$ rpki-client -vvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: sSza6iQsuohWs+xmr0/KAvxlw8WKql04M19M1O8bP6E= Subject key identifier: C3:15:B7:CE:EE:08:54:03:7B:44:57:23:59:EB:26:DF:11:1F:F9:BD Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 7BDFDC7B5E48D371AA09689C9FEB41AC2F455466 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 16:09:39 +0000 Manifest this update: Thu 23 Jul 2026 16:04:39 +0000 Manifest next update: Fri 24 Jul 2026 18:17:39 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: ldIT+sfcruL2uCIf0IYeJmaHfoTWofTJDPRZam+U5s4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:df:dc:7b:5e:48:d3:71:aa:09:68:9c:9f:eb:41:ac:2f:45:54:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Jul 23 16:04:39 2026 GMT Not After : Jul 24 18:17:39 2026 GMT Subject: CN=C315B7CEEE0854037B44572359EB26DF111FF9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:04:57:42:3e:84:c0:18:16:58:8b:e5:c8: d8:42:d7:48:91:53:92:69:d1:07:4a:ce:d2:54:ed: 79:f3:47:d3:16:04:d5:ef:fd:97:89:ca:79:be:0d: b0:6a:60:80:18:c7:d8:1f:52:4b:c5:c9:72:9e:92: 03:c6:c9:d4:6b:db:54:dc:f4:50:c7:0d:59:fa:21: 0c:2d:b3:3a:93:65:82:36:e2:ec:14:7c:7d:f1:0a: fd:e9:c3:8f:97:db:eb:13:d5:27:b9:1b:fe:97:45: e0:ba:a5:69:36:ee:87:81:f2:d3:8b:a7:e6:d8:57: 90:fb:53:c3:6e:15:a8:5e:38:c8:e9:c9:32:28:fe: f7:10:94:01:3b:8b:7f:fc:da:40:f9:80:65:7f:f2: 44:02:e3:e2:4c:51:e6:e0:5c:43:bb:7b:4d:1f:89: d2:c8:ed:13:1c:0e:82:5a:b6:09:0b:c7:24:b5:62: f5:2a:0c:93:dd:37:e7:86:ae:9d:0e:43:64:8f:f8: c6:a5:b9:28:69:ca:24:e2:81:bd:91:62:85:43:45: 80:36:b2:74:34:89:c4:20:21:08:eb:b0:a5:57:c6: fb:49:1d:a2:88:20:2b:2a:db:06:a0:22:c7:c5:34: f9:65:d1:b7:8a:b6:9a:f9:29:f9:7d:b3:03:bf:72: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:15:B7:CE:EE:08:54:03:7B:44:57:23:59:EB:26:DF:11:1F:F9:BD X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0d:db:13:74:a5:da:43:39:52:a0:ea:26:cf:02:7d:5c:b9: 88:5d:78:34:58:35:18:4b:ad:80:e6:f6:8e:12:70:c5:e3:09: 7b:97:86:86:4a:a3:98:7e:98:fa:49:5d:fa:13:1e:c5:09:00: b3:29:e3:4a:11:95:c3:bc:2f:82:bf:79:8f:78:23:ab:53:87: c6:18:fd:b2:fa:5d:56:23:68:71:ee:b8:28:20:31:a6:6c:e1: 9f:77:4c:d5:86:c2:f0:d2:49:f7:52:43:98:00:67:be:27:6d: bc:18:06:7b:1b:17:77:24:95:3c:69:12:5f:46:c1:f7:51:b7: 60:9c:88:34:c5:30:a0:ef:da:08:4a:f1:d5:60:3b:dd:a6:ce: c5:85:54:ba:dd:39:ed:e3:77:90:36:24:8d:76:78:3c:05:26: 3f:a1:af:8a:f1:e8:d3:0c:eb:ee:f3:e1:55:05:80:f6:ce:4f: 37:24:95:d7:0f:f4:7e:60:42:77:00:4c:53:fe:7f:0b:ff:1f: 48:af:59:3d:d5:a8:fd:b7:e0:4a:81:03:f8:56:56:c4:f0:dc: 6b:b6:34:a2:73:19:e6:28:43:2f:08:c4:98:6b:9b:22:25:23: 01:ac:81:07:90:ff:f6:88:b8:65:ca:57:d1:88:d7:85:42:78: d6:32:f5:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9/ce15I03GqCWicn+tBrC9FVGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA3MjMxNjA0MzlaFw0yNjA3MjQxODE3MzlaMDMxMTAvBgNV BAMTKEMzMTVCN0NFRUUwODU0MDM3QjQ0NTcyMzU5RUIyNkRGMTExRkY5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7gRXQj6EwBgWWIvlyNhC10iR U5Jp0QdKztJU7XnzR9MWBNXv/ZeJynm+DbBqYIAYx9gfUkvFyXKekgPGydRr21Tc 9FDHDVn6IQwtszqTZYI24uwUfH3xCv3pw4+X2+sT1Se5G/6XReC6pWk27oeB8tOL p+bYV5D7U8NuFaheOMjpyTIo/vcQlAE7i3/82kD5gGV/8kQC4+JMUebgXEO7e00f idLI7RMcDoJatgkLxyS1YvUqDJPdN+eGrp0OQ2SP+MaluShpyiTigb2RYoVDRYA2 snQ0icQgIQjrsKVXxvtJHaKIICsq2wagIsfFNPll0beKtpr5Kfl9swO/crl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxW3zu4IVAN7RFcjWesm3xEf+b0wHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMN2xN0pdpDOVKg6ibPAn1cuYhdeDRYNRhL rYDm9o4ScMXjCXuXhoZKo5h+mPpJXfoTHsUJALMp40oRlcO8L4K/eY94I6tTh8YY /bL6XVYjaHHuuCggMaZs4Z93TNWGwvDSSfdSQ5gAZ74nbbwYBnsbF3cklTxpEl9G wfdRt2CciDTFMKDv2ghK8dVgO92mzsWFVLrdOe3jd5A2JI12eDwFJj+hr4rx6NMM 6+7z4VUFgPbOTzckldcP9H5gQncATFP+fwv/H0ivWT3VqP234EqBA/hWVsTw3Gu2 NKJzGeYoQy8IxJhrmyIlIwGsgQeQ//aIuGXKV9GI14VCeNYy9bE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:14 2026 by rpki-client