$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft File: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft (raw, json) Hash identifier: ALmo4VaubavdWTLffZB0Cs59O3GIAlbANoX1CIaqkww= Subject key identifier: D9:17:F8:27:7E:67:E9:6A:6F:4B:9D:66:74:5A:08:D8:5F:67:29:D8 Authority key identifier: D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 Certificate issuer: /CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Certificate serial: 240DEA708F47E0D7F9A30BA251EE3D07A84B817E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 15:44:12 +0000 Manifest this update: Thu 23 Jul 2026 15:39:12 +0000 Manifest next update: Fri 24 Jul 2026 16:03:12 +0000 Files and hashes: 1: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl (hash: 4KimmdNimCTJ2doBvwBBJzpCEs5XP8aVSUhsdDYcr+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0d:ea:70:8f:47:e0:d7:f9:a3:0b:a2:51:ee:3d:07:a8:4b:81:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Validity Not Before: Jul 23 15:39:12 2026 GMT Not After : Jul 24 16:03:12 2026 GMT Subject: CN=D917F8277E67E96A6F4B9D66745A08D85F6729D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:e5:39:9d:5c:c8:42:90:02:c1:d6:a2:51: 4d:2c:5c:77:60:e4:21:b5:51:6b:2a:00:56:e7:47: 24:04:28:ce:03:73:27:85:37:6f:2d:a0:ce:b8:99: 14:e8:d0:fb:88:6b:11:b8:a0:84:3a:ef:cc:ef:ee: 87:e5:06:40:8d:b5:05:42:43:48:88:fc:79:e6:b2: a3:32:da:45:43:2a:95:a6:38:80:99:14:08:29:eb: ae:ba:db:ba:cb:e1:04:5b:5c:4b:49:7d:e1:ba:f7: 1f:2b:f0:4e:ba:08:f0:9e:53:7a:2b:76:4a:3c:c1: 31:71:67:37:bc:da:36:d2:cc:c5:c6:6b:82:18:f6: 8e:99:03:26:e0:b2:d3:23:6d:f8:85:0f:2b:ca:b0: ce:7d:6e:81:15:a2:02:7b:d2:da:16:b2:60:48:5a: 6b:03:85:3d:8f:d7:47:cf:96:e0:94:60:6d:50:d0: 12:b1:1c:48:93:ff:16:de:ed:40:16:6d:79:9d:e8: 77:0b:fb:65:15:f3:23:e9:1a:b5:dd:54:c6:0a:e7: 6d:bb:7e:e8:de:1e:ea:8b:47:9f:a1:ab:97:20:c3: b5:59:8f:9d:98:10:35:1f:2f:96:df:97:83:88:49: 46:27:be:b0:79:2c:d0:aa:0e:d4:bd:3b:96:29:11: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:F8:27:7E:67:E9:6A:6F:4B:9D:66:74:5A:08:D8:5F:67:29:D8 X509v3 Authority Key Identifier: keyid:D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:24:78:36:ee:b6:b6:46:75:d9:c4:7e:11:2e:3a:d2:37:d7: cd:2f:e8:c6:7c:ce:a1:eb:58:de:df:5f:df:44:2b:0b:6b:de: 9b:54:c0:d0:aa:c3:38:3c:a8:a1:1f:a6:51:c2:c3:f2:8e:8b: 55:85:3d:1d:94:71:85:0d:fb:5e:ea:e6:fa:f7:f8:31:69:c1: 78:f7:a0:0b:4c:ac:c6:43:f2:37:58:b4:2e:9c:7b:39:47:5f: 97:0f:70:38:61:f1:89:79:ec:3e:89:60:b2:38:3a:27:c4:c1: 58:3f:4c:47:a8:5f:c1:a6:62:1e:66:79:81:4f:05:41:5b:7d: e9:0c:bd:22:e3:e0:c0:22:9b:09:35:76:ea:65:3f:7c:c2:56: 44:c5:c0:ef:96:61:47:a6:da:aa:f2:b2:50:23:57:cd:b2:52: 29:34:06:75:cd:d1:59:b2:e5:8d:8b:38:09:ae:45:d5:e4:84: 2e:82:c8:c5:1a:c1:50:b8:f9:f6:22:21:4a:ca:7d:0b:57:06: ec:a6:d0:87:db:20:ac:ac:4e:ad:e2:a1:5e:ca:9a:84:16:47: c8:29:1a:e4:19:05:2b:60:24:ff:3a:a0:a8:8d:7a:a7:92:97: 71:4e:28:12:19:ae:c6:40:0a:d4:2d:72:33:99:d6:7a:16:7c: ac:41:d7:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJA3qcI9H4Nf5owuiUe49B6hLgX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdF RTE3NThDMDAeFw0yNjA3MjMxNTM5MTJaFw0yNjA3MjQxNjAzMTJaMDMxMTAvBgNV BAMTKEQ5MTdGODI3N0U2N0U5NkE2RjRCOUQ2Njc0NUEwOEQ4NUY2NzI5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHX+U5nVzIQpACwdaiUU0sXHdg 5CG1UWsqAFbnRyQEKM4DcyeFN28toM64mRTo0PuIaxG4oIQ678zv7oflBkCNtQVC Q0iI/HnmsqMy2kVDKpWmOICZFAgp666627rL4QRbXEtJfeG69x8r8E66CPCeU3or dko8wTFxZze82jbSzMXGa4IY9o6ZAybgstMjbfiFDyvKsM59boEVogJ70toWsmBI WmsDhT2P10fPluCUYG1Q0BKxHEiT/xbe7UAWbXmd6HcL+2UV8yPpGrXdVMYK5227 fujeHuqLR5+hq5cgw7VZj52YEDUfL5bfl4OISUYnvrB5LNCqDtS9O5YpEWyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Rf4J35n6WpvS51mdFoI2F9nKdgwHwYDVR0j BBgwFoAU0E6O2hxuCua1iYh6zzVdd+4XWMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY0ZDFjMzYtNGEzMS00ODU3LTllMzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREEx QzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdFRTE3NThDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDRFOEVEQTFDNkUwQUU2QjU4OTg4N0FDRjM1NUQ3N0VFMTc1 OEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVE NzdFRTE3NThDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8keDbutrZGddnEfhEuOtI3180v6MZ8zqHr WN7fX99EKwtr3ptUwNCqwzg8qKEfplHCw/KOi1WFPR2UcYUN+17q5vr3+DFpwXj3 oAtMrMZD8jdYtC6cezlHX5cPcDhh8Yl57D6JYLI4OifEwVg/TEeoX8GmYh5meYFP BUFbfekMvSLj4MAimwk1duplP3zCVkTFwO+WYUem2qryslAjV82yUik0BnXN0Vmy 5Y2LOAmuRdXkhC6CyMUawVC4+fYiIUrKfQtXBuym0IfbIKysTq3ioV7KmoQWR8gp GuQZBStgJP86oKiNeqeSl3FOKBIZrsZACtQtcjOZ1noWfKxB17E= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:55 2026 by rpki-client