$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json) Hash identifier: LtOoyolLqg5vQWRgER+xD3MsaeG3Az76R8PdX7UiXOc= Subject key identifier: 0E:9E:B1:39:32:F9:A9:FC:E5:37:84:F6:D2:63:C7:EA:ED:69:69:E7 Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Certificate serial: 1B2BD2A8E67AB7F74DD70613A2FB5D73F6E4A973 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:47:28 +0000 Manifest this update: Wed 16 Sep 2026 18:42:28 +0000 Manifest next update: Thu 17 Sep 2026 20:56:28 +0000 Files and hashes: 1: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: N7t60hFcWNuHGhtH4NMEF7oGmUueiuya1gxo8JBPDyc=) 2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2b:d2:a8:e6:7a:b7:f7:4d:d7:06:13:a2:fb:5d:73:f6:e4:a9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Validity Not Before: Sep 16 18:42:28 2026 GMT Not After : Sep 17 20:56:28 2026 GMT Subject: CN=0E9EB13932F9A9FCE53784F6D263C7EAED6969E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4c:bc:e2:94:26:d1:60:d0:e1:05:df:e2:c6: 0e:a6:4f:58:67:90:5d:df:45:5c:7b:7d:b5:fd:d9: 3a:30:30:f0:d4:0d:95:8f:b6:16:ba:7c:4c:35:c3: bb:f4:3c:b4:7f:43:e1:8f:d3:fe:7c:c8:1a:5c:be: d4:ad:69:67:88:78:9d:0b:8a:82:84:0f:89:e2:3d: d2:d0:7d:d8:55:11:aa:a5:01:5f:3a:c0:8a:9d:e7: 51:26:a3:dc:20:c1:64:cc:ae:5d:e8:f6:ef:ea:cd: 57:ac:c8:dc:9e:01:c9:7c:5a:db:bc:bb:19:16:fa: a1:b9:cb:f8:e8:6c:ee:a0:41:d2:43:dc:05:b9:ec: 42:06:86:15:0a:62:0f:a7:40:c9:80:9d:40:41:57: ea:cb:86:a6:6b:0f:5a:31:e8:f3:19:d0:de:57:f5: d2:60:66:28:84:6e:95:ea:c4:c4:3e:e5:fc:af:39: 8a:78:99:8b:6d:af:18:81:6c:ff:82:af:08:58:b6: 1c:0f:1f:0f:b9:ff:19:5c:14:44:1c:fc:99:fd:75: 41:00:b9:fb:15:e8:c6:b0:66:65:69:94:91:28:1c: 61:06:ae:17:3f:65:ab:1d:b2:5b:9e:ef:2a:2b:28: a7:4d:35:8b:9c:53:6a:ef:bb:a3:51:09:d3:3e:3e: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9E:B1:39:32:F9:A9:FC:E5:37:84:F6:D2:63:C7:EA:ED:69:69:E7 X509v3 Authority Key Identifier: keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:30:c7:63:e2:20:a5:70:5f:4e:65:20:89:7d:96:d1:9b:c8: e8:8a:95:a5:9c:9f:a4:76:6e:e0:49:c2:e8:c8:24:e5:5e:e7: 30:b6:6f:18:17:e6:b2:1d:8b:e1:f0:51:06:c6:10:19:a5:13: 4f:dd:b5:a1:79:68:db:d2:45:ad:ab:dc:07:61:b9:05:2b:e0: 21:3f:5f:37:fe:d6:5f:73:8a:40:84:45:71:c1:40:43:d6:97: cb:70:cc:1d:6d:4a:a1:7f:37:31:4e:00:de:10:c8:cd:52:a2: db:6b:4f:47:83:6a:3b:a5:67:df:2f:fe:9f:1e:08:23:6c:b8: 8e:80:b5:12:70:d6:e2:a9:58:dd:bc:d5:e0:c4:06:c2:92:1c: 52:24:cb:88:e9:27:43:98:f4:fd:53:72:f5:a2:72:7a:1b:93: 6c:0b:21:48:58:52:e2:60:10:04:b7:04:62:9b:b2:08:bb:81: ed:30:40:28:dd:c9:b1:68:9c:e5:3c:23:40:a5:f8:db:7d:72: 5b:fb:74:1c:d1:08:e7:23:15:b6:26:94:9d:5d:37:5d:00:7e: 6c:eb:b2:24:43:df:dd:b5:8c:6d:19:01:6e:5c:2e:f4:77:8e: 3e:b6:b3:31:b0:ec:09:e5:84:9a:2e:cf:3c:ff:86:26:c2:0a: 48:7c:0e:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyvSqOZ6t/dN1wYTovtdc/bkqXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz RkM0MUZGQjAeFw0yNjA5MTYxODQyMjhaFw0yNjA5MTcyMDU2MjhaMDMxMTAvBgNV BAMTKDBFOUVCMTM5MzJGOUE5RkNFNTM3ODRGNkQyNjNDN0VBRUQ2OTY5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTLzilCbRYNDhBd/ixg6mT1hn kF3fRVx7fbX92TowMPDUDZWPtha6fEw1w7v0PLR/Q+GP0/58yBpcvtStaWeIeJ0L ioKED4niPdLQfdhVEaqlAV86wIqd51Emo9wgwWTMrl3o9u/qzVesyNyeAcl8Wtu8 uxkW+qG5y/jobO6gQdJD3AW57EIGhhUKYg+nQMmAnUBBV+rLhqZrD1ox6PMZ0N5X 9dJgZiiEbpXqxMQ+5fyvOYp4mYttrxiBbP+CrwhYthwPHw+5/xlcFEQc/Jn9dUEA ufsV6MawZmVplJEoHGEGrhc/Zasdslue7yorKKdNNYucU2rvu6NRCdM+PkHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDp6xOTL5qfzlN4T20mPH6u1paecwHwYDVR0j BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx RkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQx RkQzRkM0MUZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQwx2PiIKVwX05lIIl9ltGbyOiKlaWcn6R2 buBJwujIJOVe5zC2bxgX5rIdi+HwUQbGEBmlE0/dtaF5aNvSRa2r3AdhuQUr4CE/ Xzf+1l9zikCERXHBQEPWl8twzB1tSqF/NzFOAN4QyM1SottrT0eDajulZ98v/p8e CCNsuI6AtRJw1uKpWN281eDEBsKSHFIky4jpJ0OY9P1TcvWicnobk2wLIUhYUuJg EAS3BGKbsgi7ge0wQCjdybFonOU8I0Cl+Nt9clv7dBzRCOcjFbYmlJ1dN10Afmzr siRD3921jG0ZAW5cLvR3jj62szGw7AnlhJouzzz/hibCCkh8DoI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:48 2026 by rpki-client