$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft File: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft (raw, json) Hash identifier: OHS/PnonLYA3syT+ePrGxMGCIdCcvrIf/Pa/dyGFg/s= Subject key identifier: 60:A8:6C:E8:3D:A5:66:61:E2:4C:27:6E:12:2D:9A:55:4A:76:0A:BF Authority key identifier: F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A Certificate issuer: /CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A Certificate serial: 7EF2244A8AF0E97E3F0661619DBA0BEC27DB376C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft Manifest number: BE Signing time: Tue 22 Sep 2026 10:55:07 +0000 Manifest this update: Tue 22 Sep 2026 10:50:07 +0000 Manifest next update: Wed 23 Sep 2026 13:12:07 +0000 Files and hashes: 1: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl (hash: fgpINOWPdB5tJyoQId+2safFIoVZpQokSZgyrjjyJfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f2:24:4a:8a:f0:e9:7e:3f:06:61:61:9d:ba:0b:ec:27:db:37:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A Validity Not Before: Sep 22 10:50:07 2026 GMT Not After : Sep 23 13:12:07 2026 GMT Subject: CN=60A86CE83DA56661E24C276E122D9A554A760ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b5:bf:10:1f:bb:ad:93:a5:f5:3f:aa:78:13: a2:92:9c:af:d3:a1:2b:ac:7f:ff:4c:ce:56:44:95: 08:dd:e2:ec:8f:84:61:94:ae:9c:2f:bc:28:74:0c: 53:0c:81:78:4f:57:3c:b9:df:1e:cb:e6:53:24:8e: 50:b8:b3:46:13:46:5c:21:50:23:89:9d:5e:1e:39: e9:92:aa:8b:c5:93:31:b5:34:b3:4e:b8:39:3b:99: 68:40:28:01:ee:de:d2:44:92:76:7a:e7:6e:a5:7e: 39:c0:e2:0f:84:c6:0a:87:72:83:95:51:50:9a:55: 6f:54:58:e6:da:da:45:9b:bd:ca:73:c4:46:4d:53: ec:01:a7:b4:b7:20:40:34:60:c9:ac:28:a9:52:a9: ad:cb:56:77:8e:c8:0c:96:ab:f1:83:d5:94:ca:61: e6:b3:7b:a3:38:c3:c1:fd:4f:03:23:7e:47:44:bc: a7:4a:95:b5:d2:c0:84:72:44:f2:1e:d9:94:11:8c: 0d:5e:fc:21:19:e6:34:86:e4:9e:38:b0:21:cc:35: c9:5a:51:04:90:5b:09:25:25:cb:f0:b3:20:bf:9b: 89:58:4a:46:72:04:a3:5a:96:ab:c8:e2:2f:c9:97: 6a:2b:aa:e0:d1:80:2d:18:18:f8:a4:39:06:7d:66: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A8:6C:E8:3D:A5:66:61:E2:4C:27:6E:12:2D:9A:55:4A:76:0A:BF X509v3 Authority Key Identifier: keyid:F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:71:e8:a9:e5:a9:fe:b9:e4:cc:c1:05:8c:46:2e:82:14:34: fb:6e:ad:d9:82:17:7e:72:eb:46:41:0e:34:7c:39:9f:37:68: c9:6f:d3:75:97:58:5a:87:46:99:80:b9:9a:ba:50:5c:62:a5: ae:dd:3c:52:17:de:f4:db:30:a0:69:44:45:11:2a:74:89:62: da:f4:47:ab:6c:22:4e:fe:0d:3d:f2:83:b1:04:af:6e:80:42: 3b:49:19:88:2e:65:f3:95:b1:8b:a3:6e:57:63:c4:86:ad:66: 3a:a0:1a:c5:9a:f0:86:bf:7e:64:1c:3f:39:20:44:4b:5c:e0: 19:ed:ff:09:f9:67:2f:e3:97:ec:09:e2:37:32:60:b3:5f:ec: f4:cd:7e:78:19:d5:81:c1:b1:98:1b:a2:2c:85:05:19:e9:59: ba:a3:08:88:5a:5d:6c:61:f1:63:d7:fa:eb:3b:11:49:71:bd: 24:e2:41:35:80:bf:24:4d:90:03:6c:cc:35:10:50:d9:21:82: 5d:e8:36:2e:a7:64:25:06:be:76:3d:0a:f6:82:7c:93:7d:7a: 65:89:d7:fd:17:3c:05:3d:6c:b1:38:9a:7e:a0:73:a3:52:97: 32:ce:ab:64:c3:44:32:ec:30:86:e2:55:6a:9b:d9:03:71:06: 23:e0:c4:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvIkSorw6X4/BmFhnboL7CfbN2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdCMDYwNjE4RDQ4ODVBMUQ3QkYxREEzRDI5QkU0NjRG NTFEQ0QwQTAeFw0yNjA5MjIxMDUwMDdaFw0yNjA5MjMxMzEyMDdaMDMxMTAvBgNV BAMTKDYwQTg2Q0U4M0RBNTY2NjFFMjRDMjc2RTEyMkQ5QTU1NEE3NjBBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYtb8QH7utk6X1P6p4E6KSnK/T oSusf/9MzlZElQjd4uyPhGGUrpwvvCh0DFMMgXhPVzy53x7L5lMkjlC4s0YTRlwh UCOJnV4eOemSqovFkzG1NLNOuDk7mWhAKAHu3tJEknZ6526lfjnA4g+ExgqHcoOV UVCaVW9UWOba2kWbvcpzxEZNU+wBp7S3IEA0YMmsKKlSqa3LVneOyAyWq/GD1ZTK Yeaze6M4w8H9TwMjfkdEvKdKlbXSwIRyRPIe2ZQRjA1e/CEZ5jSG5J44sCHMNcla UQSQWwklJcvwsyC/m4lYSkZyBKNalqvI4i/Jl2orquDRgC0YGPikOQZ9Zq47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYKhs6D2lZmHiTCduEi2aVUp2Cr8wHwYDVR0j BBgwFoAU97BgYY1IhaHXvx2j0pvkZPUdzQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiZDBlOTQtODYwMy00NTdmLWI1MzctOTIzMTA4NGJjNDUwLzAvRjdCMDYwNjE4 RDQ4ODVBMUQ3QkYxREEzRDI5QkU0NjRGNTFEQ0QwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GN0IwNjA2MThENDg4NUExRDdCRjFEQTNEMjlCRTQ2NEY1MURD RDBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvRjdCMDYwNjE4RDQ4ODVBMUQ3QkYxREEzRDI5QkU0 NjRGNTFEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1x6Knlqf655MzBBYxGLoIUNPturdmCF35y 60ZBDjR8OZ83aMlv03WXWFqHRpmAuZq6UFxipa7dPFIX3vTbMKBpREURKnSJYtr0 R6tsIk7+DT3yg7EEr26AQjtJGYguZfOVsYujbldjxIatZjqgGsWa8Ia/fmQcPzkg REtc4Bnt/wn5Zy/jl+wJ4jcyYLNf7PTNfngZ1YHBsZgboiyFBRnpWbqjCIhaXWxh 8WPX+us7EUlxvSTiQTWAvyRNkANszDUQUNkhgl3oNi6nZCUGvnY9CvaCfJN9emWJ 1/0XPAU9bLE4mn6gc6NSlzLOq2TDRDLsMIbiVWqb2QNxBiPgxKU= -----END CERTIFICATE-----Generated at Tue Sep 22 16:09:33 2026 by rpki-client