$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: Mc7JZ6TWfjtGjleHEbo1c4aJite0fIvXQRtM6MQXYaU= Subject key identifier: 9F:CA:13:94:46:88:E1:BF:A7:76:7F:73:0D:03:1C:86:E3:E7:06:DD Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 458D7EE9110306B6611735A574F755D2AC4A4D2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:04:14 +0000 Manifest this update: Thu 23 Jul 2026 23:59:14 +0000 Manifest next update: Sat 25 Jul 2026 01:52:14 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: jC+SNh6i6pNzNl2g0dU3JFumIGzgVRtc8VXhw1ECAOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8d:7e:e9:11:03:06:b6:61:17:35:a5:74:f7:55:d2:ac:4a:4d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Jul 23 23:59:14 2026 GMT Not After : Jul 25 01:52:14 2026 GMT Subject: CN=9FCA13944688E1BFA7767F730D031C86E3E706DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:c1:71:7b:cb:d1:56:62:48:0e:c7:7e:9e: 5b:32:02:25:65:02:29:2f:8e:fa:a8:49:24:20:6e: f4:79:06:c9:58:8f:9e:a4:d6:1d:2d:ca:b7:61:14: 80:38:cb:75:a4:10:ea:61:19:55:11:6f:ec:0c:0c: ad:a0:c2:df:c8:5b:d2:6d:a7:81:34:0e:bc:13:18: 40:83:70:80:a8:d9:4b:5a:b3:ed:53:76:85:95:e7: 82:d0:1e:60:ef:96:2c:dc:45:39:e1:9a:c7:a2:d5: b7:4c:2b:1c:98:b1:bd:24:5f:be:48:74:46:de:5a: fe:76:70:92:8c:8f:32:6d:23:24:f2:bf:5f:b1:83: 95:f9:4a:17:ba:89:a4:bf:ac:3a:9b:d1:62:ad:ce: b7:a8:7c:5e:1f:e1:b8:84:03:cf:14:6a:b5:00:05: 3f:34:cc:b2:2f:de:05:68:0a:29:43:c3:14:6c:2c: ec:74:1a:ad:be:13:48:f4:a3:2e:99:52:b8:55:78: d5:76:71:88:89:07:d0:1c:09:43:ef:b6:42:8c:a0: bd:46:e2:96:24:9f:fb:13:67:59:f8:c4:cf:1c:dc: e8:a9:1c:28:bd:72:66:65:b2:b5:87:ad:b5:97:ba: ac:5f:70:88:cd:df:90:2f:0c:b8:53:20:d6:5d:ac: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CA:13:94:46:88:E1:BF:A7:76:7F:73:0D:03:1C:86:E3:E7:06:DD X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:33:3a:1e:28:62:e9:bc:57:ea:85:b0:d1:08:22:20:8c:d9: db:32:02:f3:2f:65:4d:33:c2:55:f0:97:f5:71:75:d3:ae:10: 0d:03:99:ad:75:54:49:1d:d2:8d:0e:08:dd:c5:29:9e:fb:b3: d8:84:22:76:77:36:76:71:db:ba:c3:70:b6:61:6b:2b:ce:db: 12:1e:b9:5a:fd:37:53:9a:5a:a6:b5:f0:56:f9:c6:be:e7:c5: 42:56:ec:80:5b:71:b4:5f:ab:ab:50:e9:83:03:e5:f4:ff:f1: 65:07:8e:af:d5:ac:34:a5:4a:f7:ed:fe:d5:6a:d3:33:f1:47: 10:30:97:59:e9:f8:06:f2:5d:b4:95:a7:8e:28:c4:53:ab:ec: f3:59:d5:ff:52:da:46:d6:4a:4c:e0:3b:ad:d7:97:dc:b7:fe: de:d3:d2:3a:18:0c:36:21:e9:9d:bb:53:3c:c8:83:cb:1f:5d: 5b:db:ff:c3:fb:21:dc:eb:f5:69:00:11:22:93:dd:c0:43:b8: 22:dc:65:72:0d:c5:02:5c:30:d2:40:d8:5c:2e:9c:93:e0:cf: 38:e2:93:dd:df:5d:33:2a:71:02:05:24:65:a8:c4:f6:85:06: f3:31:b5:0c:13:25:3f:52:10:f2:f1:ef:e6:fd:8d:89:36:8c: c4:01:45:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY1+6REDBrZhFzWldPdV0qxKTS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA3MjMyMzU5MTRaFw0yNjA3MjUwMTUyMTRaMDMxMTAvBgNV BAMTKDlGQ0ExMzk0NDY4OEUxQkZBNzc2N0Y3MzBEMDMxQzg2RTNFNzA2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPuMFxe8vRVmJIDsd+nlsyAiVl AikvjvqoSSQgbvR5BslYj56k1h0tyrdhFIA4y3WkEOphGVURb+wMDK2gwt/IW9Jt p4E0DrwTGECDcICo2Utas+1TdoWV54LQHmDvlizcRTnhmsei1bdMKxyYsb0kX75I dEbeWv52cJKMjzJtIyTyv1+xg5X5She6iaS/rDqb0WKtzreofF4f4biEA88UarUA BT80zLIv3gVoCilDwxRsLOx0Gq2+E0j0oy6ZUrhVeNV2cYiJB9AcCUPvtkKMoL1G 4pYkn/sTZ1n4xM8c3OipHCi9cmZlsrWHrbWXuqxfcIjN35AvDLhTINZdrMcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8oTlEaI4b+ndn9zDQMchuPnBt0wHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYzOh4oYum8V+qFsNEIIiCM2dsyAvMvZU0z wlXwl/VxddOuEA0Dma11VEkd0o0OCN3FKZ77s9iEInZ3NnZx27rDcLZhayvO2xIe uVr9N1OaWqa18Fb5xr7nxUJW7IBbcbRfq6tQ6YMD5fT/8WUHjq/VrDSlSvft/tVq 0zPxRxAwl1np+AbyXbSVp44oxFOr7PNZ1f9S2kbWSkzgO63Xl9y3/t7T0joYDDYh 6Z27UzzIg8sfXVvb/8P7Idzr9WkAESKT3cBDuCLcZXINxQJcMNJA2FwunJPgzzji k93fXTMqcQIFJGWoxPaFBvMxtQwTJT9SEPLx7+b9jYk2jMQBRdY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:27 2026 by rpki-client