$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft File: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft (raw, json) Hash identifier: fVSQ+M2CBxI57y3XKSeWySohGK5tYdKdVDUnavo0q0Q= Subject key identifier: 7B:2A:82:BD:19:A3:B8:26:6C:81:B1:5B:FB:33:B6:EB:4D:F8:0B:7F Authority key identifier: 7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E Certificate issuer: /CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Certificate serial: 720D71917E22E1DDD538BFD1B7D7ED64C3273FAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft Manifest number: BB Signing time: Mon 21 Sep 2026 02:24:30 +0000 Manifest this update: Mon 21 Sep 2026 02:19:30 +0000 Manifest next update: Tue 22 Sep 2026 04:23:30 +0000 Files and hashes: 1: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl (hash: Jo5GrR8WIjM7Cg+b3CbhUXPZM03CmXvt/INfRTbRocU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0d:71:91:7e:22:e1:dd:d5:38:bf:d1:b7:d7:ed:64:c3:27:3f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Validity Not Before: Sep 21 02:19:30 2026 GMT Not After : Sep 22 04:23:30 2026 GMT Subject: CN=7B2A82BD19A3B8266C81B15BFB33B6EB4DF80B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:d8:1d:2f:30:bf:60:d9:50:dc:b4:87:51: 9c:ca:c5:54:5d:37:3d:d1:88:fa:e7:e6:ab:ef:2b: 4c:e2:6d:c0:9d:00:31:88:21:26:15:94:d9:68:5e: 5a:46:9c:77:62:d5:9a:0e:68:fe:ae:82:5a:88:ba: a7:1f:ea:a7:14:46:3d:2a:cd:33:ac:29:e7:a4:fc: 9e:d3:15:71:0b:e6:45:1d:00:bd:ef:97:d4:ba:57: f5:e6:68:b1:15:3b:92:26:85:f9:7a:7e:7d:41:48: 25:37:d2:02:f9:45:0c:21:78:64:32:e9:6f:74:33: 2e:ac:a1:3d:95:5e:00:22:ff:2a:24:1d:95:52:8a: e5:2d:5b:39:d8:d3:7f:75:d9:e0:bf:83:50:7a:8c: 04:80:f5:6c:d7:0a:ca:e5:a2:3a:0c:6b:4c:3c:cb: 74:0c:d0:87:32:4c:09:89:d4:c9:27:9e:36:4d:e2: d1:18:73:b3:9c:9f:a7:eb:ff:64:d6:8e:f0:79:6c: aa:87:21:bc:32:a6:55:c9:d9:d6:7e:3d:90:f1:08: b1:d2:04:0a:22:1d:0a:a8:5c:93:05:be:1b:b3:9c: 45:e3:f8:5a:6a:b6:d8:e4:7a:51:17:3b:2e:74:47: 33:c2:c2:b2:a8:24:7c:b3:03:13:3c:e6:4d:95:aa: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2A:82:BD:19:A3:B8:26:6C:81:B1:5B:FB:33:B6:EB:4D:F8:0B:7F X509v3 Authority Key Identifier: keyid:7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d0:b4:de:76:fc:30:68:91:d9:c1:6a:d3:3e:24:54:2c:9d: 32:c2:c8:ba:b9:59:90:d7:13:5e:f3:5c:c5:99:ab:80:fd:af: 0d:48:de:bc:b5:6a:4a:ba:db:be:09:be:ec:eb:16:75:ac:e2: 1f:22:12:fb:3f:34:ef:ab:f2:e4:87:e3:e9:d4:6d:1c:d5:5d: 90:91:1c:fc:17:c4:34:ed:59:bf:a2:38:24:24:f2:ff:d4:c3: 5a:d1:a6:33:65:f0:fb:39:e4:e6:09:ae:4b:db:e2:31:30:14: 97:88:65:af:bd:f2:78:2e:12:e0:7a:c4:18:b2:80:f7:ec:d3: 1b:51:e1:9b:3a:2c:96:e7:58:82:02:77:fa:fd:28:d5:56:df: 33:3e:79:92:b6:32:5b:66:0b:5a:0c:fb:43:4f:8e:17:4e:42: 64:f8:6d:de:b5:8d:07:f5:4e:a8:ce:72:8b:7a:e4:71:0d:be: 49:af:8e:c2:3f:f8:d7:7a:a8:1f:7d:cf:03:fb:6c:30:f3:c0: e9:e0:de:02:65:db:05:e6:5f:0c:17:be:85:fa:ca:7b:c6:88: 4f:54:d5:d2:8d:a5:4b:48:b3:05:62:87:c6:b8:dc:c5:4e:f0: d2:1d:2d:07:fa:59:5c:86:d5:f5:8b:31:3a:ba:ad:8e:79:16: fe:0d:37:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcg1xkX4i4d3VOL/Rt9ftZMMnP64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDREQzU2 REI3NTY5RTAeFw0yNjA5MjEwMjE5MzBaFw0yNjA5MjIwNDIzMzBaMDMxMTAvBgNV BAMTKDdCMkE4MkJEMTlBM0I4MjY2QzgxQjE1QkZCMzNCNkVCNERGODBCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDax9gdLzC/YNlQ3LSHUZzKxVRd Nz3RiPrn5qvvK0zibcCdADGIISYVlNloXlpGnHdi1ZoOaP6uglqIuqcf6qcURj0q zTOsKeek/J7TFXEL5kUdAL3vl9S6V/XmaLEVO5Imhfl6fn1BSCU30gL5RQwheGQy 6W90My6soT2VXgAi/yokHZVSiuUtWznY03912eC/g1B6jASA9WzXCsrlojoMa0w8 y3QM0IcyTAmJ1MknnjZN4tEYc7Ocn6fr/2TWjvB5bKqHIbwyplXJ2dZ+PZDxCLHS BAoiHQqoXJMFvhuznEXj+FpqttjkelEXOy50RzPCwrKoJHyzAxM85k2VquDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyqCvRmjuCZsgbFb+zO26034C38wHwYDVR0j BBgwFoAUfY8MBeosneMzeg7S6ZBNxW23Vp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJlOWY4ZDgtNmVmOS00NzJmLTg0ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVF QTJDOURFMzMzN0EwRUQyRTk5MDREQzU2REI3NTY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDhGMEMwNUVBMkM5REUzMzM3QTBFRDJFOTkwNERDNTZEQjc1 NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDRE QzU2REI3NTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILQtN52/DBokdnBatM+JFQsnTLCyLq5WZDX E17zXMWZq4D9rw1I3ry1akq6274JvuzrFnWs4h8iEvs/NO+r8uSH4+nUbRzVXZCR HPwXxDTtWb+iOCQk8v/Uw1rRpjNl8Ps55OYJrkvb4jEwFJeIZa+98nguEuB6xBiy gPfs0xtR4Zs6LJbnWIICd/r9KNVW3zM+eZK2MltmC1oM+0NPjhdOQmT4bd61jQf1 TqjOcot65HENvkmvjsI/+Nd6qB99zwP7bDDzwOng3gJl2wXmXwwXvoX6ynvGiE9U 1dKNpUtIswVih8a43MVO8NIdLQf6WVyG1fWLMTq6rY55Fv4NNxw= -----END CERTIFICATE-----Generated at Mon Sep 21 15:38:22 2026 by rpki-client