$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: Cy255Zw+cCkrJT8DpCe5aIOh95FP64L0eMpwFQ9qyoI= Subject key identifier: CF:E9:A0:3B:01:CF:DC:1E:B9:44:69:80:19:5E:AD:D5:42:BD:62:97 Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 3A13114C70D86B8618B3B87ECB91BF7C6FE7FBAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:41:31 +0000 Manifest this update: Thu 23 Jul 2026 21:36:31 +0000 Manifest next update: Fri 24 Jul 2026 23:46:31 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: qg+yGPfe4Go9Hj5rnz1HLMNWoAZBpCmhrbF5PDoJ7lU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:13:11:4c:70:d8:6b:86:18:b3:b8:7e:cb:91:bf:7c:6f:e7:fb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: Jul 23 21:36:31 2026 GMT Not After : Jul 24 23:46:31 2026 GMT Subject: CN=CFE9A03B01CFDC1EB9446980195EADD542BD6297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:1e:e0:bd:34:40:05:fc:30:dc:ec:82:76: 98:21:47:d9:05:79:5b:d9:bf:d3:6b:d0:7a:c3:5b: 80:27:e5:70:29:00:89:82:fe:b4:20:46:32:a1:25: 67:e1:54:86:8b:28:ad:76:77:46:eb:28:87:65:fd: c9:87:4c:1c:0a:ac:7f:55:13:7c:ea:3d:d2:31:eb: e4:7c:48:04:a2:c4:44:93:c9:ef:5b:bf:11:8e:93: a6:b6:df:86:c6:a7:88:54:60:15:4e:5e:59:5c:6c: 44:6e:b5:99:30:f4:1d:5d:42:8a:0c:27:1b:49:46: dc:95:8c:ec:63:34:41:6a:d1:b9:87:e9:44:0a:75: f2:ce:c8:80:a7:50:b2:1f:da:b7:07:b8:4f:c3:7d: a1:e0:c3:ca:7b:56:4c:8b:49:ec:c7:9a:bf:eb:9d: 82:98:df:67:39:1e:7c:41:22:64:50:00:c4:a5:76: e2:ab:e5:01:b6:ec:6d:a7:42:8c:c5:08:d8:55:c3: a4:85:c3:1b:07:d2:76:c1:a1:ea:40:07:bc:6a:c5: 0b:34:45:22:c7:df:cb:3e:d7:f8:21:05:8e:08:3d: a1:5d:99:5a:9b:24:b9:02:7d:e7:8b:89:cd:cc:6a: fd:b5:6b:bb:25:e6:ad:3c:0d:99:77:fa:36:1c:ac: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E9:A0:3B:01:CF:DC:1E:B9:44:69:80:19:5E:AD:D5:42:BD:62:97 X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a5:94:dc:23:40:39:02:f4:fc:b1:b9:98:f8:5e:2e:5a:63: d0:44:87:d8:8f:02:62:6b:5b:9a:0e:fb:a8:16:06:54:4c:58: 99:48:91:87:ab:1e:d0:0a:38:d2:9d:96:db:74:d2:26:37:31: 8e:57:24:ca:6a:e6:a6:18:20:fd:50:7d:85:3a:9e:35:6a:77: 02:4d:b5:d7:61:c4:8f:98:78:28:e8:3d:2f:6b:51:a6:3b:88: 22:db:15:ed:89:a2:e0:07:fe:99:96:e0:41:db:45:fa:8d:ba: 77:4b:d7:69:06:bd:0c:ef:08:94:56:70:27:d8:9d:0f:78:17: 02:24:92:d6:d4:5b:66:ea:36:71:a3:7b:85:5c:b4:8d:ab:41: be:af:6e:87:7a:fb:d4:d8:b0:b7:d5:cc:eb:e7:4f:10:95:b2: 30:51:c9:8b:13:b0:7d:c0:ce:26:b4:c5:ef:0c:e7:a6:2e:4d: 11:48:40:1f:07:62:db:a0:67:6c:49:86:4f:d7:cf:ea:be:22: 15:7e:e7:ec:55:ae:6f:00:54:b7:0b:7e:df:df:8e:97:7e:0c: 31:1b:72:73:52:d3:f2:ed:33:67:83:a7:14:64:65:6d:f5:ed: 6e:15:93:34:9c:e3:fa:f0:ad:7a:f0:75:e8:49:0f:62:9e:2a: 56:7a:15:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhMRTHDYa4YYs7h+y5G/fG/n+68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA3MjMyMTM2MzFaFw0yNjA3MjQyMzQ2MzFaMDMxMTAvBgNV BAMTKENGRTlBMDNCMDFDRkRDMUVCOTQ0Njk4MDE5NUVBREQ1NDJCRDYyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4B7gvTRABfww3OyCdpghR9kF eVvZv9Nr0HrDW4An5XApAImC/rQgRjKhJWfhVIaLKK12d0brKIdl/cmHTBwKrH9V E3zqPdIx6+R8SASixESTye9bvxGOk6a234bGp4hUYBVOXllcbERutZkw9B1dQooM JxtJRtyVjOxjNEFq0bmH6UQKdfLOyICnULIf2rcHuE/DfaHgw8p7VkyLSezHmr/r nYKY32c5HnxBImRQAMSlduKr5QG27G2nQozFCNhVw6SFwxsH0nbBoepAB7xqxQs0 RSLH38s+1/ghBY4IPaFdmVqbJLkCfeeLic3Mav21a7sl5q08DZl3+jYcrJEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz+mgOwHP3B65RGmAGV6t1UK9YpcwHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHellNwjQDkC9PyxuZj4Xi5aY9BEh9iPAmJr W5oO+6gWBlRMWJlIkYerHtAKONKdltt00iY3MY5XJMpq5qYYIP1QfYU6njVqdwJN tddhxI+YeCjoPS9rUaY7iCLbFe2JouAH/pmW4EHbRfqNundL12kGvQzvCJRWcCfY nQ94FwIkktbUW2bqNnGje4VctI2rQb6vbod6+9TYsLfVzOvnTxCVsjBRyYsTsH3A zia0xe8M56YuTRFIQB8HYtugZ2xJhk/Xz+q+IhV+5+xVrm8AVLcLft/fjpd+DDEb cnNS0/LtM2eDpxRkZW317W4VkzSc4/rwrXrwdehJD2KeKlZ6FUI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:31 2026 by rpki-client