$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: uexBeVc6PYjBegggBUKnqPSYzFFi+loWjmzvOIx53Z4= Subject key identifier: AA:3E:FA:56:E0:F9:B3:45:72:02:44:2B:1B:48:F0:5B:3B:A5:55:0F Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 0AA23F0E210357F90DC4EBC505D94F62C23B347F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:41:49 +0000 Manifest this update: Thu 23 Jul 2026 13:36:49 +0000 Manifest next update: Fri 24 Jul 2026 16:37:49 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: uQqKAkYkqc4EagCW/FeqHMC4KWTqiZq67jlYzH9B/xE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a2:3f:0e:21:03:57:f9:0d:c4:eb:c5:05:d9:4f:62:c2:3b:34:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: Jul 23 13:36:49 2026 GMT Not After : Jul 24 16:37:49 2026 GMT Subject: CN=AA3EFA56E0F9B3457202442B1B48F05B3BA5550F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:c0:e2:d3:aa:15:3c:79:1d:5e:f6:9c:78: a1:af:47:0d:cb:cb:a5:ba:b6:58:24:75:6a:11:cd: a6:ec:77:a2:68:41:bd:f8:11:5c:13:53:eb:75:a4: 84:01:61:44:2c:e2:8d:99:f6:f4:c9:54:e4:d4:3f: 51:42:5d:27:6f:7f:af:7a:8d:f5:51:d5:c4:e7:46: a7:31:da:2a:7f:0d:8f:98:c3:2d:e4:79:fe:e9:be: 35:4c:bc:13:ce:87:3e:03:77:1e:3c:a9:e6:be:e0: e8:56:89:9b:9f:55:77:c1:30:ea:91:d2:d4:cb:c5: 7a:a4:e3:ab:21:95:d6:ab:cd:07:99:46:02:e3:fa: 3e:44:a7:ab:d3:9e:8f:13:50:9b:55:c3:9d:6e:d9: b1:db:01:5f:65:06:62:21:0a:8e:73:80:5b:51:7a: a7:39:21:9f:fc:d0:5d:eb:5e:e5:c1:24:ff:92:96: 29:da:62:09:c4:5e:4e:e6:97:97:3b:45:cf:f2:f9: ea:3b:da:9b:b1:36:fd:4c:4e:82:7f:49:30:4e:a9: 8f:65:40:01:77:78:ca:ee:11:3c:9a:c2:55:9c:f8: da:69:73:e4:12:da:0d:7a:c2:03:05:a6:cd:53:25: 92:1f:5f:d2:71:86:77:86:03:9d:78:8f:17:9f:0f: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3E:FA:56:E0:F9:B3:45:72:02:44:2B:1B:48:F0:5B:3B:A5:55:0F X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:92:9b:df:d9:4b:05:3a:fc:f9:32:84:e2:4a:d1:75:2c: a3:de:67:f2:7d:80:4f:a7:bd:8f:e5:ea:dc:f3:02:2e:f7:dd: e3:94:ee:30:43:66:90:0d:4a:e5:ed:9a:4d:df:93:25:20:0c: 1a:41:4d:c8:0e:fe:67:eb:4c:84:d5:ff:a8:f4:0e:a1:e4:1b: 3e:2b:81:65:25:57:c7:f3:51:fa:23:ab:62:02:6d:5c:87:e9: d7:b3:d7:d8:ac:93:14:3e:7c:d1:48:72:11:3e:29:09:dc:b7: 70:1c:9a:e8:6d:56:94:cf:cf:c2:ef:ce:a1:2d:68:14:3e:e8: ff:4a:6b:fd:d0:04:3b:c3:47:3f:fb:54:c8:04:c9:63:a9:32: 01:dc:f7:3f:98:0a:0d:e5:2f:da:bb:72:b6:71:3b:01:6e:a3: 7a:54:8c:67:11:0c:d5:cb:a4:31:d5:e0:5e:c8:79:32:21:d5: 99:1b:91:ea:51:ae:b8:73:27:fd:40:59:d8:f0:b7:18:ec:6a: ef:e6:f4:05:24:b7:e5:94:d8:9a:a9:14:24:e5:50:05:4f:61: ce:e4:07:54:aa:70:03:11:ee:51:66:ac:da:22:4a:a5:8e:0a: 8e:cd:e4:79:9e:e7:07:43:2c:8d:05:35:93:7d:ab:04:b7:ac: cd:fa:75:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqI/DiEDV/kNxOvFBdlPYsI7NH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA3MjMxMzM2NDlaFw0yNjA3MjQxNjM3NDlaMDMxMTAvBgNV BAMTKEFBM0VGQTU2RTBGOUIzNDU3MjAyNDQyQjFCNDhGMDVCM0JBNTU1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36sDi06oVPHkdXvaceKGvRw3L y6W6tlgkdWoRzabsd6JoQb34EVwTU+t1pIQBYUQs4o2Z9vTJVOTUP1FCXSdvf696 jfVR1cTnRqcx2ip/DY+Ywy3kef7pvjVMvBPOhz4Ddx48qea+4OhWiZufVXfBMOqR 0tTLxXqk46shldarzQeZRgLj+j5Ep6vTno8TUJtVw51u2bHbAV9lBmIhCo5zgFtR eqc5IZ/80F3rXuXBJP+SlinaYgnEXk7ml5c7Rc/y+eo72puxNv1MToJ/STBOqY9l QAF3eMruETyawlWc+Nppc+QS2g16wgMFps1TJZIfX9JxhneGA514jxefD3qBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqj76VuD5s0VyAkQrG0jwWzulVQ8wHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET3kpvf2UsFOvz5MoTiStF1LKPeZ/J9gE+n vY/l6tzzAi733eOU7jBDZpANSuXtmk3fkyUgDBpBTcgO/mfrTITV/6j0DqHkGz4r gWUlV8fzUfojq2ICbVyH6dez19iskxQ+fNFIchE+KQnct3AcmuhtVpTPz8LvzqEt aBQ+6P9Ka/3QBDvDRz/7VMgEyWOpMgHc9z+YCg3lL9q7crZxOwFuo3pUjGcRDNXL pDHV4F7IeTIh1ZkbkepRrrhzJ/1AWdjwtxjsau/m9AUkt+WU2JqpFCTlUAVPYc7k B1SqcAMR7lFmrNoiSqWOCo7N5Hme5wdDLI0FNZN9qwS3rM36dWY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:49:54 2026 by rpki-client