$ rpki-client -vvf rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft (raw, json) Hash identifier: jEIiP7HQ7rFJEqt8YHzU8pE93hu5IRFwf97jMTFzXhE= Subject key identifier: 0F:3D:52:A6:F1:F7:84:D7:42:97:E3:E2:6B:18:39:13:FE:4C:A4:6C Authority key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Certificate issuer: /CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Certificate serial: 3A9263C854496E21A6FB91EE78981D13EB574A05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft Manifest number: 0E Signing time: Tue 12 May 2026 23:58:19 +0000 Manifest this update: Tue 12 May 2026 23:53:19 +0000 Manifest next update: Thu 14 May 2026 00:36:19 +0000 Files and hashes: 1: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl (hash: 7G68vEetvkmjEoLHlRqthNQ2mXJlF0Hstl5xy3DNsLA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:92:63:c8:54:49:6e:21:a6:fb:91:ee:78:98:1d:13:eb:57:4a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Validity Not Before: May 12 23:53:19 2026 GMT Not After : May 14 00:36:19 2026 GMT Subject: CN=0F3D52A6F1F784D74297E3E26B183913FE4CA46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:bf:a7:1f:18:d0:36:61:b1:22:39:0f:a3: ff:d4:72:ed:46:0f:87:78:f4:92:37:32:e6:9c:c7: a3:3a:b7:eb:03:a9:65:af:6c:10:36:b8:cb:80:dc: b8:e3:7a:38:bb:67:80:cc:5a:17:ab:64:09:92:7c: b9:af:ee:a2:58:bd:a7:cc:b3:ad:13:7f:44:21:64: f8:62:bb:fa:50:10:48:50:de:8d:50:81:67:85:1f: 75:b4:4d:09:14:ec:da:d9:02:f5:ed:ce:1c:23:24: db:bc:97:99:31:6f:c3:3d:95:11:e4:fb:a6:ef:f6: e3:1c:c8:55:41:fc:0e:b6:c8:5d:68:09:3c:03:5b: cc:2b:8a:a5:6c:b5:d7:4a:2a:48:84:17:2e:4a:c2: 0c:d2:5d:be:78:e8:cd:f6:b0:41:19:56:a7:68:fd: 37:e8:5b:38:93:3c:e4:0f:5a:31:d8:3d:84:1c:b4: d4:6f:26:2c:57:89:d3:69:73:e6:6f:4d:a9:d4:79: 0b:ad:d3:9d:cb:e2:34:26:86:ce:01:54:f1:2f:b6: 3e:4c:1a:25:64:63:a5:af:e0:5b:d3:43:13:03:93: 9b:ba:40:8c:1d:f3:11:42:c5:31:d3:ab:88:b8:f6: 11:d0:93:f4:93:46:2d:07:70:7d:81:f5:47:10:95: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:52:A6:F1:F7:84:D7:42:97:E3:E2:6B:18:39:13:FE:4C:A4:6C X509v3 Authority Key Identifier: keyid:C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:86:7e:48:76:25:da:a4:6c:19:4e:ad:a5:6b:70:0b:50:90: b6:67:ef:4b:ee:79:fa:ce:75:82:e5:1a:7c:b0:fb:98:f3:39: fa:a0:d1:b0:18:e0:1b:e3:f9:3c:4b:47:c8:3a:21:17:b4:88: 53:88:0a:b1:38:4c:2a:9b:ad:19:13:81:a5:18:65:06:a5:55: bd:f0:2e:eb:3c:ff:e7:76:1c:eb:88:35:51:7d:28:ca:a1:d2: fd:9c:06:47:f7:d6:60:a2:ab:1d:92:df:a2:bd:8c:1e:9a:a7: e9:52:e9:03:39:b6:3e:6c:ec:2f:6e:1a:cb:66:6e:6f:30:72: 67:72:e2:f2:5c:be:11:db:9f:6b:26:a2:9f:3f:ec:21:45:74: e4:e4:ce:3f:a9:a4:e3:88:c5:2d:96:21:1e:7e:66:46:56:38: 88:32:cd:83:e2:cb:53:6b:a3:50:5c:cd:a1:94:f9:93:5f:6c: 67:18:e0:ce:13:1e:f1:b3:e6:f9:5a:5b:5e:00:8b:22:f6:a9: 7e:56:0d:77:b6:8f:39:ca:2c:0f:f4:cc:61:a0:95:a4:cf:66: 2a:7f:db:45:d0:42:08:bd:36:fb:dc:70:76:86:75:43:70:d9: b4:20:98:5f:d6:ea:05:be:4f:22:2b:6d:31:e4:24:15:e8:5d: 68:31:25:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpJjyFRJbiGm+5HueJgdE+tXSgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5 RjhBREEwMTAeFw0yNjA1MTIyMzUzMTlaFw0yNjA1MTQwMDM2MTlaMDMxMTAvBgNV BAMTKDBGM0Q1MkE2RjFGNzg0RDc0Mjk3RTNFMjZCMTgzOTEzRkU0Q0E0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyb+nHxjQNmGxIjkPo//Ucu1G D4d49JI3Muacx6M6t+sDqWWvbBA2uMuA3Ljjeji7Z4DMWherZAmSfLmv7qJYvafM s60Tf0QhZPhiu/pQEEhQ3o1QgWeFH3W0TQkU7NrZAvXtzhwjJNu8l5kxb8M9lRHk +6bv9uMcyFVB/A62yF1oCTwDW8wriqVstddKKkiEFy5KwgzSXb546M32sEEZVqdo /TfoWziTPOQPWjHYPYQctNRvJixXidNpc+ZvTanUeQut053L4jQmhs4BVPEvtj5M GiVkY6Wv4FvTQxMDk5u6QIwd8xFCxTHTq4i49hHQk/STRi0HcH2B9UcQleiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDz1SpvH3hNdCl+Piaxg5E/5MpGwwHwYDVR0j BBgwFoAUx95gJczVaLcl0V0fn/owCJ+K2gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0MGY2NzItNzZkNC00MTU4LWFlZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVD Q0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5RjhBREEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0RFNjAyNUNDRDU2OEI3MjVEMTVEMUY5RkZBMzAwODlGOEFE QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMw MDg5RjhBREEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Gfkh2JdqkbBlOraVrcAtQkLZn70vuefrO dYLlGnyw+5jzOfqg0bAY4Bvj+TxLR8g6IRe0iFOICrE4TCqbrRkTgaUYZQalVb3w Lus8/+d2HOuINVF9KMqh0v2cBkf31mCiqx2S36K9jB6ap+lS6QM5tj5s7C9uGstm bm8wcmdy4vJcvhHbn2smop8/7CFFdOTkzj+ppOOIxS2WIR5+ZkZWOIgyzYPiy1Nr o1BczaGU+ZNfbGcY4M4THvGz5vlaW14AiyL2qX5WDXe2jznKLA/0zGGglaTPZip/ 20XQQgi9NvvccHaGdUNw2bQgmF/W6gW+TyIrbTHkJBXoXWgxJZ0= -----END CERTIFICATE-----Generated at Wed May 13 03:53:16 2026 by rpki-client