$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: 24r8qvPKvPLSa1WvRAKpByRqQKzOLyM9pfjiQeKmHAI= Subject key identifier: EE:CA:BA:FB:64:36:C0:B1:AF:EB:27:D4:64:E8:50:F9:39:4C:BB:42 Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 4B71163C5CD5F8FD007F90A06D27F57D0574116A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:10:37 +0000 Manifest this update: Tue 12 May 2026 09:05:37 +0000 Manifest next update: Wed 13 May 2026 09:50:37 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: Jet6wuNHRujdWbeCaRYMMZTc5XZQH8jnfFPYGOMFhAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:71:16:3c:5c:d5:f8:fd:00:7f:90:a0:6d:27:f5:7d:05:74:11:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: May 12 09:05:37 2026 GMT Not After : May 13 09:50:37 2026 GMT Subject: CN=EECABAFB6436C0B1AFEB27D464E850F9394CBB42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:21:96:51:b0:71:45:11:3a:e8:e2:67:2c: c4:f7:86:13:b4:56:2d:8f:1f:62:37:15:ba:70:ee: af:87:18:44:fc:f6:7a:7e:e9:88:51:5f:03:1d:7c: fd:db:17:c7:80:1f:27:aa:cf:b7:8d:d7:a1:bc:3d: ff:0c:8e:d0:78:f7:5e:f3:e0:25:7a:30:f8:fc:1d: d4:e2:de:8f:7f:d2:7b:55:86:af:72:95:76:f9:04: 9c:c3:68:69:91:a0:96:e0:72:e7:3e:34:1f:e9:0f: dc:22:2f:94:28:e7:6c:2b:09:23:db:9c:54:2a:06: 61:af:56:9d:eb:b3:31:2d:7a:a9:06:27:a8:b4:61: 4c:d5:70:97:7e:a1:3e:68:df:b3:7e:3e:5a:e0:98: d1:8e:e8:08:68:e8:8d:c2:ec:8e:d6:b8:d8:8b:b7: 43:13:99:9a:ff:a3:bd:da:b9:dd:9b:bc:00:5d:ac: 86:55:28:c5:cc:02:42:0d:33:6c:79:12:9e:cf:89: 3b:27:66:e4:dc:a9:e6:ab:9a:78:fe:aa:02:1e:51: a6:9f:07:95:e6:e0:bc:2e:31:d0:e5:06:0f:ae:91: 56:a3:05:ba:00:00:be:0c:8d:6b:e3:09:6a:fb:c3: 9e:d7:e2:29:9e:a0:1a:cb:ae:03:2b:6a:79:21:cf: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:BA:FB:64:36:C0:B1:AF:EB:27:D4:64:E8:50:F9:39:4C:BB:42 X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c8:df:ad:79:76:40:31:da:16:1e:93:d4:47:e6:d1:7d:80: 47:ae:37:7a:0d:f1:10:b4:60:29:9a:1d:5a:6f:1e:ff:e6:87: 12:28:41:b2:56:f0:a3:97:da:a2:dc:e6:d9:0b:2e:4e:06:02: 29:63:f5:18:af:e1:62:cf:35:bb:31:82:c5:77:6f:ef:41:3a: 77:3c:79:1a:af:44:75:3f:c5:d6:41:31:aa:7e:08:51:18:52: c9:1d:9d:fa:6a:97:24:85:8f:5e:86:e6:0e:45:43:36:ea:bd: 69:62:e2:dc:24:30:3c:4d:3f:e4:fb:1c:e1:63:ff:51:a0:5c: ea:78:00:bc:3e:5d:e3:20:b9:5c:7e:64:a0:99:5d:cb:8c:d8: 7f:36:be:d6:43:3c:39:dd:4e:7a:b5:f5:a7:34:9f:ca:91:30: 48:ff:48:14:6b:23:c1:32:77:e2:68:7e:a5:6f:53:08:2b:de: 56:ec:f4:ac:fb:ae:4e:ab:87:8c:4b:e4:e3:7a:8b:14:26:b9: c8:34:9f:ca:4b:82:8b:4b:31:c4:44:1b:11:1a:13:bd:62:22: 7b:b3:63:92:40:90:c9:f3:0c:47:eb:8f:74:2b:63:bd:a1:2b: 4f:89:79:c8:59:0b:48:ff:31:e4:db:e2:cc:44:ee:7b:07:32: f1:9e:98:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3EWPFzV+P0Af5CgbSf1fQV0EWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA1MTIwOTA1MzdaFw0yNjA1MTMwOTUwMzdaMDMxMTAvBgNV BAMTKEVFQ0FCQUZCNjQzNkMwQjFBRkVCMjdENDY0RTg1MEY5Mzk0Q0JCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqiGWUbBxRRE66OJnLMT3hhO0 Vi2PH2I3Fbpw7q+HGET89np+6YhRXwMdfP3bF8eAHyeqz7eN16G8Pf8MjtB4917z 4CV6MPj8HdTi3o9/0ntVhq9ylXb5BJzDaGmRoJbgcuc+NB/pD9wiL5Qo52wrCSPb nFQqBmGvVp3rszEteqkGJ6i0YUzVcJd+oT5o37N+PlrgmNGO6Aho6I3C7I7WuNiL t0MTmZr/o73aud2bvABdrIZVKMXMAkINM2x5Ep7PiTsnZuTcqearmnj+qgIeUaaf B5Xm4LwuMdDlBg+ukVajBboAAL4MjWvjCWr7w57X4imeoBrLrgMrankhz1gnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7sq6+2Q2wLGv6yfUZOhQ+TlMu0IwHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbI3615dkAx2hYek9RH5tF9gEeuN3oN8RC0 YCmaHVpvHv/mhxIoQbJW8KOX2qLc5tkLLk4GAilj9Riv4WLPNbsxgsV3b+9BOnc8 eRqvRHU/xdZBMap+CFEYUskdnfpqlySFj16G5g5FQzbqvWli4twkMDxNP+T7HOFj /1GgXOp4ALw+XeMguVx+ZKCZXcuM2H82vtZDPDndTnq19ac0n8qRMEj/SBRrI8Ey d+JofqVvUwgr3lbs9Kz7rk6rh4xL5ON6ixQmucg0n8pLgotLMcREGxEaE71iInuz Y5JAkMnzDEfrj3QrY72hK0+JechZC0j/MeTb4sxE7nsHMvGemD0= -----END CERTIFICATE-----Generated at Wed May 13 01:14:09 2026 by rpki-client