$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json) Hash identifier: CrcrnKcGuhm7l1y+tbyqUAK+oB2kBgQVO8OaonYjfmg= Subject key identifier: FA:39:A7:FD:13:1C:47:C9:18:60:08:E0:57:8B:99:20:3E:13:CF:DC Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Certificate serial: 71E53458547180CE2066F35E3A83BC17067044B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 01:03:01 +0000 Manifest this update: Fri 04 Sep 2026 00:58:01 +0000 Manifest next update: Sat 05 Sep 2026 03:52:01 +0000 Files and hashes: 1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: 7Sn2B9h4nZyaH1Fjd5frF+YxA+CXe91hRAc2FkDNPyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 03:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e5:34:58:54:71:80:ce:20:66:f3:5e:3a:83:bc:17:06:70:44:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Validity Not Before: Sep 4 00:58:01 2026 GMT Not After : Sep 5 03:52:01 2026 GMT Subject: CN=FA39A7FD131C47C9186008E0578B99203E13CFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:52:4a:0f:eb:cb:64:c2:d4:d2:df:b9:69: e1:52:bd:73:4a:d4:f1:6d:e1:70:ea:a9:f1:03:11: 0e:f0:ba:a7:c4:53:54:93:36:5f:95:81:54:c3:3d: c5:66:7a:32:01:10:b8:6c:e2:b5:6c:9b:01:ab:6a: 15:7f:0e:f6:b8:7d:22:39:dc:7a:da:71:c8:da:e1: b7:19:cf:0c:fe:bb:5f:11:8b:8b:cc:db:7d:24:23: c7:2a:a3:b6:fd:e1:4a:75:9e:47:0b:a0:a7:c7:eb: 1b:fe:1c:50:9c:81:a5:62:f9:df:13:5e:aa:f6:28: 19:7d:1f:76:31:f2:7f:40:14:03:b4:50:b2:1c:f1: d6:ed:58:b9:9b:61:ea:19:89:98:a2:e1:a0:8a:ab: fd:43:a8:93:06:12:89:cb:57:65:0f:01:22:97:40: 65:08:e5:c7:ba:7b:97:27:2b:7d:97:87:6d:0a:67: f6:41:bc:7f:26:24:96:be:f0:d8:b7:15:d6:b0:7e: 7f:c6:10:b6:d6:3b:dd:23:b1:65:22:0e:c8:54:14: 99:cf:9a:31:11:5a:90:bc:03:66:ae:7c:18:9f:e3: e6:fc:4c:21:a7:c0:fa:3c:9c:eb:d1:ed:ff:ea:7f: f8:dc:67:0f:aa:b5:f2:00:a9:8f:99:65:43:cf:45: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:39:A7:FD:13:1C:47:C9:18:60:08:E0:57:8B:99:20:3E:13:CF:DC X509v3 Authority Key Identifier: keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:61:35:7e:13:29:66:ae:5a:4b:fb:c2:e0:ec:f6:00:52: 95:11:a7:90:3e:ae:df:a3:e3:9f:20:07:41:4f:7c:74:17:29: 0d:18:19:c0:15:2e:20:ab:fc:2c:75:e9:6a:0e:ca:98:62:4a: b1:5b:92:fb:85:a9:e8:38:78:8b:93:d4:16:09:ea:b7:00:8c: 51:ff:2e:fe:80:72:a2:36:56:21:3e:94:36:f1:8b:3f:c2:5b: 1a:e6:b3:36:c0:08:54:c4:31:ea:84:87:f0:90:83:d0:c3:ab: 04:64:91:9e:7b:35:85:3d:9e:b9:ac:b1:43:b5:47:17:81:99: 1f:62:fe:33:1b:5f:95:63:d7:96:bb:d6:da:b1:c6:c5:6f:0d: b7:de:a4:fe:56:31:1d:d5:ed:d4:c6:1c:12:24:6a:fc:79:ed: 80:1b:e3:65:e7:f9:83:9e:78:96:c2:a4:79:1f:26:c7:33:4f: 3d:8c:1d:08:1e:1a:b1:3d:f0:bb:1a:26:8f:95:3d:40:a3:3c: fc:3b:47:b3:ca:18:5e:f7:bb:9a:a4:da:c5:d4:c0:63:a4:a1: a0:ec:7d:71:0b:e7:80:83:1e:ea:c8:02:c1:d2:20:4f:74:80: 3c:61:cb:80:2a:83:bf:43:3e:7d:14:69:ea:c9:33:e5:bc:80: 6b:4c:79:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceU0WFRxgM4gZvNeOoO8FwZwRLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3 OUYwQ0IyMDAeFw0yNjA5MDQwMDU4MDFaFw0yNjA5MDUwMzUyMDFaMDMxMTAvBgNV BAMTKEZBMzlBN0ZEMTMxQzQ3QzkxODYwMDhFMDU3OEI5OTIwM0UxM0NGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDn1JKD+vLZMLU0t+5aeFSvXNK 1PFt4XDqqfEDEQ7wuqfEU1STNl+VgVTDPcVmejIBELhs4rVsmwGrahV/Dva4fSI5 3Hraccja4bcZzwz+u18Ri4vM230kI8cqo7b94Up1nkcLoKfH6xv+HFCcgaVi+d8T Xqr2KBl9H3Yx8n9AFAO0ULIc8dbtWLmbYeoZiZii4aCKq/1DqJMGEonLV2UPASKX QGUI5ce6e5cnK32Xh20KZ/ZBvH8mJJa+8Ni3Fdawfn/GELbWO90jsWUiDshUFJnP mjERWpC8A2aufBif4+b8TCGnwPo8nOvR7f/qf/jcZw+qtfIAqY+ZZUPPRZ6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jmn/RMcR8kYYAjgV4uZID4Tz9wwHwYDVR0j BBgwFoAUfsEcLErvq5SrhwBohqStJXnwyyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ3NDNjN2MtMDdlNi00NjExLWI0MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0 QUVGQUI5NEFCODcwMDY4ODZBNEFEMjU3OUYwQ0IyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUMxMUMyQzRBRUZBQjk0QUI4NzAwNjg4NkE0QUQyNTc5RjBD QjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvN0VDMTFDMkM0QUVGQUI5NEFCODcwMDY4ODZBNEFE MjU3OUYwQ0IyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgYYTV+EylmrlpL+8Lg7PYAUpURp5A+rt+j 458gB0FPfHQXKQ0YGcAVLiCr/Cx16WoOyphiSrFbkvuFqeg4eIuT1BYJ6rcAjFH/ Lv6AcqI2ViE+lDbxiz/CWxrmszbACFTEMeqEh/CQg9DDqwRkkZ57NYU9nrmssUO1 RxeBmR9i/jMbX5Vj15a71tqxxsVvDbfepP5WMR3V7dTGHBIkavx57YAb42Xn+YOe eJbCpHkfJsczTz2MHQgeGrE98LsaJo+VPUCjPPw7R7PKGF73u5qk2sXUwGOkoaDs fXEL54CDHurIAsHSIE90gDxhy4Aqg79DPn0UaerJM+W8gGtMebI= -----END CERTIFICATE-----Generated at Fri Sep 4 12:08:50 2026 by rpki-client