$ rpki-client -vvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: GKWlAgia+D1I7mrW3KRHYVgEwl8MCDw+xs1Kzx4xFRM= Subject key identifier: 16:0C:ED:29:D1:38:F1:E4:BE:E0:D2:D0:53:BB:F4:B1:39:39:46:6C Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 0F0D795C15C5169D408A2162094F6D4F38973322 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 09:52:04 +0000 Manifest this update: Thu 23 Jul 2026 09:47:04 +0000 Manifest next update: Fri 24 Jul 2026 12:47:04 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: DHA5jAyaONlZ0t2b/SlmZ9EzsACbwotZEgVQDa4iZNo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0d:79:5c:15:c5:16:9d:40:8a:21:62:09:4f:6d:4f:38:97:33:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Jul 23 09:47:04 2026 GMT Not After : Jul 24 12:47:04 2026 GMT Subject: CN=160CED29D138F1E4BEE0D2D053BBF4B13939466C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:55:4f:c6:3a:2f:03:97:3b:9a:49:f9:3c: 5c:60:ba:4b:b4:cc:16:b1:e5:80:38:6e:5d:e7:ff: 74:88:4f:19:c7:8c:8c:de:df:d6:88:c7:77:ed:c5: fd:bd:78:06:db:a5:28:c2:ff:fa:32:df:29:4d:52: 97:37:21:9d:99:00:46:ae:44:ab:17:29:59:a2:d2: d3:99:75:27:07:11:75:f9:70:85:b5:b8:e6:8b:fb: 89:07:9e:d6:d4:d4:4d:9c:7d:30:ee:1c:c6:7a:ef: 69:ff:73:16:64:4c:01:75:b1:c0:c4:8a:4c:c5:b0: b7:3f:76:6e:b1:89:af:b4:15:72:cb:26:f1:13:38: dc:fa:e5:38:dd:c3:ef:ec:c6:ad:ee:fb:94:e6:c5: b4:fa:45:34:ab:00:e1:d9:5b:62:10:06:4e:5e:fb: b9:e2:81:4e:f3:3e:9f:97:f2:7d:c5:fe:92:5c:69: ac:a5:31:48:23:51:ca:19:23:8c:ab:28:49:7c:69: 29:5d:c6:94:f4:9b:28:55:0a:63:7e:8a:8c:d5:91: 51:d0:9a:99:39:86:cf:6c:2d:74:7a:96:36:f4:a8: 6d:b3:41:c5:f2:a9:f5:b2:23:54:96:de:14:58:18: b9:ca:5e:41:ad:67:2c:d6:99:5f:24:2d:36:a1:a6: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:ED:29:D1:38:F1:E4:BE:E0:D2:D0:53:BB:F4:B1:39:39:46:6C X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c5:df:0d:d9:d5:8a:e1:b2:bc:b0:7f:01:aa:30:37:f3:cd: 10:56:1f:a7:12:b9:d3:4c:54:11:ce:ac:65:c3:05:6f:15:8e: 31:01:02:92:e6:f3:c6:dd:17:80:3b:b1:7a:5e:a9:e5:e4:c5: 5f:02:b6:4f:4e:8e:9a:8d:16:de:8a:bb:ce:f9:8e:b5:77:ad: b3:89:eb:cd:fc:21:7b:50:1b:22:6f:16:31:14:ce:3d:a9:df: 18:d5:f7:f7:1f:39:1a:52:0e:af:ea:01:57:a1:6a:2d:20:d6: a6:91:ac:03:73:fc:c9:4b:7b:b3:b6:9b:9b:9a:8e:f9:c5:c9: 03:42:45:75:05:f6:37:91:f3:98:64:c7:d4:47:30:9d:08:81: ca:2e:16:23:11:14:6b:80:1f:dd:e3:7f:0b:7f:ad:47:a2:64: 4a:be:7b:1a:81:20:92:ce:92:42:c0:d5:73:6f:1b:d4:e4:48: 8d:99:c1:df:e4:78:99:69:42:20:b0:7c:d0:2f:84:7f:af:86: 9a:27:b6:bc:8d:f0:6d:d8:aa:d9:96:11:d4:48:ec:74:92:33: 5b:fa:49:b9:77:08:77:24:d6:89:dc:9d:67:80:f9:e2:8f:34: ef:16:21:7f:94:4e:27:7a:43:16:d9:ff:64:b6:92:6f:5c:cb: 6d:aa:95:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDw15XBXFFp1AiiFiCU9tTziXMyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRD MDYxMkQ5MTAeFw0yNjA3MjMwOTQ3MDRaFw0yNjA3MjQxMjQ3MDRaMDMxMTAvBgNV BAMTKDE2MENFRDI5RDEzOEYxRTRCRUUwRDJEMDUzQkJGNEIxMzkzOTQ2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQiVVPxjovA5c7mkn5PFxguku0 zBax5YA4bl3n/3SITxnHjIze39aIx3ftxf29eAbbpSjC//oy3ylNUpc3IZ2ZAEau RKsXKVmi0tOZdScHEXX5cIW1uOaL+4kHntbU1E2cfTDuHMZ672n/cxZkTAF1scDE ikzFsLc/dm6xia+0FXLLJvETONz65Tjdw+/sxq3u+5TmxbT6RTSrAOHZW2IQBk5e +7nigU7zPp+X8n3F/pJcaaylMUgjUcoZI4yrKEl8aSldxpT0myhVCmN+iozVkVHQ mpk5hs9sLXR6ljb0qG2zQcXyqfWyI1SW3hRYGLnKXkGtZyzWmV8kLTahpsRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgztKdE48eS+4NLQU7v0sTk5RmwwHwYDVR0j BBgwFoAU+a31nfwHAusePMj51WPKpMBhLZEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk3YjhmNGEtMzExMC00MGI3LTkwMzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURG QzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRDMDYxMkQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEy RDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NB QTRDMDYxMkQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3F3w3Z1YrhsrywfwGqMDfzzRBWH6cSudNM VBHOrGXDBW8VjjEBApLm88bdF4A7sXpeqeXkxV8Ctk9OjpqNFt6Ku875jrV3rbOJ 6838IXtQGyJvFjEUzj2p3xjV9/cfORpSDq/qAVehai0g1qaRrANz/MlLe7O2m5ua jvnFyQNCRXUF9jeR85hkx9RHMJ0IgcouFiMRFGuAH93jfwt/rUeiZEq+exqBIJLO kkLA1XNvG9TkSI2Zwd/keJlpQiCwfNAvhH+vhpontryN8G3YqtmWEdRI7HSSM1v6 Sbl3CHck1oncnWeA+eKPNO8WIX+UTid6QxbZ/2S2km9cy22qlQo= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:02 2026 by rpki-client