$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft (raw, json) Hash identifier: iNLLTh/zWOm6XaFBMxl68fSG+133VW7cazQxXg8wMTk= Subject key identifier: C2:57:F3:7B:35:2F:81:09:AD:96:77:3D:B6:86:6E:04:BA:47:DE:63 Authority key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Certificate issuer: /CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Certificate serial: 56E49B3EFFE0CF2C78ECBECD38CB249E5A678814 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 22:22:58 +0000 Manifest this update: Fri 19 Jun 2026 22:17:58 +0000 Manifest next update: Sun 21 Jun 2026 02:09:58 +0000 Files and hashes: 1: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl (hash: Iza9ReJR2ZdJLmH6Q83IP2DlL7TOIWbfSuTa6K0N8/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e4:9b:3e:ff:e0:cf:2c:78:ec:be:cd:38:cb:24:9e:5a:67:88:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Validity Not Before: Jun 19 22:17:58 2026 GMT Not After : Jun 21 02:09:58 2026 GMT Subject: CN=C257F37B352F8109AD96773DB6866E04BA47DE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:29:bc:22:74:90:98:29:21:b4:2f:ce:39: d8:d8:d6:bb:69:4e:df:65:fe:2a:5d:88:fb:f2:fd: 2a:34:f8:04:b8:f8:db:44:71:2f:54:fd:31:45:ea: b4:cd:81:88:a7:fa:4c:66:b6:d6:d9:de:44:ef:11: 07:5c:8b:37:88:51:13:c0:f1:88:7b:3d:c0:b8:fa: 80:af:cd:bb:c0:7c:3c:da:7a:d6:6c:c8:83:4f:67: 0c:9e:27:6d:51:05:c8:af:21:b0:ba:f9:d6:b9:f0: e0:be:3d:d3:0b:c3:15:78:a6:cf:4d:5e:04:f1:9b: b0:05:cb:c9:9f:7f:18:03:a6:66:4b:6c:fc:16:a2: 1e:a2:7b:8a:9e:87:1e:8e:a1:bf:7a:e8:a2:f0:d2: 8f:82:70:03:a9:3d:89:dc:c1:97:de:4f:04:66:2b: 71:91:54:fd:24:4f:ba:19:3a:54:7f:79:6c:f4:3f: ca:5a:c6:57:9b:ed:eb:78:63:35:3a:3f:99:08:9a: e4:73:c9:a8:83:6d:c8:13:78:c9:b2:91:fa:8e:cb: c9:6a:f3:92:42:69:7d:85:ca:c2:34:83:7f:a7:e9: 37:ee:38:6c:b4:fd:9d:71:87:58:24:5b:a9:14:c0: 91:66:8c:6e:41:d9:95:29:eb:e1:ec:e9:2e:4e:4b: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:57:F3:7B:35:2F:81:09:AD:96:77:3D:B6:86:6E:04:BA:47:DE:63 X509v3 Authority Key Identifier: keyid:7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:33:29:c5:a3:6a:67:18:0e:ae:af:e6:4c:1b:32:1a:cd:ae: 22:47:71:5c:c2:24:2d:c7:f6:04:31:dc:92:88:45:99:41:26: 1a:32:63:43:b6:51:db:bf:d8:cf:ab:1f:aa:a9:1c:47:fd:49: 20:39:4f:a1:0e:59:c4:b7:59:9c:60:97:ce:e5:a6:4b:a4:db: 41:b0:2b:82:83:1a:ee:d8:5d:32:7c:e0:cf:00:5c:36:d8:e8: 73:e6:5b:00:f4:7b:c1:f2:6c:a8:84:4a:6b:b5:04:f7:0f:d9: 7a:af:a0:c0:21:9f:54:47:e6:24:f4:7d:26:8b:5d:6f:d3:35: b4:4c:4e:13:d6:54:a7:a1:f3:16:f9:19:12:1e:67:5d:c5:4d: 7f:df:93:ba:92:c8:45:80:87:4c:5e:d0:4f:af:11:70:d6:fa: b2:97:5c:fc:e8:37:37:69:7f:a1:75:ac:a2:d5:a9:5c:8e:7e: ac:ec:46:0b:e9:04:09:ee:aa:89:a9:19:6a:75:1f:75:69:03: 30:e1:cf:f3:8e:a8:ea:e2:53:99:d5:1d:cd:d2:bd:41:76:9e: 00:43:81:27:3f:b0:d8:bd:42:d9:71:ec:72:aa:28:aa:40:8b: 68:04:7a:ca:aa:6c:24:d3:fa:79:9d:a1:b5:4b:84:29:9a:bb: 58:43:79:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuSbPv/gzyx47L7NOMsknlpniBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzky MzU4RjJFRTAeFw0yNjA2MTkyMjE3NThaFw0yNjA2MjEwMjA5NThaMDMxMTAvBgNV BAMTKEMyNTdGMzdCMzUyRjgxMDlBRDk2NzczREI2ODY2RTA0QkE0N0RFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQkym8InSQmCkhtC/OOdjY1rtp Tt9l/ipdiPvy/So0+AS4+NtEcS9U/TFF6rTNgYin+kxmttbZ3kTvEQdcizeIURPA 8Yh7PcC4+oCvzbvAfDzaetZsyINPZwyeJ21RBcivIbC6+da58OC+PdMLwxV4ps9N XgTxm7AFy8mffxgDpmZLbPwWoh6ie4qehx6Oob966KLw0o+CcAOpPYncwZfeTwRm K3GRVP0kT7oZOlR/eWz0P8paxleb7et4YzU6P5kImuRzyaiDbcgTeMmykfqOy8lq 85JCaX2FysI0g3+n6TfuOGy0/Z1xh1gkW6kUwJFmjG5B2ZUp6+Hs6S5OS8sHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlfzezUvgQmtlnc9toZuBLpH3mMwHwYDVR0j BBgwFoAUe/7ELGaEs5bXdApT2lsqOSNY8u4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3Y2YyMDItZjVlYy00MTAxLTgwODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2 Njg0QjM5NkQ3NzQwQTUzREE1QjJBMzkyMzU4RjJFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QkZFQzQyQzY2ODRCMzk2RDc3NDBBNTNEQTVCMkEzOTIzNThG MkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvN0JGRUM0MkM2Njg0QjM5NkQ3NzQwQTUzREE1QjJB MzkyMzU4RjJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEzKcWjamcYDq6v5kwbMhrNriJHcVzCJC3H 9gQx3JKIRZlBJhoyY0O2Udu/2M+rH6qpHEf9SSA5T6EOWcS3WZxgl87lpkuk20Gw K4KDGu7YXTJ84M8AXDbY6HPmWwD0e8HybKiESmu1BPcP2XqvoMAhn1RH5iT0fSaL XW/TNbRMThPWVKeh8xb5GRIeZ13FTX/fk7qSyEWAh0xe0E+vEXDW+rKXXPzoNzdp f6F1rKLVqVyOfqzsRgvpBAnuqompGWp1H3VpAzDhz/OOqOriU5nVHc3SvUF2ngBD gSc/sNi9Qtlx7HKqKKpAi2gEesqqbCTT+nmdobVLhCmau1hDeZM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:15 2026 by rpki-client