$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft (raw, json) Hash identifier: DF/AuEbRoFZXyWuVhiVKHkYiAAupDT8CgJVSu2e5c/I= Subject key identifier: 66:E7:FF:DB:6A:D3:2B:CE:88:E9:A7:9E:0F:44:BE:53:3F:00:FE:2F Authority key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Certificate issuer: /CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Certificate serial: 3195E5FE312ABCCEE861D31A03CA541545569084 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft Manifest number: C0 Signing time: Fri 25 Sep 2026 11:39:59 +0000 Manifest this update: Fri 25 Sep 2026 11:34:59 +0000 Manifest next update: Sat 26 Sep 2026 12:06:59 +0000 Files and hashes: 1: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl (hash: 44x1z2zV/UyiXo2ojgrDDcOYEx0IRWSyYsa5ADjVDMs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:95:e5:fe:31:2a:bc:ce:e8:61:d3:1a:03:ca:54:15:45:56:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Validity Not Before: Sep 25 11:34:59 2026 GMT Not After : Sep 26 12:06:59 2026 GMT Subject: CN=66E7FFDB6AD32BCE88E9A79E0F44BE533F00FE2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:3e:cd:e5:9b:48:79:ec:03:e0:cd:8d:72: 46:f6:86:1c:7d:6c:97:87:9a:5d:3b:a0:ac:aa:c9: b9:f3:54:54:84:93:31:1d:f9:d8:33:b8:9a:81:1b: 8b:c4:d9:1e:f4:99:4a:af:96:96:50:0c:d5:b2:3c: 44:de:60:16:df:b8:c2:29:77:3a:69:2c:a5:3d:bc: 6d:83:e4:52:cd:e1:39:fb:95:44:63:8b:8c:1c:0b: 2c:81:02:8e:7d:1a:dd:3d:bb:45:e5:12:4b:d6:a0: 1f:88:fd:f0:8f:21:a2:d1:95:51:75:47:42:29:ad: 7f:05:7f:ea:1d:cb:5a:ba:7c:af:4b:27:bd:e5:84: 61:19:0a:97:e9:eb:d2:6f:f2:6a:0d:61:4a:8b:40: 5d:24:13:c9:9f:4f:cf:1c:f9:98:d7:c3:e1:c5:2b: 41:3a:e0:f9:18:4b:fc:60:17:8a:fa:51:47:48:89: eb:54:1b:8f:8f:cd:73:da:10:1b:49:21:e1:07:bd: 78:dc:72:73:1f:be:1f:03:51:66:0c:f8:99:a0:00: dd:80:cd:1c:bd:92:cf:8e:f5:9f:1b:43:88:be:03: 8e:78:94:9f:a1:a6:cb:bf:40:28:ee:78:ef:b7:8b: f3:ff:a1:d4:d0:f6:8f:19:fe:65:03:44:de:8e:3e: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E7:FF:DB:6A:D3:2B:CE:88:E9:A7:9E:0F:44:BE:53:3F:00:FE:2F X509v3 Authority Key Identifier: keyid:C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ef:64:da:6e:38:5f:a7:8e:de:f6:9d:a3:ad:57:1b:24:90: e4:19:ba:38:db:80:1d:73:e0:f9:b4:f7:ab:92:c0:65:69:e6: 60:9b:41:94:a8:ea:2a:cb:10:80:a9:e3:f7:69:92:8f:8d:ca: 88:7b:51:cd:21:f3:d2:8c:ee:5d:94:5a:45:06:19:5c:be:6f: c8:8c:d8:63:4d:19:33:12:58:bc:85:33:5d:6d:8c:db:27:28: a1:28:47:32:3b:82:fc:e1:71:45:d0:33:e4:a6:2b:a9:52:22: 35:34:74:5c:6d:51:9b:75:55:3f:1b:72:eb:20:d2:e0:dc:3a: 08:a6:74:d7:90:c6:2b:53:b5:3d:65:04:c5:88:38:67:0d:34: 2a:96:3d:04:e5:58:34:c8:84:a4:4b:83:ed:07:30:6a:c1:e6: b7:2e:8c:37:88:92:da:70:9c:9a:95:a2:22:0f:27:e7:9e:eb: a6:0d:5d:ec:46:5d:09:ff:e3:44:7f:ab:58:0c:4a:58:b5:bb: 6e:36:cd:2f:fd:d5:68:59:68:a0:c7:d8:1c:32:b9:9f:68:e3: fe:dd:81:27:23:cf:4a:24:47:f9:60:0d:d3:95:f1:c8:13:85: 71:82:57:5d:b1:34:9f:d6:ea:70:b2:ac:bb:c6:17:04:84:90: f2:14:55:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZXl/jEqvM7oYdMaA8pUFUVWkIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5 RjhBREEwMTAeFw0yNjA5MjUxMTM0NTlaFw0yNjA5MjYxMjA2NTlaMDMxMTAvBgNV BAMTKDY2RTdGRkRCNkFEMzJCQ0U4OEU5QTc5RTBGNDRCRTUzM0YwMEZFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwj7N5ZtIeewD4M2Nckb2hhx9 bJeHml07oKyqybnzVFSEkzEd+dgzuJqBG4vE2R70mUqvlpZQDNWyPETeYBbfuMIp dzppLKU9vG2D5FLN4Tn7lURji4wcCyyBAo59Gt09u0XlEkvWoB+I/fCPIaLRlVF1 R0IprX8Ff+ody1q6fK9LJ73lhGEZCpfp69Jv8moNYUqLQF0kE8mfT88c+ZjXw+HF K0E64PkYS/xgF4r6UUdIietUG4+PzXPaEBtJIeEHvXjccnMfvh8DUWYM+JmgAN2A zRy9ks+O9Z8bQ4i+A454lJ+hpsu/QCjueO+3i/P/odTQ9o8Z/mUDRN6OPrQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZuf/22rTK86I6aeeD0S+Uz8A/i8wHwYDVR0j BBgwFoAUx95gJczVaLcl0V0fn/owCJ+K2gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0MGY2NzItNzZkNC00MTU4LWFlZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVD Q0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5RjhBREEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0RFNjAyNUNDRDU2OEI3MjVEMTVEMUY5RkZBMzAwODlGOEFE QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMw MDg5RjhBREEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALvZNpuOF+njt72naOtVxskkOQZujjbgB1z 4Pm096uSwGVp5mCbQZSo6irLEICp4/dpko+Nyoh7Uc0h89KM7l2UWkUGGVy+b8iM 2GNNGTMSWLyFM11tjNsnKKEoRzI7gvzhcUXQM+SmK6lSIjU0dFxtUZt1VT8bcusg 0uDcOgimdNeQxitTtT1lBMWIOGcNNCqWPQTlWDTIhKRLg+0HMGrB5rcujDeIktpw nJqVoiIPJ+ee66YNXexGXQn/40R/q1gMSli1u242zS/91WhZaKDH2BwyuZ9o4/7d gScjz0okR/lgDdOV8cgThXGCV12xNJ/W6nCyrLvGFwSEkPIUVRM= -----END CERTIFICATE-----Generated at Sat Sep 26 04:20:02 2026 by rpki-client