$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft (raw, json) Hash identifier: Lf3l+t1P3aVFJfjNhmy2BJFl4cM80PA1Ucg8EL5oMvE= Subject key identifier: CE:A6:31:DB:99:EC:95:A0:6A:39:58:4B:BE:58:9D:21:5F:FE:DA:36 Authority key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Certificate issuer: /CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Certificate serial: 2E280A59AFF57BC47A540215C053A9D48702723C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft Manifest number: B5 Signing time: Thu 17 Sep 2026 05:40:32 +0000 Manifest this update: Thu 17 Sep 2026 05:35:32 +0000 Manifest next update: Fri 18 Sep 2026 07:28:32 +0000 Files and hashes: 1: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl (hash: qI5k7TmlRFzxQaruNMR5vQSchfNEvSOGMTR51UCa5jE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:28:0a:59:af:f5:7b:c4:7a:54:02:15:c0:53:a9:d4:87:02:72:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Validity Not Before: Sep 17 05:35:32 2026 GMT Not After : Sep 18 07:28:32 2026 GMT Subject: CN=CEA631DB99EC95A06A39584BBE589D215FFEDA36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:31:46:f5:f8:9c:60:fc:a7:4d:2f:41:95:90: d1:e3:3f:09:db:0e:35:0a:e9:10:e1:74:4c:45:32: d3:c8:02:ba:9f:f2:cf:28:77:8d:6d:57:b7:8e:f9: 69:eb:92:3c:4f:62:b9:6b:80:24:21:0b:55:76:90: 97:55:7e:2a:6c:4c:1b:bf:8f:bb:16:c5:c5:57:7b: a5:1f:96:51:19:83:bd:2e:16:6c:94:68:69:70:e1: 2b:d0:7f:de:66:88:47:e0:34:56:5f:c6:1f:3c:40: 4f:21:ed:10:b7:4c:a7:fb:ae:35:16:9a:d3:9b:dd: 6a:3b:14:3f:6e:60:08:64:1e:d7:36:db:2f:9b:c1: 8a:07:a6:b4:5d:ae:dc:c5:32:1b:91:92:be:67:c4: 15:6c:b9:ff:25:ee:74:62:38:0b:69:79:08:f5:b0: 8a:93:1a:0a:63:cc:02:1a:33:b5:55:ec:21:c2:0b: d6:e1:0e:10:ad:e1:25:3c:f7:13:64:1e:6a:42:29: 4d:f7:48:b3:70:ef:72:73:72:76:d3:59:c3:dd:2c: 0b:b1:b6:45:83:00:eb:0e:9c:5e:3a:57:01:bf:63: a2:ab:4e:1d:30:2c:ec:76:e2:7d:8d:0d:05:10:54: 78:45:50:e0:54:75:42:7f:38:1d:c1:76:95:b5:4b: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A6:31:DB:99:EC:95:A0:6A:39:58:4B:BE:58:9D:21:5F:FE:DA:36 X509v3 Authority Key Identifier: keyid:C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8f:a3:99:4f:88:c0:cd:3c:bb:2b:5e:38:cd:4e:73:43:9c: e7:1b:2c:53:cd:20:5a:0b:6a:4d:1c:f2:bb:aa:96:a8:40:80: fd:61:65:0a:7d:76:c8:7b:6c:97:5f:85:70:4c:59:cf:f4:28: 3c:3c:8d:ae:ae:c0:59:9a:ca:91:f2:f6:8f:24:a1:ba:a2:f2: 13:01:85:68:3c:82:45:86:ea:a9:be:c6:0b:06:34:4f:9b:db: e3:43:1b:ed:ce:f8:76:ba:5e:36:96:28:5a:15:55:6c:01:27: 5d:c3:98:4b:0d:8a:79:c5:8f:65:c7:d3:da:b2:92:6d:6d:58: c1:00:d2:0a:7b:47:41:44:a9:4d:e8:46:c1:39:b2:c1:e3:75: ec:58:cc:5e:35:f0:37:89:d4:e8:8e:84:4d:37:96:61:86:55: a9:75:9c:8c:54:0a:ff:e1:07:6c:38:92:31:59:25:21:76:ff: cc:c8:0d:0a:48:63:b3:9c:8a:b0:60:48:85:42:55:34:bf:77: 43:0c:34:8e:6e:18:e0:93:98:83:8e:36:75:67:20:21:53:c1: 57:72:6c:97:c7:7d:c5:f6:5a:b6:42:68:b6:bc:8c:eb:b5:50: 4e:9a:1f:3c:ae:57:bb:a0:23:4a:8a:b4:ad:b2:b3:3e:8c:f9: 9f:6c:c6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULigKWa/1e8R6VAIVwFOp1IcCcjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5 RjhBREEwMTAeFw0yNjA5MTcwNTM1MzJaFw0yNjA5MTgwNzI4MzJaMDMxMTAvBgNV BAMTKENFQTYzMURCOTlFQzk1QTA2QTM5NTg0QkJFNTg5RDIxNUZGRURBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvMUb1+Jxg/KdNL0GVkNHjPwnb DjUK6RDhdExFMtPIArqf8s8od41tV7eO+WnrkjxPYrlrgCQhC1V2kJdVfipsTBu/ j7sWxcVXe6UfllEZg70uFmyUaGlw4SvQf95miEfgNFZfxh88QE8h7RC3TKf7rjUW mtOb3Wo7FD9uYAhkHtc22y+bwYoHprRdrtzFMhuRkr5nxBVsuf8l7nRiOAtpeQj1 sIqTGgpjzAIaM7VV7CHCC9bhDhCt4SU89xNkHmpCKU33SLNw73JzcnbTWcPdLAux tkWDAOsOnF46VwG/Y6KrTh0wLOx24n2NDQUQVHhFUOBUdUJ/OB3BdpW1S9ffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqYx25nslaBqOVhLvlidIV/+2jYwHwYDVR0j BBgwFoAUx95gJczVaLcl0V0fn/owCJ+K2gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0MGY2NzItNzZkNC00MTU4LWFlZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVD Q0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5RjhBREEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0RFNjAyNUNDRDU2OEI3MjVEMTVEMUY5RkZBMzAwODlGOEFE QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMw MDg5RjhBREEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyPo5lPiMDNPLsrXjjNTnNDnOcbLFPNIFoL ak0c8ruqlqhAgP1hZQp9dsh7bJdfhXBMWc/0KDw8ja6uwFmaypHy9o8kobqi8hMB hWg8gkWG6qm+xgsGNE+b2+NDG+3O+Ha6XjaWKFoVVWwBJ13DmEsNinnFj2XH09qy km1tWMEA0gp7R0FEqU3oRsE5ssHjdexYzF418DeJ1OiOhE03lmGGVal1nIxUCv/h B2w4kjFZJSF2/8zIDQpIY7OcirBgSIVCVTS/d0MMNI5uGOCTmIOONnVnICFTwVdy bJfHfcX2WrZCaLa8jOu1UE6aHzyuV7ugI0qKtK2ysz6M+Z9sxmA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:59:20 2026 by rpki-client