:a8:be:e9:f5:78:26:67:77:ab:14:55:50:dc:31:b9:27: f5:d8:68:5a:c2:d3:5f:b1:2f:b6:1d:f1:aa:40:ea:cf:c3:e8: 01:1d:36:f3:8c:52:38:01:cd:21:05:c1:03:63:55:c0:9c:d3: 04:97:33:08:34:6f:a1:ef:e8:26:64:c7:7b:29:f0:a7:b7:53: 69:b3:67:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQLe6Gwi/46gz8CGrk7yLVtv9zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA4MDIxMDA0NThaFw0yNjA4MDMxMDU0NThaMDMxMTAvBgNV BAMTKDU3NDZGMEQzNDM1ODdEOERFMTQ2ODg3ODZGMzUzQ0IyQjYxOUIzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxL6btA9QDZKA9Jk6O9grpYyPW Vg3a4PhQPrIP+hE0bBNqmMVMr9VJx+NaR39+OtcM0cRDrhHCCkaUVWocV1AY4Jj6 9JGqw4jXlKLSGE/OgMb8fYMhPVsRxXCXDqcw7skodOMb9wKkmJDG8yR50L2yCmC2 PEaI0nPjC2BzDbea6MYRI8DaD5+nEFgJsGfYfl9j1ZkxI6/hWm7Fs2w/SZfLpK9Q tBVZtE00qJACN3J4tUIIpkNUcfFU0lIrDj/sNiXnGF/HRmdcT+RB6r+ZibCKsDe/ eJkCasgxctddkLjjoHrkt23IFWMqu1ja5Jax7ciceh7NTvbqYJjyv2t3wrsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV0bw00NYfY3hRoh4bzU8srYZswQwHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnYNtqcwUIWviixhgM/4FNBtY+iVOAFWhQs pZLLJ8+2RcljTaPHM4mMmv2s3yV4EwThLzydJOZr+2FYm6imQc1O2FUUUvsC2U3P sIhvDPgd//OLr2UJrdfsLFXi+BxAdl7t8uM0wb5DcBiZi7S4tn4OvUaE2QPm8QzP g4FenquoqNWb08POEQx2hqvjgFRzTkeBCb8fvFt+RR7F5YHt5O8NvdRFp/iXOcr2 mPyr0Hbf1+T5cW5uqL7p9XgmZ3erFFVQ3DG5J/XYaFrC01+xL7Yd8apA6s/D6AEd NvOMUjgBzSEFwQNjVcCc0wSXMwg0b6Hv6CZkx3sp8Ke3U2mzZwk= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:46 2026 by rpki-client