$ rpki-client -vvf rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft File: 1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft (raw, json) Hash identifier: PTRFm641quh9jCSNtnZFsyZbIWxdchMGE0gTp/0sgHg= Subject key identifier: EC:A1:A5:14:4E:E5:66:96:F2:AB:47:BF:DB:D0:46:4B:79:66:A7:0A Authority key identifier: 1E:EE:6F:99:4B:4A:68:8B:F6:5A:9A:26:A9:B8:C9:0B:9B:3B:D2:7F Certificate issuer: /CN=1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F Certificate serial: 5389FE93AAD421E8376009DD61936470A796B2EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:27 +0000 Manifest this update: Fri 24 Jul 2026 03:18:27 +0000 Manifest next update: Sat 25 Jul 2026 06:09:27 +0000 Files and hashes: 1: 1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl (hash: KXkP7GFgBEdGRjLRqFU7w7yuJVi3nDWUZU231eApnlM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:89:fe:93:aa:d4:21:e8:37:60:09:dd:61:93:64:70:a7:96:b2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F Validity Not Before: Jul 24 03:18:27 2026 GMT Not After : Jul 25 06:09:27 2026 GMT Subject: CN=ECA1A5144EE56696F2AB47BFDBD0464B7966A70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:a0:ac:af:eb:f1:3c:68:83:12:fd:f8:13: b4:a4:3e:6e:38:92:e5:98:1f:6d:e4:26:46:77:66: 36:f9:21:ba:84:47:07:b1:da:8f:41:89:87:02:15: de:9a:55:ab:c5:ef:04:9e:d7:74:a9:95:3a:9e:66: ca:7a:78:02:e9:72:58:e0:55:cd:85:d6:14:c5:da: de:e5:55:a7:97:ab:af:0b:66:b2:87:e8:d1:58:8d: 3d:b2:16:e2:5c:0d:e4:21:38:ab:3d:1e:89:af:d9: 6b:be:0f:1b:66:c3:04:74:1f:43:11:ba:4c:c3:09: 92:f0:3f:b2:48:82:97:de:f3:11:96:29:15:d5:43: 27:c2:bf:e3:f2:b8:da:39:7a:92:6a:7d:46:b8:85: b6:4e:53:69:38:9b:04:b9:f7:c3:dc:a2:d0:0c:d1: 61:e9:c0:6a:d7:34:ad:dd:8c:88:66:e3:e8:26:86: 50:c8:18:53:12:96:71:d7:8f:03:c7:ae:9d:92:01: 69:2a:12:bd:e2:6a:52:f4:0a:70:e2:23:8f:3c:ca: 98:76:47:d1:d2:29:21:cd:fe:5c:47:76:13:f4:69: 8e:8f:3e:ab:0f:67:dd:49:f4:a7:9d:47:fc:63:9f: 8e:f7:16:44:9f:b6:5e:40:28:a9:64:4c:a3:ad:7a: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A1:A5:14:4E:E5:66:96:F2:AB:47:BF:DB:D0:46:4B:79:66:A7:0A X509v3 Authority Key Identifier: keyid:1E:EE:6F:99:4B:4A:68:8B:F6:5A:9A:26:A9:B8:C9:0B:9B:3B:D2:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b4:e5:11:e3:89:61:07:f1:b0:4d:c2:7f:83:a1:9c:ae:53: 14:6b:9e:91:17:fd:7b:60:00:13:19:39:5b:11:eb:5d:bd:19: 32:ec:a5:ff:f7:27:87:e6:68:55:2a:74:c5:f8:79:8a:22:8a: 0b:7d:9f:e0:f0:74:fd:79:60:fe:9e:a0:d3:21:90:bd:12:1e: 81:7c:26:78:a8:a8:35:06:65:9e:6f:84:27:ae:2f:f1:71:1f: c4:b9:da:2e:6a:75:b1:90:4a:a0:26:a4:fa:35:1c:36:57:d8: 03:11:7c:0b:66:65:33:a4:82:21:b2:8a:c6:e9:ef:a8:d8:35: a3:cc:b9:f3:e4:88:51:c7:d9:b5:c9:2a:51:fc:fa:98:62:a0: c7:1e:b6:3a:51:22:7c:21:ad:ef:24:18:4d:95:ff:16:d1:8f: 58:07:63:b2:46:82:df:da:1a:28:b0:d9:53:9c:19:cc:86:9d: 1d:93:d6:b2:bf:97:27:39:99:65:ab:de:20:e8:49:93:16:ef: 25:63:7c:a5:13:fa:df:75:97:63:23:09:69:01:78:76:69:c8: ef:ef:d3:51:37:f8:d3:9c:12:e0:ed:38:5c:47:ba:9f:27:90: 00:e1:88:d6:a9:fe:ad:9d:68:07:eb:04:88:ba:5f:0a:da:6e: 7d:ef:bf:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4n+k6rUIeg3YAndYZNkcKeWsu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRTZGOTk0QjRBNjg4QkY2NUE5QTI2QTlCOEM5MEI5 QjNCRDI3RjAeFw0yNjA3MjQwMzE4MjdaFw0yNjA3MjUwNjA5MjdaMDMxMTAvBgNV BAMTKEVDQTFBNTE0NEVFNTY2OTZGMkFCNDdCRkRCRDA0NjRCNzk2NkE3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsKCsr+vxPGiDEv34E7SkPm44 kuWYH23kJkZ3Zjb5IbqERwex2o9BiYcCFd6aVavF7wSe13SplTqeZsp6eALpcljg Vc2F1hTF2t7lVaeXq68LZrKH6NFYjT2yFuJcDeQhOKs9Homv2Wu+DxtmwwR0H0MR ukzDCZLwP7JIgpfe8xGWKRXVQyfCv+PyuNo5epJqfUa4hbZOU2k4mwS598PcotAM 0WHpwGrXNK3djIhm4+gmhlDIGFMSlnHXjwPHrp2SAWkqEr3ialL0CnDiI488yph2 R9HSKSHN/lxHdhP0aY6PPqsPZ91J9KedR/xjn473FkSftl5AKKlkTKOterQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KGlFE7lZpbyq0e/29BGS3lmpwowHwYDVR0j BBgwFoAUHu5vmUtKaIv2WpomqbjJC5s70n8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3ZWEwZTYtNDNlYS00MzFlLWEwMTMtMGIyMDFiMmMwZDllLzAvMUVFRTZGOTk0 QjRBNjg4QkY2NUE5QTI2QTlCOEM5MEI5QjNCRDI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVFNkY5OTRCNEE2ODhCRjY1QTlBMjZBOUI4QzkwQjlCM0JE MjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvMUVFRTZGOTk0QjRBNjg4QkY2NUE5QTI2QTlCOEM5 MEI5QjNCRDI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKC05RHjiWEH8bBNwn+DoZyuUxRrnpEX/Xtg ABMZOVsR6129GTLspf/3J4fmaFUqdMX4eYoiigt9n+DwdP15YP6eoNMhkL0SHoF8 JnioqDUGZZ5vhCeuL/FxH8S52i5qdbGQSqAmpPo1HDZX2AMRfAtmZTOkgiGyisbp 76jYNaPMufPkiFHH2bXJKlH8+phioMcetjpRInwhre8kGE2V/xbRj1gHY7JGgt/a Giiw2VOcGcyGnR2T1rK/lyc5mWWr3iDoSZMW7yVjfKUT+t91l2MjCWkBeHZpyO/v 01E3+NOcEuDtOFxHup8nkADhiNap/q2daAfrBIi6Xwrabn3vv6c= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:19 2026 by rpki-client