$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft File: 7761761400F24897480B3ACB185C89ED59AA03ED.mft (raw, json) Hash identifier: Ta1ffqx68GxfOn1r8tAa2lTdgb90piWcV68xzn8aCCA= Subject key identifier: 1A:8F:A2:E5:2E:D5:6B:D8:70:39:4C:E6:63:B1:81:01:A1:12:B4:C3 Authority key identifier: 77:61:76:14:00:F2:48:97:48:0B:3A:CB:18:5C:89:ED:59:AA:03:ED Certificate issuer: /CN=7761761400F24897480B3ACB185C89ED59AA03ED Certificate serial: 5C71BFE2F3322EE224ECD369D83A1A62FBFD1616 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7761761400F24897480B3ACB185C89ED59AA03ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:03:14 +0000 Manifest this update: Tue 12 May 2026 12:58:14 +0000 Manifest next update: Wed 13 May 2026 16:46:14 +0000 Files and hashes: 1: 7761761400F24897480B3ACB185C89ED59AA03ED.crl (hash: EahD8Vc8O4ihg63Qgh4Cra/NhdAyMCG479mKUS8ex3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.crl rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7761761400F24897480B3ACB185C89ED59AA03ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:71:bf:e2:f3:32:2e:e2:24:ec:d3:69:d8:3a:1a:62:fb:fd:16:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7761761400F24897480B3ACB185C89ED59AA03ED Validity Not Before: May 12 12:58:14 2026 GMT Not After : May 13 16:46:14 2026 GMT Subject: CN=1A8FA2E52ED56BD870394CE663B18101A112B4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:31:7c:aa:61:8b:82:8c:b6:3c:8d:37:7c: 38:d7:aa:3d:da:26:33:1c:87:37:ab:12:b4:95:a2: 6d:4f:46:3e:4b:b8:78:65:b2:d1:b2:3a:fb:e9:3b: 4e:4c:ca:f2:63:aa:25:db:40:df:a0:83:ca:a7:67: e4:08:48:4a:c4:81:f0:80:eb:4e:ff:e4:55:5d:17: 6a:02:36:8e:f7:ff:34:ba:29:ed:47:73:c9:e9:54: 12:11:dc:6a:14:97:7a:1b:18:5a:f2:fe:80:3a:69: ea:eb:2c:43:11:8f:82:ca:19:c9:ff:62:15:cf:85: c7:09:53:d3:62:33:f3:4e:26:8a:be:d4:9d:2b:e8: 84:30:df:c6:fa:06:26:3e:27:80:09:49:8a:65:fc: cd:82:5d:01:5c:64:0d:7c:78:01:f4:b2:a6:15:c4: 2e:39:a6:13:1b:ab:a3:c3:f9:a2:b0:96:98:1c:09: 34:1c:79:59:94:69:f4:fd:97:ab:41:50:22:6c:94: ee:9d:a0:2c:ea:ae:ff:a9:07:de:8d:6a:a0:76:ae: 88:20:55:bb:58:28:c0:c2:d6:e7:e4:22:4d:c7:00: 75:bd:47:15:f7:0b:36:f3:7e:f3:8d:f5:72:ee:bd: 8a:dd:e2:16:58:7f:c8:05:01:a9:94:49:bf:bd:35: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:A2:E5:2E:D5:6B:D8:70:39:4C:E6:63:B1:81:01:A1:12:B4:C3 X509v3 Authority Key Identifier: keyid:77:61:76:14:00:F2:48:97:48:0B:3A:CB:18:5C:89:ED:59:AA:03:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7761761400F24897480B3ACB185C89ED59AA03ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:da:16:c5:b3:02:e7:37:e5:aa:12:02:fe:d3:70:81:5f:9c: 91:20:be:fd:75:3a:88:b1:ae:e0:23:bc:db:02:81:68:a7:24: 9e:88:f8:78:4d:f3:52:81:b1:b0:7e:bc:a1:2e:47:90:fd:4d: f9:6f:4e:86:5e:d4:5d:9e:c7:f5:33:5a:49:68:ac:52:75:ba: 3e:18:7e:2b:2a:50:90:b7:fa:fc:b9:88:5b:83:5f:0f:a3:7d: d0:3e:84:09:e7:45:50:31:55:0b:aa:77:33:7f:58:ea:d0:26: 79:35:7a:de:2e:46:be:ae:81:2e:c4:31:d5:a4:04:c7:e9:d6: 8c:c2:2d:99:d5:91:ef:82:ac:e2:94:54:fd:2a:08:5f:70:4e: ef:35:30:9a:73:8f:94:d1:3d:31:56:ab:93:7a:71:38:a9:0d: 45:55:4e:24:3f:e2:9a:1f:5b:99:d4:17:90:c4:ad:42:18:9d: b9:fc:c7:b3:e6:82:0b:cc:65:96:3b:5a:d8:e2:d8:f3:70:54: f4:8d:b4:08:25:cf:86:04:19:05:b7:88:f7:c1:bf:3e:19:74: eb:b6:9e:f7:de:5f:f2:ec:95:44:7c:41:9e:3e:01:81:43:62: fd:86:d5:b9:d4:f6:3f:82:b4:dd:1f:61:21:3c:fe:a8:30:68: 70:f2:e9:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHG/4vMyLuIk7NNp2DoaYvv9FhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2MTc2MTQwMEYyNDg5NzQ4MEIzQUNCMTg1Qzg5RUQ1 OUFBMDNFRDAeFw0yNjA1MTIxMjU4MTRaFw0yNjA1MTMxNjQ2MTRaMDMxMTAvBgNV BAMTKDFBOEZBMkU1MkVENTZCRDg3MDM5NENFNjYzQjE4MTAxQTExMkI0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDJTF8qmGLgoy2PI03fDjXqj3a JjMchzerErSVom1PRj5LuHhlstGyOvvpO05MyvJjqiXbQN+gg8qnZ+QISErEgfCA 607/5FVdF2oCNo73/zS6Ke1Hc8npVBIR3GoUl3obGFry/oA6aerrLEMRj4LKGcn/ YhXPhccJU9NiM/NOJoq+1J0r6IQw38b6BiY+J4AJSYpl/M2CXQFcZA18eAH0sqYV xC45phMbq6PD+aKwlpgcCTQceVmUafT9l6tBUCJslO6doCzqrv+pB96NaqB2rogg VbtYKMDC1ufkIk3HAHW9RxX3CzbzfvON9XLuvYrd4hZYf8gFAamUSb+9NVS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGo+i5S7Va9hwOUzmY7GBAaEStMMwHwYDVR0j BBgwFoAUd2F2FADySJdICzrLGFyJ7VmqA+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y3YmQ5NDQtMDE3YS00M2EzLTk0ZjMtZmY0N2FmMDM4OTgwLzAvNzc2MTc2MTQw MEYyNDg5NzQ4MEIzQUNCMTg1Qzg5RUQ1OUFBMDNFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzYxNzYxNDAwRjI0ODk3NDgwQjNBQ0IxODVDODlFRDU5QUEw M0VELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvNzc2MTc2MTQwMEYyNDg5NzQ4MEIzQUNCMTg1Qzg5 RUQ1OUFBMDNFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPaFsWzAuc35aoSAv7TcIFfnJEgvv11Ooix ruAjvNsCgWinJJ6I+HhN81KBsbB+vKEuR5D9TflvToZe1F2ex/UzWklorFJ1uj4Y fisqUJC3+vy5iFuDXw+jfdA+hAnnRVAxVQuqdzN/WOrQJnk1et4uRr6ugS7EMdWk BMfp1ozCLZnVke+CrOKUVP0qCF9wTu81MJpzj5TRPTFWq5N6cTipDUVVTiQ/4pof W5nUF5DErUIYnbn8x7PmggvMZZY7Wtji2PNwVPSNtAglz4YEGQW3iPfBvz4ZdOu2 nvfeX/LslUR8QZ4+AYFDYv2G1bnU9j+CtN0fYSE8/qgwaHDy6Y4= -----END CERTIFICATE-----Generated at Wed May 13 04:20:21 2026 by rpki-client