$ rpki-client -vvf rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft File: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft (raw, json) Hash identifier: C9FlpP/uE0fMfZTk4P1+WpNyo2SOtt2OtqMAfUF3xy8= Subject key identifier: B9:5C:4F:50:88:E5:CD:EF:8D:D6:42:42:5E:9F:F8:25:A0:E3:40:59 Authority key identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 Certificate issuer: /CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Certificate serial: 536FEF51ACE888298AC590FAAAF69E3FB5CA821B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft Manifest number: 0D Signing time: Tue 12 May 2026 03:07:02 +0000 Manifest this update: Tue 12 May 2026 03:02:02 +0000 Manifest next update: Wed 13 May 2026 06:53:02 +0000 Files and hashes: 1: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl (hash: R0YLwsYYkl9+xx33nTHX8Flzzr3NwAB4TPKpOSKBl/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6f:ef:51:ac:e8:88:29:8a:c5:90:fa:aa:f6:9e:3f:b5:ca:82:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Validity Not Before: May 12 03:02:02 2026 GMT Not After : May 13 06:53:02 2026 GMT Subject: CN=B95C4F5088E5CDEF8DD642425E9FF825A0E34059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:c4:b5:91:39:04:69:5f:49:19:93:1e:c3: 67:b9:7e:21:9d:02:4a:52:ba:a4:7c:67:91:50:00: 27:28:cc:2d:6b:53:1f:8c:28:ed:e3:e1:f0:e6:9e: 74:9b:7c:af:97:86:08:dd:d5:00:c8:b9:57:86:8f: 92:17:ff:78:6f:5b:99:05:f4:6d:41:b3:9c:04:2b: 65:b1:d6:3f:22:51:f8:c3:81:0d:48:a1:42:0f:3a: 7d:79:40:34:10:1d:e4:d1:13:b8:6e:50:8b:8f:1a: 67:5a:a1:08:a5:fe:41:03:19:10:e4:c1:f2:f6:7a: ad:49:51:53:fa:1c:4b:d7:c0:6f:f1:5b:62:c4:78: f5:5b:ff:b9:63:93:09:96:a7:b4:e4:34:9b:8e:a1: 04:21:15:2c:d1:2a:87:02:17:a9:2a:e0:7b:18:bd: 14:1b:06:07:69:56:e8:ed:b9:67:04:f7:2b:ab:12: 21:70:95:8e:f4:5c:80:e4:8b:66:30:b1:41:74:0f: b0:62:4b:9b:a3:35:3e:f9:98:e1:6a:2c:5f:e6:a3: 99:29:f1:b2:09:27:33:cd:8b:b9:25:c5:16:7e:87: e7:bf:fa:f7:96:c7:17:79:4d:43:ed:94:a3:82:b4: 67:27:3b:25:dd:83:3e:f0:4a:07:97:5e:ce:65:3d: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:4F:50:88:E5:CD:EF:8D:D6:42:42:5E:9F:F8:25:A0:E3:40:59 X509v3 Authority Key Identifier: keyid:7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:61:da:76:a2:94:85:af:0d:1a:c9:5a:ba:90:fb:67:49: 2a:2d:cc:49:1c:a4:4d:98:fd:67:a4:d4:47:0e:3c:53:6f:78: 00:06:41:39:54:ee:3b:35:09:fe:7a:95:5c:e3:ba:e2:01:64: af:e3:25:97:7d:c0:28:28:71:69:4a:d3:65:70:2a:60:b8:27: 89:b4:af:98:89:b9:b2:7f:81:cb:6c:59:c9:d6:5f:59:cd:d5: 58:a3:20:37:c5:d6:73:f0:3b:a8:7b:fd:1c:79:55:db:43:ac: 85:89:2d:21:7f:fd:db:51:04:52:f4:71:e8:63:f6:d1:88:d3: 1b:dc:99:d7:20:39:66:48:14:4f:03:22:b0:34:83:5e:d8:53: cd:9a:5f:52:ad:25:d9:16:25:e3:4a:98:e3:bf:01:3b:29:8c: 70:1a:32:a9:f1:e7:43:b4:d6:3e:2b:1b:ec:8d:4d:ff:07:fe: 6b:bd:fb:d5:dd:9f:5d:c4:36:06:ac:92:9a:69:f9:f7:7f:ef: 57:19:54:8a:f7:14:e2:9c:88:86:1e:c2:bd:3e:93:47:f4:9b: 97:fa:44:28:27:6b:b2:b6:fc:6f:d8:41:66:c9:93:9f:ff:83: fa:6a:44:73:0c:3a:ca:3c:8f:94:a5:53:ee:44:69:0a:2a:da: a8:14:0e:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2/vUazoiCmKxZD6qvaeP7XKghswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2 QjgwQkYzMjAeFw0yNjA1MTIwMzAyMDJaFw0yNjA1MTMwNjUzMDJaMDMxMTAvBgNV BAMTKEI5NUM0RjUwODhFNUNERUY4REQ2NDI0MjVFOUZGODI1QTBFMzQwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbAMS1kTkEaV9JGZMew2e5fiGd AkpSuqR8Z5FQACcozC1rUx+MKO3j4fDmnnSbfK+Xhgjd1QDIuVeGj5IX/3hvW5kF 9G1Bs5wEK2Wx1j8iUfjDgQ1IoUIPOn15QDQQHeTRE7huUIuPGmdaoQil/kEDGRDk wfL2eq1JUVP6HEvXwG/xW2LEePVb/7ljkwmWp7TkNJuOoQQhFSzRKocCF6kq4HsY vRQbBgdpVujtuWcE9yurEiFwlY70XIDki2YwsUF0D7BiS5ujNT75mOFqLF/mo5kp 8bIJJzPNi7klxRZ+h+e/+veWxxd5TUPtlKOCtGcnOyXdgz7wSgeXXs5lPfgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVxPUIjlze+N1kJCXp/4JaDjQFkwHwYDVR0j BBgwFoAUe1+CB7Ic0Z9xU9K7oZ5qd2uAvzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmYjkwYjEtYjY4Zi00NDYzLWExYmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdC MjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2QjgwQkYzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjVGODIwN0IyMUNEMTlGNzE1M0QyQkJBMTlFNkE3NzZCODBC RjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZB Nzc2QjgwQkYzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT0Ydp2opSFrw0ayVq6kPtnSSotzEkcpE2Y /Wek1EcOPFNveAAGQTlU7js1Cf56lVzjuuIBZK/jJZd9wCgocWlK02VwKmC4J4m0 r5iJubJ/gctsWcnWX1nN1VijIDfF1nPwO6h7/Rx5VdtDrIWJLSF//dtRBFL0cehj 9tGI0xvcmdcgOWZIFE8DIrA0g17YU82aX1KtJdkWJeNKmOO/ATspjHAaMqnx50O0 1j4rG+yNTf8H/mu9+9Xdn13ENgaskppp+fd/71cZVIr3FOKciIYewr0+k0f0m5f6 RCgna7K2/G/YQWbJk5//g/pqRHMMOso8j5SlU+5EaQoq2qgUDsQ= -----END CERTIFICATE-----Generated at Tue May 12 22:13:36 2026 by rpki-client