$ rpki-client -vvf rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft File: C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft (raw, json) Hash identifier: 3YnQpsZRuQrMfuICfo0NITHCyTs5Q7sVk+sA0RLEkXk= Subject key identifier: 77:56:61:BE:88:40:9F:5E:95:0C:0A:11:1D:A9:6A:C0:96:2E:95:82 Authority key identifier: C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E Certificate issuer: /CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Certificate serial: 664009896B5D84C36C6D8927592D28EFC43FBFA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 17:11:05 +0000 Manifest this update: Thu 23 Jul 2026 17:06:05 +0000 Manifest next update: Fri 24 Jul 2026 17:55:05 +0000 Files and hashes: 1: C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl (hash: EIQWX2cT93pbY6ZlsQgOAcQcElqfz9OxRDyR/QLaTUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:40:09:89:6b:5d:84:c3:6c:6d:89:27:59:2d:28:ef:c4:3f:bf:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E Validity Not Before: Jul 23 17:06:05 2026 GMT Not After : Jul 24 17:55:05 2026 GMT Subject: CN=775661BE88409F5E950C0A111DA96AC0962E9582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:aa:cf:3b:5c:b3:f6:a6:00:80:3c:6b:f1: dd:24:ac:08:42:5c:8e:ca:9b:18:4a:70:dd:3c:29: 9b:bd:4f:8c:26:78:fe:74:07:d8:d7:e2:36:2b:7a: 63:72:53:ab:6d:1a:3b:40:aa:3e:60:1e:7f:d2:e4: 28:a6:57:23:44:49:d1:64:51:cb:d1:fc:47:49:d5: a6:6f:23:3c:6d:1f:44:42:02:78:39:0b:33:02:2b: 8b:dc:99:36:94:2f:6c:25:c7:7d:fa:4a:d2:d1:d6: ed:43:f0:77:a0:b4:51:5a:4c:e8:05:aa:25:29:26: 51:2c:cd:9c:34:a2:97:7a:76:71:21:e7:1c:18:d0: 28:3b:ab:4b:9d:50:8a:21:e7:0d:cd:22:c8:dc:1f: 18:28:9a:32:b5:44:f2:a3:bc:32:56:06:1b:43:67: d4:70:e0:51:7d:90:36:e0:3c:18:40:51:77:64:37: 80:69:93:61:50:00:74:22:76:4b:45:f0:6c:df:d4: 39:f3:d4:e4:0d:90:36:be:79:3d:27:fc:36:c0:cd: c0:2e:10:b2:56:c6:55:2b:e8:36:74:30:81:1a:9b: aa:99:98:1d:07:c0:7b:95:79:0a:b3:bc:a1:1e:15: 51:e1:92:93:6b:09:27:93:48:b6:e4:a0:90:a7:f4: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:56:61:BE:88:40:9F:5E:95:0C:0A:11:1D:A9:6A:C0:96:2E:95:82 X509v3 Authority Key Identifier: keyid:C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a0:5f:ea:a7:a8:c6:fe:fb:61:7d:95:ce:21:4a:74:c4:9a: b0:ee:92:e8:32:95:53:0a:f8:73:a4:5c:59:71:0a:09:e9:3e: b5:65:a2:77:dd:f6:65:e5:c9:3c:bc:0c:ce:ba:11:d2:b4:ad: db:03:5d:78:2e:58:8a:54:48:e4:71:c6:3f:b0:e4:5a:b2:f5: ae:f5:dc:38:58:b9:9e:c6:d1:d4:64:d3:9b:92:a6:82:4e:78: c5:80:3e:87:84:ba:72:2b:fc:5b:12:b5:6e:6a:f1:83:1f:e6: 2f:44:27:98:f9:1f:d2:c3:b5:64:12:ff:81:48:b6:f5:4f:5b: 56:3e:a3:5b:1c:14:bc:ec:f3:db:bc:58:4e:e1:a3:73:c2:66: e5:ce:af:d1:d3:d5:37:34:2e:09:4d:bb:10:62:4c:85:0a:54: 8e:6b:5d:94:53:10:3b:76:89:5a:04:00:42:7d:bf:82:22:65: b9:3c:12:b6:3e:52:e2:78:f9:ba:4d:6d:ad:9a:e4:19:30:57: e9:b0:82:ed:29:2d:ae:11:cc:58:09:50:5a:e3:a5:d2:ac:02: 2e:cc:a3:34:7f:85:bb:fd:b0:b6:51:2d:37:40:16:a9:78:2b: 45:da:c5:37:9a:96:76:a1:b7:cc:04:85:36:73:19:31:1f:66: 9b:fe:63:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkAJiWtdhMNsbYknWS0o78Q/v6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEy QTBDNDQ1RTAeFw0yNjA3MjMxNzA2MDVaFw0yNjA3MjQxNzU1MDVaMDMxMTAvBgNV BAMTKDc3NTY2MUJFODg0MDlGNUU5NTBDMEExMTFEQTk2QUMwOTYyRTk1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65qrPO1yz9qYAgDxr8d0krAhC XI7KmxhKcN08KZu9T4wmeP50B9jX4jYremNyU6ttGjtAqj5gHn/S5CimVyNESdFk UcvR/EdJ1aZvIzxtH0RCAng5CzMCK4vcmTaUL2wlx336StLR1u1D8HegtFFaTOgF qiUpJlEszZw0opd6dnEh5xwY0Cg7q0udUIoh5w3NIsjcHxgomjK1RPKjvDJWBhtD Z9Rw4FF9kDbgPBhAUXdkN4Bpk2FQAHQidktF8Gzf1Dnz1OQNkDa+eT0n/DbAzcAu ELJWxlUr6DZ0MIEam6qZmB0HwHuVeQqzvKEeFVHhkpNrCSeTSLbkoJCn9KslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd1ZhvohAn16VDAoRHalqwJYulYIwHwYDVR0j BBgwFoAUxGUApC8QwuHIBPKnICM6uioMRF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjE3MmVlZjktZWM2YS00NTU4LTgxODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQy RjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEyQTBDNDQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNDY1MDBBNDJGMTBDMkUxQzgwNEYyQTcyMDIzM0FCQTJBMEM0 NDVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNB QkEyQTBDNDQ1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+gX+qnqMb++2F9lc4hSnTEmrDukugylVMK +HOkXFlxCgnpPrVlonfd9mXlyTy8DM66EdK0rdsDXXguWIpUSORxxj+w5Fqy9a71 3DhYuZ7G0dRk05uSpoJOeMWAPoeEunIr/FsStW5q8YMf5i9EJ5j5H9LDtWQS/4FI tvVPW1Y+o1scFLzs89u8WE7ho3PCZuXOr9HT1Tc0LglNuxBiTIUKVI5rXZRTEDt2 iVoEAEJ9v4IiZbk8ErY+UuJ4+bpNba2a5BkwV+mwgu0pLa4RzFgJUFrjpdKsAi7M ozR/hbv9sLZRLTdAFql4K0XaxTealnaht8wEhTZzGTEfZpv+YwM= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:14 2026 by rpki-client