$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: ucPFxlLfceWU7uKaGIhPlHT8v0ClEaiwGi7g6GUlrLI= Subject key identifier: 3B:3E:A1:47:68:5A:5C:65:5A:25:11:4A:82:A6:3E:F2:5C:89:C5:53 Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 4A8CDFEBCD425EAF46A8F6C74162AE600E6684EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:58:23 +0000 Manifest this update: Tue 16 Jun 2026 19:53:23 +0000 Manifest next update: Wed 17 Jun 2026 22:48:23 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: X+M5UnrSk7P96drVFe7HEjpZb0xXjArJKYJymyIsaVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8c:df:eb:cd:42:5e:af:46:a8:f6:c7:41:62:ae:60:0e:66:84:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: Jun 16 19:53:23 2026 GMT Not After : Jun 17 22:48:23 2026 GMT Subject: CN=3B3EA147685A5C655A25114A82A63EF25C89C553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:b9:2e:17:7d:d5:bc:61:18:24:83:ea:b6: 5f:7b:99:ea:e2:5c:d4:76:aa:9d:54:27:bb:b9:c4: 2c:15:00:94:ea:ed:e7:28:e6:dc:1a:48:78:86:7e: ff:0b:d6:0b:09:2c:e2:7b:9b:64:dc:1e:79:c9:62: 3c:5b:ab:df:22:93:f5:2e:01:ab:24:82:85:cf:d1: c3:50:22:7d:d4:65:06:36:7f:c9:9a:82:60:6f:bd: 1d:5a:0d:cd:16:4a:ee:48:e1:9f:68:5e:db:95:2e: 25:4d:69:e3:52:0b:5a:a5:7f:4c:5b:31:a3:5c:68: c3:e6:fc:78:ed:69:98:0e:87:59:25:03:fb:28:b8: 49:55:16:51:b4:d6:dc:80:e5:d8:84:5d:ca:7d:39: a2:ad:c3:75:e9:99:ef:40:96:38:75:a9:62:0c:41: 3e:5d:45:68:59:90:af:b8:c6:23:6d:c2:f8:f1:d1: e9:93:d0:ee:1f:47:a9:ef:70:93:23:05:92:d7:a4: 38:1f:eb:d0:f8:b7:39:ea:43:d1:e1:dc:91:9c:38: b9:0d:5c:98:7b:38:fe:25:70:da:32:cd:35:89:49: 9c:ef:75:21:60:e7:cb:ed:16:da:fc:e1:8a:ae:c8: 93:6a:6c:0b:8b:8a:13:54:ea:1f:1e:37:a8:cb:bf: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:A1:47:68:5A:5C:65:5A:25:11:4A:82:A6:3E:F2:5C:89:C5:53 X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a3:9f:c3:79:c8:fa:e8:c5:b1:f3:0a:02:7d:fc:5d:67:b9: 22:20:75:2d:72:e0:07:ff:2d:ee:f5:7e:49:d3:7f:ac:ac:f3: cb:31:29:6f:65:12:a3:f9:a5:4d:81:7c:ce:37:42:c5:53:8a: ff:15:af:af:9c:93:c3:70:53:0d:c4:19:38:ff:e1:b0:c5:bc: 3c:d0:08:27:eb:58:e0:fb:0f:e7:ef:44:ba:b4:8b:94:88:9c: 50:be:82:31:40:95:b2:2f:16:2d:64:85:78:1a:1f:8e:cf:35: d5:33:c9:5b:c5:96:19:eb:dc:76:4a:21:5a:30:58:25:a7:99: 6f:5a:7d:d3:1e:03:6f:ca:24:cc:ca:03:35:65:2e:31:c1:44: fd:6b:9c:32:d0:7f:80:cf:06:3a:09:18:a0:61:31:d5:7f:7e: da:40:a0:8b:0b:a6:1e:29:d6:79:5a:6f:8c:ef:6c:1f:1c:91: 0e:a6:8b:81:d8:99:da:2a:d7:80:ea:44:46:c2:89:b5:72:15: 45:c4:ad:02:5c:a8:bf:35:8e:4c:8d:c4:9a:45:ad:4c:ff:df: 2a:75:a8:46:c4:03:af:cf:7f:b3:ac:09:24:a5:e8:4b:35:cf: 34:b7:61:04:06:96:cc:b0:7e:8f:4b:a7:d7:63:fd:86:ab:4a: 3c:98:9f:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSozf681CXq9GqPbHQWKuYA5mhOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA2MTYxOTUzMjNaFw0yNjA2MTcyMjQ4MjNaMDMxMTAvBgNV BAMTKDNCM0VBMTQ3Njg1QTVDNjU1QTI1MTE0QTgyQTYzRUYyNUM4OUM1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPbkuF33VvGEYJIPqtl97meri XNR2qp1UJ7u5xCwVAJTq7eco5twaSHiGfv8L1gsJLOJ7m2TcHnnJYjxbq98ik/Uu AaskgoXP0cNQIn3UZQY2f8magmBvvR1aDc0WSu5I4Z9oXtuVLiVNaeNSC1qlf0xb MaNcaMPm/HjtaZgOh1klA/souElVFlG01tyA5diEXcp9OaKtw3Xpme9Aljh1qWIM QT5dRWhZkK+4xiNtwvjx0emT0O4fR6nvcJMjBZLXpDgf69D4tznqQ9Hh3JGcOLkN XJh7OP4lcNoyzTWJSZzvdSFg58vtFtr84YquyJNqbAuLihNU6h8eN6jLv/7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOz6hR2haXGVaJRFKgqY+8lyJxVMwHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2jn8N5yProxbHzCgJ9/F1nuSIgdS1y4Af/ Le71fknTf6ys88sxKW9lEqP5pU2BfM43QsVTiv8Vr6+ck8NwUw3EGTj/4bDFvDzQ CCfrWOD7D+fvRLq0i5SInFC+gjFAlbIvFi1khXgaH47PNdUzyVvFlhnr3HZKIVow WCWnmW9afdMeA2/KJMzKAzVlLjHBRP1rnDLQf4DPBjoJGKBhMdV/ftpAoIsLph4p 1nlab4zvbB8ckQ6mi4HYmdoq14DqREbCibVyFUXErQJcqL81jkyNxJpFrUz/3yp1 qEbEA6/Pf7OsCSSl6Es1zzS3YQQGlsywfo9Lp9dj/YarSjyYn+k= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:01 2026 by rpki-client