$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft File: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft (raw, json) Hash identifier: sR7+7ecEN5UbxoZjrHnHAJhseI7E9HmfnbqACws9IVk= Subject key identifier: 6A:7B:F1:4B:52:6D:E9:56:3F:AB:E9:77:88:BE:E7:96:8E:E9:4C:67 Authority key identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 Certificate issuer: /CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Certificate serial: 37103AFCD1CE91794610DA3BB262128AD1BFE07F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft Manifest number: BF Signing time: Thu 24 Sep 2026 07:55:25 +0000 Manifest this update: Thu 24 Sep 2026 07:50:25 +0000 Manifest next update: Fri 25 Sep 2026 08:51:25 +0000 Files and hashes: 1: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl (hash: yhAG8ifL9MuRqZlgozOkVjTslh0S/Y+JsegwL/CB6ug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:10:3a:fc:d1:ce:91:79:46:10:da:3b:b2:62:12:8a:d1:bf:e0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Validity Not Before: Sep 24 07:50:25 2026 GMT Not After : Sep 25 08:51:25 2026 GMT Subject: CN=6A7BF14B526DE9563FABE97788BEE7968EE94C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:68:cb:4b:75:6f:92:1e:dd:80:b0:50:70: 5c:8b:0b:49:95:8d:a0:6e:3a:19:d6:63:42:a1:9f: ff:d5:09:eb:c5:19:f6:0a:77:6a:6f:54:42:70:44: 95:92:d5:f6:c0:98:f3:25:d4:07:10:77:a4:69:26: db:2c:54:e5:f4:3f:91:ac:8c:bf:d1:54:5b:62:f3: 07:4e:31:b0:38:38:c0:e9:f8:95:94:49:e1:39:9f: 39:ae:af:e7:77:ce:64:6f:d3:60:d2:49:4a:c4:19: ee:d1:68:b6:65:e2:a6:89:a9:dd:e5:c4:42:6e:db: 23:98:46:06:97:75:1d:30:b2:05:f2:2e:6a:c0:55: 7c:12:d5:3d:54:91:fb:e7:c9:25:16:40:4b:d8:f8: 06:13:9d:7e:6b:f8:91:26:29:e8:7d:eb:38:fd:c1: cc:52:83:1d:eb:c2:b2:9c:44:9c:e6:e0:13:ac:2a: 01:28:50:7f:1f:0b:ec:40:7f:03:ac:3c:85:0a:57: 30:2d:d7:d4:fc:c1:ea:59:6c:47:b4:98:7e:b9:a1: 23:f1:1a:ad:cf:0b:60:4b:09:8d:34:e4:75:9c:0c: 32:b5:ee:1b:f8:9b:52:b2:ee:17:8a:4b:30:44:41: 6f:ed:59:e5:85:87:30:1e:02:d1:35:be:68:ef:a8: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7B:F1:4B:52:6D:E9:56:3F:AB:E9:77:88:BE:E7:96:8E:E9:4C:67 X509v3 Authority Key Identifier: keyid:7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bb:0b:66:07:d5:8b:e5:35:5f:ff:35:cd:2d:af:a0:b5:2b: d5:f8:7c:fd:ed:9f:71:62:8c:d8:c7:17:ab:f1:67:01:ce:33: 14:fb:f6:71:58:25:87:a9:8b:5c:02:23:4e:d4:bf:06:98:fb: 3a:f1:68:a5:b8:e0:84:0b:e4:47:e9:87:7c:90:2d:33:1f:fc: 95:68:c8:10:42:f5:13:24:b7:9c:60:74:b8:5d:d2:c2:f1:3d: 8b:1e:9a:3f:f8:40:c6:60:53:2a:dc:3e:62:df:13:93:a2:15: 2a:58:ff:3e:14:4b:4f:1b:46:24:11:43:65:92:47:13:dc:e6: 57:81:ae:d1:f4:40:4d:e0:12:3c:93:15:ff:4f:ef:d9:c7:21: 7f:04:1d:d8:f3:ea:37:61:10:a5:88:a8:f5:c9:1f:eb:15:e1: 04:22:3b:89:83:1d:84:f3:de:d6:6a:6d:a7:b5:c2:16:e4:00: 78:ce:c3:31:80:61:6e:47:b4:52:05:37:f8:a1:9e:b8:ee:af: cc:84:18:11:57:ef:36:23:7b:e7:fd:6c:1f:0e:df:a6:ca:3b: 49:35:8d:9b:7c:1f:31:29:77:4e:f3:ab:5b:95:53:3a:19:fb: 85:d3:07:85:ef:d7:9c:24:c6:3d:d0:79:30:96:8a:19:8f:08: 51:61:91:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxA6/NHOkXlGENo7smISitG/4H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2 QjgwQkYzMjAeFw0yNjA5MjQwNzUwMjVaFw0yNjA5MjUwODUxMjVaMDMxMTAvBgNV BAMTKDZBN0JGMTRCNTI2REU5NTYzRkFCRTk3Nzg4QkVFNzk2OEVFOTRDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlpWjLS3Vvkh7dgLBQcFyLC0mV jaBuOhnWY0Khn//VCevFGfYKd2pvVEJwRJWS1fbAmPMl1AcQd6RpJtssVOX0P5Gs jL/RVFti8wdOMbA4OMDp+JWUSeE5nzmur+d3zmRv02DSSUrEGe7RaLZl4qaJqd3l xEJu2yOYRgaXdR0wsgXyLmrAVXwS1T1UkfvnySUWQEvY+AYTnX5r+JEmKeh96zj9 wcxSgx3rwrKcRJzm4BOsKgEoUH8fC+xAfwOsPIUKVzAt19T8wepZbEe0mH65oSPx Gq3PC2BLCY005HWcDDK17hv4m1Ky7heKSzBEQW/tWeWFhzAeAtE1vmjvqH53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUanvxS1Jt6VY/q+l3iL7nlo7pTGcwHwYDVR0j BBgwFoAUe1+CB7Ic0Z9xU9K7oZ5qd2uAvzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmYjkwYjEtYjY4Zi00NDYzLWExYmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdC MjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2QjgwQkYzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjVGODIwN0IyMUNEMTlGNzE1M0QyQkJBMTlFNkE3NzZCODBC RjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZB Nzc2QjgwQkYzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO7C2YH1YvlNV//Nc0tr6C1K9X4fP3tn3Fi jNjHF6vxZwHOMxT79nFYJYepi1wCI07UvwaY+zrxaKW44IQL5Efph3yQLTMf/JVo yBBC9RMkt5xgdLhd0sLxPYsemj/4QMZgUyrcPmLfE5OiFSpY/z4US08bRiQRQ2WS RxPc5leBrtH0QE3gEjyTFf9P79nHIX8EHdjz6jdhEKWIqPXJH+sV4QQiO4mDHYTz 3tZqbae1whbkAHjOwzGAYW5HtFIFN/ihnrjur8yEGBFX7zYje+f9bB8O36bKO0k1 jZt8HzEpd07zq1uVUzoZ+4XTB4Xv15wkxj3QeTCWihmPCFFhkTA= -----END CERTIFICATE-----Generated at Thu Sep 24 18:09:37 2026 by rpki-client