$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json) Hash identifier: WdJiuqHtFlXCtMFPUVdsAy2TNPkjtl/9MbVux/6+GqQ= Subject key identifier: 10:16:AB:2B:BB:5A:58:2E:94:FD:54:EA:36:84:62:24:D5:6A:A5:52 Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Certificate serial: 4F2914E28378C279346FAF5374E866488A69999B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 15:29:04 +0000 Manifest this update: Sat 26 Sep 2026 15:24:04 +0000 Manifest next update: Sun 27 Sep 2026 16:10:04 +0000 Files and hashes: 1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: 0jjuG2MzpBSHeAyks9n2zIAmtovhYJzd0xbAAuXeBko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:29:14:e2:83:78:c2:79:34:6f:af:53:74:e8:66:48:8a:69:99:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Validity Not Before: Sep 26 15:24:04 2026 GMT Not After : Sep 27 16:10:04 2026 GMT Subject: CN=1016AB2BBB5A582E94FD54EA36846224D56AA552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:40:86:77:f0:82:01:1c:b4:08:d4:a8:0b: 83:e8:a4:ee:d6:c7:f1:e7:9c:4c:b2:d4:b8:22:00: 43:59:7c:db:ad:e8:43:07:ae:9f:fd:bf:d3:fb:40: e7:6f:c3:b8:83:53:ca:63:70:39:c7:1a:76:c4:96: 9e:0f:67:be:2e:ef:89:b1:b2:78:f6:7e:ee:af:79: 65:cd:dd:6d:13:19:53:e7:c5:75:af:dd:56:35:3e: 08:86:c6:e6:e9:bb:be:85:bd:2d:f3:93:02:aa:6d: 1f:23:26:63:5a:b2:4c:d6:52:55:d1:b8:cc:f2:c3: 16:66:f3:44:43:fc:cf:b7:8a:49:eb:95:07:02:41: 18:e9:e2:d9:1e:bf:9c:02:44:cf:30:7d:b3:8c:40: f9:7e:10:d4:5d:4b:f0:89:41:d9:f3:db:cf:7c:03: 14:46:4a:69:d6:2b:5f:44:b4:88:0a:2d:58:86:9e: 25:20:30:1f:14:e9:b6:23:28:28:22:e6:4c:9e:68: 7f:45:a0:22:d9:23:a9:bc:36:6d:26:de:b3:8f:5b: 1b:5c:0e:3f:85:8a:cf:2a:f7:08:31:28:c8:ee:e2: 7b:05:36:2d:6f:73:29:84:8f:d9:26:c3:65:db:69: c7:a2:9a:3a:47:37:8c:76:97:bc:7f:17:8b:19:db: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:AB:2B:BB:5A:58:2E:94:FD:54:EA:36:84:62:24:D5:6A:A5:52 X509v3 Authority Key Identifier: keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f1:49:79:38:05:0f:4e:97:aa:81:de:d9:53:c1:56:c8:85: 0b:4a:45:e5:89:90:73:7d:ea:4a:8a:bd:40:20:bd:7d:73:aa: 3b:6c:c6:40:85:d0:cc:10:19:5f:50:12:55:46:f2:ea:77:81: f1:1e:e6:91:e9:35:13:07:12:d2:87:c8:d2:d6:6b:c8:eb:e4: 03:b9:75:2d:89:39:ce:0f:4c:ca:53:5f:40:da:a9:03:09:10: 9c:37:b0:3c:2c:51:64:f2:a0:6a:d5:f8:1a:2e:4e:09:e4:5d: 5b:ee:07:36:19:5a:76:54:ca:3f:d4:ac:bd:d7:11:79:e6:8a: 7c:0b:71:5a:0a:3f:ac:ff:46:17:19:5f:d6:cc:bc:6b:e8:f8: 4f:10:a7:2a:7b:c2:6b:3b:e1:95:e1:48:08:6e:b6:bd:22:18: aa:ea:43:bc:0f:8b:39:26:4b:2c:f6:c8:98:2d:e6:cd:bd:24: 4a:01:59:a5:30:a9:18:59:f0:76:56:f6:1b:f9:3c:04:32:b2: d6:de:e6:f7:fc:21:cc:f0:da:08:42:1d:45:ec:ee:6d:89:6b: 07:e9:d7:ab:ce:c5:de:35:13:08:f3:73:ba:ea:0f:1a:dc:37: 92:99:d0:12:dd:d8:7c:09:7c:7e:23:eb:6e:93:c5:c8:c2:be: 81:64:41:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTykU4oN4wnk0b69TdOhmSIppmZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3 OUYwQ0IyMDAeFw0yNjA5MjYxNTI0MDRaFw0yNjA5MjcxNjEwMDRaMDMxMTAvBgNV BAMTKDEwMTZBQjJCQkI1QTU4MkU5NEZENTRFQTM2ODQ2MjI0RDU2QUE1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJ0CGd/CCARy0CNSoC4PopO7W x/HnnEyy1LgiAENZfNut6EMHrp/9v9P7QOdvw7iDU8pjcDnHGnbElp4PZ74u74mx snj2fu6veWXN3W0TGVPnxXWv3VY1PgiGxubpu76FvS3zkwKqbR8jJmNaskzWUlXR uMzywxZm80RD/M+3iknrlQcCQRjp4tkev5wCRM8wfbOMQPl+ENRdS/CJQdnz2898 AxRGSmnWK19EtIgKLViGniUgMB8U6bYjKCgi5kyeaH9FoCLZI6m8Nm0m3rOPWxtc Dj+Fis8q9wgxKMju4nsFNi1vcymEj9kmw2XbaceimjpHN4x2l7x/F4sZ29QVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBarK7taWC6U/VTqNoRiJNVqpVIwHwYDVR0j BBgwFoAUfsEcLErvq5SrhwBohqStJXnwyyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ3NDNjN2MtMDdlNi00NjExLWI0MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0 QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3OUYwQ0IyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUMxMUMyQzRBRUZBQjk0QUI4NzAwNjg4NkE0QUQyNTc5RjBD QjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFE MjU3OUYwQ0IyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3xSXk4BQ9Ol6qB3tlTwVbIhQtKReWJkHN9 6kqKvUAgvX1zqjtsxkCF0MwQGV9QElVG8up3gfEe5pHpNRMHEtKHyNLWa8jr5AO5 dS2JOc4PTMpTX0DaqQMJEJw3sDwsUWTyoGrV+BouTgnkXVvuBzYZWnZUyj/UrL3X EXnminwLcVoKP6z/RhcZX9bMvGvo+E8Qpyp7wms74ZXhSAhutr0iGKrqQ7wPizkm Syz2yJgt5s29JEoBWaUwqRhZ8HZW9hv5PAQystbe5vf8Iczw2ghCHUXs7m2Jawfp 16vOxd41Ewjzc7rqDxrcN5KZ0BLd2HwJfH4j626TxcjCvoFkQZs= -----END CERTIFICATE-----Generated at Sun Sep 27 02:49:42 2026 by rpki-client