$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json) Hash identifier: b/8jBhPwFVaK5kqM2uhIpivcr1ksaRw2G+YYSiPWxMI= Subject key identifier: 32:AE:34:E8:AB:C2:80:00:EE:CE:F6:70:04:26:1D:A0:99:11:42:81 Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Certificate serial: 337208FBEECD6524E7B04988710226A6FEE417F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 07:55:28 +0000 Manifest this update: Tue 28 Jul 2026 07:50:28 +0000 Manifest next update: Wed 29 Jul 2026 08:42:28 +0000 Files and hashes: 1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: eLFVTE1pI+NCs8kD2kHdhBY6Azp43B2mV56YiqxyZsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 08:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:72:08:fb:ee:cd:65:24:e7:b0:49:88:71:02:26:a6:fe:e4:17:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Validity Not Before: Jul 28 07:50:28 2026 GMT Not After : Jul 29 08:42:28 2026 GMT Subject: CN=32AE34E8ABC28000EECEF67004261DA099114281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:ff:8d:01:b2:f6:35:a0:5c:58:83:0b:af: 45:8b:3f:0b:ca:88:2a:a2:df:78:72:81:18:0b:8a: dd:8c:90:08:5d:05:77:46:2a:6d:82:0a:e3:3f:f1: 97:f1:73:b9:2c:f3:e3:b6:df:88:10:00:4b:6f:a3: 86:3a:17:2d:72:ea:af:e4:9e:2c:e5:fe:25:42:d7: bc:ab:37:2b:a6:ff:59:5b:19:91:7a:c2:bd:d9:b8: e7:a7:6e:6a:11:51:11:c9:12:46:bf:12:fb:bc:5e: 2b:7a:41:75:bf:1d:16:f9:47:a8:eb:64:91:3b:fc: 9c:d6:47:5f:67:80:02:34:7f:6c:62:02:70:c8:48: 03:aa:94:14:19:20:fc:a9:1a:16:3d:50:7a:46:c3: 30:4c:3b:93:7b:46:25:2b:d4:8f:33:57:7e:52:94: 83:8c:81:23:70:a3:e4:77:42:59:5e:61:e5:ce:3b: ba:a8:0a:1a:d5:cf:c6:d0:bb:07:92:df:da:e1:da: d2:a9:62:fd:2f:4d:af:a3:9b:7a:5f:f8:3c:1a:41: e5:a0:5a:33:86:df:1b:6c:b1:09:9a:94:00:0b:69: e7:33:cd:0a:81:c7:37:72:87:ce:6e:fa:e9:ec:ae: 87:2c:82:9f:30:db:39:02:8a:5e:6e:35:48:58:98: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AE:34:E8:AB:C2:80:00:EE:CE:F6:70:04:26:1D:A0:99:11:42:81 X509v3 Authority Key Identifier: keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9b:64:44:2e:5c:90:f8:a3:5c:85:86:e4:f9:cc:b2:dd:c2: 27:8d:58:ec:c9:4c:62:09:fb:17:17:3a:49:1c:a4:10:65:a4: 7a:41:20:02:95:9e:e0:c5:f6:df:e3:2b:ba:56:5b:26:d4:20: 46:35:ab:75:72:e4:dc:94:fd:0a:68:57:21:b9:cb:33:e3:95: 41:8a:fb:9f:6a:e1:29:6f:89:22:43:23:1d:53:50:9a:fe:de: 0d:7d:eb:f8:8c:7f:16:a7:cd:96:56:f8:95:be:12:98:b0:49: 7a:aa:55:3e:51:05:fa:05:aa:14:fb:5e:03:58:10:f7:f6:7f: dd:91:44:42:4f:a1:68:33:dc:b7:8f:23:5a:f0:51:b2:4d:ee: e7:97:ed:d1:48:d3:6c:4f:e8:ca:0b:e5:09:cd:f1:a6:3d:6f: 33:7e:7f:52:ec:6f:25:3d:06:f8:bb:fa:87:23:01:96:d0:b4: a7:bf:70:9f:18:e4:13:dc:ad:c5:01:78:d8:57:55:c4:70:53: 17:da:e5:d3:51:c7:cd:63:5c:af:78:d5:76:44:92:ae:7a:e8: db:f7:91:ef:66:69:33:98:2a:f7:f7:a8:01:62:53:a3:6c:c2: da:5a:67:a2:e1:23:45:9f:a0:db:23:0f:b8:9b:59:90:05:93: e0:a6:1d:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3II++7NZSTnsEmIcQImpv7kF/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3 OUYwQ0IyMDAeFw0yNjA3MjgwNzUwMjhaFw0yNjA3MjkwODQyMjhaMDMxMTAvBgNV BAMTKDMyQUUzNEU4QUJDMjgwMDBFRUNFRjY3MDA0MjYxREEwOTkxMTQyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRNv+NAbL2NaBcWIMLr0WLPwvK iCqi33hygRgLit2MkAhdBXdGKm2CCuM/8Zfxc7ks8+O234gQAEtvo4Y6Fy1y6q/k nizl/iVC17yrNyum/1lbGZF6wr3ZuOenbmoRURHJEka/Evu8Xit6QXW/HRb5R6jr ZJE7/JzWR19ngAI0f2xiAnDISAOqlBQZIPypGhY9UHpGwzBMO5N7RiUr1I8zV35S lIOMgSNwo+R3QlleYeXOO7qoChrVz8bQuweS39rh2tKpYv0vTa+jm3pf+DwaQeWg WjOG3xtssQmalAALaeczzQqBxzdyh85u+unsrocsgp8w2zkCil5uNUhYmCQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMq406KvCgADuzvZwBCYdoJkRQoEwHwYDVR0j BBgwFoAUfsEcLErvq5SrhwBohqStJXnwyyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ3NDNjN2MtMDdlNi00NjExLWI0MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0 QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3OUYwQ0IyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUMxMUMyQzRBRUZBQjk0QUI4NzAwNjg4NkE0QUQyNTc5RjBD QjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFE MjU3OUYwQ0IyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGbZEQuXJD4o1yFhuT5zLLdwieNWOzJTGIJ +xcXOkkcpBBlpHpBIAKVnuDF9t/jK7pWWybUIEY1q3Vy5NyU/QpoVyG5yzPjlUGK +59q4SlviSJDIx1TUJr+3g196/iMfxanzZZW+JW+EpiwSXqqVT5RBfoFqhT7XgNY EPf2f92RREJPoWgz3LePI1rwUbJN7ueX7dFI02xP6MoL5QnN8aY9bzN+f1LsbyU9 Bvi7+ocjAZbQtKe/cJ8Y5BPcrcUBeNhXVcRwUxfa5dNRx81jXK941XZEkq566Nv3 ke9maTOYKvf3qAFiU6NswtpaZ6LhI0WfoNsjD7ibWZAFk+CmHes= -----END CERTIFICATE-----Generated at Tue Jul 28 22:05:40 2026 by rpki-client