$ rpki-client -vvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json) Hash identifier: 5S+lo7PDd5giHCL6G7Os8zD9hgdyHX0BuYFs7ESUqv4= Subject key identifier: 57:09:72:F6:17:3F:72:FC:F2:C2:AF:2B:34:0F:10:DC:1B:08:13:77 Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Certificate serial: 172EF67F1A51517BFAD6D9CB6448E9387965D161 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:31:32 +0000 Manifest this update: Thu 23 Jul 2026 17:26:32 +0000 Manifest next update: Fri 24 Jul 2026 18:29:32 +0000 Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: 5CHrRZhlp2W58PFqWv0VRZNlWSj1pg2Jj0OBXMS16B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2e:f6:7f:1a:51:51:7b:fa:d6:d9:cb:64:48:e9:38:79:65:d1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Validity Not Before: Jul 23 17:26:32 2026 GMT Not After : Jul 24 18:29:32 2026 GMT Subject: CN=570972F6173F72FCF2C2AF2B340F10DC1B081377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:2f:b7:d2:1f:da:86:2f:e8:c8:e2:63:0a: 3e:71:2f:46:70:41:5c:13:3e:5a:e1:a6:dc:3c:d8: f4:74:96:24:90:db:9d:20:99:bd:c5:e1:4c:cc:e1: 8d:c6:c5:82:79:dc:cf:c4:a5:ef:03:09:cd:fe:a9: dd:9b:3c:b8:61:54:56:ef:b6:d6:62:54:d9:57:b8: 10:b3:c3:af:51:a1:3e:83:c7:59:e4:8e:11:8b:bf: 97:40:ba:b2:6b:73:b4:a0:69:e3:57:f1:39:b9:8d: 22:77:84:e4:0e:72:e1:82:c1:b1:ac:c8:a4:d7:29: 46:f7:d2:68:b5:8f:4e:f9:32:35:cb:ec:8e:de:53: bc:6a:37:2f:93:b9:2e:7e:33:f4:e2:9e:49:c4:04: 10:01:fc:c9:7b:cf:f2:b0:17:93:07:de:fa:53:7b: 4c:d6:cf:2c:9c:65:13:49:84:6d:c7:ae:af:0f:1f: 1e:14:09:20:d0:3e:3a:49:61:24:1a:45:27:f2:f1: 7a:f8:d5:0a:20:4a:88:17:55:65:d1:83:f2:86:b7: c2:c0:a4:a4:2d:32:91:d1:af:75:bd:aa:fd:06:ee: 53:82:95:ca:ee:84:80:f4:b0:42:14:2d:93:c2:93: 62:dd:90:22:48:30:d3:aa:5a:05:08:3f:d2:e8:7b: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:72:F6:17:3F:72:FC:F2:C2:AF:2B:34:0F:10:DC:1B:08:13:77 X509v3 Authority Key Identifier: keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:97:7b:49:68:74:2e:69:b1:56:54:76:62:c3:5b:7c:8a:92: bd:c1:ba:80:d5:2d:cb:74:2c:5d:62:c4:99:f7:ad:09:b4:6b: 14:f2:45:b3:73:10:c2:f4:32:cf:ab:95:0f:13:75:aa:11:c0: 80:35:52:ca:cb:92:ec:20:c8:3b:21:52:8a:8d:05:2d:f5:32: 79:bd:4f:83:7e:6b:fc:3d:2e:f7:06:76:27:8f:31:e9:7b:d0: 5d:7f:b1:b6:85:f7:9a:a7:1e:77:61:ba:c5:ac:0d:af:13:f2: b3:ab:db:d2:60:78:e3:0a:7e:95:55:20:fc:68:24:8a:63:7e: de:5c:ed:15:87:3c:e0:14:c8:96:09:d9:83:00:e4:fb:4b:23: 89:6f:b8:6a:17:de:57:7c:2f:1e:21:06:fe:18:89:d8:41:c8: 25:d6:98:7b:f5:95:a6:48:f0:38:ef:8b:d2:ce:96:32:b8:4c: 9f:36:a0:c6:e9:1d:05:24:59:28:1a:6d:43:c4:9f:b3:49:d5: 7d:d0:3a:89:de:1a:18:77:f9:d3:7b:b7:8e:92:5e:20:28:45: cb:71:82:9a:8d:31:e6:b9:2c:fc:ee:a4:58:15:b2:60:7c:30: 08:35:65:e5:59:5d:ee:5f:2c:93:73:3a:12:76:63:bb:02:35: 53:85:a3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFy72fxpRUXv61tnLZEjpOHll0WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYyODEz N0MxOTdEQzAeFw0yNjA3MjMxNzI2MzJaFw0yNjA3MjQxODI5MzJaMDMxMTAvBgNV BAMTKDU3MDk3MkY2MTczRjcyRkNGMkMyQUYyQjM0MEYxMERDMUIwODEzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4i+30h/ahi/oyOJjCj5xL0Zw QVwTPlrhptw82PR0liSQ250gmb3F4UzM4Y3GxYJ53M/Epe8DCc3+qd2bPLhhVFbv ttZiVNlXuBCzw69RoT6Dx1nkjhGLv5dAurJrc7SgaeNX8Tm5jSJ3hOQOcuGCwbGs yKTXKUb30mi1j075MjXL7I7eU7xqNy+TuS5+M/TinknEBBAB/Ml7z/KwF5MH3vpT e0zWzyycZRNJhG3Hrq8PHx4UCSDQPjpJYSQaRSfy8Xr41QogSogXVWXRg/KGt8LA pKQtMpHRr3W9qv0G7lOClcruhID0sEIULZPCk2LdkCJIMNOqWgUIP9LoeylbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwly9hc/cvzywq8rNA8Q3BsIE3cwHwYDVR0j BBgwFoAU1sCVcVeh7aJPDe/20P7ygTfBl9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzOTE2OTgtMDhlYy00NzkwLWExODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1 N0ExRURBMjRGMERFRkY2RDBGRUYyODEzN0MxOTdEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkMwOTU3MTU3QTFFREEyNEYwREVGRjZEMEZFRjI4MTM3QzE5 N0RDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYy ODEzN0MxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiXe0lodC5psVZUdmLDW3yKkr3BuoDVLct0 LF1ixJn3rQm0axTyRbNzEML0Ms+rlQ8TdaoRwIA1UsrLkuwgyDshUoqNBS31Mnm9 T4N+a/w9LvcGdiePMel70F1/sbaF95qnHndhusWsDa8T8rOr29JgeOMKfpVVIPxo JIpjft5c7RWHPOAUyJYJ2YMA5PtLI4lvuGoX3ld8Lx4hBv4YidhByCXWmHv1laZI 8Djvi9LOljK4TJ82oMbpHQUkWSgabUPEn7NJ1X3QOoneGhh3+dN7t46SXiAoRctx gpqNMea5LPzupFgVsmB8MAg1ZeVZXe5fLJNzOhJ2Y7sCNVOFo8s= -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:18 2026 by rpki-client