$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json) Hash identifier: pjLXQw6xgfvE/l15nPFX614upACBn8eft2bSJWZA5gE= Subject key identifier: 71:A6:A6:B6:E3:26:DB:6E:6E:82:92:F6:B1:D2:63:5E:A0:E5:F6:43 Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Certificate serial: 5A5E78344700A1CC044A99A2986DB266F5542F50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:07:14 +0000 Manifest this update: Sun 20 Sep 2026 12:02:14 +0000 Manifest next update: Mon 21 Sep 2026 15:48:14 +0000 Files and hashes: 1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: gsIJlPEzueXqu0Hhu7Ua0nJniYh272sivUBX1Nv7zWM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5e:78:34:47:00:a1:cc:04:4a:99:a2:98:6d:b2:66:f5:54:2f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Validity Not Before: Sep 20 12:02:14 2026 GMT Not After : Sep 21 15:48:14 2026 GMT Subject: CN=71A6A6B6E326DB6E6E8292F6B1D2635EA0E5F643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:77:70:5f:30:9a:f3:05:c1:4b:a1:89:17: 4b:22:a0:16:65:a9:5d:ef:33:eb:2f:2e:48:0b:de: be:75:09:a5:1f:d6:42:50:5b:bf:fa:74:27:52:16: 9a:fb:53:60:a3:36:c4:83:43:62:de:f8:95:01:8a: 0a:5b:51:ab:b4:3b:d0:85:3e:87:31:79:28:4c:5f: db:59:1f:50:9d:7c:10:da:09:0f:5b:b3:9b:ca:b8: f1:a2:3b:99:f7:eb:a9:6b:eb:5c:ad:55:c2:df:65: 85:25:0c:3a:ff:a6:be:d5:eb:f1:b5:c6:53:7d:7d: 46:98:9c:4e:5c:e0:b3:9b:2d:94:f9:53:df:c6:b7: 46:6a:97:e0:5a:26:85:32:d0:93:86:70:ec:99:10: d6:ac:dd:ed:73:51:29:9b:ee:7e:c4:4c:4d:ac:9b: 34:1f:e0:4f:1d:84:c0:c0:ca:bd:03:55:ff:dd:ab: f7:d3:a2:6f:fa:28:87:a2:0c:42:2e:5c:c2:8b:c5: 1b:bd:39:92:c3:92:62:10:33:e4:9c:7b:8b:03:d3: c6:81:13:6d:ba:3c:99:69:7e:7c:ee:28:bb:97:e8: 75:a8:b9:0f:e1:b5:be:2a:7d:15:d2:cd:f0:d1:90: c8:62:fb:60:d0:eb:fc:25:e5:6c:5c:07:b9:21:a4: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:A6:B6:E3:26:DB:6E:6E:82:92:F6:B1:D2:63:5E:A0:E5:F6:43 X509v3 Authority Key Identifier: keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7b:5c:05:d2:cb:e3:ad:33:59:7c:a9:ad:65:70:cd:47:78: c1:97:2e:46:cb:46:2b:cf:89:b2:df:d1:2b:a5:3a:ba:6a:34: 8c:44:74:97:ca:cd:1d:42:22:f9:8d:8f:24:7a:67:f4:ca:98: 69:76:3d:88:7d:3a:25:12:23:a7:5e:b8:b6:b5:bc:5a:bc:9d: 37:6c:4a:6b:9b:3f:42:0e:07:12:c5:af:54:3f:d6:d5:7d:ae: cd:cf:ae:c0:62:ad:cb:ce:0d:3e:21:3e:e8:02:c3:d4:28:b5: 64:4d:cf:2d:e3:fe:eb:93:08:24:09:2f:92:8d:e4:63:f4:55: 9c:a6:ad:14:20:74:91:cb:d8:df:f3:3f:94:06:0d:34:e2:43: 4a:27:c7:c1:0a:07:00:7d:a4:79:5e:55:fe:f8:a2:01:5b:65: e3:7a:58:23:fb:c0:09:38:e3:8b:42:b3:ea:36:2c:43:68:bc: 9b:4f:d3:11:f0:c2:96:70:12:b8:07:b4:f7:62:dd:b4:f8:c3: 29:84:ed:a4:f8:e7:58:e3:fb:ef:66:bf:fc:45:da:dd:95:fc: 7d:3f:59:1d:ef:ea:5d:c4:61:df:a1:8c:31:d7:7d:81:72:59: 92:ec:9f:20:1d:75:bd:46:bc:9e:57:1e:b3:f8:b7:9b:2a:72: 15:4e:23:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl54NEcAocwESpmimG2yZvVUL1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3 OUYwQ0IyMDAeFw0yNjA5MjAxMjAyMTRaFw0yNjA5MjExNTQ4MTRaMDMxMTAvBgNV BAMTKDcxQTZBNkI2RTMyNkRCNkU2RTgyOTJGNkIxRDI2MzVFQTBFNUY2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEndwXzCa8wXBS6GJF0sioBZl qV3vM+svLkgL3r51CaUf1kJQW7/6dCdSFpr7U2CjNsSDQ2Le+JUBigpbUau0O9CF PocxeShMX9tZH1CdfBDaCQ9bs5vKuPGiO5n366lr61ytVcLfZYUlDDr/pr7V6/G1 xlN9fUaYnE5c4LObLZT5U9/Gt0Zql+BaJoUy0JOGcOyZENas3e1zUSmb7n7ETE2s mzQf4E8dhMDAyr0DVf/dq/fTom/6KIeiDEIuXMKLxRu9OZLDkmIQM+Sce4sD08aB E226PJlpfnzuKLuX6HWouQ/htb4qfRXSzfDRkMhi+2DQ6/wl5WxcB7khpIIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcaamtuMm225ugpL2sdJjXqDl9kMwHwYDVR0j BBgwFoAUfsEcLErvq5SrhwBohqStJXnwyyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ3NDNjN2MtMDdlNi00NjExLWI0MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0 QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3OUYwQ0IyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUMxMUMyQzRBRUZBQjk0QUI4NzAwNjg4NkE0QUQyNTc5RjBD QjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFE MjU3OUYwQ0IyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH57XAXSy+OtM1l8qa1lcM1HeMGXLkbLRivP ibLf0SulOrpqNIxEdJfKzR1CIvmNjyR6Z/TKmGl2PYh9OiUSI6deuLa1vFq8nTds SmubP0IOBxLFr1Q/1tV9rs3PrsBircvODT4hPugCw9QotWRNzy3j/uuTCCQJL5KN 5GP0VZymrRQgdJHL2N/zP5QGDTTiQ0onx8EKBwB9pHleVf74ogFbZeN6WCP7wAk4 44tCs+o2LENovJtP0xHwwpZwErgHtPdi3bT4wymE7aT451jj++9mv/xF2t2V/H0/ WR3v6l3EYd+hjDHXfYFyWZLsnyAddb1GvJ5XHrP4t5sqchVOI4I= -----END CERTIFICATE-----Generated at Mon Sep 21 09:22:52 2026 by rpki-client