$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: qCpAkV0tih21ABHANqj7UfqCROKoP03PxspUUo0o+bI= Subject key identifier: 6A:07:98:F0:22:FF:8B:D9:2F:1F:07:E4:32:2C:78:51:3A:D7:2B:53 Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 6110B485B20991DC39E784B0B34A92F7A226C16D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:32:27 +0000 Manifest this update: Fri 24 Jul 2026 02:27:27 +0000 Manifest next update: Sat 25 Jul 2026 04:42:27 +0000 Files and hashes: 1: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: YLUAzLYWtEDphuvmoUrU2zGu/XH7S9N5oBoNYD5kVxI=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:10:b4:85:b2:09:91:dc:39:e7:84:b0:b3:4a:92:f7:a2:26:c1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: Jul 24 02:27:27 2026 GMT Not After : Jul 25 04:42:27 2026 GMT Subject: CN=6A0798F022FF8BD92F1F07E4322C78513AD72B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:4e:ae:be:5f:5c:d7:36:df:e4:2b:0b:0a: d2:54:e7:72:e5:be:72:ec:cb:4b:f3:a3:5d:83:12: be:dc:88:20:5f:64:eb:82:c1:dd:05:d1:73:64:3f: 5f:32:9d:7b:65:f8:de:ce:88:ea:88:f2:c9:80:b2: 5f:14:4e:69:27:3c:d0:99:1f:9d:a7:09:fd:72:0c: 16:50:d0:0e:48:84:08:8f:5d:24:ac:b1:7b:36:95: a7:1a:7c:de:e2:bf:c8:69:91:f7:72:0b:67:59:a4: 34:02:8f:b6:4d:5d:82:b5:e6:9d:03:90:33:4b:19: bd:45:f2:dc:8b:76:68:92:cc:f8:28:58:1c:9c:ff: 3f:c1:21:16:9d:10:5a:b9:95:f0:73:94:6e:ca:b3: 63:26:ee:e9:fb:28:86:e9:46:25:4d:38:70:b7:59: 0c:02:50:85:a5:21:5a:41:83:56:f0:4b:0e:51:04: e6:49:bf:8c:5e:78:e0:16:e9:bb:67:d8:4f:5b:e8: 7b:6b:42:22:91:aa:b3:14:06:db:30:b5:99:56:71: 94:f6:b0:77:b5:bb:cf:34:7b:f9:dd:81:a9:4f:2d: bf:b6:73:ea:ab:9a:98:66:b7:4e:76:11:d4:7d:3d: b4:bb:42:ee:c4:97:c7:9a:65:88:8e:b8:b8:c5:2f: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:07:98:F0:22:FF:8B:D9:2F:1F:07:E4:32:2C:78:51:3A:D7:2B:53 X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:43:56:e5:73:32:ee:7d:73:9b:ac:b5:b5:9c:5e:be:ad:eb: 13:96:91:ba:42:de:a2:a6:a9:3b:8e:93:83:2b:9b:44:79:ce: c4:a7:c0:05:8d:4f:4b:3f:9a:1e:9b:bd:b6:0a:01:77:fd:24: a7:af:c0:9c:ac:e4:d4:48:e5:42:bd:ef:c9:d4:eb:9b:21:c1: 58:c8:fb:37:73:40:cc:84:0e:a2:69:14:1c:2d:ea:34:b3:b3: 93:22:de:f3:22:ff:4a:5f:2a:b9:75:7f:2f:cd:41:b7:ef:7c: 9f:b9:d6:15:2b:8c:fb:2e:6a:42:6c:b0:89:10:66:b5:0a:15: ee:75:52:a1:68:1e:f7:c7:2c:b6:40:fa:d4:1e:f0:09:1e:b4: 5e:dc:6c:f2:d6:e5:21:a2:ac:03:dd:b3:ec:ab:f4:9f:50:32: dc:12:01:e1:1b:c9:89:c6:2f:79:2d:21:f7:c4:5f:e6:12:17: 0d:96:f6:e6:27:bb:91:5d:ff:40:35:18:3e:d9:76:de:83:4e: 88:8e:66:b1:a3:2b:34:8c:92:1e:f0:7a:dd:18:aa:78:9b:d5: da:6f:75:3d:06:2d:d6:a9:68:56:0a:bc:7a:e7:e1:8d:96:e4: 22:ef:57:92:78:2e:b5:33:a3:f8:06:69:90:a9:5a:ca:08:de: 20:9f:67:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRC0hbIJkdw554Sws0qS96ImwW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjA3MjQwMjI3MjdaFw0yNjA3MjUwNDQyMjdaMDMxMTAvBgNV BAMTKDZBMDc5OEYwMjJGRjhCRDkyRjFGMDdFNDMyMkM3ODUxM0FENzJCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LE6uvl9c1zbf5CsLCtJU53Ll vnLsy0vzo12DEr7ciCBfZOuCwd0F0XNkP18ynXtl+N7OiOqI8smAsl8UTmknPNCZ H52nCf1yDBZQ0A5IhAiPXSSssXs2lacafN7iv8hpkfdyC2dZpDQCj7ZNXYK15p0D kDNLGb1F8tyLdmiSzPgoWByc/z/BIRadEFq5lfBzlG7Ks2Mm7un7KIbpRiVNOHC3 WQwCUIWlIVpBg1bwSw5RBOZJv4xeeOAW6btn2E9b6HtrQiKRqrMUBtswtZlWcZT2 sHe1u880e/ndgalPLb+2c+qrmphmt052EdR9PbS7Qu7El8eaZYiOuLjFL9+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUageY8CL/i9kvHwfkMix4UTrXK1MwHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRDVuVzMu59c5ustbWcXr6t6xOWkbpC3qKm qTuOk4Mrm0R5zsSnwAWNT0s/mh6bvbYKAXf9JKevwJys5NRI5UK978nU65shwVjI +zdzQMyEDqJpFBwt6jSzs5Mi3vMi/0pfKrl1fy/NQbfvfJ+51hUrjPsuakJssIkQ ZrUKFe51UqFoHvfHLLZA+tQe8AketF7cbPLW5SGirAPds+yr9J9QMtwSAeEbyYnG L3ktIffEX+YSFw2W9uYnu5Fd/0A1GD7Zdt6DToiOZrGjKzSMkh7wet0Yqnib1dpv dT0GLdapaFYKvHrn4Y2W5CLvV5J4LrUzo/gGaZCpWsoI3iCfZ5o= -----END CERTIFICATE-----Generated at Fri Jul 24 09:28:27 2026 by rpki-client