$ rpki-client -vvf rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft File: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft (raw, json) Hash identifier: VzVrA0axB76nI7c99VI0cZQxkRdsTy1b1uZ2Ln9xTjA= Subject key identifier: 9D:4B:50:8E:4B:02:78:5E:83:B5:2E:1D:C6:DA:3D:9E:29:9A:7F:26 Authority key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 Certificate issuer: /CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Certificate serial: 0D1D8E5B2DBAA568629C0D4C15258128DEBCD8ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:00:39 +0000 Manifest this update: Thu 23 Jul 2026 16:55:39 +0000 Manifest next update: Fri 24 Jul 2026 20:48:39 +0000 Files and hashes: 1: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl (hash: U+soK95fXW7bMuVUqzXjnZ3l6qLBBVMUstHtj0lOOgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1d:8e:5b:2d:ba:a5:68:62:9c:0d:4c:15:25:81:28:de:bc:d8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Validity Not Before: Jul 23 16:55:39 2026 GMT Not After : Jul 24 20:48:39 2026 GMT Subject: CN=9D4B508E4B02785E83B52E1DC6DA3D9E299A7F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:3f:67:26:a3:81:a9:01:98:94:17:1f:10: ff:95:a3:3b:7a:df:eb:c7:ff:7a:79:48:11:41:6f: 2a:20:85:41:c9:6a:dc:ce:20:93:be:91:1d:36:39: da:dd:0c:8c:93:d9:03:25:a1:56:96:3e:23:c1:b7: 33:fb:56:54:12:00:68:98:12:4d:e0:78:14:28:bb: 92:09:d0:77:85:d9:75:fa:1c:8e:10:70:54:ba:02: 1d:9a:7c:cd:da:6e:fd:5d:26:68:93:59:ea:c6:45: d8:24:a1:17:33:f9:50:fe:be:1f:aa:93:79:58:c2: 1c:93:47:9f:88:9b:57:a1:3f:c6:cc:0e:b2:86:e5: 8e:18:37:26:3d:ff:75:58:8d:b7:61:bd:7b:38:9f: cf:c3:af:22:d5:e7:ba:cd:88:60:12:7a:1d:37:47: ad:70:55:1b:69:41:36:0a:5a:b3:dd:46:1a:d4:80: 16:d1:7b:9d:45:1d:fb:b3:ab:bd:5f:c0:4a:40:c5: 31:e5:5f:8a:1e:0c:01:fe:4c:14:22:52:cc:2f:3d: 2b:99:21:c1:b7:91:d9:d6:49:13:09:89:7b:97:35: 81:e8:36:f8:c8:7e:a0:8f:61:c4:91:f8:b3:fa:ac: 8d:b4:a1:c5:54:1e:73:71:a6:38:2b:2d:3c:ed:06: 3d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:50:8E:4B:02:78:5E:83:B5:2E:1D:C6:DA:3D:9E:29:9A:7F:26 X509v3 Authority Key Identifier: keyid:DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:87:d6:26:b4:53:5f:21:f5:76:83:08:37:70:ab:42:50:da: 77:cc:0c:2b:32:4f:2a:8b:bc:0f:21:3d:c9:49:83:28:62:e5: e2:14:59:60:2f:77:86:53:f0:21:9a:b4:29:d9:2f:bf:d4:f8: fd:37:18:27:ca:d4:ff:38:19:04:c4:83:cc:48:98:b6:3b:c2: 61:aa:fa:4d:bb:94:da:28:ee:b5:d8:8b:2e:69:1a:a4:28:c1: 94:67:2e:4b:b6:f6:5b:a1:06:12:3c:94:ea:d6:68:33:49:84: 77:48:cf:b3:f9:aa:e2:1b:d6:b8:8b:ba:e8:82:f2:da:25:52: 41:bd:ae:4a:68:28:86:ef:5b:51:84:6f:03:27:29:66:5c:96: 4b:5a:b1:97:86:d9:73:a8:8a:7b:a8:6d:ba:09:ac:d2:9e:92: ce:13:3f:bf:a2:2b:72:f8:9a:71:f3:d9:64:38:22:b4:86:7b: dc:c8:1e:6e:e8:db:19:4e:4f:56:4b:1e:37:30:c3:cf:95:7f: eb:b4:07:8f:dd:45:19:af:6e:fb:8e:39:89:9c:bf:61:ab:16: a0:5a:df:e3:ef:d2:41:26:b0:ae:2c:35:1d:5a:64:04:9f:51: 0e:15:7f:1f:a5:0c:13:f9:e9:12:03:f2:e2:8c:48:cf:88:e8: 01:da:9e:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDR2OWy26pWhinA1MFSWBKN682O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlG Q0YzMTIxMDAeFw0yNjA3MjMxNjU1MzlaFw0yNjA3MjQyMDQ4MzlaMDMxMTAvBgNV BAMTKDlENEI1MDhFNEIwMjc4NUU4M0I1MkUxREM2REEzRDlFMjk5QTdGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpcz9nJqOBqQGYlBcfEP+Vozt6 3+vH/3p5SBFBbyoghUHJatzOIJO+kR02OdrdDIyT2QMloVaWPiPBtzP7VlQSAGiY Ek3geBQou5IJ0HeF2XX6HI4QcFS6Ah2afM3abv1dJmiTWerGRdgkoRcz+VD+vh+q k3lYwhyTR5+Im1ehP8bMDrKG5Y4YNyY9/3VYjbdhvXs4n8/DryLV57rNiGASeh03 R61wVRtpQTYKWrPdRhrUgBbRe51FHfuzq71fwEpAxTHlX4oeDAH+TBQiUswvPSuZ IcG3kdnWSRMJiXuXNYHoNvjIfqCPYcSR+LP6rI20ocVUHnNxpjgrLTztBj1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUtQjksCeF6DtS4dxto9nimafyYwHwYDVR0j BBgwFoAU2uWdfDIJwzSd4BeOcBy06fzzEhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA0MWI0OGQtNzNjNC00Y2RkLWJjYWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0Mz MjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlGQ0YzMTIxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQUU1OUQ3QzMyMDlDMzM0OURFMDE3OEU3MDFDQjRFOUZDRjMx MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0 RTlGQ0YzMTIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSH1ia0U18h9XaDCDdwq0JQ2nfMDCsyTyqL vA8hPclJgyhi5eIUWWAvd4ZT8CGatCnZL7/U+P03GCfK1P84GQTEg8xImLY7wmGq +k27lNoo7rXYiy5pGqQowZRnLku29luhBhI8lOrWaDNJhHdIz7P5quIb1riLuuiC 8tolUkG9rkpoKIbvW1GEbwMnKWZclktasZeG2XOoinuobboJrNKeks4TP7+iK3L4 mnHz2WQ4IrSGe9zIHm7o2xlOT1ZLHjcww8+Vf+u0B4/dRRmvbvuOOYmcv2GrFqBa 3+Pv0kEmsK4sNR1aZASfUQ4Vfx+lDBP56RID8uKMSM+I6AHanpI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:44 2026 by rpki-client