$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: yutwyc65nQ0u6s87lOhCrxGYzHN+SUk+bTKbHV8pgCk= Subject key identifier: 10:DA:41:DA:BD:40:D4:DB:FC:1A:00:20:F9:B7:EC:D4:C2:15:51:C4 Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 07B5F28A110D0DA760FDEA022FF82BCAEC4294B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:46:45 +0000 Manifest this update: Wed 23 Sep 2026 20:41:45 +0000 Manifest next update: Thu 24 Sep 2026 22:32:45 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: XovQljZ9z82bW8qj6e3GypZ0r4UTdnJnjFkf2XGK3K0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b5:f2:8a:11:0d:0d:a7:60:fd:ea:02:2f:f8:2b:ca:ec:42:94:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: Sep 23 20:41:45 2026 GMT Not After : Sep 24 22:32:45 2026 GMT Subject: CN=10DA41DABD40D4DBFC1A0020F9B7ECD4C21551C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:b8:b8:f3:e5:33:df:42:b2:08:49:39:2b: 36:47:be:a8:9e:0b:36:db:43:c3:d0:6e:3f:1c:b8: c3:44:80:1e:cd:71:41:48:9f:94:58:ba:d5:85:7c: 21:fa:2c:65:e8:57:6d:e2:bc:3c:15:46:87:33:06: af:b6:0c:00:1a:63:db:e2:0a:fc:5b:e0:37:a9:93: eb:ff:5d:51:9c:bb:8a:01:25:ed:39:79:0e:10:2b: e3:b1:ad:06:2b:22:d9:01:1c:ea:90:ef:2d:0f:2d: 4e:bb:c9:bd:5f:6b:78:55:d3:fe:b8:d4:c9:7f:e4: 65:32:8f:81:59:03:60:cf:17:22:2c:15:58:72:40: df:59:e7:5a:4a:1c:02:3e:0d:4d:96:15:a0:fa:2e: 13:c6:4e:ce:38:25:54:0d:ba:18:ba:a6:aa:38:5a: b5:5b:32:cc:2c:d3:4b:bc:27:ef:98:59:db:ee:12: 89:42:65:ef:7c:03:da:0f:f1:19:be:ea:c0:a8:ba: 09:e2:fc:a5:48:ad:9a:d1:9e:0f:36:65:45:1e:40: be:ac:59:c1:76:9a:27:94:14:fd:cf:cb:a2:69:46: de:37:c4:1e:ad:d0:06:7b:ea:bf:d1:a7:18:e4:d7: cd:a4:48:89:71:f7:2e:3f:f7:9e:3b:76:3a:9b:c8: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DA:41:DA:BD:40:D4:DB:FC:1A:00:20:F9:B7:EC:D4:C2:15:51:C4 X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:de:4e:d2:f6:c1:64:6a:9e:3b:b7:1c:1a:17:f8:2a:6b:a8: 7d:40:3b:1c:5f:7f:15:87:7a:47:fa:70:43:43:8f:c3:d2:f5: 79:54:a4:2b:84:5b:4b:8d:e5:94:e5:4b:bc:9a:ae:d1:6d:b9: a4:9c:04:2a:3d:c3:cc:a1:2e:d6:17:7f:b9:26:f0:6a:1b:f4: 34:17:bc:ba:23:15:ad:59:38:bf:3f:26:d0:e4:a2:60:9b:7a: a4:41:97:b7:6c:3a:3f:3d:a1:d3:b0:ed:eb:3a:80:6c:96:b4: 3f:9f:9d:9c:ed:37:0d:8b:4b:3b:1d:29:72:b3:7e:4b:ae:03: 2c:69:7a:60:8a:e9:4d:67:53:9e:4a:38:40:35:52:13:ec:00: 8a:0a:ef:9a:02:34:f1:77:95:1a:2b:13:e7:d0:cf:e6:77:d7: 50:a3:b2:33:78:52:1c:b1:ef:19:25:19:b8:9f:f8:9d:e3:91: fc:5a:54:8f:a7:b6:7c:f3:10:e3:eb:fd:b3:f8:47:ea:04:30: 78:95:44:78:57:79:2c:cc:c2:71:8c:99:4e:cf:5b:7f:03:f9: f8:a8:1f:61:a2:46:bb:82:aa:f9:40:5c:b4:2a:cd:95:41:5d: df:d1:64:4a:a9:10:c1:2e:29:11:bc:a2:c2:f3:ab:8c:11:eb: 7a:7a:f5:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7XyihENDadg/eoCL/gryuxClLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA5MjMyMDQxNDVaFw0yNjA5MjQyMjMyNDVaMDMxMTAvBgNV BAMTKDEwREE0MURBQkQ0MEQ0REJGQzFBMDAyMEY5QjdFQ0Q0QzIxNTUxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHLi48+Uz30KyCEk5KzZHvqie CzbbQ8PQbj8cuMNEgB7NcUFIn5RYutWFfCH6LGXoV23ivDwVRoczBq+2DAAaY9vi Cvxb4Depk+v/XVGcu4oBJe05eQ4QK+OxrQYrItkBHOqQ7y0PLU67yb1fa3hV0/64 1Ml/5GUyj4FZA2DPFyIsFVhyQN9Z51pKHAI+DU2WFaD6LhPGTs44JVQNuhi6pqo4 WrVbMsws00u8J++YWdvuEolCZe98A9oP8Rm+6sCougni/KVIrZrRng82ZUUeQL6s WcF2mieUFP3Py6JpRt43xB6t0AZ76r/Rpxjk182kSIlx9y4/9547djqbyH9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUENpB2r1A1Nv8GgAg+bfs1MIVUcQwHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPeTtL2wWRqnju3HBoX+CprqH1AOxxffxWH ekf6cENDj8PS9XlUpCuEW0uN5ZTlS7yartFtuaScBCo9w8yhLtYXf7km8Gob9DQX vLojFa1ZOL8/JtDkomCbeqRBl7dsOj89odOw7es6gGyWtD+fnZztNw2LSzsdKXKz fkuuAyxpemCK6U1nU55KOEA1UhPsAIoK75oCNPF3lRorE+fQz+Z311CjsjN4Uhyx 7xklGbif+J3jkfxaVI+ntnzzEOPr/bP4R+oEMHiVRHhXeSzMwnGMmU7PW38D+fio H2GiRruCqvlAXLQqzZVBXd/RZEqpEMEuKRG8osLzq4wR63p69Ro= -----END CERTIFICATE-----Generated at Thu Sep 24 03:44:30 2026 by rpki-client