$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft File: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft (raw, json) Hash identifier: NAhUY+rpg8wB1Ag+ozw0r3nz12R8elGefgwqimn7gnM= Subject key identifier: BB:07:DC:B1:EC:4A:65:ED:96:BD:F2:39:26:75:EC:09:1A:3E:53:4B Authority key identifier: F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A Certificate issuer: /CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A Certificate serial: 5503D06664ACCD7B1ACFD524601C7E311ED3977A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 17:06:53 +0000 Manifest this update: Thu 24 Sep 2026 17:01:53 +0000 Manifest next update: Fri 25 Sep 2026 19:19:53 +0000 Files and hashes: 1: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl (hash: Kpm+R0Y3G4SpxyTGf7uHgOzAfdKOBFkmdJDoBWWjn0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:03:d0:66:64:ac:cd:7b:1a:cf:d5:24:60:1c:7e:31:1e:d3:97:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A Validity Not Before: Sep 24 17:01:53 2026 GMT Not After : Sep 25 19:19:53 2026 GMT Subject: CN=BB07DCB1EC4A65ED96BDF2392675EC091A3E534B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:60:e9:f8:7a:6d:0f:81:4d:65:17:07:b9: 93:74:6b:38:f8:3a:94:73:0b:cf:9f:a7:02:d0:f2: 8e:3b:ac:9d:e1:25:f1:46:59:39:80:36:fb:1c:03: cb:8a:4f:1e:54:ff:fc:5c:b0:98:66:f2:4b:be:84: 7f:1a:ec:7d:b3:0a:d4:bc:b7:5d:4b:64:21:d2:03: c9:db:de:3b:c4:f8:37:f2:0b:e4:73:5d:59:8e:3d: fd:a7:97:c8:a4:f1:22:9a:8f:5f:7f:bf:72:a4:b0: bc:ce:2e:7b:da:8f:7c:54:e6:1a:98:6a:00:34:8c: 43:90:36:f3:58:a7:40:e8:2e:d3:aa:fc:8f:b3:61: 8d:5b:ca:44:f3:ce:08:ae:cb:96:df:7b:89:78:9f: e2:d9:87:96:97:ca:e4:9e:4e:33:63:d9:55:2d:a2: f1:4b:01:ce:64:77:a9:69:63:0c:7b:9e:f1:a7:61: 45:36:a2:2a:b1:85:e6:08:99:b3:5f:c6:d1:60:c5: 64:87:37:59:a5:12:6f:b7:3e:de:39:dd:b8:f9:75: 2f:57:fb:68:3a:4f:15:35:82:cc:ca:3b:53:91:b3: 22:50:60:a7:bf:72:a8:e2:bd:e9:63:f4:cf:14:2f: ac:5d:2a:01:24:f0:e9:17:a1:49:17:2c:86:0d:3f: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:DC:B1:EC:4A:65:ED:96:BD:F2:39:26:75:EC:09:1A:3E:53:4B X509v3 Authority Key Identifier: keyid:F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:86:8d:07:fe:12:15:82:15:46:4e:0f:fc:89:e6:e4:ac:a7: 16:18:72:aa:a6:4d:8f:75:11:c6:ba:80:67:81:7f:9d:99:a2: 2b:04:70:03:67:2d:6f:84:a7:3a:69:65:93:40:61:36:bc:f3: 7d:84:44:ce:f8:aa:91:89:29:65:a4:ad:7e:b9:49:b1:9d:ce: be:78:f8:a8:65:a6:dd:b2:e4:50:16:93:74:f9:98:39:a3:fa: 96:21:78:53:4b:47:aa:73:77:6f:e3:ba:4f:8f:f8:12:80:e7: 90:c7:72:0e:14:71:c6:c2:10:71:4b:80:cf:1a:81:ca:08:ff: db:11:0e:08:e9:6a:4b:ea:9e:69:c4:5d:40:7a:18:cc:f3:6c: 2a:15:df:90:86:72:91:75:f2:11:2d:23:2f:5e:a7:2d:5a:71: fe:31:ad:4b:d3:3e:44:ef:d5:83:92:a8:55:fd:c1:8f:76:de: e3:46:84:1b:46:3c:6d:bf:98:7d:9e:43:b4:f2:fe:6c:ed:b4: b2:6f:4d:a4:6d:c0:6a:d6:3e:c4:36:a4:43:e6:06:6e:a9:79: 3c:82:80:c6:53:6e:2d:26:e4:53:9b:69:a1:3d:07:b2:26:bb: 48:00:01:a8:a7:91:1c:4d:52:71:05:6c:79:3a:53:37:7f:93: f7:86:3a:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQPQZmSszXsaz9UkYBx+MR7Tl3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdCMDYwNjE4RDQ4ODVBMUQ3QkYxREEzRDI5QkU0NjRG NTFEQ0QwQTAeFw0yNjA5MjQxNzAxNTNaFw0yNjA5MjUxOTE5NTNaMDMxMTAvBgNV BAMTKEJCMDdEQ0IxRUM0QTY1RUQ5NkJERjIzOTI2NzVFQzA5MUEzRTUzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRbWDp+HptD4FNZRcHuZN0azj4 OpRzC8+fpwLQ8o47rJ3hJfFGWTmANvscA8uKTx5U//xcsJhm8ku+hH8a7H2zCtS8 t11LZCHSA8nb3jvE+DfyC+RzXVmOPf2nl8ik8SKaj19/v3KksLzOLnvaj3xU5hqY agA0jEOQNvNYp0DoLtOq/I+zYY1bykTzzgiuy5bfe4l4n+LZh5aXyuSeTjNj2VUt ovFLAc5kd6lpYwx7nvGnYUU2oiqxheYImbNfxtFgxWSHN1mlEm+3Pt453bj5dS9X +2g6TxU1gszKO1ORsyJQYKe/cqjivelj9M8UL6xdKgEk8OkXoUkXLIYNPxgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwfcsexKZe2WvfI5JnXsCRo+U0swHwYDVR0j BBgwFoAU97BgYY1IhaHXvx2j0pvkZPUdzQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiZDBlOTQtODYwMy00NTdmLWI1MzctOTIzMTA4NGJjNDUwLzAvRjdCMDYwNjE4 RDQ4ODVBMUQ3QkYxREEzRDI5QkU0NjRGNTFEQ0QwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GN0IwNjA2MThENDg4NUExRDdCRjFEQTNEMjlCRTQ2NEY1MURD RDBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvRjdCMDYwNjE4RDQ4ODVBMUQ3QkYxREEzRDI5QkU0 NjRGNTFEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKGjQf+EhWCFUZOD/yJ5uSspxYYcqqmTY91 Eca6gGeBf52ZoisEcANnLW+EpzppZZNAYTa8832ERM74qpGJKWWkrX65SbGdzr54 +Khlpt2y5FAWk3T5mDmj+pYheFNLR6pzd2/juk+P+BKA55DHcg4UccbCEHFLgM8a gcoI/9sRDgjpakvqnmnEXUB6GMzzbCoV35CGcpF18hEtIy9epy1acf4xrUvTPkTv 1YOSqFX9wY923uNGhBtGPG2/mH2eQ7Ty/mzttLJvTaRtwGrWPsQ2pEPmBm6peTyC gMZTbi0m5FObaaE9B7Imu0gAAainkRxNUnEFbHk6Uzd/k/eGOoU= -----END CERTIFICATE-----Generated at Fri Sep 25 05:41:23 2026 by rpki-client