$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft File: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft (raw, json) Hash identifier: GJLG3zYxJKwCsv/K21QQjS6QonqQ3LFjjG1kugUTm1w= Subject key identifier: A3:F1:5B:A5:52:22:4E:F1:40:28:EC:9A:2D:82:86:E0:B0:29:7D:B4 Authority key identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 Certificate issuer: /CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Certificate serial: 62E1473C1F6B9BB9472C9B39166DDF298949A541 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft Manifest number: FE Signing time: Tue 10 Nov 2026 10:59:45 +0000 Manifest this update: Tue 10 Nov 2026 10:54:45 +0000 Manifest next update: Wed 11 Nov 2026 14:46:45 +0000 Files and hashes: 1: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl (hash: Z3osOluLi3GOT5O/hoSkG3FT628JRjRAK7m50cTzckI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e1:47:3c:1f:6b:9b:b9:47:2c:9b:39:16:6d:df:29:89:49:a5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Validity Not Before: Nov 10 10:54:45 2026 GMT Not After : Nov 11 14:46:45 2026 GMT Subject: CN=A3F15BA552224EF14028EC9A2D8286E0B0297DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:68:b3:63:89:8c:f9:af:28:42:fc:71:f4: 2d:69:7f:ca:f0:5a:24:f2:36:d6:d2:a2:b4:fa:cd: 61:d4:45:f0:f3:d9:50:6a:45:9f:3e:1e:f2:ae:b8: 94:3a:58:ae:60:f6:b3:07:82:4c:21:0e:ac:30:c0: 99:cb:0e:95:9b:55:8a:aa:47:31:57:a0:74:ac:7a: 3b:49:42:d7:4f:5d:78:f4:42:68:16:07:f0:d0:95: 71:22:39:36:64:df:e2:9d:f5:0b:b1:a8:9e:4c:f2: 79:3d:96:b8:7f:30:be:b1:51:97:28:94:fa:82:7a: b7:fe:cf:8c:15:2f:28:0d:1a:62:10:b5:de:02:a6: b7:ab:ea:dc:c7:47:45:30:37:4f:33:bc:66:9a:f1: 38:e4:85:fc:cb:09:b6:8d:01:ff:22:1b:e1:08:f7: 4d:63:cf:14:fa:43:bf:0b:0a:a0:7b:9c:1c:1e:25: b6:3d:ed:76:a0:91:54:d9:3b:f9:29:f4:da:89:78: 10:58:68:d9:b4:36:0a:05:79:74:25:8d:13:85:4d: f0:b0:41:ae:e5:52:72:73:85:03:69:1d:f1:e8:08: 3e:22:64:e1:8f:8e:c4:fe:ae:e1:34:a3:82:4d:69: ce:44:72:91:14:0a:fa:fe:6e:76:de:67:1e:6d:c2: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:5B:A5:52:22:4E:F1:40:28:EC:9A:2D:82:86:E0:B0:29:7D:B4 X509v3 Authority Key Identifier: keyid:7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9b:dc:13:7f:c8:06:e0:d7:df:7b:c2:db:14:28:8a:03:33: f4:9f:97:63:32:44:13:ee:4a:25:a9:4c:8e:2b:db:85:0d:c6: 32:c6:55:ca:a7:20:6a:d5:65:02:be:3f:d0:e9:76:e4:cd:a4: e4:f2:b7:6d:46:d8:1f:5f:4b:4d:2b:92:08:36:81:e4:f8:80: 61:d2:48:e9:1b:52:4e:72:f8:2c:99:c4:af:89:b9:7a:86:ad: 5f:04:16:a1:1c:9a:de:0f:85:4f:fd:08:11:53:92:5b:2a:b4: 85:60:3f:32:66:07:1e:92:55:c0:50:11:c3:ec:4f:e9:e9:4d: fa:4a:76:05:c2:5b:ff:3f:b1:fc:9a:2b:d6:12:c9:e3:14:b8: 23:2b:98:ec:e9:d3:59:ae:85:2a:55:d8:1e:58:d5:db:a2:96: 25:04:6d:38:55:79:f0:46:71:ba:13:a3:7b:45:77:c0:62:28: b7:09:95:95:c1:7b:1a:70:aa:02:9f:09:c3:ec:0b:ee:6b:9f: 8c:1d:83:0c:b1:ed:dc:cd:1e:f0:70:bb:dc:1b:22:99:d2:7e: 37:8b:e2:7c:ef:a2:29:07:70:06:6f:c4:0a:e5:e6:bf:47:05: 8f:ff:65:db:75:07:15:7a:11:0b:b1:04:12:e2:04:80:36:3f: 24:ca:94:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuFHPB9rm7lHLJs5Fm3fKYlJpUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2 QjgwQkYzMjAeFw0yNjExMTAxMDU0NDVaFw0yNjExMTExNDQ2NDVaMDMxMTAvBgNV BAMTKEEzRjE1QkE1NTIyMjRFRjE0MDI4RUM5QTJEODI4NkUwQjAyOTdEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsGizY4mM+a8oQvxx9C1pf8rw WiTyNtbSorT6zWHURfDz2VBqRZ8+HvKuuJQ6WK5g9rMHgkwhDqwwwJnLDpWbVYqq RzFXoHSsejtJQtdPXXj0QmgWB/DQlXEiOTZk3+Kd9QuxqJ5M8nk9lrh/ML6xUZco lPqCerf+z4wVLygNGmIQtd4Cprer6tzHR0UwN08zvGaa8TjkhfzLCbaNAf8iG+EI 901jzxT6Q78LCqB7nBweJbY97XagkVTZO/kp9NqJeBBYaNm0NgoFeXQljROFTfCw Qa7lUnJzhQNpHfHoCD4iZOGPjsT+ruE0o4JNac5EcpEUCvr+bnbeZx5twh7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/FbpVIiTvFAKOyaLYKG4LApfbQwHwYDVR0j BBgwFoAUe1+CB7Ic0Z9xU9K7oZ5qd2uAvzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmYjkwYjEtYjY4Zi00NDYzLWExYmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdC MjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2QjgwQkYzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjVGODIwN0IyMUNEMTlGNzE1M0QyQkJBMTlFNkE3NzZCODBC RjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZB Nzc2QjgwQkYzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+b3BN/yAbg1997wtsUKIoDM/Sfl2MyRBPu SiWpTI4r24UNxjLGVcqnIGrVZQK+P9DpduTNpOTyt21G2B9fS00rkgg2geT4gGHS SOkbUk5y+CyZxK+JuXqGrV8EFqEcmt4PhU/9CBFTklsqtIVgPzJmBx6SVcBQEcPs T+npTfpKdgXCW/8/sfyaK9YSyeMUuCMrmOzp01muhSpV2B5Y1duiliUEbThVefBG cboTo3tFd8BiKLcJlZXBexpwqgKfCcPsC+5rn4wdgwyx7dzNHvBwu9wbIpnSfjeL 4nzvoikHcAZvxArl5r9HBY//Zdt1BxV6EQuxBBLiBIA2PyTKlHk= -----END CERTIFICATE-----Generated at Tue Nov 10 15:01:44 2026 by rpki-client