$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft File: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft (raw, json) Hash identifier: q+/uHJU6mICfWSxfMgRYy70ZGmUDWlvyxlSKhiP3aWA= Subject key identifier: 66:59:BF:2F:29:F8:0A:DC:A5:28:EA:21:09:1D:95:68:0C:75:6F:A9 Authority key identifier: 7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E Certificate issuer: /CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Certificate serial: 158AA1721525E27A7E031A3B9127CA9CC731A39B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 08:08:40 +0000 Manifest this update: Thu 17 Sep 2026 08:03:40 +0000 Manifest next update: Fri 18 Sep 2026 09:21:40 +0000 Files and hashes: 1: 7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl (hash: gU7Lx5AUjtWBpRVRlhlQbmWGyZyu1/WXPzajFQ8fkro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8a:a1:72:15:25:e2:7a:7e:03:1a:3b:91:27:ca:9c:c7:31:a3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E Validity Not Before: Sep 17 08:03:40 2026 GMT Not After : Sep 18 09:21:40 2026 GMT Subject: CN=6659BF2F29F80ADCA528EA21091D95680C756FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:24:48:98:ff:0b:5c:83:58:79:05:36:05: de:25:02:1c:54:94:35:72:42:21:95:6d:f3:24:70: 84:20:ca:2c:ad:d5:86:d6:5e:d0:54:86:fe:62:a1: e0:17:80:3d:75:14:a5:7a:ef:fc:c1:4a:c1:85:59: 04:b3:ba:a3:b7:87:55:e5:f0:99:3d:10:ea:3f:5b: e2:ab:96:59:2e:14:78:4a:ab:3b:0a:20:74:14:6c: 9f:c3:e1:9e:38:67:1a:ed:4a:b3:62:79:50:a8:ad: e5:2a:2a:1e:5e:80:28:ee:59:09:ba:d1:6b:57:2e: 06:d4:0c:4d:ca:1a:41:a9:ea:d5:ea:e0:62:c6:88: 78:83:0a:6a:53:89:dc:2a:af:0a:e7:5d:6c:fb:5b: 35:3f:c1:54:b3:98:7f:36:aa:0a:18:20:cc:8f:f6: 6f:36:05:88:9f:81:28:81:6e:d1:b4:17:34:98:dc: 33:d7:58:4e:27:65:f9:28:e8:93:6c:c0:30:88:aa: 02:f0:5e:d4:0b:b2:86:1b:fd:cd:d2:1f:1a:45:24: 63:3a:4e:5f:2e:a5:ec:e3:91:58:a3:c9:11:14:b9: db:fc:eb:f7:a8:41:25:5a:ec:53:92:38:50:3d:a9: 2c:68:5e:7b:e4:37:74:1f:4b:c9:96:d7:3b:e9:c4: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:59:BF:2F:29:F8:0A:DC:A5:28:EA:21:09:1D:95:68:0C:75:6F:A9 X509v3 Authority Key Identifier: keyid:7D:8F:0C:05:EA:2C:9D:E3:33:7A:0E:D2:E9:90:4D:C5:6D:B7:56:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/7D8F0C05EA2C9DE3337A0ED2E9904DC56DB7569E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:46:26:51:c6:1f:4b:00:cc:bc:d8:0d:7f:06:5a:54:73:2c: d9:0e:92:4b:98:47:1d:14:f6:e1:0b:ef:10:bb:ff:1f:14:fd: ce:38:d5:c4:27:73:b6:2d:ce:71:90:cc:08:48:87:81:51:39: 4e:13:09:22:5b:76:64:88:08:36:ca:bb:76:91:29:dc:8e:7b: 14:fc:61:a0:bf:1e:87:c9:a9:4b:d0:9f:e2:fe:15:23:0c:8d: 26:f9:79:fc:f5:a4:75:4c:bb:e4:87:bd:1b:e6:a1:5d:5e:53: 98:0a:5b:c3:e9:7a:a1:80:da:7d:f4:e7:e3:59:ef:4b:47:9d: ff:fc:71:3a:de:1e:0c:5d:78:03:76:ac:01:d5:02:88:a0:fc: 47:59:aa:8d:a0:e4:c7:67:ad:d3:71:9e:fd:70:31:88:23:01: 7e:e6:19:e3:1d:3e:27:24:c7:4f:02:8e:33:28:09:d2:a9:d4: 0c:4b:ef:d7:79:43:59:d2:b1:67:08:64:b9:28:cc:b0:a3:95: bd:1d:54:e0:ab:74:dd:75:e7:96:f7:63:0e:7f:02:88:b3:1a: c2:33:fa:6c:6f:66:94:21:5f:29:a3:e4:0a:14:f7:b2:7d:6e: 48:42:4c:60:e3:06:bd:6a:4c:bf:98:a1:06:4d:37:fa:8c:ed: e9:5b:09:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYqhchUl4np+Axo7kSfKnMcxo5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDREQzU2 REI3NTY5RTAeFw0yNjA5MTcwODAzNDBaFw0yNjA5MTgwOTIxNDBaMDMxMTAvBgNV BAMTKDY2NTlCRjJGMjlGODBBRENBNTI4RUEyMTA5MUQ5NTY4MEM3NTZGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/yRImP8LXINYeQU2Bd4lAhxU lDVyQiGVbfMkcIQgyiyt1YbWXtBUhv5ioeAXgD11FKV67/zBSsGFWQSzuqO3h1Xl 8Jk9EOo/W+KrllkuFHhKqzsKIHQUbJ/D4Z44ZxrtSrNieVCoreUqKh5egCjuWQm6 0WtXLgbUDE3KGkGp6tXq4GLGiHiDCmpTidwqrwrnXWz7WzU/wVSzmH82qgoYIMyP 9m82BYifgSiBbtG0FzSY3DPXWE4nZfko6JNswDCIqgLwXtQLsoYb/c3SHxpFJGM6 Tl8upezjkVijyREUudv86/eoQSVa7FOSOFA9qSxoXnvkN3QfS8mW1zvpxEFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZlm/Lyn4CtylKOohCR2VaAx1b6kwHwYDVR0j BBgwFoAUfY8MBeosneMzeg7S6ZBNxW23Vp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWJlOWY4ZDgtNmVmOS00NzJmLTg0ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVF QTJDOURFMzMzN0EwRUQyRTk5MDREQzU2REI3NTY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDhGMEMwNUVBMkM5REUzMzM3QTBFRDJFOTkwNERDNTZEQjc1 NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvN0Q4RjBDMDVFQTJDOURFMzMzN0EwRUQyRTk5MDRE QzU2REI3NTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxGJlHGH0sAzLzYDX8GWlRzLNkOkkuYRx0U 9uEL7xC7/x8U/c441cQnc7YtznGQzAhIh4FROU4TCSJbdmSICDbKu3aRKdyOexT8 YaC/HofJqUvQn+L+FSMMjSb5efz1pHVMu+SHvRvmoV1eU5gKW8PpeqGA2n305+NZ 70tHnf/8cTreHgxdeAN2rAHVAoig/EdZqo2g5MdnrdNxnv1wMYgjAX7mGeMdPick x08CjjMoCdKp1AxL79d5Q1nSsWcIZLkozLCjlb0dVOCrdN1155b3Yw5/AoizGsIz +mxvZpQhXymj5AoU97J9bkhCTGDjBr1qTL+YoQZNN/qM7elbCUk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:21 2026 by rpki-client