$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft (raw, json) Hash identifier: XMLIwUBJZKQZAXujQ66EH8RO9NeDMQfOdy1GbQWOV/0= Subject key identifier: E7:C6:B4:D1:EA:00:9F:18:6E:E8:B4:25:7E:74:13:13:5D:D8:76:BF Authority key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Certificate issuer: /CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Certificate serial: 3E217F91B217B5CC693F77136A9FA948AC402B55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft Manifest number: C1 Signing time: Sat 26 Sep 2026 04:10:31 +0000 Manifest this update: Sat 26 Sep 2026 04:05:31 +0000 Manifest next update: Sun 27 Sep 2026 06:11:31 +0000 Files and hashes: 1: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl (hash: h+g27Pv4eWmfhTBKwr5ScPpr7xzh/WNcCs7CgITkRC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:21:7f:91:b2:17:b5:cc:69:3f:77:13:6a:9f:a9:48:ac:40:2b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Validity Not Before: Sep 26 04:05:31 2026 GMT Not After : Sep 27 06:11:31 2026 GMT Subject: CN=E7C6B4D1EA009F186EE8B4257E7413135DD876BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:bf:0c:88:08:5b:a5:3c:e7:82:29:37:74: 1f:0f:60:27:56:5c:b2:71:14:0c:fc:b0:f0:2c:81: b5:98:99:32:00:93:51:75:31:e7:44:9b:84:d0:71: 18:98:7a:e9:0f:c9:19:c6:6d:4b:1a:c6:71:51:eb: 8b:d3:48:ff:d0:af:98:48:f4:dd:af:52:ab:43:cb: 65:f4:aa:9b:0b:32:96:b9:57:40:7b:38:3b:cf:d2: 08:80:bb:43:19:3d:5c:a0:c1:b7:f9:db:59:10:ff: 5d:6c:72:76:f3:a0:76:e0:ff:97:cc:27:e2:7a:33: ef:d4:98:67:00:56:2e:86:7b:e3:9d:66:89:a3:3e: c6:72:7d:51:6e:36:f0:b2:f1:fb:c1:d7:d0:9c:d7: de:d3:a4:19:71:1d:9d:b2:4a:3e:f0:94:e3:d1:63: a5:de:23:7d:02:e1:79:15:70:15:92:b7:59:23:46: c7:c8:06:7b:fa:a8:4f:aa:c1:a6:34:4a:10:b4:85: 22:0b:f6:27:93:9e:5f:fe:85:4d:ac:dc:a8:14:f6: 01:40:18:f6:65:4d:5a:31:62:0e:d7:c0:15:2d:82: e6:13:4b:5b:a8:5b:ad:28:15:b4:60:df:1e:31:ef: fc:95:b5:43:bc:0f:df:ec:c6:ae:9f:e2:34:a3:19: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:B4:D1:EA:00:9F:18:6E:E8:B4:25:7E:74:13:13:5D:D8:76:BF X509v3 Authority Key Identifier: keyid:C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b3:79:c9:ef:b8:43:0a:56:77:5b:73:30:9e:9b:bf:e9:1e: 1a:bb:14:90:66:0a:92:55:95:65:80:ce:e4:90:8d:75:50:43: ed:82:c3:17:32:a6:33:e1:b3:43:81:38:81:ec:9f:23:03:72: d6:d7:e1:af:43:34:43:a7:a8:24:91:fc:eb:99:1a:c9:00:06: 5c:12:f1:24:d5:1e:99:34:2f:92:04:12:1b:07:bd:7f:7d:d1: 84:a2:e8:4b:54:f9:b4:d2:0e:6a:6c:d8:bb:6d:b0:bc:6b:1e: 82:ef:3a:44:8d:f8:ca:bd:aa:00:f3:69:58:35:81:f4:33:92: 9f:62:21:9d:e2:d0:ad:28:df:54:e7:69:a5:8e:bc:89:ee:b5: 9e:c9:6e:bd:15:cb:1f:35:2d:c7:29:3e:ba:ae:8b:da:fe:f5: 22:6a:eb:d2:24:96:00:ce:9f:a3:cc:d1:f9:42:de:41:61:74: 87:a6:56:a4:06:47:32:93:6f:27:37:a8:cb:f6:00:4f:05:8f: 14:67:35:32:d7:6d:bd:ad:32:b5:8c:06:44:63:b2:9e:a3:85: 36:50:84:99:bc:1c:ce:b0:a9:30:fa:5f:7f:2b:a7:e0:74:6f: 4a:80:d0:63:28:98:a0:cb:04:17:15:29:49:50:24:40:48:b9: f4:ff:c9:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiF/kbIXtcxpP3cTap+pSKxAK1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5 RjhBREEwMTAeFw0yNjA5MjYwNDA1MzFaFw0yNjA5MjcwNjExMzFaMDMxMTAvBgNV BAMTKEU3QzZCNEQxRUEwMDlGMTg2RUU4QjQyNTdFNzQxMzEzNUREODc2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UL8MiAhbpTzngik3dB8PYCdW XLJxFAz8sPAsgbWYmTIAk1F1MedEm4TQcRiYeukPyRnGbUsaxnFR64vTSP/Qr5hI 9N2vUqtDy2X0qpsLMpa5V0B7ODvP0giAu0MZPVygwbf521kQ/11scnbzoHbg/5fM J+J6M+/UmGcAVi6Ge+OdZomjPsZyfVFuNvCy8fvB19Cc197TpBlxHZ2ySj7wlOPR Y6XeI30C4XkVcBWSt1kjRsfIBnv6qE+qwaY0ShC0hSIL9ieTnl/+hU2s3KgU9gFA GPZlTVoxYg7XwBUtguYTS1uoW60oFbRg3x4x7/yVtUO8D9/sxq6f4jSjGU+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58a00eoAnxhu6LQlfnQTE13Ydr8wHwYDVR0j BBgwFoAUx95gJczVaLcl0V0fn/owCJ+K2gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0MGY2NzItNzZkNC00MTU4LWFlZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVD Q0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5RjhBREEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0RFNjAyNUNDRDU2OEI3MjVEMTVEMUY5RkZBMzAwODlGOEFE QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMw MDg5RjhBREEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmzecnvuEMKVndbczCem7/pHhq7FJBmCpJV lWWAzuSQjXVQQ+2CwxcypjPhs0OBOIHsnyMDctbX4a9DNEOnqCSR/OuZGskABlwS 8STVHpk0L5IEEhsHvX990YSi6EtU+bTSDmps2LttsLxrHoLvOkSN+Mq9qgDzaVg1 gfQzkp9iIZ3i0K0o31TnaaWOvInutZ7Jbr0Vyx81LccpPrqui9r+9SJq69IklgDO n6PM0flC3kFhdIemVqQGRzKTbyc3qMv2AE8FjxRnNTLXbb2tMrWMBkRjsp6jhTZQ hJm8HM6wqTD6X38rp+B0b0qA0GMomKDLBBcVKUlQJEBIufT/yUM= -----END CERTIFICATE-----Generated at Sat Sep 26 09:05:33 2026 by rpki-client