$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft (raw, json) Hash identifier: 2IJT1uhZzX2G1KYpDAzZ09r+h+7dWIYu6mxOxjE8WIc= Subject key identifier: 12:C1:25:B7:AF:65:7E:7C:5B:54:6F:D2:ED:60:26:8F:06:7F:03:0C Authority key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Certificate issuer: /CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Certificate serial: 41CF6222C9F5EA814DF33A82F455EE803889BBEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:04:46 +0000 Manifest this update: Thu 17 Sep 2026 08:59:46 +0000 Manifest next update: Fri 18 Sep 2026 09:31:46 +0000 Files and hashes: 1: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl (hash: NdeMdy9nJ4r1hdFKBha3M+3XheZ0yF7zymJkdrVZTww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cf:62:22:c9:f5:ea:81:4d:f3:3a:82:f4:55:ee:80:38:89:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Validity Not Before: Sep 17 08:59:46 2026 GMT Not After : Sep 18 09:31:46 2026 GMT Subject: CN=12C125B7AF657E7C5B546FD2ED60268F067F030C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:7d:d6:f7:50:dd:38:4f:90:94:bd:50:e5: e8:c8:80:0d:ce:7c:78:b0:9c:bf:6f:1f:53:dc:5c: a3:88:d3:8e:b3:cf:67:0d:33:9a:35:59:57:fd:57: b7:9d:e6:11:5f:eb:30:5d:2a:6b:05:57:b3:70:23: 43:47:c8:37:a8:0d:11:4b:55:d0:0e:57:37:19:6d: 37:04:59:91:b7:87:bd:eb:c4:22:d9:23:16:82:77: 02:f0:16:ef:d4:3d:01:4d:7f:61:f6:4c:79:30:1b: b5:77:91:d0:57:4f:37:ec:c9:fc:b3:29:81:78:fe: a9:8e:aa:53:48:a5:d0:52:e2:02:6f:75:ed:73:04: a3:48:0c:49:72:69:2b:49:eb:75:42:a2:5c:0d:08: e5:4f:89:f4:f9:9d:a0:7c:79:d0:5a:5d:fc:e0:7a: ba:48:49:7d:07:6f:87:06:85:15:ff:95:3f:98:8b: 32:4d:a8:45:ac:24:d1:0f:bb:f0:a4:ef:a6:31:80: 5c:bb:fb:82:7e:03:43:90:4c:65:d1:a6:1c:3e:24: c6:18:01:ac:e9:c6:17:00:d0:69:20:0b:84:25:ed: b0:c2:41:df:58:db:ee:a2:48:05:42:dd:70:23:32: f6:43:4b:cb:f7:a9:f7:83:7d:1f:dd:ff:e0:e5:c9: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:25:B7:AF:65:7E:7C:5B:54:6F:D2:ED:60:26:8F:06:7F:03:0C X509v3 Authority Key Identifier: keyid:7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c8:51:4d:86:52:63:df:f7:b0:d1:36:33:ed:71:b5:35:9b: 3f:18:d2:c3:0e:55:dd:cd:d8:3c:8e:34:30:cc:d1:13:f0:d0: 88:2e:b2:8f:12:97:a8:e6:57:12:93:05:61:80:99:46:c9:66: 7a:80:8e:17:9c:ce:04:b8:d2:83:27:40:c0:ea:41:ce:f8:03: b6:6e:99:3c:30:fe:d8:39:f1:c5:4a:7f:81:8c:67:fa:9a:c5: ae:c9:65:cc:9a:aa:6e:c4:5f:4c:f6:d2:c7:09:90:b1:b4:7a: 01:76:9a:de:5c:f5:ac:9d:14:a9:93:ea:87:b9:2f:5a:9f:71: f7:a0:e4:45:78:f0:32:ab:f2:59:fe:67:26:c2:2d:db:82:38: e4:00:d4:6b:3e:2a:d6:a1:fd:8e:a0:2a:8a:ee:02:2a:fb:8a: 96:0c:00:5a:13:2d:84:7d:df:36:a7:18:10:c0:38:45:c4:3e: 97:c7:e1:73:e2:34:a1:b1:c2:c9:1d:3e:df:b0:8b:99:fb:58: 92:22:9d:7a:6b:c6:66:1b:16:de:cc:ce:8e:88:d3:20:46:bf: 8f:29:2f:b6:bd:06:b7:81:45:b1:78:d6:ac:4f:66:dc:22:2f: 54:44:3e:e2:08:2f:c7:37:8b:0c:a3:c3:3a:1c:fe:3b:f9:5f: 6e:40:c9:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQc9iIsn16oFN8zqC9FXugDiJu+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzky MzU4RjJFRTAeFw0yNjA5MTcwODU5NDZaFw0yNjA5MTgwOTMxNDZaMDMxMTAvBgNV BAMTKDEyQzEyNUI3QUY2NTdFN0M1QjU0NkZEMkVENjAyNjhGMDY3RjAzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPY33W91DdOE+QlL1Q5ejIgA3O fHiwnL9vH1PcXKOI046zz2cNM5o1WVf9V7ed5hFf6zBdKmsFV7NwI0NHyDeoDRFL VdAOVzcZbTcEWZG3h73rxCLZIxaCdwLwFu/UPQFNf2H2THkwG7V3kdBXTzfsyfyz KYF4/qmOqlNIpdBS4gJvde1zBKNIDElyaStJ63VColwNCOVPifT5naB8edBaXfzg erpISX0Hb4cGhRX/lT+YizJNqEWsJNEPu/Ck76YxgFy7+4J+A0OQTGXRphw+JMYY AazpxhcA0GkgC4Ql7bDCQd9Y2+6iSAVC3XAjMvZDS8v3qfeDfR/d/+DlyQ5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsElt69lfnxbVG/S7WAmjwZ/AwwwHwYDVR0j BBgwFoAUe/7ELGaEs5bXdApT2lsqOSNY8u4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3Y2YyMDItZjVlYy00MTAxLTgwODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2 Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzkyMzU4RjJFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QkZFQzQyQzY2ODRCMzk2RDc3NDBBNTNEQTVCMkEzOTIzNThG MkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJB MzkyMzU4RjJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfIUU2GUmPf97DRNjPtcbU1mz8Y0sMOVd3N 2DyONDDM0RPw0Iguso8Sl6jmVxKTBWGAmUbJZnqAjheczgS40oMnQMDqQc74A7Zu mTww/tg58cVKf4GMZ/qaxa7JZcyaqm7EX0z20scJkLG0egF2mt5c9aydFKmT6oe5 L1qfcfeg5EV48DKr8ln+ZybCLduCOOQA1Gs+Ktah/Y6gKoruAir7ipYMAFoTLYR9 3zanGBDAOEXEPpfH4XPiNKGxwskdPt+wi5n7WJIinXprxmYbFt7Mzo6I0yBGv48p L7a9BreBRbF41qxPZtwiL1REPuIIL8c3iwyjwzoc/jv5X25AyY4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:20:46 2026 by rpki-client