$ rpki-client -vvf rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft (raw, json) Hash identifier: 8/BXIZ/yEiRQLYJ+5cn5OvZe6YWNAqQyGEg/PYQv0TQ= Subject key identifier: 01:3C:F6:9E:21:83:46:61:65:90:51:6C:05:E8:D3:09:A8:64:00:8C Authority key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Certificate issuer: /CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Certificate serial: 37A79A3920EA8490F6C269C73FD74C2A1B09360A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft Manifest number: 6C Signing time: Thu 23 Jul 2026 12:25:20 +0000 Manifest this update: Thu 23 Jul 2026 12:20:20 +0000 Manifest next update: Fri 24 Jul 2026 14:23:20 +0000 Files and hashes: 1: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl (hash: p3RuP7cFeZPVz6yP3ylwSbabGfmhw54FqUUjGXtpiv0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a7:9a:39:20:ea:84:90:f6:c2:69:c7:3f:d7:4c:2a:1b:09:36:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Validity Not Before: Jul 23 12:20:20 2026 GMT Not After : Jul 24 14:23:20 2026 GMT Subject: CN=013CF69E218346616590516C05E8D309A864008C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:6f:df:4e:f6:9c:a0:3f:a5:c5:fa:a4:7d: c9:c0:f0:07:4e:8d:4d:bd:cf:c5:43:f4:97:fd:ce: 30:b5:8a:d1:8d:8e:0a:b2:17:d9:d5:55:e0:ed:40: dd:2c:65:36:95:dd:5f:a7:3d:8f:af:5a:f8:c4:60: 04:61:f0:39:db:ad:cd:48:e8:af:0c:d5:1b:3e:be: 4f:12:1a:85:d4:3f:9d:9f:2d:ee:56:9c:ba:fe:3f: 21:a3:5f:ac:58:6a:55:9f:30:7e:d1:46:8e:f0:a5: f3:7f:ed:15:4e:e4:bd:d1:0f:ba:19:59:90:d2:a3: 6d:c8:65:a2:28:99:6a:83:30:8b:c4:11:29:38:74: 85:46:3c:3d:aa:1c:3e:cf:d9:89:f2:f3:88:8b:15: a6:0f:da:43:b1:f6:36:58:8e:b8:df:2f:8f:01:1c: 1b:00:52:35:ce:e3:b5:1d:fe:bc:7d:8e:e3:70:f4: 78:22:52:e8:54:54:3e:7d:63:a3:ec:9a:03:a6:0d: 01:af:c2:2a:27:82:28:50:4e:96:9c:6d:07:e9:f5: 4d:7e:3e:74:17:86:d2:fa:7e:98:09:79:bb:38:35: 4d:79:e5:5d:59:a1:12:b6:1e:32:33:8f:69:22:24: e6:d6:43:44:40:2c:f1:fc:6d:14:88:ef:56:59:a1: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3C:F6:9E:21:83:46:61:65:90:51:6C:05:E8:D3:09:A8:64:00:8C X509v3 Authority Key Identifier: keyid:DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:07:ab:4b:a3:9e:15:97:2e:6a:33:67:f4:11:87:a5:44:7d: 64:8e:a0:d1:ce:03:5f:51:6c:a7:e8:d3:fa:37:94:1a:49:75: f3:bc:f9:05:da:d7:b9:18:ea:c7:c4:b1:89:90:5b:40:d1:6a: 20:bb:19:e2:16:6a:69:9d:57:5b:09:5c:5f:75:8d:99:91:a0: f6:25:34:2f:cb:c2:bb:5b:87:be:78:50:87:9f:10:e7:d9:13: 29:e1:0f:85:5f:bf:c5:fa:b4:f1:3b:0d:ea:78:21:d1:79:20: 58:f2:0b:43:dc:be:e2:ac:8e:fa:66:8e:74:d8:00:bc:b5:c1: 2c:58:b1:ec:f7:03:86:83:7a:c9:5f:fa:d3:3f:d8:e5:c4:13: 6a:c2:1d:97:2c:46:0f:2e:0e:79:7e:95:99:2c:d5:83:b3:02: 4a:4e:48:2b:55:4c:b1:e0:50:ef:71:df:ac:78:0e:3b:bb:3a: f4:37:a3:38:8b:9f:f8:69:05:35:d3:e4:dc:3b:d2:0e:3e:44: f5:1a:71:84:fe:97:2e:81:05:a2:22:d1:8b:2d:c8:3d:92:16: 13:48:06:67:af:2a:f4:30:17:0b:a0:1a:b7:4e:a5:86:7d:b8: 0d:13:9b:76:f1:79:60:9c:4e:c9:90:d1:8c:6f:13:c7:e8:34: 18:07:56:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6eaOSDqhJD2wmnHP9dMKhsJNgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZE MjgwRTBDOTAeFw0yNjA3MjMxMjIwMjBaFw0yNjA3MjQxNDIzMjBaMDMxMTAvBgNV BAMTKDAxM0NGNjlFMjE4MzQ2NjE2NTkwNTE2QzA1RThEMzA5QTg2NDAwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsW/fTvacoD+lxfqkfcnA8AdO jU29z8VD9Jf9zjC1itGNjgqyF9nVVeDtQN0sZTaV3V+nPY+vWvjEYARh8Dnbrc1I 6K8M1Rs+vk8SGoXUP52fLe5WnLr+PyGjX6xYalWfMH7RRo7wpfN/7RVO5L3RD7oZ WZDSo23IZaIomWqDMIvEESk4dIVGPD2qHD7P2Yny84iLFaYP2kOx9jZYjrjfL48B HBsAUjXO47Ud/rx9juNw9HgiUuhUVD59Y6PsmgOmDQGvwiongihQTpacbQfp9U1+ PnQXhtL6fpgJebs4NU155V1ZoRK2HjIzj2kiJObWQ0RALPH8bRSI71ZZoTzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATz2niGDRmFlkFFsBejTCahkAIwwHwYDVR0j BBgwFoAU3qvWen+KHJTE/rQf3LI9P9KA4MkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhNmJjYTgtMzc0MS00NGVmLThhNWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3 RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZEMjgwRTBDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFCRDY3QTdGOEExQzk0QzRGRUI0MUZEQ0IyM0QzRkQyODBF MEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNE M0ZEMjgwRTBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYHq0ujnhWXLmozZ/QRh6VEfWSOoNHOA19R bKfo0/o3lBpJdfO8+QXa17kY6sfEsYmQW0DRaiC7GeIWammdV1sJXF91jZmRoPYl NC/Lwrtbh754UIefEOfZEynhD4Vfv8X6tPE7Dep4IdF5IFjyC0PcvuKsjvpmjnTY ALy1wSxYsez3A4aDeslf+tM/2OXEE2rCHZcsRg8uDnl+lZks1YOzAkpOSCtVTLHg UO9x36x4Dju7OvQ3oziLn/hpBTXT5Nw70g4+RPUacYT+ly6BBaIi0YstyD2SFhNI BmevKvQwFwugGrdOpYZ9uA0Tm3bxeWCcTsmQ0YxvE8foNBgHVvI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:50 2026 by rpki-client