$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft (raw, json) Hash identifier: M++vHDxaaAEcY7Sna6Rh88fNUL4Qd9YhpXzzASvgPtg= Subject key identifier: FA:7D:A4:8E:3D:3D:41:A8:F9:EF:BF:76:AC:2F:E7:49:F5:72:C4:6D Authority key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Certificate issuer: /CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Certificate serial: 4A343280F78FCAAE16827D92842358283AB45DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft Manifest number: 0D Signing time: Tue 12 May 2026 07:59:20 +0000 Manifest this update: Tue 12 May 2026 07:54:20 +0000 Manifest next update: Wed 13 May 2026 09:19:20 +0000 Files and hashes: 1: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl (hash: h6iUfDopqtGd5IFec0F9LgFbE+09BdSgp2fumrtuwAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:34:32:80:f7:8f:ca:ae:16:82:7d:92:84:23:58:28:3a:b4:5d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Validity Not Before: May 12 07:54:20 2026 GMT Not After : May 13 09:19:20 2026 GMT Subject: CN=FA7DA48E3D3D41A8F9EFBF76AC2FE749F572C46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:14:b3:f7:9c:20:e7:12:8c:11:f7:43:ff: 12:d7:f2:9e:d6:13:00:81:66:2f:76:14:22:75:bb: 2e:5f:44:cd:b3:50:96:3e:b5:3f:28:3f:03:20:37: 57:55:65:10:f9:45:bd:ee:3e:36:c4:06:b5:79:52: 73:17:29:d8:92:fc:5d:83:22:1e:61:3e:c2:b5:77: 26:fa:d6:c0:9a:e6:25:42:41:35:08:33:df:bf:b8: 17:f7:2f:c9:4c:d1:73:20:69:2f:e9:89:8a:33:9f: 73:a2:23:df:63:20:1f:55:18:8e:49:ca:80:d5:93: b3:d6:20:48:da:91:0e:75:03:bc:80:c3:fc:47:e0: 95:0b:33:5c:c2:f1:c3:f4:73:9b:69:bb:f7:0a:dd: de:ff:62:cd:40:c0:d5:87:ed:c8:a5:58:95:3b:77: a2:92:b5:bb:fd:25:4d:2b:6e:a1:5e:f0:21:b3:14: ee:13:8c:d5:eb:1d:0d:f0:b5:90:1b:0f:db:b4:71: e6:8e:12:27:46:a3:49:a5:88:c8:15:12:50:7f:34: 42:4d:4b:9b:28:5d:8f:10:2b:22:fd:91:6c:3b:9e: 8f:1a:d1:9c:2d:5f:4a:f8:bd:78:dc:24:be:ed:99: e1:bf:86:98:7e:af:f1:8b:91:96:c0:d1:91:f5:b0: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7D:A4:8E:3D:3D:41:A8:F9:EF:BF:76:AC:2F:E7:49:F5:72:C4:6D X509v3 Authority Key Identifier: keyid:7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9f:b8:cc:77:ee:a0:b5:ae:c4:f3:7c:67:a6:7f:a2:2c:d3: fa:55:05:19:e7:48:21:79:ca:3d:c2:39:7d:e8:36:3d:49:5d: d7:04:b2:28:38:9e:6a:60:c4:41:cb:1d:ca:bb:f9:3f:ab:8d: ae:72:ce:36:78:91:fa:b0:94:19:92:39:7b:b9:ad:6b:54:2f: 3b:62:92:28:2c:f8:66:0a:8b:98:1f:17:8b:1a:6e:e4:d4:d7: fc:44:59:fc:ab:7e:1e:04:d7:20:1c:0e:39:b3:a7:b2:e5:9b: 7b:54:02:3b:35:0a:7e:fd:73:21:89:13:6e:1d:94:0b:ff:33: 96:5a:fb:1b:dd:36:6c:f9:d5:7a:02:a1:55:41:d0:77:93:36: ee:7c:f8:de:80:51:81:21:4f:c6:8f:86:18:50:af:46:67:7d: c9:cb:dc:f2:31:22:7f:05:17:20:d6:5d:c8:69:c1:46:8c:3f: f8:75:78:a1:4c:2b:c1:dc:47:19:69:4f:c2:9f:56:08:09:12: b1:67:4e:87:a7:80:48:b2:5b:68:05:6b:09:13:aa:a8:88:e7: 68:5b:cc:e0:d3:6b:c9:ea:1f:4d:47:b7:65:af:36:8b:a5:71: bc:c8:60:c7:03:b8:05:b4:53:dd:9d:ed:66:03:63:9d:58:c0: 4a:fa:8d:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjQygPePyq4Wgn2ShCNYKDq0XfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzky MzU4RjJFRTAeFw0yNjA1MTIwNzU0MjBaFw0yNjA1MTMwOTE5MjBaMDMxMTAvBgNV BAMTKEZBN0RBNDhFM0QzRDQxQThGOUVGQkY3NkFDMkZFNzQ5RjU3MkM0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEcxSz95wg5xKMEfdD/xLX8p7W EwCBZi92FCJ1uy5fRM2zUJY+tT8oPwMgN1dVZRD5Rb3uPjbEBrV5UnMXKdiS/F2D Ih5hPsK1dyb61sCa5iVCQTUIM9+/uBf3L8lM0XMgaS/piYozn3OiI99jIB9VGI5J yoDVk7PWIEjakQ51A7yAw/xH4JULM1zC8cP0c5tpu/cK3d7/Ys1AwNWH7cilWJU7 d6KStbv9JU0rbqFe8CGzFO4TjNXrHQ3wtZAbD9u0ceaOEidGo0mliMgVElB/NEJN S5soXY8QKyL9kWw7no8a0ZwtX0r4vXjcJL7tmeG/hph+r/GLkZbA0ZH1sOdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+n2kjj09Qaj57792rC/nSfVyxG0wHwYDVR0j BBgwFoAUe/7ELGaEs5bXdApT2lsqOSNY8u4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3Y2YyMDItZjVlYy00MTAxLTgwODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2 Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzkyMzU4RjJFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QkZFQzQyQzY2ODRCMzk2RDc3NDBBNTNEQTVCMkEzOTIzNThG MkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJB MzkyMzU4RjJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGfuMx37qC1rsTzfGemf6Is0/pVBRnnSCF5 yj3COX3oNj1JXdcEsig4nmpgxEHLHcq7+T+rja5yzjZ4kfqwlBmSOXu5rWtULzti kigs+GYKi5gfF4sabuTU1/xEWfyrfh4E1yAcDjmzp7Llm3tUAjs1Cn79cyGJE24d lAv/M5Za+xvdNmz51XoCoVVB0HeTNu58+N6AUYEhT8aPhhhQr0ZnfcnL3PIxIn8F FyDWXchpwUaMP/h1eKFMK8HcRxlpT8KfVggJErFnToengEiyW2gFawkTqqiI52hb zODTa8nqH01Ht2WvNoulcbzIYMcDuAW0U92d7WYDY51YwEr6jTE= -----END CERTIFICATE-----Generated at Wed May 13 01:37:08 2026 by rpki-client