$ rpki-client -vvf rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft (raw, json) Hash identifier: Gt7m9uyBLcp41gucbe9lCO5qfnO3lBBqbVN17VpYHE8= Subject key identifier: CD:2A:CE:A3:79:2E:09:E5:6C:4B:C3:F9:8E:D2:95:CA:9B:55:00:1D Authority key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Certificate issuer: /CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Certificate serial: 70A195523DFEE75939B24C6F16167D0D0FF5A90C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:47:42 +0000 Manifest this update: Thu 23 Jul 2026 22:42:42 +0000 Manifest next update: Sat 25 Jul 2026 00:38:42 +0000 Files and hashes: 1: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl (hash: r14yKC7TuWTV/qwFBkWZ6LSDNq/g+JnqZBZmGng8GNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a1:95:52:3d:fe:e7:59:39:b2:4c:6f:16:16:7d:0d:0f:f5:a9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Validity Not Before: Jul 23 22:42:42 2026 GMT Not After : Jul 25 00:38:42 2026 GMT Subject: CN=CD2ACEA3792E09E56C4BC3F98ED295CA9B55001D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:31:29:6f:53:f5:b4:2c:41:a7:2f:26:12: 89:1f:c4:a3:1a:26:03:96:78:4f:9f:74:a3:56:52: 04:ca:85:31:f6:ba:d4:fa:19:dd:50:c0:28:7d:16: 74:17:55:ae:ef:f1:9e:6c:0c:81:b2:04:8f:4f:2b: 67:52:08:a7:36:65:73:65:26:1a:c9:ea:6d:7e:02: c6:66:cb:a2:30:64:19:df:2a:34:f0:3c:c8:66:14: c1:0c:e3:8d:66:4a:90:e9:99:7e:69:e4:45:98:8f: c9:b5:7f:2e:ee:20:57:9c:c2:b6:e1:60:09:5b:89: 65:b0:28:45:e6:66:69:8e:ea:4d:8e:1f:d4:24:1b: ea:c2:57:86:21:e0:c6:84:6f:37:72:7c:6e:b5:77: 5c:24:47:91:6f:8a:a0:46:47:a3:2c:c9:ad:0a:13: 50:a8:7f:3c:20:08:50:64:98:12:9c:ce:07:d4:2c: 7b:b8:e9:d8:46:57:75:f7:ac:a4:c2:d7:35:7a:92: 42:f1:c4:79:0b:f2:9a:38:9d:cd:6a:34:87:44:44: 3e:f2:c9:fb:e5:15:24:c3:ac:c9:ae:14:2c:42:03: af:06:65:a9:5f:43:14:99:99:90:e9:bb:0b:4f:b8: d2:63:b3:73:71:59:3f:6a:c8:41:ac:d0:e8:b0:9d: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2A:CE:A3:79:2E:09:E5:6C:4B:C3:F9:8E:D2:95:CA:9B:55:00:1D X509v3 Authority Key Identifier: keyid:94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9f:dd:27:52:3d:22:6c:76:60:2c:e6:08:e9:e9:9a:ff:6f: fa:96:df:3a:bc:e9:79:c5:41:d6:ed:ee:e3:c8:c1:a2:36:c9: 86:0c:d4:85:67:91:be:82:48:f0:31:a4:b7:66:cd:5c:7f:55: 05:84:7e:9b:3a:ed:37:d2:c8:8e:84:4b:f6:05:c2:ce:e2:b0: 8a:58:0c:44:98:ab:df:8f:61:10:4b:75:8e:d1:db:0d:0e:87: 95:d2:4a:5c:69:73:15:7f:02:17:a8:3a:13:20:0c:c8:35:df: 66:4f:a3:b5:13:89:83:94:b0:f8:90:a0:50:f9:1e:6d:71:b0: 6c:b4:af:a1:7a:ab:63:ed:0d:3a:aa:81:ed:55:21:4f:9d:79: 6b:72:0c:24:73:10:95:2f:1d:9f:f9:d9:5f:49:6a:95:f1:70: aa:5f:07:92:bb:9f:89:1b:7b:99:76:97:ae:e4:1f:ff:49:b2: 00:17:68:66:42:34:fb:41:f4:bf:e7:f9:ff:61:aa:86:05:b7: a9:0d:aa:78:fc:42:25:df:ba:aa:94:15:ad:2d:c1:cd:c8:6d: 6a:5f:bb:2c:1e:72:f8:a4:0e:b9:50:a4:5d:59:f3:c2:34:09: 62:a3:80:e3:70:a6:50:36:39:1c:fd:b7:4c:6e:31:20:67:08: f4:33:a5:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKGVUj3+51k5skxvFhZ9DQ/1qQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMz M0U1MTREQzAeFw0yNjA3MjMyMjQyNDJaFw0yNjA3MjUwMDM4NDJaMDMxMTAvBgNV BAMTKENEMkFDRUEzNzkyRTA5RTU2QzRCQzNGOThFRDI5NUNBOUI1NTAwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKjEpb1P1tCxBpy8mEokfxKMa JgOWeE+fdKNWUgTKhTH2utT6Gd1QwCh9FnQXVa7v8Z5sDIGyBI9PK2dSCKc2ZXNl JhrJ6m1+AsZmy6IwZBnfKjTwPMhmFMEM441mSpDpmX5p5EWYj8m1fy7uIFecwrbh YAlbiWWwKEXmZmmO6k2OH9QkG+rCV4Yh4MaEbzdyfG61d1wkR5FviqBGR6Msya0K E1CofzwgCFBkmBKczgfULHu46dhGV3X3rKTC1zV6kkLxxHkL8po4nc1qNIdERD7y yfvlFSTDrMmuFCxCA68GZalfQxSZmZDpuwtPuNJjs3NxWT9qyEGs0OiwnZ0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSrOo3kuCeVsS8P5jtKVyptVAB0wHwYDVR0j BBgwFoAUlI8Tzy5U4fzKUd67yg0eLDPlFNwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmViMDY1NjktMGEyYi00YjFiLTliMGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0Yy RTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMzM0U1MTREQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDhGMTNDRjJFNTRFMUZDQ0E1MURFQkJDQTBEMUUyQzMzRTUx NERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFF MkMzM0U1MTREQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+f3SdSPSJsdmAs5gjp6Zr/b/qW3zq86XnF Qdbt7uPIwaI2yYYM1IVnkb6CSPAxpLdmzVx/VQWEfps67TfSyI6ES/YFws7isIpY DESYq9+PYRBLdY7R2w0Oh5XSSlxpcxV/AheoOhMgDMg132ZPo7UTiYOUsPiQoFD5 Hm1xsGy0r6F6q2PtDTqqge1VIU+deWtyDCRzEJUvHZ/52V9JapXxcKpfB5K7n4kb e5l2l67kH/9JsgAXaGZCNPtB9L/n+f9hqoYFt6kNqnj8QiXfuqqUFa0twc3IbWpf uywecvikDrlQpF1Z88I0CWKjgONwplA2ORz9t0xuMSBnCPQzpaM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:22:01 2026 by rpki-client