$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: xRcRB6/pwKXROxxN8Kdd32SjKVly012hpL/G1z1oFNY= Subject key identifier: 15:3D:EF:24:49:4C:44:B4:85:98:E7:2E:33:F7:22:74:2B:30:A7:AF Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 4C88120A8836A181AA23F28CF91A6FAAAC364047 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:18:18 +0000 Manifest this update: Fri 24 Jul 2026 03:13:18 +0000 Manifest next update: Sat 25 Jul 2026 05:51:18 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: +sZzKLZ7Z/SAyB7AzheUk5vC9ybXgXhB+X7CYpnOuLQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:88:12:0a:88:36:a1:81:aa:23:f2:8c:f9:1a:6f:aa:ac:36:40:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: Jul 24 03:13:18 2026 GMT Not After : Jul 25 05:51:18 2026 GMT Subject: CN=153DEF24494C44B48598E72E33F722742B30A7AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:c0:18:dd:1e:82:0e:d6:46:aa:e2:f1:29: c9:df:68:9c:61:22:07:47:1c:67:34:48:1c:5b:b8: 8f:2a:b2:39:f9:26:1e:7e:f4:f5:27:45:c5:d6:77: 08:b1:ad:64:20:a1:17:86:97:bc:e1:85:c7:70:3d: 5e:95:9b:11:22:03:06:2e:2e:1e:7e:dd:6c:97:c2: 58:b4:b5:8c:80:2a:9c:c0:87:ba:78:53:df:48:90: 37:6f:8c:ae:e2:42:72:5a:8a:f1:c0:0a:be:be:0b: 76:60:13:dc:99:66:8b:5c:70:2f:26:85:30:91:25: 26:bc:dd:20:ae:bc:9d:b5:30:31:06:04:d9:4b:89: 55:e1:f1:ff:28:d5:e5:98:10:da:5c:47:67:bc:14: 90:96:35:89:06:b2:1c:f9:ed:18:42:da:31:e1:79: ed:b3:a6:ad:76:f3:2c:bd:c0:20:a0:f2:dc:28:39: 98:07:39:8f:dc:98:e3:71:06:9b:b2:08:03:28:f8: 75:77:44:5e:e1:af:e9:99:c9:fb:30:ff:b6:3a:0f: c6:1c:c7:02:2f:00:4b:13:0a:fa:0b:02:36:c0:bd: c0:e1:5a:1c:1a:3f:0a:6f:1b:e2:1f:3a:ca:e4:26: d6:48:23:45:6d:91:5d:dd:fb:4b:ec:0c:d9:46:e7: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3D:EF:24:49:4C:44:B4:85:98:E7:2E:33:F7:22:74:2B:30:A7:AF X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:33:a4:0a:ab:f5:97:d8:6c:f5:d9:52:ea:8c:d6:79:73:23: 52:0d:79:22:41:d6:67:2a:14:99:49:76:18:cf:20:93:12:16: 75:f1:eb:fe:58:57:96:29:cc:ad:b8:6b:b1:51:f3:a9:f7:c9: 7c:db:e1:50:f9:af:b1:d1:6e:c2:78:55:2e:db:3b:77:a1:60: a6:d8:66:9d:9f:17:24:2f:81:9e:4b:cd:2d:99:14:d3:49:80: 0e:10:99:c5:2a:86:6e:ea:f9:8a:cf:5c:ca:68:ec:56:d7:2c: 6f:4a:78:f4:02:4e:b5:01:29:f0:a2:41:4d:b1:86:e8:ec:53: b7:7e:59:78:88:e5:3b:c8:68:fd:3c:69:a4:4f:d9:5b:cd:66: c4:b0:0a:04:20:f4:47:a7:d1:d3:f4:5c:e3:a1:e7:f1:d5:20: 84:99:58:08:09:cf:e9:26:58:2b:74:0c:f5:6a:5f:cc:93:f7: 4e:00:c2:38:1a:00:53:f5:4b:35:99:e8:b2:9b:3c:ba:cc:c6: 06:c7:bb:5c:a1:e1:2e:d4:ab:32:bd:23:a6:db:bd:27:73:96: 9b:b4:c1:ec:ef:84:77:24:64:b1:2d:6e:6a:5a:dc:f3:06:b5: 0b:18:c7:1b:2e:55:c7:2e:7b:7b:7e:30:5a:ef:f5:be:9f:8a: 5d:04:2d:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIgSCog2oYGqI/KM+Rpvqqw2QEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA3MjQwMzEzMThaFw0yNjA3MjUwNTUxMThaMDMxMTAvBgNV BAMTKDE1M0RFRjI0NDk0QzQ0QjQ4NTk4RTcyRTMzRjcyMjc0MkIzMEE3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b8AY3R6CDtZGquLxKcnfaJxh IgdHHGc0SBxbuI8qsjn5Jh5+9PUnRcXWdwixrWQgoReGl7zhhcdwPV6VmxEiAwYu Lh5+3WyXwli0tYyAKpzAh7p4U99IkDdvjK7iQnJaivHACr6+C3ZgE9yZZotccC8m hTCRJSa83SCuvJ21MDEGBNlLiVXh8f8o1eWYENpcR2e8FJCWNYkGshz57RhC2jHh ee2zpq128yy9wCCg8twoOZgHOY/cmONxBpuyCAMo+HV3RF7hr+mZyfsw/7Y6D8Yc xwIvAEsTCvoLAjbAvcDhWhwaPwpvG+IfOsrkJtZII0VtkV3d+0vsDNlG5x6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFT3vJElMRLSFmOcuM/cidCswp68wHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHczpAqr9ZfYbPXZUuqM1nlzI1INeSJB1mcq FJlJdhjPIJMSFnXx6/5YV5YpzK24a7FR86n3yXzb4VD5r7HRbsJ4VS7bO3ehYKbY Zp2fFyQvgZ5LzS2ZFNNJgA4QmcUqhm7q+YrPXMpo7FbXLG9KePQCTrUBKfCiQU2x hujsU7d+WXiI5TvIaP08aaRP2VvNZsSwCgQg9Een0dP0XOOh5/HVIISZWAgJz+km WCt0DPVqX8yT904AwjgaAFP1SzWZ6LKbPLrMxgbHu1yh4S7UqzK9I6bbvSdzlpu0 wezvhHckZLEtbmpa3PMGtQsYxxsuVccue3t+MFrv9b6fil0ELTQ= -----END CERTIFICATE-----Generated at Fri Jul 24 07:42:33 2026 by rpki-client