$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft File: E4082D8524B052029D62D695437D63F939A1F80E.mft (raw, json) Hash identifier: JbivrLp5sbmO+4yONLZ5Clj35PyrJXUwlXXZwsuXrhs= Subject key identifier: 40:C4:6B:47:C7:D7:55:B7:64:E6:1B:54:FE:76:4D:52:26:92:D2:69 Authority key identifier: E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E Certificate issuer: /CN=E4082D8524B052029D62D695437D63F939A1F80E Certificate serial: 47A9F8F627CF8DDE9A10D865D16BF02D6701492C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 19:08:31 +0000 Manifest this update: Thu 23 Jul 2026 19:03:31 +0000 Manifest next update: Fri 24 Jul 2026 21:25:31 +0000 Files and hashes: 1: E4082D8524B052029D62D695437D63F939A1F80E.crl (hash: 00B/RKIszqAM2iSDAf2kiUixbClthBd5O17nUFg6EUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a9:f8:f6:27:cf:8d:de:9a:10:d8:65:d1:6b:f0:2d:67:01:49:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4082D8524B052029D62D695437D63F939A1F80E Validity Not Before: Jul 23 19:03:31 2026 GMT Not After : Jul 24 21:25:31 2026 GMT Subject: CN=40C46B47C7D755B764E61B54FE764D522692D269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:11:ea:85:61:55:63:60:7d:17:07:49:fc: 3c:74:3c:1a:ec:86:7c:5a:3c:b3:4c:8a:26:01:27: 47:26:8f:56:77:8b:ee:5d:2d:cc:6f:77:4f:8f:e9: a3:e3:d2:70:ab:ef:95:f0:11:50:8f:01:10:d9:62: c7:1f:18:70:64:0e:e8:f5:51:22:7f:86:da:b5:43: 49:c1:e6:4d:16:95:71:f6:f4:a2:ef:02:e2:31:5b: 12:95:58:ca:0d:37:7c:46:f6:8c:36:8a:34:24:e6: d4:15:69:9a:75:3c:0e:e3:40:8c:be:c0:8c:2b:70: 99:d3:d5:90:5b:19:05:09:46:95:20:4d:81:88:d7: b8:f2:24:e0:9e:db:63:a0:41:49:c7:87:6e:22:53: 86:20:65:db:31:9f:78:97:72:54:84:ba:29:e3:74: 3d:b5:1c:0f:5f:f8:ec:ec:23:29:f5:c4:2a:c1:15: 75:7d:0f:57:ca:51:8b:be:dc:f6:41:b7:ef:1b:f2: 7d:46:65:b0:a7:56:c7:b7:51:1f:7d:94:39:e6:65: fd:23:fa:b7:59:4f:95:17:16:2a:d5:42:83:f3:6d: 73:73:b9:39:07:7a:fd:63:4d:9e:cf:ad:4c:b6:ba: 7e:11:d2:ef:e5:21:20:ec:b2:ea:12:99:2c:f9:b9: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:6B:47:C7:D7:55:B7:64:E6:1B:54:FE:76:4D:52:26:92:D2:69 X509v3 Authority Key Identifier: keyid:E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f6:aa:9a:0b:49:2f:c9:f3:bf:4c:42:a2:d9:76:c4:59:96: 42:38:43:19:e6:76:3d:90:73:d0:1f:3b:dd:e5:6f:83:1a:21: 4d:aa:30:ae:2f:ff:84:9b:60:6d:39:39:fe:0a:2b:f6:26:ac: 6d:1b:69:05:ec:61:0c:9a:da:e6:e2:c4:a6:ef:88:7c:01:4e: 9a:ce:f9:7b:15:64:69:1e:56:e1:06:f3:86:fb:f5:6f:ea:07: 46:28:58:a7:9d:92:2d:7c:f4:d3:00:73:25:01:f3:35:20:73: d1:7b:cc:4f:c9:c6:88:bc:8b:df:40:6d:39:6c:9a:8e:49:d6: e8:90:00:c9:92:69:0c:2f:53:d7:63:58:b1:7e:55:d9:27:77: 4b:52:81:86:45:44:ec:8c:56:72:40:32:07:0e:d9:45:e7:ef: 30:d6:07:c4:42:e7:cb:df:7c:b2:c3:a7:7b:0a:79:3e:41:78: a5:96:77:4b:ca:fe:2c:af:2a:60:1a:c3:94:39:3c:ab:61:2b: c3:86:53:4a:f1:16:6b:fe:34:1a:63:3c:8e:1a:ec:d0:c9:58: 58:98:9c:85:00:d4:8a:61:46:83:30:43:49:78:8a:b4:8e:06: 6d:b0:ce:fd:9d:50:35:97:f9:91:b7:90:97:56:32:ea:6e:17: cb:d0:3f:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6n49ifPjd6aENhl0WvwLWcBSSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYzRjkz OUExRjgwRTAeFw0yNjA3MjMxOTAzMzFaFw0yNjA3MjQyMTI1MzFaMDMxMTAvBgNV BAMTKDQwQzQ2QjQ3QzdENzU1Qjc2NEU2MUI1NEZFNzY0RDUyMjY5MkQyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVRHqhWFVY2B9FwdJ/Dx0PBrs hnxaPLNMiiYBJ0cmj1Z3i+5dLcxvd0+P6aPj0nCr75XwEVCPARDZYscfGHBkDuj1 USJ/htq1Q0nB5k0WlXH29KLvAuIxWxKVWMoNN3xG9ow2ijQk5tQVaZp1PA7jQIy+ wIwrcJnT1ZBbGQUJRpUgTYGI17jyJOCe22OgQUnHh24iU4YgZdsxn3iXclSEuinj dD21HA9f+OzsIyn1xCrBFXV9D1fKUYu+3PZBt+8b8n1GZbCnVse3UR99lDnmZf0j +rdZT5UXFirVQoPzbXNzuTkHev1jTZ7PrUy2un4R0u/lISDssuoSmSz5udvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQMRrR8fXVbdk5htU/nZNUiaS0mkwHwYDVR0j BBgwFoAU5AgthSSwUgKdYtaVQ31j+Tmh+A4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzYjY3ZTgtYTk3My00MGZlLWJhMDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUy NEIwNTIwMjlENjJENjk1NDM3RDYzRjkzOUExRjgwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDA4MkQ4NTI0QjA1MjAyOUQ2MkQ2OTU0MzdENjNGOTM5QTFG ODBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYz RjkzOUExRjgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADf2qpoLSS/J879MQqLZdsRZlkI4Qxnmdj2Q c9AfO93lb4MaIU2qMK4v/4SbYG05Of4KK/YmrG0baQXsYQya2ubixKbviHwBTprO +XsVZGkeVuEG84b79W/qB0YoWKedki189NMAcyUB8zUgc9F7zE/Jxoi8i99AbTls mo5J1uiQAMmSaQwvU9djWLF+Vdknd0tSgYZFROyMVnJAMgcO2UXn7zDWB8RC58vf fLLDp3sKeT5BeKWWd0vK/iyvKmAaw5Q5PKthK8OGU0rxFmv+NBpjPI4a7NDJWFiY nIUA1IphRoMwQ0l4irSOBm2wzv2dUDWX+ZG3kJdWMupuF8vQP4s= -----END CERTIFICATE-----Generated at Fri Jul 24 10:06:19 2026 by rpki-client