$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: MEANqnLJdi5V4GhxoZTMWKTEgTvSUPqVD4A8vBxBeD8= Subject key identifier: BC:CE:61:2A:AF:B0:5B:81:BA:15:99:92:5A:75:B5:0C:71:4C:A0:CA Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 3755DB4607C06B49BBB53FF7C209D7DE4856EEA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:27:35 +0000 Manifest this update: Thu 23 Jul 2026 14:22:35 +0000 Manifest next update: Fri 24 Jul 2026 17:01:35 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: MajlU6hZc9fkjRTqVCh9NlLqtVXcQNpYhdyvPLvQp4U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:55:db:46:07:c0:6b:49:bb:b5:3f:f7:c2:09:d7:de:48:56:ee:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: Jul 23 14:22:35 2026 GMT Not After : Jul 24 17:01:35 2026 GMT Subject: CN=BCCE612AAFB05B81BA1599925A75B50C714CA0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:53:30:24:e7:e5:36:6f:13:4d:25:e2:cf: 65:95:1d:73:21:f5:8f:11:3b:cd:bb:47:0c:03:a5: 6a:ed:c2:4d:02:fb:86:1f:11:59:78:58:47:6d:16: a2:7e:eb:98:70:2d:fa:5d:6c:8d:0f:f9:96:45:b0: 00:02:fc:5c:ac:64:20:5a:72:63:02:8d:d2:02:e7: ea:7e:37:71:20:36:fa:1c:b2:ab:cb:42:9f:d7:a3: f4:a1:b9:f0:bb:87:44:5b:fe:2d:3a:ca:b2:37:2d: 1c:bf:9e:ca:53:24:9a:91:52:ea:39:4c:27:82:62: d3:5b:a1:49:9e:3d:b5:d4:cb:b6:a8:cb:0b:6d:92: af:6a:c1:4b:25:a1:fc:66:7b:1a:b0:4a:30:2f:c3: fe:38:05:1d:2d:57:bd:2e:b5:0c:34:4d:b2:f3:a1: 8f:8d:d2:28:41:aa:27:b3:df:9d:86:c2:a7:3a:67: f9:f3:a3:f9:d8:85:d9:a6:d2:af:ac:5a:37:cd:a4: fb:9c:9c:87:a4:69:ea:c4:11:ad:4e:d4:aa:e7:45: 5b:38:ee:31:d0:07:88:21:1d:fa:c4:e5:e5:f8:ea: 08:f0:25:2a:e5:27:28:35:9d:55:f6:d1:bf:21:e7: 66:aa:4e:28:3d:0d:18:09:60:0e:8d:4f:6d:51:fa: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:61:2A:AF:B0:5B:81:BA:15:99:92:5A:75:B5:0C:71:4C:A0:CA X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a7:68:e6:38:c7:33:81:88:c3:57:ec:ae:47:a7:7a:71:65: 81:f1:f7:df:62:d3:52:9e:1a:cd:a8:8f:65:49:68:1c:5e:bc: 4e:81:1e:18:02:02:53:de:b0:97:36:08:f7:a9:47:f2:1d:24: 21:23:4d:e6:c2:61:15:00:f8:93:79:0d:29:1a:0d:8f:d5:7b: 53:64:56:44:97:f5:e0:fe:4a:ab:66:e9:63:cb:f1:71:f6:ca: bd:c9:bc:c9:ac:e8:a7:85:76:af:9f:6d:be:91:79:36:40:b4: 56:9c:ee:d4:08:d7:c1:45:c0:fb:0e:76:95:d2:61:90:2a:f9: 50:db:99:ae:5d:5e:f1:16:e6:b6:67:24:6c:5d:13:b6:3b:a5: 0c:b3:c0:0d:ef:d2:73:52:20:fc:21:09:ef:8b:43:d5:e0:f0: 3d:4b:9f:06:27:e3:92:20:ac:58:d3:45:8b:fa:f5:1c:91:7a: b6:84:8c:29:30:42:2c:f7:0c:a3:3c:3e:5d:05:d3:f1:a1:7d: 7f:3f:06:d8:2c:c3:a4:11:67:51:6c:90:e9:b5:19:a1:87:ed: 1e:15:7c:5a:92:d3:83:b3:e3:9e:fc:13:61:85:43:df:37:7b: a9:da:e7:ca:be:cc:a5:2c:f9:06:98:ce:f7:8e:ed:c0:b3:23: bf:44:06:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1XbRgfAa0m7tT/3wgnX3khW7qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA3MjMxNDIyMzVaFw0yNjA3MjQxNzAxMzVaMDMxMTAvBgNV BAMTKEJDQ0U2MTJBQUZCMDVCODFCQTE1OTk5MjVBNzVCNTBDNzE0Q0EwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rVMwJOflNm8TTSXiz2WVHXMh 9Y8RO827RwwDpWrtwk0C+4YfEVl4WEdtFqJ+65hwLfpdbI0P+ZZFsAAC/FysZCBa cmMCjdIC5+p+N3EgNvocsqvLQp/Xo/ShufC7h0Rb/i06yrI3LRy/nspTJJqRUuo5 TCeCYtNboUmePbXUy7aoywttkq9qwUslofxmexqwSjAvw/44BR0tV70utQw0TbLz oY+N0ihBqiez352Gwqc6Z/nzo/nYhdmm0q+sWjfNpPucnIekaerEEa1O1KrnRVs4 7jHQB4ghHfrE5eX46gjwJSrlJyg1nVX20b8h52aqTig9DRgJYA6NT21R+hvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvM5hKq+wW4G6FZmSWnW1DHFMoMowHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqnaOY4xzOBiMNX7K5Hp3pxZYHx999i01Ke Gs2oj2VJaBxevE6BHhgCAlPesJc2CPepR/IdJCEjTebCYRUA+JN5DSkaDY/Ve1Nk VkSX9eD+Sqtm6WPL8XH2yr3JvMms6KeFdq+fbb6ReTZAtFac7tQI18FFwPsOdpXS YZAq+VDbma5dXvEW5rZnJGxdE7Y7pQyzwA3v0nNSIPwhCe+LQ9Xg8D1LnwYn45Ig rFjTRYv69RyReraEjCkwQiz3DKM8Pl0F0/GhfX8/Btgsw6QRZ1FskOm1GaGH7R4V fFqS04Oz4578E2GFQ983e6na58q+zKUs+QaYzveO7cCzI79EBjA= -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:19 2026 by rpki-client