$ rpki-client -vvf rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft File: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft (raw, json) Hash identifier: vFvt4cfHBD5q0Xij8XJuxrCpV36NX+6etmEreS7Rg7k= Subject key identifier: 9C:BC:97:59:69:A5:1D:B7:88:C3:DF:15:2C:5D:4E:CB:68:44:F7:E2 Authority key identifier: 7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E Certificate issuer: /CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Certificate serial: 12DDBA05CEB76DA3D44C6AD3098B4E7A95B9A24B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft Manifest number: 6C Signing time: Thu 23 Jul 2026 15:23:47 +0000 Manifest this update: Thu 23 Jul 2026 15:18:47 +0000 Manifest next update: Fri 24 Jul 2026 15:51:47 +0000 Files and hashes: 1: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl (hash: dDwW2W/w9kNivi6XSOoiTvn4fJQ/iO1H9dEJDbyBAJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:dd:ba:05:ce:b7:6d:a3:d4:4c:6a:d3:09:8b:4e:7a:95:b9:a2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Validity Not Before: Jul 23 15:18:47 2026 GMT Not After : Jul 24 15:51:47 2026 GMT Subject: CN=9CBC975969A51DB788C3DF152C5D4ECB6844F7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:d7:1b:d7:f3:35:3d:ed:69:ce:7c:45:07: a0:8b:04:93:bb:51:5e:14:35:c3:31:15:f8:62:76: b0:be:d4:03:ff:9c:50:5c:bf:1c:5b:fb:e6:fe:e9: ed:54:3d:56:4e:85:72:c8:d6:72:93:3b:05:5d:4c: 7a:ce:70:11:1d:a6:98:76:a3:87:ea:d6:67:69:ba: 75:7b:1e:b3:1f:0d:6a:90:95:ea:a7:c4:f9:84:b1: ad:a8:6d:08:47:dd:f4:d3:9e:13:89:f1:cc:a9:33: b3:c5:97:26:0a:cd:b3:9d:63:9c:be:e1:19:f5:ce: 76:a6:6b:8d:a7:08:7e:17:f3:a6:03:81:c5:24:10: 21:e2:62:5c:17:0e:6c:8a:e8:f6:01:a6:00:8f:5a: aa:8b:f1:24:ab:b1:c2:d1:63:f3:0a:0f:62:3d:c1: a0:c1:77:0c:a3:db:2d:43:ad:c3:16:90:62:99:6a: 72:50:94:cf:64:c7:a2:14:19:98:ee:15:e5:03:8e: 00:c7:c1:13:df:03:b2:f4:f9:5f:75:77:13:ff:d1: 86:94:6e:a3:4e:8f:9f:cf:4d:39:08:26:3e:22:4d: b2:9d:09:03:b5:ca:2f:dd:e1:19:72:50:6c:94:f9: 2d:61:09:c0:55:ce:f2:86:b8:93:78:2d:0f:76:95: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BC:97:59:69:A5:1D:B7:88:C3:DF:15:2C:5D:4E:CB:68:44:F7:E2 X509v3 Authority Key Identifier: keyid:7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:93:64:c0:17:be:6e:44:e3:37:61:fb:08:b3:7a:4a:5e: 33:a1:78:40:4a:6b:5b:68:83:0f:88:fe:63:b9:2e:95:84:43: 44:d4:59:ea:a2:8f:e1:bf:b2:e0:d7:b5:df:07:52:e7:7d:7d: f4:66:64:c5:1d:56:09:4d:67:50:ca:bb:57:db:83:c6:f8:02: d3:cc:0e:07:bf:4c:ed:35:43:dc:3f:82:c9:84:fd:07:d3:e7: 16:0d:ac:5c:79:55:8b:59:2d:b3:f7:28:57:1e:65:e2:71:ba: e7:3f:a3:2e:b7:d6:c2:44:1a:08:1b:a7:4e:73:0e:b7:15:b1: 92:be:d8:68:63:36:fe:80:d4:b6:2c:3e:26:3f:3d:c1:0d:4f: 83:e0:fe:7c:19:88:9c:e0:84:1d:97:8a:ba:f0:8d:35:e2:80: 94:3a:ee:47:8a:43:17:d3:6f:a8:5b:83:ec:e1:66:6a:a8:3f: 7e:8a:48:f6:1e:67:16:83:89:e4:d1:dd:8a:56:24:25:f1:9d: dd:8f:2d:12:80:d1:c6:88:e9:15:96:07:8d:6d:1d:a6:cb:e6: c6:86:c9:c2:31:fd:7d:6c:3c:50:0f:0d:35:79:ff:c5:3d:3f: 75:a8:de:71:36:03:ec:fd:fe:2d:72:66:75:7d:5c:fd:f3:7d: f8:90:aa:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEt26Bc63baPUTGrTCYtOepW5okswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDREQzU2 REI3NTY5RTAeFw0yNjA3MjMxNTE4NDdaFw0yNjA3MjQxNTUxNDdaMDMxMTAvBgNV BAMTKDlDQkM5NzU5NjlBNTFEQjc4OEMzREYxNTJDNUQ0RUNCNjg0NEY3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwptcb1/M1Pe1pznxFB6CLBJO7 UV4UNcMxFfhidrC+1AP/nFBcvxxb++b+6e1UPVZOhXLI1nKTOwVdTHrOcBEdpph2 o4fq1mdpunV7HrMfDWqQleqnxPmEsa2obQhH3fTTnhOJ8cypM7PFlyYKzbOdY5y+ 4Rn1znama42nCH4X86YDgcUkECHiYlwXDmyK6PYBpgCPWqqL8SSrscLRY/MKD2I9 waDBdwyj2y1DrcMWkGKZanJQlM9kx6IUGZjuFeUDjgDHwRPfA7L0+V91dxP/0YaU bqNOj5/PTTkIJj4iTbKdCQO1yi/d4RlyUGyU+S1hCcBVzvKGuJN4LQ92lUxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLyXWWmlHbeIw98VLF1Oy2hE9+IwHwYDVR0j BBgwFoAUfY8MBeosneMzeg7S6ZBNxW23Vp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJlOWY4ZDgtNmVmOS00NzJmLTg0ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVF QTJDOURFMzMzN0EwRUQyRTk5MDREQzU2REI3NTY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDhGMEMwNUVBMkM5REUzMzM3QTBFRDJFOTkwNERDNTZEQjc1 NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDRE QzU2REI3NTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlek2TAF75uROM3YfsIs3pKXjOheEBKa1to gw+I/mO5LpWEQ0TUWeqij+G/suDXtd8HUud9ffRmZMUdVglNZ1DKu1fbg8b4AtPM Dge/TO01Q9w/gsmE/QfT5xYNrFx5VYtZLbP3KFceZeJxuuc/oy631sJEGggbp05z DrcVsZK+2GhjNv6A1LYsPiY/PcENT4Pg/nwZiJzghB2XirrwjTXigJQ67keKQxfT b6hbg+zhZmqoP36KSPYeZxaDieTR3YpWJCXxnd2PLRKA0caI6RWWB41tHabL5saG ycIx/X1sPFAPDTV5/8U9P3Wo3nE2A+z9/i1yZnV9XP3zffiQqnw= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:46 2026 by rpki-client