$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft File: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft (raw, json) Hash identifier: WFxl8FmEE6vnBfd7FjsPIi1VoZBmW3ZELoYI704Cq7A= Subject key identifier: DD:22:E5:BC:C9:9C:E4:B0:FE:36:87:ED:E2:AB:7A:71:33:70:F6:1E Authority key identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 Certificate issuer: /CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Certificate serial: 3E64BB1D2ED75BDDA551C02E8A2C77D5D80147C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft Manifest number: BB Signing time: Mon 21 Sep 2026 06:50:01 +0000 Manifest this update: Mon 21 Sep 2026 06:45:01 +0000 Manifest next update: Tue 22 Sep 2026 07:21:01 +0000 Files and hashes: 1: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl (hash: 2Z0F5zgz/dIoJa3RppaHTmwhx+HJEWljiZYR0rOYwVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:64:bb:1d:2e:d7:5b:dd:a5:51:c0:2e:8a:2c:77:d5:d8:01:47:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Validity Not Before: Sep 21 06:45:01 2026 GMT Not After : Sep 22 07:21:01 2026 GMT Subject: CN=DD22E5BCC99CE4B0FE3687EDE2AB7A713370F61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:f0:a3:94:37:1f:11:cb:8a:0f:1b:f8:93: 9e:76:af:fa:81:1b:54:3d:0e:5e:f1:8a:6a:36:06: a1:a0:11:94:e5:90:36:7a:df:fd:e5:8b:61:f5:f9: 1a:5b:9c:b6:4f:e0:58:b2:91:e9:de:18:77:7d:7a: eb:d3:10:b2:3e:35:08:67:d0:2d:51:7d:40:91:65: 1f:a1:70:2f:5d:8d:91:13:0e:33:41:91:84:71:a8: a0:53:8f:fe:f2:6c:22:61:2e:65:78:56:fc:57:7e: c5:c4:90:df:82:60:73:0c:2d:ed:87:c1:5f:e0:0c: 22:50:0c:0b:11:c9:34:e9:04:1f:48:06:be:ba:fc: d2:63:37:b9:bd:28:0b:8f:a4:57:0e:f2:38:cf:28: 09:bf:01:6a:b6:87:25:05:23:f9:26:00:d3:66:cf: b9:b1:3a:c9:00:ce:25:17:35:34:c3:f0:2f:d4:fa: 6d:f5:22:56:6e:90:5e:0c:86:33:1d:27:e0:8d:52: 0f:e2:94:8e:95:d8:e4:69:fd:4f:e9:cb:f8:58:b8: 69:5d:01:92:ff:0b:61:7b:09:5d:7f:24:a3:52:b7: e0:b1:84:5e:01:03:43:bd:3e:b6:03:12:35:d9:5a: b7:9e:19:e1:a6:c8:9d:cf:5a:0e:d3:c7:31:93:0f: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:22:E5:BC:C9:9C:E4:B0:FE:36:87:ED:E2:AB:7A:71:33:70:F6:1E X509v3 Authority Key Identifier: keyid:7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1d:10:31:52:35:61:15:89:7f:91:f3:17:1e:86:4d:6f:6d: 8c:aa:fd:cb:7d:cb:8e:d7:07:bf:55:e7:82:bc:35:20:be:a5: 51:e3:34:cd:74:35:b7:42:08:83:ff:4f:32:42:76:5e:4f:d0: 57:7a:7b:b8:3f:da:86:fd:bc:09:c6:b9:6a:6c:56:14:1d:0e: 57:ad:9f:e1:d5:9b:98:e6:98:e0:fe:fb:62:16:24:01:ff:2f: f5:b5:29:17:19:29:1c:69:c6:6b:6f:bb:45:cb:d1:04:8e:0f: ff:00:98:05:e9:3b:8a:1f:b5:3d:23:6d:62:4b:75:66:1a:8c: ab:80:41:02:01:6a:3e:1a:a0:49:04:51:84:7d:26:7d:d6:08: 34:a2:63:d5:3c:49:93:d4:8e:87:e8:57:29:99:3e:63:1d:b0: 70:38:56:a1:3b:60:e3:3a:92:88:4f:7d:86:52:eb:50:d1:d7: b9:a0:ec:e4:37:e9:57:e7:57:a6:2a:e2:6b:fc:c6:f5:fd:8a: e3:90:9f:64:ba:df:1a:c7:06:3a:df:da:f4:52:f1:e0:70:c1: f7:ea:c2:bf:1d:b7:dc:83:66:45:6e:33:15:92:c6:17:b5:07: b6:2e:bd:e1:82:e6:4d:b8:2c:55:c0:7f:1f:9f:e7:30:5e:3f: 77:c8:88:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmS7HS7XW92lUcAuiix31dgBR8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2 QjgwQkYzMjAeFw0yNjA5MjEwNjQ1MDFaFw0yNjA5MjIwNzIxMDFaMDMxMTAvBgNV BAMTKEREMjJFNUJDQzk5Q0U0QjBGRTM2ODdFREUyQUI3QTcxMzM3MEY2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyc/CjlDcfEcuKDxv4k552r/qB G1Q9Dl7ximo2BqGgEZTlkDZ63/3li2H1+RpbnLZP4FiykeneGHd9euvTELI+NQhn 0C1RfUCRZR+hcC9djZETDjNBkYRxqKBTj/7ybCJhLmV4VvxXfsXEkN+CYHMMLe2H wV/gDCJQDAsRyTTpBB9IBr66/NJjN7m9KAuPpFcO8jjPKAm/AWq2hyUFI/kmANNm z7mxOskAziUXNTTD8C/U+m31IlZukF4MhjMdJ+CNUg/ilI6V2ORp/U/py/hYuGld AZL/C2F7CV1/JKNSt+CxhF4BA0O9PrYDEjXZWreeGeGmyJ3PWg7TxzGTDzDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3SLlvMmc5LD+Noft4qt6cTNw9h4wHwYDVR0j BBgwFoAUe1+CB7Ic0Z9xU9K7oZ5qd2uAvzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVmYjkwYjEtYjY4Zi00NDYzLWExYmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdC MjFDRDE5RjcxNTNEMkJCQTE5RTZBNzc2QjgwQkYzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjVGODIwN0IyMUNEMTlGNzE1M0QyQkJBMTlFNkE3NzZCODBC RjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvN0I1RjgyMDdCMjFDRDE5RjcxNTNEMkJCQTE5RTZB Nzc2QjgwQkYzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwdEDFSNWEViX+R8xcehk1vbYyq/ct9y47X B79V54K8NSC+pVHjNM10NbdCCIP/TzJCdl5P0Fd6e7g/2ob9vAnGuWpsVhQdDlet n+HVm5jmmOD++2IWJAH/L/W1KRcZKRxpxmtvu0XL0QSOD/8AmAXpO4oftT0jbWJL dWYajKuAQQIBaj4aoEkEUYR9Jn3WCDSiY9U8SZPUjofoVymZPmMdsHA4VqE7YOM6 kohPfYZS61DR17mg7OQ36VfnV6Yq4mv8xvX9iuOQn2S63xrHBjrf2vRS8eBwwffq wr8dt9yDZkVuMxWSxhe1B7YuveGC5k24LFXAfx+f5zBeP3fIiFI= -----END CERTIFICATE-----Generated at Mon Sep 21 12:24:52 2026 by rpki-client