$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft (raw, json) Hash identifier: ulSqvk1JVsqo5T0kyL/khBugPdVXHvdT6c37uqkT88U= Subject key identifier: DE:48:9B:18:D4:B6:56:E6:8D:53:73:D8:08:1F:D7:7E:AE:D0:09:AE Authority key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Certificate issuer: /CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Certificate serial: 3D2C10F817898B8C67A7C1FE0400E909AB247299 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:47:17 +0000 Manifest this update: Fri 19 Jun 2026 21:42:17 +0000 Manifest next update: Sun 21 Jun 2026 00:57:17 +0000 Files and hashes: 1: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl (hash: J+CJfZX1qyB+rZ/fOXraaLbM88l6rAxQrXDqCTzHOsc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2c:10:f8:17:89:8b:8c:67:a7:c1:fe:04:00:e9:09:ab:24:72:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Validity Not Before: Jun 19 21:42:17 2026 GMT Not After : Jun 21 00:57:17 2026 GMT Subject: CN=DE489B18D4B656E68D5373D8081FD77EAED009AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:d3:28:6c:7a:a7:4a:9f:a3:c7:6f:19:9a: 8c:05:49:29:7a:12:bf:34:cf:e8:bc:9b:17:d5:16: 6b:16:bd:bc:ce:e8:9c:d7:d3:d3:70:e7:e2:15:83: 7d:4a:c9:5c:13:38:51:ae:77:78:62:c7:39:c6:d3: 08:e6:da:55:14:1a:56:17:69:55:a5:8e:ad:40:7b: 6c:b0:39:49:13:e5:5c:d1:2d:ae:0a:0c:54:10:fa: 78:10:00:c6:db:e8:ae:c4:a9:70:17:3a:a0:d0:6d: 5b:4b:28:b6:0a:ba:69:43:f2:9d:dc:7d:72:fc:19: 53:57:cd:cc:6c:cb:56:c4:ad:61:9a:1f:a5:9f:b4: b4:b4:44:16:d1:bb:27:a4:e9:a2:1e:78:c9:a1:24: a2:6b:11:1f:4f:35:d4:90:fb:a7:5e:e1:e2:94:12: a9:06:6c:4b:b6:75:cc:0e:58:fa:41:21:fe:8e:d5: 25:d1:4a:1f:64:70:b2:30:cf:db:28:16:e9:04:e5: cd:29:1b:3b:b6:c9:a0:a0:d6:81:4b:fc:1d:8a:fa: 9c:ed:09:3e:47:d0:47:ef:a4:d1:a7:91:6d:a1:73: 2e:e4:f6:04:b5:05:22:86:6f:3a:04:4f:74:bb:51: d2:65:b4:10:9e:75:25:f3:d4:36:94:19:96:9a:1a: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:48:9B:18:D4:B6:56:E6:8D:53:73:D8:08:1F:D7:7E:AE:D0:09:AE X509v3 Authority Key Identifier: keyid:7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:49:e2:a9:bb:ac:cd:2e:f3:35:26:4d:aa:a1:ab:f8:55:10: 24:d8:bb:a6:bd:1a:02:e4:51:6c:12:7e:f8:5c:de:ea:11:9e: f4:df:f3:5b:09:2b:31:a3:d9:51:7d:8a:34:f5:0f:d8:44:7e: c4:6c:e8:14:37:95:a8:8c:5c:af:f8:64:3b:73:74:1c:b2:9b: de:06:0b:58:79:dd:a1:20:09:96:f2:cd:4a:05:28:c8:f2:8a: 4c:6d:42:1b:72:7d:c1:c9:83:95:37:0f:a9:fd:39:ca:6a:bf: ca:0c:db:a6:b9:0f:df:2d:21:1a:21:d6:47:7d:98:3d:f2:41: 80:15:0d:ea:11:b6:74:4e:24:25:b1:09:66:55:e8:e4:7d:5e: ed:ea:de:dc:7d:65:53:06:ee:c8:a0:77:b1:58:a6:53:96:e7: 3f:df:ee:f8:52:95:df:1c:1f:d6:d2:16:d9:1a:2e:e8:74:78: 58:bb:92:a9:11:e5:54:ee:df:dd:18:44:01:62:04:55:69:b6: e0:1f:1b:3f:bb:71:c2:73:60:8d:71:fb:24:5d:77:04:6a:75: 5e:db:bc:3b:a0:0a:76:53:f9:cf:1e:eb:97:d0:32:ee:4c:1e: 74:55:0c:08:34:1e:85:fb:07:36:0d:97:ce:e7:b7:d0:c9:16: 48:4a:40:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSwQ+BeJi4xnp8H+BADpCaskcpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1 QkM5OTM4QTAeFw0yNjA2MTkyMTQyMTdaFw0yNjA2MjEwMDU3MTdaMDMxMTAvBgNV BAMTKERFNDg5QjE4RDRCNjU2RTY4RDUzNzNEODA4MUZENzdFQUVEMDA5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6tMobHqnSp+jx28ZmowFSSl6 Er80z+i8mxfVFmsWvbzO6JzX09Nw5+IVg31KyVwTOFGud3hixznG0wjm2lUUGlYX aVWljq1Ae2ywOUkT5VzRLa4KDFQQ+ngQAMbb6K7EqXAXOqDQbVtLKLYKumlD8p3c fXL8GVNXzcxsy1bErWGaH6WftLS0RBbRuyek6aIeeMmhJKJrER9PNdSQ+6de4eKU EqkGbEu2dcwOWPpBIf6O1SXRSh9kcLIwz9soFukE5c0pGzu2yaCg1oFL/B2K+pzt CT5H0EfvpNGnkW2hcy7k9gS1BSKGbzoET3S7UdJltBCedSXz1DaUGZaaGmF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3kibGNS2VuaNU3PYCB/Xfq7QCa4wHwYDVR0j BBgwFoAUf45oCyTKktBpQoGFuroan1vJk4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIy NENBOTJEMDY5NDI4MTg1QkFCQTFBOUY1QkM5OTM4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjhFNjgwQjI0Q0E5MkQwNjk0MjgxODVCQUJBMUE5RjVCQzk5 MzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvN0Y4RTY4MEIyNENBOTJEMDY5NDI4MTg1QkFCQTFB OUY1QkM5OTM4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVJ4qm7rM0u8zUmTaqhq/hVECTYu6a9GgLk UWwSfvhc3uoRnvTf81sJKzGj2VF9ijT1D9hEfsRs6BQ3laiMXK/4ZDtzdByym94G C1h53aEgCZbyzUoFKMjyikxtQhtyfcHJg5U3D6n9Ocpqv8oM26a5D98tIRoh1kd9 mD3yQYAVDeoRtnROJCWxCWZV6OR9Xu3q3tx9ZVMG7sigd7FYplOW5z/f7vhSld8c H9bSFtkaLuh0eFi7kqkR5VTu390YRAFiBFVptuAfGz+7ccJzYI1x+yRddwRqdV7b vDugCnZT+c8e65fQMu5MHnRVDAg0HoX7BzYNl87nt9DJFkhKQAE= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:03 2026 by rpki-client