$ rpki-client -vvf rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft File: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft (raw, json) Hash identifier: GEgdIsWMuqYWp5Rj1cNQWKOaeDsca0DlxlREJo9+CAI= Subject key identifier: D7:16:E6:84:01:05:A6:EB:B2:EF:E3:9D:3E:1C:CE:2A:24:E3:30:55 Authority key identifier: 7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E Certificate issuer: /CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Certificate serial: 2FB6BFEE45A7AAD295CCD39C6D2956DBF7ACDA22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft Manifest number: 3C Signing time: Wed 17 Jun 2026 02:40:59 +0000 Manifest this update: Wed 17 Jun 2026 02:35:59 +0000 Manifest next update: Thu 18 Jun 2026 06:36:59 +0000 Files and hashes: 1: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl (hash: T+fmfxHxkawRFCimMR+1z68Z/kwsxoLtCDoTv+Gctd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b6:bf:ee:45:a7:aa:d2:95:cc:d3:9c:6d:29:56:db:f7:ac:da:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Validity Not Before: Jun 17 02:35:59 2026 GMT Not After : Jun 18 06:36:59 2026 GMT Subject: CN=D716E6840105A6EBB2EFE39D3E1CCE2A24E33055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:c1:99:c2:32:ee:bb:71:fb:8d:98:82:a7: f4:bc:32:74:ac:4f:b0:44:e9:af:4b:aa:9c:9a:31: 92:2a:fa:1a:63:ca:95:3f:4c:2e:95:68:a4:39:9a: 69:e7:4c:3c:21:fc:97:81:dd:f2:cf:4f:47:ad:f8: 82:ef:e4:be:52:4a:3a:07:18:c2:0c:9f:85:8f:35: 38:99:48:e5:83:54:c7:f6:0b:f1:c3:23:0b:dc:a8: 68:8f:37:f8:dd:85:c3:12:47:54:a8:f4:ee:3b:54: 65:aa:d8:52:f4:2a:8a:c6:be:8f:da:bc:ef:55:0d: 38:33:9f:71:86:37:63:5f:0a:0c:6b:41:8e:45:50: d7:26:14:d7:4f:bb:26:dd:38:f6:22:fb:28:a4:27: 3d:3e:92:38:64:de:f4:ad:d8:94:5e:d8:b0:56:f8: 72:f2:77:de:27:40:7a:bf:bb:d4:3c:8f:74:52:a8: 3a:2c:1c:4f:5d:48:28:32:57:af:91:14:21:11:8f: a7:45:f9:e9:e9:f3:5c:45:c4:ad:63:77:ef:05:c0: 37:a9:c7:8d:d0:79:c7:7d:86:49:10:cc:70:ab:4e: 66:54:0a:a7:7a:3d:35:9e:b1:4e:b0:2e:b7:76:57: 82:b6:22:e8:59:8a:f0:c4:8a:42:35:d0:62:be:95: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:E6:84:01:05:A6:EB:B2:EF:E3:9D:3E:1C:CE:2A:24:E3:30:55 X509v3 Authority Key Identifier: keyid:7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5e:24:29:e2:8d:b6:e6:cf:e3:e0:7a:18:20:c0:f8:f0:02: 4a:d1:51:b2:1d:c4:1f:38:20:c1:20:f8:d9:22:83:08:bf:e0: 7a:f2:7a:2c:ea:0c:d2:68:bb:88:86:60:df:d9:65:d3:20:8d: 4a:f6:a1:d5:44:5c:1b:c2:59:35:cc:43:63:af:33:38:50:63: 7c:fd:01:3a:e5:03:af:43:9c:92:fb:8c:c3:b7:e6:1b:14:82: d2:f2:60:15:ca:54:95:27:67:18:73:15:6d:ed:41:78:50:22: 95:8d:00:ca:f1:f1:36:7d:71:5b:8f:36:9e:4d:c1:1d:e7:f7: f1:a4:52:b8:c2:04:93:c2:78:cb:fd:ee:d1:f2:e0:be:23:64: ca:55:d3:68:69:1d:ea:83:a6:2d:23:a2:fa:a0:f9:d0:dd:bc: 8c:d5:68:2c:14:83:41:c4:59:dd:a9:e0:f6:e3:5d:1d:36:7a: 4c:ee:80:93:cf:bd:a8:c4:7f:88:e5:44:2c:0d:ff:78:7d:d4: 3a:0c:61:29:59:4a:05:67:09:06:b0:d4:b2:c7:1d:d8:ed:ac: 21:25:69:85:d0:fd:c5:6b:b8:f9:fa:d6:6b:4d:d5:8c:b4:7e: 8b:58:41:89:4e:a3:6e:61:6f:43:08:49:54:94:a5:ed:65:bb: 82:1e:79:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7a/7kWnqtKVzNOcbSlW2/es2iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDREQzU2 REI3NTY5RTAeFw0yNjA2MTcwMjM1NTlaFw0yNjA2MTgwNjM2NTlaMDMxMTAvBgNV BAMTKEQ3MTZFNjg0MDEwNUE2RUJCMkVGRTM5RDNFMUNDRTJBMjRFMzMwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAU8GZwjLuu3H7jZiCp/S8MnSs T7BE6a9LqpyaMZIq+hpjypU/TC6VaKQ5mmnnTDwh/JeB3fLPT0et+ILv5L5SSjoH GMIMn4WPNTiZSOWDVMf2C/HDIwvcqGiPN/jdhcMSR1So9O47VGWq2FL0KorGvo/a vO9VDTgzn3GGN2NfCgxrQY5FUNcmFNdPuybdOPYi+yikJz0+kjhk3vSt2JRe2LBW +HLyd94nQHq/u9Q8j3RSqDosHE9dSCgyV6+RFCERj6dF+enp81xFxK1jd+8FwDep x43Qecd9hkkQzHCrTmZUCqd6PTWesU6wLrd2V4K2IuhZivDEikI10GK+lQ4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xbmhAEFpuuy7+OdPhzOKiTjMFUwHwYDVR0j BBgwFoAUfY8MBeosneMzeg7S6ZBNxW23Vp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJlOWY4ZDgtNmVmOS00NzJmLTg0ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVF QTJDOURFMzMzN0EwRUQyRTk5MDREQzU2REI3NTY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDhGMEMwNUVBMkM5REUzMzM3QTBFRDJFOTkwNERDNTZEQjc1 NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDRE QzU2REI3NTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5eJCnijbbmz+PgehggwPjwAkrRUbIdxB84 IMEg+Nkigwi/4HryeizqDNJou4iGYN/ZZdMgjUr2odVEXBvCWTXMQ2OvMzhQY3z9 ATrlA69DnJL7jMO35hsUgtLyYBXKVJUnZxhzFW3tQXhQIpWNAMrx8TZ9cVuPNp5N wR3n9/GkUrjCBJPCeMv97tHy4L4jZMpV02hpHeqDpi0jovqg+dDdvIzVaCwUg0HE Wd2p4PbjXR02ekzugJPPvajEf4jlRCwN/3h91DoMYSlZSgVnCQaw1LLHHdjtrCEl aYXQ/cVruPn61mtN1Yy0fotYQYlOo25hb0MISVSUpe1lu4IeeYM= -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:39 2026 by rpki-client