$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft (raw, json) Hash identifier: 27Ej9jj9xFYSxZ4x48aTctfAGgfKn31FoFhT2i3dFoE= Subject key identifier: BB:1B:7B:C6:27:28:80:B2:DD:A1:D4:FF:BB:97:BB:82:1F:32:C2:D8 Authority key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Certificate issuer: /CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Certificate serial: 7C71D7C4A9B150CF47CCA2E74C6B0428A2ADD61A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:15:41 +0000 Manifest this update: Sun 15 Nov 2026 05:10:41 +0000 Manifest next update: Mon 16 Nov 2026 06:36:41 +0000 Files and hashes: 1: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl (hash: dhyjsXIXQvtGu186YW+abhI3cAaDWA4JiQTnnmzKKCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:71:d7:c4:a9:b1:50:cf:47:cc:a2:e7:4c:6b:04:28:a2:ad:d6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Validity Not Before: Nov 15 05:10:41 2026 GMT Not After : Nov 16 06:36:41 2026 GMT Subject: CN=BB1B7BC6272880B2DDA1D4FFBB97BB821F32C2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:64:eb:42:85:88:65:23:d4:51:27:99:8e: 94:01:ea:91:04:ea:0f:8b:b9:2e:65:24:0b:ae:f4: 18:1d:fb:1d:bf:d0:a8:35:22:a3:c0:97:0c:61:6a: ce:a2:2f:a2:79:45:cf:7b:41:fb:b4:5a:df:24:63: d9:a7:18:3c:0e:84:7f:63:67:bc:4d:87:2a:07:2a: 89:b4:5f:82:2b:c2:10:0e:b7:7a:96:27:84:8d:8c: 28:97:c2:8a:47:37:14:78:2d:a6:c0:4d:ed:e5:34: 26:28:b7:2e:7b:f1:78:42:36:a5:fa:ea:d3:55:1f: 1e:07:1c:06:6c:94:07:f0:dc:37:ba:ea:b9:14:a1: 5b:1f:29:0d:28:6a:f7:12:d2:f7:f6:87:78:d8:4b: ac:84:49:b9:f1:72:da:be:50:d9:c4:5b:30:b2:61: 06:78:17:6b:19:a3:a8:a0:c0:f7:32:85:7c:fa:f2: 78:b4:fe:93:44:ba:83:f1:f6:a8:05:e4:8d:18:e3: 33:c7:c2:78:ab:0f:d7:62:6c:f9:4b:40:3c:69:88: 15:b0:b4:3d:bc:aa:86:6f:dd:ef:78:e9:48:fb:4a: 52:7c:e0:35:0d:af:bf:10:25:67:79:34:07:64:44: 1f:97:15:34:52:de:b4:b3:70:34:c7:b9:51:04:95: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1B:7B:C6:27:28:80:B2:DD:A1:D4:FF:BB:97:BB:82:1F:32:C2:D8 X509v3 Authority Key Identifier: keyid:7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b0:db:92:50:3b:e2:2b:62:09:23:cd:d5:00:8e:49:bb:b6: 3c:39:7c:c3:8a:b8:1e:3f:9c:bc:83:a7:28:d2:18:cd:b2:0e: 3f:d2:33:3d:d1:62:04:0a:8f:e6:83:89:fd:e4:b6:05:fb:1a: 26:b9:ca:f7:19:91:9b:e0:09:f7:b1:55:d1:07:40:ef:55:05: 9b:44:05:9d:7a:7e:09:e7:4e:0d:77:94:9a:39:aa:60:7d:d9: 1c:e4:41:19:c9:90:4f:6c:92:e0:c5:c5:89:e4:23:74:73:8c: c6:3e:ce:35:db:98:91:81:8e:92:da:96:fa:14:0e:c2:79:cd: 4b:84:b6:90:31:83:cf:c0:a1:a2:94:62:0f:29:a7:c5:35:1b: 66:93:65:59:b6:3b:59:43:20:fe:13:86:a5:32:c2:23:cb:67: 86:2a:9b:f9:bf:bf:4d:c9:69:72:71:0a:c8:61:0f:ff:d3:68: 16:b1:3b:4e:3e:cb:aa:9d:b6:d4:e2:64:d9:dc:a1:3f:b6:61: 52:bd:01:39:15:f3:d6:a1:47:16:40:e1:a9:8a:3f:35:a6:8f: 27:9f:de:27:f0:81:ea:f7:d2:7d:86:30:d3:98:02:5d:4b:35: a7:cf:7d:43:0e:1b:d6:c2:b6:ca:24:77:3c:d4:24:25:38:da: 23:da:f2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHHXxKmxUM9HzKLnTGsEKKKt1howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzky MzU4RjJFRTAeFw0yNjExMTUwNTEwNDFaFw0yNjExMTYwNjM2NDFaMDMxMTAvBgNV BAMTKEJCMUI3QkM2MjcyODgwQjJEREExRDRGRkJCOTdCQjgyMUYzMkMyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasWTrQoWIZSPUUSeZjpQB6pEE 6g+LuS5lJAuu9Bgd+x2/0Kg1IqPAlwxhas6iL6J5Rc97Qfu0Wt8kY9mnGDwOhH9j Z7xNhyoHKom0X4IrwhAOt3qWJ4SNjCiXwopHNxR4LabATe3lNCYoty578XhCNqX6 6tNVHx4HHAZslAfw3De66rkUoVsfKQ0oavcS0vf2h3jYS6yESbnxctq+UNnEWzCy YQZ4F2sZo6igwPcyhXz68ni0/pNEuoPx9qgF5I0Y4zPHwnirD9dibPlLQDxpiBWw tD28qoZv3e946Uj7SlJ84DUNr78QJWd5NAdkRB+XFTRS3rSzcDTHuVEElUftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuxt7xicogLLdodT/u5e7gh8ywtgwHwYDVR0j BBgwFoAUe/7ELGaEs5bXdApT2lsqOSNY8u4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3Y2YyMDItZjVlYy00MTAxLTgwODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2 Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzkyMzU4RjJFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QkZFQzQyQzY2ODRCMzk2RDc3NDBBNTNEQTVCMkEzOTIzNThG MkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJB MzkyMzU4RjJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyw25JQO+IrYgkjzdUAjkm7tjw5fMOKuB4/ nLyDpyjSGM2yDj/SMz3RYgQKj+aDif3ktgX7Gia5yvcZkZvgCfexVdEHQO9VBZtE BZ16fgnnTg13lJo5qmB92RzkQRnJkE9skuDFxYnkI3RzjMY+zjXbmJGBjpLalvoU DsJ5zUuEtpAxg8/AoaKUYg8pp8U1G2aTZVm2O1lDIP4ThqUywiPLZ4Yqm/m/v03J aXJxCshhD//TaBaxO04+y6qdttTiZNncoT+2YVK9ATkV89ahRxZA4amKPzWmjyef 3ifwger30n2GMNOYAl1LNafPfUMOG9bCtsokdzzUJCU42iPa8hM= -----END CERTIFICATE-----Generated at Sun Nov 15 15:22:13 2026 by rpki-client