$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json) Hash identifier: iMswzHPPqQrlfy3D2/kw8NpGDKzkiYiJ2PZLPO/RP3c= Subject key identifier: C2:5C:0F:5A:A9:72:71:A3:E7:14:9B:F7:A7:6F:5C:5E:C1:AC:64:96 Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Certificate serial: 76C1A5B530FE85DDF0F248FBBD73B322A6D7C131 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft Manifest number: EA Signing time: Sat 24 Oct 2026 20:24:39 +0000 Manifest this update: Sat 24 Oct 2026 20:19:39 +0000 Manifest next update: Sun 25 Oct 2026 23:39:39 +0000 Files and hashes: 1: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=) 2: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: Zot6EVfRPTTleqNCC2ffUdWaw797qjeP0opv6yYGcic=) 3: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=) 4: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 23:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c1:a5:b5:30:fe:85:dd:f0:f2:48:fb:bd:73:b3:22:a6:d7:c1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Validity Not Before: Oct 24 20:19:39 2026 GMT Not After : Oct 25 23:39:39 2026 GMT Subject: CN=C25C0F5AA97271A3E7149BF7A76F5C5EC1AC6496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:e0:58:63:d7:53:00:51:8d:b0:75:2b:fa: 86:63:78:57:60:91:e5:33:d6:9d:39:a3:e2:c9:82: bc:40:71:17:64:06:15:7f:28:9c:c8:7b:3e:42:97: d5:ad:16:0e:af:a8:9e:fe:56:e2:63:43:1e:4a:9e: de:8e:59:72:1c:64:5a:5b:c6:14:47:85:59:0f:5a: a1:5e:a5:f4:fe:dc:9e:07:1b:c8:4a:1a:db:0f:66: cb:69:fb:ca:d8:25:94:87:0d:01:06:79:41:c4:01: f1:c5:d4:fd:80:29:c5:83:b7:14:63:c1:6b:12:8b: a0:bd:f7:e3:bd:a9:c1:74:27:64:d2:45:b6:46:a5: 62:b8:34:d1:6a:eb:79:18:1b:2d:85:3f:55:30:96: 1d:3e:31:0b:b1:28:5e:4a:3d:13:6c:77:47:2e:c5: 2c:65:7c:2e:1c:e4:88:c8:5b:ed:70:f0:b1:81:db: 88:33:90:59:4d:88:1c:87:b4:1d:77:3d:9d:9d:c6: fb:71:35:81:27:1e:d1:ef:a0:1c:67:60:80:36:44: 0d:e9:e0:6e:9e:3d:8d:a1:ba:84:12:a5:54:c2:95: 07:53:43:e5:95:96:d9:b1:af:95:a8:4e:dd:b3:7a: fe:51:16:7c:f5:a5:8a:87:c3:28:75:71:92:37:6d: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5C:0F:5A:A9:72:71:A3:E7:14:9B:F7:A7:6F:5C:5E:C1:AC:64:96 X509v3 Authority Key Identifier: keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:12:7d:b3:54:f0:21:28:49:b6:4e:93:41:28:65:47:2e:3d: 03:e8:b4:40:0d:09:98:f4:7c:c3:d3:f5:a8:c7:29:c3:69:e4: cf:f3:f6:de:15:da:ca:51:cc:5c:5a:87:8f:62:e7:81:b0:7d: 7f:6e:bc:6a:e4:2e:27:97:bc:27:d4:71:41:0c:f7:6c:8e:da: f0:7f:90:1c:19:a5:ab:64:23:c1:f3:1e:5f:91:13:e0:b3:b0: d9:ac:d9:09:49:a7:ef:a7:70:a3:fc:83:df:0f:c9:96:19:eb: ef:42:cb:b3:2f:ef:8f:05:82:b4:70:71:e4:88:9e:27:71:6e: 1c:94:55:d7:bb:bb:44:bc:d9:8a:7e:7e:b6:e7:43:59:58:69: 8c:6c:3b:5a:b3:b6:6d:36:fb:8e:81:db:21:4e:1b:75:89:d0: 5e:f9:4d:42:6c:ac:1c:e6:aa:b2:c7:7e:9f:66:19:9a:5b:e0: c8:dc:fb:aa:f3:d0:c3:fb:fa:67:9c:2a:a7:a9:b0:59:d9:b0: 8b:fd:ed:7d:ba:a4:d5:ed:8d:1b:b7:e9:9e:45:ac:c5:f9:b7: 44:fd:c2:90:4b:49:7b:0c:10:c4:82:0f:d9:40:91:a4:b8:4a: b4:99:46:da:b3:77:af:99:01:05:da:92:82:c1:6c:93:3d:62: eb:ec:e7:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsGltTD+hd3w8kj7vXOzIqbXwTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYyQThE Mzg4NEEyQzAeFw0yNjEwMjQyMDE5MzlaFw0yNjEwMjUyMzM5MzlaMDMxMTAvBgNV BAMTKEMyNUMwRjVBQTk3MjcxQTNFNzE0OUJGN0E3NkY1QzVFQzFBQzY0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66+BYY9dTAFGNsHUr+oZjeFdg keUz1p05o+LJgrxAcRdkBhV/KJzIez5Cl9WtFg6vqJ7+VuJjQx5Knt6OWXIcZFpb xhRHhVkPWqFepfT+3J4HG8hKGtsPZstp+8rYJZSHDQEGeUHEAfHF1P2AKcWDtxRj wWsSi6C99+O9qcF0J2TSRbZGpWK4NNFq63kYGy2FP1Uwlh0+MQuxKF5KPRNsd0cu xSxlfC4c5IjIW+1w8LGB24gzkFlNiByHtB13PZ2dxvtxNYEnHtHvoBxnYIA2RA3p 4G6ePY2huoQSpVTClQdTQ+WVltmxr5WoTt2zev5RFnz1pYqHwyh1cZI3bZ6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlwPWqlycaPnFJv3p29cXsGsZJYwHwYDVR0j BBgwFoAUAA57fr9UPzes8RN10oRiqNOISiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0YzMzYjgtOWQ0Mi00MjA4LThhYzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VC RjU0M0YzN0FDRjExMzc1RDI4NDYyQThEMzg4NEEyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBFN0I3RUJGNTQzRjM3QUNGMTEzNzVEMjg0NjJBOEQzODg0 QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYy QThEMzg4NEEyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsSfbNU8CEoSbZOk0EoZUcuPQPotEANCZj0 fMPT9ajHKcNp5M/z9t4V2spRzFxah49i54GwfX9uvGrkLieXvCfUcUEM92yO2vB/ kBwZpatkI8HzHl+RE+CzsNms2QlJp++ncKP8g98PyZYZ6+9Cy7Mv748FgrRwceSI nidxbhyUVde7u0S82Yp+frbnQ1lYaYxsO1qztm02+46B2yFOG3WJ0F75TUJsrBzm qrLHfp9mGZpb4Mjc+6rz0MP7+mecKqepsFnZsIv97X26pNXtjRu36Z5FrMX5t0T9 wpBLSXsMEMSCD9lAkaS4SrSZRtqzd6+ZAQXakoLBbJM9Yuvs51M= -----END CERTIFICATE-----Generated at Sun Oct 25 14:47:24 2026 by rpki-client