$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft (raw, json) Hash identifier: CEM4vbpQv/HAGbEEStod9QOzh4IThGZ1+xpNIYX10fM= Subject key identifier: 97:45:96:F4:2F:BF:A5:7F:A9:72:EC:E0:82:02:0E:04:8C:4A:40:3A Authority key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Certificate issuer: /CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Certificate serial: 176CEA770ED9156903782007652B3E0BF394A004 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:32:33 +0000 Manifest this update: Tue 16 Jun 2026 23:27:33 +0000 Manifest next update: Thu 18 Jun 2026 01:21:33 +0000 Files and hashes: 1: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl (hash: EH0ENWmbrx0gop8Lh4kDYqNju8A0zkRzcnmJV1KeZgg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6c:ea:77:0e:d9:15:69:03:78:20:07:65:2b:3e:0b:f3:94:a0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Validity Not Before: Jun 16 23:27:33 2026 GMT Not After : Jun 18 01:21:33 2026 GMT Subject: CN=974596F42FBFA57FA972ECE082020E048C4A403A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:4e:fe:34:b9:9f:a6:61:3b:27:13:e0:37: 07:0f:02:1e:30:0b:85:b3:ed:1c:16:03:f7:1a:64: c8:2b:42:3f:72:b8:35:d0:95:3d:bc:82:d7:98:31: 2f:7b:17:12:c9:12:1d:df:93:c9:3a:bf:5f:bd:c2: a0:5f:28:7b:14:1f:af:89:76:44:16:aa:13:3a:f0: ec:9e:e8:9a:f3:30:0b:6d:0c:f6:64:93:c6:6b:8e: f2:6b:3b:1b:ea:b4:29:ab:f3:54:fc:a5:89:4c:7d: 40:07:ff:20:05:4b:ff:68:49:43:a1:f6:e3:36:e5: ec:9b:03:f6:4f:32:57:84:0c:d2:d5:75:bb:63:26: 8a:50:6f:cf:d5:0a:9d:dd:25:5b:69:7c:3c:31:02: 46:5a:e1:5e:0a:e3:ea:19:98:25:7b:af:a0:aa:e7: 5e:6c:16:0a:41:37:47:8c:31:9d:bf:da:a7:0f:b4: eb:ec:96:3b:19:a2:30:ad:50:e3:f4:3e:e0:00:5d: 79:99:67:72:79:6f:6f:c8:d8:2f:24:87:17:15:63: ec:40:5c:07:49:73:05:19:8e:f7:a6:82:61:da:5e: 87:39:cd:c0:4e:ac:47:ad:52:90:8f:c0:87:c3:a3: 6a:d5:74:c4:5e:07:39:2a:c9:e8:cd:29:f3:c9:58: 7c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:45:96:F4:2F:BF:A5:7F:A9:72:EC:E0:82:02:0E:04:8C:4A:40:3A X509v3 Authority Key Identifier: keyid:7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:82:46:df:26:28:07:21:0d:df:c1:21:a5:eb:40:d2:ba:97: 79:26:45:94:12:70:01:1f:24:7b:09:75:aa:25:fb:8c:c2:ee: 00:aa:44:62:40:9e:a0:b3:4f:05:e9:dd:f6:fc:50:cc:ab:fc: 77:2f:fa:40:0b:24:1a:8d:15:e2:4b:54:f1:75:9f:93:23:59: 72:06:eb:ae:a8:d4:32:3e:a3:c4:a1:6e:1b:5d:28:0b:01:56: f2:da:fd:d8:52:d2:03:a9:01:c5:58:9e:cf:61:2e:61:e8:f4: 22:1a:02:1c:45:06:95:9e:60:fa:d4:a9:6f:dd:e0:64:ac:51: bb:46:74:8e:b6:6f:d9:58:31:be:91:fe:18:c1:88:8e:92:17: 82:df:ff:be:19:e9:d8:b1:c1:53:48:e0:82:75:13:82:b9:c2: e8:9a:b4:15:65:fc:ba:af:d7:3e:7f:65:6e:d4:be:e5:86:4b: 6d:81:da:ea:52:ea:68:b2:b7:ca:94:e1:21:67:a8:9b:d7:ec: 5a:03:14:47:a5:a4:99:7a:f8:01:fa:c4:a8:e8:2b:0c:e9:5a: 15:d1:62:b8:13:5d:b8:2b:e9:e6:a6:23:e0:12:6c:80:37:a2: ac:74:c7:89:0c:21:a6:6d:11:d2:34:f2:2d:14:42:de:3b:57: 8c:80:bf:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2zqdw7ZFWkDeCAHZSs+C/OUoAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzky MzU4RjJFRTAeFw0yNjA2MTYyMzI3MzNaFw0yNjA2MTgwMTIxMzNaMDMxMTAvBgNV BAMTKDk3NDU5NkY0MkZCRkE1N0ZBOTcyRUNFMDgyMDIwRTA0OEM0QTQwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJ07+NLmfpmE7JxPgNwcPAh4w C4Wz7RwWA/caZMgrQj9yuDXQlT28gteYMS97FxLJEh3fk8k6v1+9wqBfKHsUH6+J dkQWqhM68Oye6JrzMAttDPZkk8ZrjvJrOxvqtCmr81T8pYlMfUAH/yAFS/9oSUOh 9uM25eybA/ZPMleEDNLVdbtjJopQb8/VCp3dJVtpfDwxAkZa4V4K4+oZmCV7r6Cq 515sFgpBN0eMMZ2/2qcPtOvsljsZojCtUOP0PuAAXXmZZ3J5b2/I2C8khxcVY+xA XAdJcwUZjvemgmHaXoc5zcBOrEetUpCPwIfDo2rVdMReBzkqyejNKfPJWHwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0WW9C+/pX+pcuzgggIOBIxKQDowHwYDVR0j BBgwFoAUe/7ELGaEs5bXdApT2lsqOSNY8u4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3Y2YyMDItZjVlYy00MTAxLTgwODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2 Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzkyMzU4RjJFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QkZFQzQyQzY2ODRCMzk2RDc3NDBBNTNEQTVCMkEzOTIzNThG MkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJB MzkyMzU4RjJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSCRt8mKAchDd/BIaXrQNK6l3kmRZQScAEf JHsJdaol+4zC7gCqRGJAnqCzTwXp3fb8UMyr/Hcv+kALJBqNFeJLVPF1n5MjWXIG 666o1DI+o8ShbhtdKAsBVvLa/dhS0gOpAcVYns9hLmHo9CIaAhxFBpWeYPrUqW/d 4GSsUbtGdI62b9lYMb6R/hjBiI6SF4Lf/74Z6dixwVNI4IJ1E4K5wuiatBVl/Lqv 1z5/ZW7UvuWGS22B2upS6miyt8qU4SFnqJvX7FoDFEelpJl6+AH6xKjoKwzpWhXR YrgTXbgr6eamI+ASbIA3oqx0x4kMIaZtEdI08i0UQt47V4yAv9g= -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:48 2026 by rpki-client