$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft File: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft (raw, json) Hash identifier: MQWKBh2i0NTmLDAzfAaA7j8wlQitmqgze3RxFKkRTLE= Subject key identifier: 0D:BE:F8:BB:D1:2F:D9:D2:F2:36:E3:0B:29:2C:9B:DA:9F:FA:11:29 Authority key identifier: 7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E Certificate issuer: /CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Certificate serial: 1A1AD7466285CC4E917EDF18C230A2878020031C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft Manifest number: BE Signing time: Wed 23 Sep 2026 11:55:50 +0000 Manifest this update: Wed 23 Sep 2026 11:50:50 +0000 Manifest next update: Thu 24 Sep 2026 15:11:50 +0000 Files and hashes: 1: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl (hash: 56a7loxMrc8e7CBEBvW453n1hl7MnBz47DCcGnKpWz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1a:d7:46:62:85:cc:4e:91:7e:df:18:c2:30:a2:87:80:20:03:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Validity Not Before: Sep 23 11:50:50 2026 GMT Not After : Sep 24 15:11:50 2026 GMT Subject: CN=0DBEF8BBD12FD9D2F236E30B292C9BDA9FFA1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:3d:26:76:6a:2d:07:dd:f5:32:94:34:37: 96:48:b4:11:0e:e9:7d:e7:b8:5a:8e:8f:e4:2b:f8: 79:95:e2:49:e5:e4:2f:3a:c9:10:5b:26:c7:e4:1c: 99:26:a8:e4:75:e7:84:52:3a:b2:bd:e9:2c:70:22: 05:66:28:d1:bd:84:51:2f:73:e7:a7:5b:10:47:a9: 3f:cb:e5:46:e1:5c:20:8b:2c:35:22:c5:44:1d:cb: 67:44:6d:24:03:bf:aa:72:b9:a5:f8:79:6c:37:0b: ae:27:2a:e9:14:fb:03:73:d5:6a:25:85:95:de:05: ab:40:9a:9f:31:af:2a:97:ad:e1:b0:50:83:df:ab: 02:ce:76:13:35:05:20:42:6d:ad:8e:49:16:b0:62: 1b:13:1a:ee:b3:37:78:28:c5:ca:24:89:fe:45:a7: f4:b2:6a:f4:24:01:a0:d0:57:9c:c8:fb:ca:e5:b7: c9:7b:65:c5:c4:5d:2b:fd:4a:e6:2b:b8:2e:0a:37: 1a:42:4c:95:3f:2d:5f:62:9f:c1:28:f9:41:95:5b: 99:a5:c3:14:16:c2:a4:cc:16:f7:1e:5b:21:8d:ed: 65:ca:4e:9d:90:71:c6:1b:c9:49:40:77:06:aa:63: 55:43:08:43:c3:f2:46:9c:0b:0c:19:5c:5d:86:f8: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:F8:BB:D1:2F:D9:D2:F2:36:E3:0B:29:2C:9B:DA:9F:FA:11:29 X509v3 Authority Key Identifier: keyid:7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b3:91:f1:dc:ff:13:6e:da:7a:f4:c6:d9:63:66:cd:10:96: e9:72:34:47:22:06:1a:67:ff:ee:da:c1:68:d5:23:a6:ba:6b: 30:f5:5e:ae:fa:9c:d1:11:53:f0:b8:cf:1e:23:a5:12:75:9e: 6a:32:d5:de:26:c8:44:3e:26:cd:b9:5a:e4:67:66:05:16:94: 9f:0c:58:85:4b:80:5a:19:88:56:73:d5:0b:7e:99:d5:0b:06: 36:c5:e0:54:d0:59:8b:66:dc:8e:b5:a2:f2:fd:1c:89:9a:b1: 74:1f:5d:80:f6:15:e0:54:a7:5e:fa:d8:65:ff:1e:b9:eb:48: ae:ad:b2:8f:0a:cc:74:58:0e:23:99:33:f5:72:e4:41:b5:70: f0:2b:73:00:b5:05:86:7f:51:90:54:e7:85:e8:d4:1c:98:a8: f4:14:9d:28:b7:44:e3:76:c3:6c:79:34:43:51:1c:77:3b:90: 30:b0:dc:ec:4a:3c:d0:de:79:bd:19:d3:08:40:10:5f:70:50: 3b:97:29:a0:b8:4e:f7:7d:ec:94:17:a9:0c:40:0d:55:bf:7d: 83:de:86:25:b8:06:15:9d:4f:09:18:b7:46:62:be:33:ef:0a: 86:e4:d1:10:15:5c:ec:6b:46:21:d1:a2:84:2d:aa:76:38:ad: f4:2f:b7:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhrXRmKFzE6Rft8YwjCih4AgAxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDREQzU2 REI3NTY5RTAeFw0yNjA5MjMxMTUwNTBaFw0yNjA5MjQxNTExNTBaMDMxMTAvBgNV BAMTKDBEQkVGOEJCRDEyRkQ5RDJGMjM2RTMwQjI5MkM5QkRBOUZGQTExMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZD0mdmotB931MpQ0N5ZItBEO 6X3nuFqOj+Qr+HmV4knl5C86yRBbJsfkHJkmqOR154RSOrK96SxwIgVmKNG9hFEv c+enWxBHqT/L5UbhXCCLLDUixUQdy2dEbSQDv6pyuaX4eWw3C64nKukU+wNz1Wol hZXeBatAmp8xryqXreGwUIPfqwLOdhM1BSBCba2OSRawYhsTGu6zN3goxcokif5F p/SyavQkAaDQV5zI+8rlt8l7ZcXEXSv9SuYruC4KNxpCTJU/LV9in8Eo+UGVW5ml wxQWwqTMFvceWyGN7WXKTp2QccYbyUlAdwaqY1VDCEPD8kacCwwZXF2G+GbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDb74u9Ev2dLyNuMLKSyb2p/6ESkwHwYDVR0j BBgwFoAUfY8MBeosneMzeg7S6ZBNxW23Vp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJlOWY4ZDgtNmVmOS00NzJmLTg0ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVF QTJDOURFMzMzN0EwRUQyRTk5MDREQzU2REI3NTY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDhGMEMwNUVBMkM5REUzMzM3QTBFRDJFOTkwNERDNTZEQjc1 NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDRE QzU2REI3NTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGzkfHc/xNu2nr0xtljZs0QlulyNEciBhpn /+7awWjVI6a6azD1Xq76nNERU/C4zx4jpRJ1nmoy1d4myEQ+Js25WuRnZgUWlJ8M WIVLgFoZiFZz1Qt+mdULBjbF4FTQWYtm3I61ovL9HImasXQfXYD2FeBUp1762GX/ HrnrSK6tso8KzHRYDiOZM/Vy5EG1cPArcwC1BYZ/UZBU54Xo1ByYqPQUnSi3RON2 w2x5NENRHHc7kDCw3OxKPNDeeb0Z0whAEF9wUDuXKaC4Tvd97JQXqQxADVW/fYPe hiW4BhWdTwkYt0ZivjPvCobk0RAVXOxrRiHRooQtqnY4rfQvtxc= -----END CERTIFICATE-----Generated at Thu Sep 24 02:36:43 2026 by rpki-client