$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft (raw, json) Hash identifier: ckURGvIEEp5N1sbQ7ART1bN5LnS3XPzTZeHIds7Sj18= Subject key identifier: C4:41:63:24:EF:AC:F1:75:71:89:BC:61:C5:7D:33:EC:D2:A4:C9:F2 Authority key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Certificate issuer: /CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Certificate serial: 0AB5046AFDBA8D0DA64928DC70F56B99C3757245 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:22:27 +0000 Manifest this update: Thu 24 Sep 2026 01:17:27 +0000 Manifest next update: Fri 25 Sep 2026 01:52:27 +0000 Files and hashes: 1: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl (hash: JZTqDbWbaOtB/iwkn9ADX0UpZPOVYXkWm+Uv0gCMuTY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b5:04:6a:fd:ba:8d:0d:a6:49:28:dc:70:f5:6b:99:c3:75:72:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Validity Not Before: Sep 24 01:17:27 2026 GMT Not After : Sep 25 01:52:27 2026 GMT Subject: CN=C4416324EFACF1757189BC61C57D33ECD2A4C9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:4b:f0:fc:b1:3f:79:a2:22:10:b9:0a:25: eb:7c:cc:fe:7d:90:21:a9:f1:fa:99:64:0c:79:86: 55:5b:ad:19:ac:75:90:3c:8a:9c:1f:01:d9:c1:77: e0:ec:cf:4f:04:66:96:a5:c2:08:67:81:61:cc:36: d6:c7:a4:e5:5e:5f:5a:33:ca:f7:15:3d:29:37:01: 4f:b9:10:1e:d0:17:6d:63:9d:47:00:0b:fc:6c:10: 18:86:92:22:47:cf:5c:1f:3a:d3:ca:0f:23:8a:e2: 8d:92:93:03:61:c1:15:a7:52:68:44:31:17:05:84: 98:19:fa:fc:16:84:95:de:5a:da:e5:48:1a:a9:7e: 06:0c:a0:84:00:24:d6:90:7b:0e:81:56:3c:6d:00: af:c7:41:a4:37:eb:8a:34:e8:9e:3e:7e:dc:00:71: b5:70:28:3c:ae:f6:e6:97:42:02:40:0b:88:56:f6: b5:c5:ff:95:47:21:5b:86:56:f3:a8:8a:3a:9f:fd: 9c:7b:84:5e:2b:32:a0:f4:c4:84:2f:a4:7d:17:07: 71:7c:16:2d:c7:4c:1e:89:87:e9:3d:8e:57:96:71: 87:42:98:74:6d:94:73:e5:60:05:a5:cc:c4:2c:ac: fc:a1:bd:5f:a8:89:b9:d1:73:4e:7f:98:5b:d3:b6: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:63:24:EF:AC:F1:75:71:89:BC:61:C5:7D:33:EC:D2:A4:C9:F2 X509v3 Authority Key Identifier: keyid:7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:63:cf:11:e6:3f:0d:9d:6d:00:c0:20:95:3a:50:d7:25:5c: 2d:ea:da:2a:44:da:61:10:03:65:15:6a:39:26:03:72:2a:a1: 50:7e:8c:7b:15:5c:54:76:37:2a:86:6b:12:57:d0:0d:a6:37: 6f:34:f7:ea:11:54:e2:ad:c6:25:19:18:41:14:23:a7:83:e2: 09:89:66:13:67:ba:84:39:93:84:2e:85:c2:c8:48:7e:15:c1: 6d:26:be:c9:5c:91:ab:86:e5:f7:fe:6f:0b:d1:17:e2:d0:9c: 53:d7:23:6f:28:a4:a5:d5:0e:35:4d:f8:c4:72:55:41:be:37: 2e:43:a4:df:d7:3c:f8:e8:a0:fa:8a:fc:c4:ef:c3:b9:8e:ad: 64:6f:f6:6a:0a:c4:be:ad:02:79:20:be:ae:92:76:d3:a0:1b: e3:b2:60:dd:a4:96:d7:dd:31:ea:da:90:b4:cf:79:37:7e:8f: 72:c6:e2:50:41:36:be:62:a7:2e:64:89:97:08:e3:5e:f4:dc: a9:19:b1:0b:0f:2d:6b:90:e0:84:ac:f5:ba:3d:b8:1e:3c:ea: 4b:f6:ee:2e:86:83:22:16:97:b1:bc:97:e4:fa:a4:69:ee:1b: 0f:eb:97:d2:3e:2b:03:c2:fa:c1:33:10:87:17:e3:35:90:2a: 48:1f:34:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrUEav26jQ2mSSjccPVrmcN1ckUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzky MzU4RjJFRTAeFw0yNjA5MjQwMTE3MjdaFw0yNjA5MjUwMTUyMjdaMDMxMTAvBgNV BAMTKEM0NDE2MzI0RUZBQ0YxNzU3MTg5QkM2MUM1N0QzM0VDRDJBNEM5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVkvw/LE/eaIiELkKJet8zP59 kCGp8fqZZAx5hlVbrRmsdZA8ipwfAdnBd+Dsz08EZpalwghngWHMNtbHpOVeX1oz yvcVPSk3AU+5EB7QF21jnUcAC/xsEBiGkiJHz1wfOtPKDyOK4o2SkwNhwRWnUmhE MRcFhJgZ+vwWhJXeWtrlSBqpfgYMoIQAJNaQew6BVjxtAK/HQaQ364o06J4+ftwA cbVwKDyu9uaXQgJAC4hW9rXF/5VHIVuGVvOoijqf/Zx7hF4rMqD0xIQvpH0XB3F8 Fi3HTB6Jh+k9jleWcYdCmHRtlHPlYAWlzMQsrPyhvV+oibnRc05/mFvTthIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEFjJO+s8XVxibxhxX0z7NKkyfIwHwYDVR0j BBgwFoAUe/7ELGaEs5bXdApT2lsqOSNY8u4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3Y2YyMDItZjVlYy00MTAxLTgwODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2 Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzkyMzU4RjJFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QkZFQzQyQzY2ODRCMzk2RDc3NDBBNTNEQTVCMkEzOTIzNThG MkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJB MzkyMzU4RjJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANjzxHmPw2dbQDAIJU6UNclXC3q2ipE2mEQ A2UVajkmA3IqoVB+jHsVXFR2NyqGaxJX0A2mN2809+oRVOKtxiUZGEEUI6eD4gmJ ZhNnuoQ5k4QuhcLISH4VwW0mvslckauG5ff+bwvRF+LQnFPXI28opKXVDjVN+MRy VUG+Ny5DpN/XPPjooPqK/MTvw7mOrWRv9moKxL6tAnkgvq6SdtOgG+OyYN2kltfd MerakLTPeTd+j3LG4lBBNr5ipy5kiZcI41703KkZsQsPLWuQ4ISs9bo9uB486kv2 7i6GgyIWl7G8l+T6pGnuGw/rl9I+KwPC+sEzEIcX4zWQKkgfNHI= -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:13 2026 by rpki-client