$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: eseuHZlkc71RIpu6uabU30Tf4bV9MbCTziKLhmdH3XM= Subject key identifier: 26:C9:42:49:6B:67:4A:53:FE:75:1D:FE:36:0A:57:8B:F4:60:C8:97 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 6CA72552C231AD5E31EB1FFB61E671FE9BCC8424 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:17:04 +0000 Manifest this update: Thu 23 Jul 2026 22:12:04 +0000 Manifest next update: Fri 24 Jul 2026 22:20:04 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: 1DDf2D7vHt6+PRiuh5dEYgZEUsvUq3acI8uSfErAdFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a7:25:52:c2:31:ad:5e:31:eb:1f:fb:61:e6:71:fe:9b:cc:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Jul 23 22:12:04 2026 GMT Not After : Jul 24 22:20:04 2026 GMT Subject: CN=26C942496B674A53FE751DFE360A578BF460C897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:f5:01:9e:01:23:aa:9b:23:c5:e7:86:4e: b1:d4:cc:24:ac:b2:1a:3c:d0:f4:3e:1c:37:a8:16: 61:a5:74:8a:8a:57:82:7a:c9:c2:78:a9:13:4b:74: cb:b0:29:0a:47:a6:4a:07:4e:76:c1:df:3a:f1:ac: 62:64:fa:0e:7f:02:f4:ec:c5:98:b5:7f:d8:52:ab: 15:7c:ee:03:20:48:e3:44:b7:8e:49:8a:b3:7b:8b: d8:ca:5a:14:06:80:f1:e1:79:d3:10:e9:d4:d4:88: ec:f4:ec:da:54:5e:3d:92:74:c6:e6:01:fc:f2:1d: b8:cf:10:ac:84:8d:3a:af:1c:6a:d1:1b:49:ba:38: 57:14:35:d6:b8:f1:c7:d9:16:33:e6:e7:bf:b7:1b: 60:cb:31:6c:6a:f8:52:a0:cf:33:21:16:9d:7d:96: 23:e5:a9:5f:c5:e4:ca:9f:39:d6:34:47:e5:23:1e: 5d:f6:b7:91:78:26:b1:d9:fe:54:c1:e0:78:19:d2: b9:db:83:45:ce:51:52:34:18:02:b1:57:a7:af:75: 08:bd:aa:8c:88:e3:3f:cb:60:79:1f:c8:42:02:aa: 84:67:de:8c:51:c9:56:fd:70:c2:00:22:12:a0:3a: 9b:b9:0d:d9:cd:9f:7a:3e:ce:a9:9d:59:a7:73:f4: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C9:42:49:6B:67:4A:53:FE:75:1D:FE:36:0A:57:8B:F4:60:C8:97 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:35:71:b6:7b:0d:dc:06:ab:4f:2e:91:50:94:d6:a8:69:3d: d4:be:6e:ff:2f:c8:45:8a:a7:47:16:07:0f:23:f4:47:69:d1: 32:6b:3e:cd:e6:de:75:09:5d:51:44:7c:0e:13:61:e0:ba:fe: 6d:54:8d:0f:ba:44:5c:75:0f:4c:61:3b:59:a4:d9:49:0f:97: ba:f7:33:c6:3b:1f:aa:ae:fc:5c:8b:d0:31:ea:c4:26:aa:b8: 25:9f:20:fe:4e:5f:c0:7c:15:fa:a2:a0:8b:9b:9a:5e:44:3f: 72:95:e4:ff:7c:c6:43:bf:7e:90:ed:58:f2:ad:a3:71:d0:9e: f9:d9:e1:7c:57:d4:06:ab:e0:3f:a2:93:ca:88:af:b5:14:6a: fb:b6:82:18:36:d8:de:89:ac:77:03:84:0a:e2:73:69:53:9d: f9:b6:5c:f5:4e:88:e1:d0:ef:8b:2c:90:e4:94:8d:1a:c7:7a: 98:51:94:41:86:bb:14:d1:1f:32:7f:a5:d2:04:5b:65:d6:72: 41:e1:32:57:96:ed:29:1a:42:15:2e:98:e3:45:ab:17:62:a3: 86:22:98:cd:7b:15:96:65:47:50:ef:b4:06:3f:15:ba:3a:70: a5:66:e0:39:28:ca:07:d9:74:22:e6:13:c0:84:db:5b:94:74: 80:9d:2b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKclUsIxrV4x6x/7YeZx/pvMhCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA3MjMyMjEyMDRaFw0yNjA3MjQyMjIwMDRaMDMxMTAvBgNV BAMTKDI2Qzk0MjQ5NkI2NzRBNTNGRTc1MURGRTM2MEE1NzhCRjQ2MEM4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOPUBngEjqpsjxeeGTrHUzCSs sho80PQ+HDeoFmGldIqKV4J6ycJ4qRNLdMuwKQpHpkoHTnbB3zrxrGJk+g5/AvTs xZi1f9hSqxV87gMgSONEt45JirN7i9jKWhQGgPHhedMQ6dTUiOz07NpUXj2SdMbm AfzyHbjPEKyEjTqvHGrRG0m6OFcUNda48cfZFjPm57+3G2DLMWxq+FKgzzMhFp19 liPlqV/F5MqfOdY0R+UjHl32t5F4JrHZ/lTB4HgZ0rnbg0XOUVI0GAKxV6evdQi9 qoyI4z/LYHkfyEICqoRn3oxRyVb9cMIAIhKgOpu5DdnNn3o+zqmdWadz9GEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJslCSWtnSlP+dR3+NgpXi/RgyJcwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg1cbZ7DdwGq08ukVCU1qhpPdS+bv8vyEWK p0cWBw8j9Edp0TJrPs3m3nUJXVFEfA4TYeC6/m1UjQ+6RFx1D0xhO1mk2UkPl7r3 M8Y7H6qu/FyL0DHqxCaquCWfIP5OX8B8FfqioIubml5EP3KV5P98xkO/fpDtWPKt o3HQnvnZ4XxX1Aar4D+ik8qIr7UUavu2ghg22N6JrHcDhAric2lTnfm2XPVOiOHQ 74sskOSUjRrHephRlEGGuxTRHzJ/pdIEW2XWckHhMleW7SkaQhUumONFqxdio4Yi mM17FZZlR1DvtAY/Fbo6cKVm4DkoygfZdCLmE8CE21uUdICdKw0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:50 2026 by rpki-client