$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: u4JYm37PUZuYzDtmyC3OQaYdHX3ogF93s2sx2VmkJnI= Subject key identifier: CF:41:F4:F1:DD:04:65:D9:45:B3:D0:2A:6A:2B:60:35:E1:E8:F6:16 Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 2A19561CB96E16CCD0EE9AF5B7633AA08B296CFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:00:23 +0000 Manifest this update: Sun 20 Sep 2026 22:55:23 +0000 Manifest next update: Mon 21 Sep 2026 23:56:23 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: 8M6FEP/sPr7Kr8ndZO2lCNWMjm2Yvg+mfhSoKoKRy7c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:19:56:1c:b9:6e:16:cc:d0:ee:9a:f5:b7:63:3a:a0:8b:29:6c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: Sep 20 22:55:23 2026 GMT Not After : Sep 21 23:56:23 2026 GMT Subject: CN=CF41F4F1DD0465D945B3D02A6A2B6035E1E8F616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:49:14:d1:ea:f2:17:a2:97:76:53:e1:c6: 95:9d:fd:bf:33:76:a3:51:26:15:5a:1a:4f:c1:ce: 53:1c:02:93:b5:d2:02:ed:74:da:1d:2d:ef:1d:e4: bc:2b:88:23:4c:6d:c8:2c:4e:86:cb:96:b8:cd:09: 95:12:06:6d:01:e2:56:a7:47:19:f7:5f:0d:97:17: 28:cb:a0:d8:ce:9b:1d:41:e2:68:7b:ee:84:b7:c2: 86:66:27:6d:7f:7c:99:52:bd:ac:29:9a:48:56:a8: 83:c7:bf:d9:e1:2b:8a:0f:03:da:d8:43:ee:f4:77: 32:3c:47:6c:a9:4a:ce:61:b4:57:86:0d:20:bc:ff: b7:72:f0:36:ae:cf:b9:2c:25:07:dc:4a:f8:9e:15: b9:f4:ac:ca:38:1e:ee:d4:51:f2:c5:3e:0c:29:b9: d6:c6:b9:34:57:2e:8e:72:b4:fa:76:cc:31:9d:0d: 74:a4:81:7f:ec:cc:28:04:d6:ac:43:c3:4e:5f:65: 6b:b2:9d:45:18:fb:47:ca:f5:85:00:4a:6b:ed:2b: ff:2d:94:f2:ed:5b:25:7c:7e:55:b4:d4:b6:82:6c: 38:e5:4d:7f:af:b0:60:3e:6b:bb:63:19:6f:7a:e8: 53:6a:49:d5:c0:a9:66:a6:27:1b:2b:95:00:51:0b: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:F4:F1:DD:04:65:D9:45:B3:D0:2A:6A:2B:60:35:E1:E8:F6:16 X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d4:81:bb:b5:62:e5:4e:2a:73:79:d7:49:de:7a:69:b6:fb: 2d:2c:55:76:d6:7b:9c:59:cd:b5:ca:8c:6f:af:c5:34:cc:84: c2:39:a9:bf:42:d2:95:ab:a0:fa:ae:5d:ae:02:45:c3:44:54: f8:64:ca:97:8c:59:67:2a:75:f6:77:d0:74:33:34:88:80:ae: 3e:b1:51:12:38:30:5b:56:a2:07:e4:23:a3:53:74:0c:49:e1: b9:e9:08:d3:be:99:86:10:79:ab:29:7d:0e:2a:11:e1:d3:27: 8d:e7:b5:13:f0:d1:54:ba:a6:a6:90:f7:5c:57:cb:63:11:18: 97:59:2b:0e:63:46:49:4c:20:70:8e:3e:7d:61:74:55:09:da: 6e:0f:d5:ae:ee:a1:a5:7c:e2:39:05:67:89:27:bc:ab:81:6e: 72:c1:f9:d7:26:12:f2:eb:84:f5:c3:ee:c6:51:49:47:f9:a5: 15:db:49:8e:71:48:9b:e7:29:d1:f3:7f:c3:6c:18:63:af:39: cb:29:08:96:8a:d1:66:a6:45:83:a3:62:fd:9d:a6:53:d9:22: 34:a9:3a:8d:c3:f3:7d:54:69:aa:41:b0:59:7f:99:19:2a:67: 77:62:68:62:0b:55:ce:33:c9:55:88:d3:0a:10:cf:c7:8b:5a: 0b:d0:42:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhlWHLluFszQ7pr1t2M6oIspbP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA5MjAyMjU1MjNaFw0yNjA5MjEyMzU2MjNaMDMxMTAvBgNV BAMTKENGNDFGNEYxREQwNDY1RDk0NUIzRDAyQTZBMkI2MDM1RTFFOEY2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WUkU0eryF6KXdlPhxpWd/b8z dqNRJhVaGk/BzlMcApO10gLtdNodLe8d5LwriCNMbcgsTobLlrjNCZUSBm0B4lan Rxn3Xw2XFyjLoNjOmx1B4mh77oS3woZmJ21/fJlSvawpmkhWqIPHv9nhK4oPA9rY Q+70dzI8R2ypSs5htFeGDSC8/7dy8Dauz7ksJQfcSvieFbn0rMo4Hu7UUfLFPgwp udbGuTRXLo5ytPp2zDGdDXSkgX/szCgE1qxDw05fZWuynUUY+0fK9YUASmvtK/8t lPLtWyV8flW01LaCbDjlTX+vsGA+a7tjGW966FNqSdXAqWamJxsrlQBRCw7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz0H08d0EZdlFs9AqaitgNeHo9hYwHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjUgbu1YuVOKnN510neemm2+y0sVXbWe5xZ zbXKjG+vxTTMhMI5qb9C0pWroPquXa4CRcNEVPhkypeMWWcqdfZ30HQzNIiArj6x URI4MFtWogfkI6NTdAxJ4bnpCNO+mYYQeaspfQ4qEeHTJ43ntRPw0VS6pqaQ91xX y2MRGJdZKw5jRklMIHCOPn1hdFUJ2m4P1a7uoaV84jkFZ4knvKuBbnLB+dcmEvLr hPXD7sZRSUf5pRXbSY5xSJvnKdHzf8NsGGOvOcspCJaK0WamRYOjYv2dplPZIjSp Oo3D831UaapBsFl/mRkqZ3diaGILVc4zyVWI0woQz8eLWgvQQsw= -----END CERTIFICATE-----Generated at Mon Sep 21 16:02:20 2026 by rpki-client