$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: usjRIuMqYXhcwczyST1R82jntGtH3lihDpdfLofvWMg= Subject key identifier: B6:F6:AA:39:91:60:91:5C:02:34:B3:F6:25:5E:C9:DA:6F:B4:52:2A Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 2BB06B4597A80617BCB46F1ED363A713CDD6DB10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:24:07 +0000 Manifest this update: Thu 17 Sep 2026 00:19:07 +0000 Manifest next update: Fri 18 Sep 2026 03:19:07 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: 59y5WVo95CGgFH6QW6qVgCJhPZypqCctN3ydP8++kdg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b0:6b:45:97:a8:06:17:bc:b4:6f:1e:d3:63:a7:13:cd:d6:db:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: Sep 17 00:19:07 2026 GMT Not After : Sep 18 03:19:07 2026 GMT Subject: CN=B6F6AA399160915C0234B3F6255EC9DA6FB4522A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8b:75:10:5c:08:de:f1:67:7d:e2:f2:d0:6b: 62:c1:be:b6:27:55:db:61:f2:59:38:14:92:17:b3: 4a:f0:3b:f1:14:e8:49:5c:29:3e:0b:3a:00:5b:e4: e9:86:da:5b:e7:18:c6:dd:94:b8:30:14:79:57:74: 3f:7b:c7:da:14:a0:04:f2:e8:b8:7f:4a:c6:6c:3e: 7e:d3:bd:08:26:a3:34:95:49:3d:b1:ce:14:d7:7d: 86:85:e2:a5:66:b5:bc:88:6e:70:f9:3c:92:20:24: 1e:38:9c:6f:1c:d6:ab:f6:6b:0e:cf:79:36:47:c6: c1:06:88:60:ef:34:0b:6c:c0:5e:d2:b1:c6:c5:33: 14:b3:53:1a:c9:82:82:9c:70:1d:b0:e8:7a:32:6d: 65:0e:ed:1d:e1:f6:5f:53:95:9f:cc:f6:d7:09:a5: d2:f6:81:ad:b8:b9:63:83:12:ad:f0:b3:b3:d2:95: bc:f2:79:aa:49:d1:35:0f:1d:9c:09:62:f8:00:3a: 74:cc:b4:f0:2a:7a:f0:94:1f:f2:4c:fd:97:38:9e: d3:8b:1e:75:6a:a2:98:4f:40:09:2c:1b:bc:2d:34: b2:70:17:bd:7a:31:37:e9:45:2b:d7:78:a2:c1:bb: 7c:b4:ec:ee:fb:bd:36:c9:4a:8f:cb:23:6e:fc:71: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F6:AA:39:91:60:91:5C:02:34:B3:F6:25:5E:C9:DA:6F:B4:52:2A X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:97:9e:c0:dc:ef:74:2e:d5:93:47:87:47:45:89:a8:d9:3d: 1c:93:cc:78:ad:b0:ac:96:78:90:63:a9:91:db:e4:9b:39:c1: 97:1e:22:02:77:49:0e:ec:6d:b2:f0:da:b8:6d:37:e8:9c:07: bc:7a:2f:e2:5e:ab:e8:5e:b8:aa:6a:dd:b8:ee:85:92:90:08: 9a:81:79:bb:99:2c:af:14:0e:20:d8:dc:86:be:0f:ac:47:04: ea:40:d0:77:09:c1:ad:02:7c:3f:8c:eb:3a:05:46:9d:b3:14: 14:c5:50:3b:a2:52:ab:f8:be:bf:fd:73:bc:d5:08:2e:37:a7: 35:02:18:1b:fc:79:37:c7:aa:ea:d2:55:81:b9:74:55:4d:79: f2:b9:b2:38:2d:6f:7d:ab:24:7e:84:5c:e4:33:4d:ed:3a:4f: ba:06:53:c2:e5:11:5b:0c:07:bc:7d:12:b2:13:b8:58:ac:1c: e5:63:d1:c8:91:57:53:9b:b7:0b:df:2e:4b:b9:9d:14:da:04: a9:c6:a4:ea:a1:ad:6f:fd:c1:d7:fb:d3:87:9d:d5:a6:2f:32: 24:c4:20:1d:e1:80:4a:9e:14:41:66:eb:c8:ca:33:dc:18:a7: 4c:41:03:1f:91:71:07:50:39:55:ea:44:37:13:dc:85:11:a8: c0:3b:0a:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7BrRZeoBhe8tG8e02OnE83W2xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA5MTcwMDE5MDdaFw0yNjA5MTgwMzE5MDdaMDMxMTAvBgNV BAMTKEI2RjZBQTM5OTE2MDkxNUMwMjM0QjNGNjI1NUVDOURBNkZCNDUyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDki3UQXAje8Wd94vLQa2LBvrYn Vdth8lk4FJIXs0rwO/EU6ElcKT4LOgBb5OmG2lvnGMbdlLgwFHlXdD97x9oUoATy 6Lh/SsZsPn7TvQgmozSVST2xzhTXfYaF4qVmtbyIbnD5PJIgJB44nG8c1qv2aw7P eTZHxsEGiGDvNAtswF7SscbFMxSzUxrJgoKccB2w6HoybWUO7R3h9l9TlZ/M9tcJ pdL2ga24uWODEq3ws7PSlbzyeapJ0TUPHZwJYvgAOnTMtPAqevCUH/JM/Zc4ntOL HnVqophPQAksG7wtNLJwF716MTfpRSvXeKLBu3y07O77vTbJSo/LI278ce4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtvaqOZFgkVwCNLP2JV7J2m+0UiowHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+XnsDc73Qu1ZNHh0dFiajZPRyTzHitsKyW eJBjqZHb5Js5wZceIgJ3SQ7sbbLw2rhtN+icB7x6L+Jeq+heuKpq3bjuhZKQCJqB ebuZLK8UDiDY3Ia+D6xHBOpA0HcJwa0CfD+M6zoFRp2zFBTFUDuiUqv4vr/9c7zV CC43pzUCGBv8eTfHqurSVYG5dFVNefK5sjgtb32rJH6EXOQzTe06T7oGU8LlEVsM B7x9ErITuFisHOVj0ciRV1ObtwvfLku5nRTaBKnGpOqhrW/9wdf704ed1aYvMiTE IB3hgEqeFEFm68jKM9wYp0xBAx+RcQdQOVXqRDcT3IURqMA7Cg4= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:45 2026 by rpki-client