$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft File: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft (raw, json) Hash identifier: Cxy1pT7nZV769g/z3ejdhm+8xeHMOznGwJa+lUlQnko= Subject key identifier: 85:00:BA:57:19:09:1C:A0:60:C7:17:D6:DF:20:6B:D2:12:47:3F:8E Authority key identifier: C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD Certificate issuer: /CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Certificate serial: 4FB2CAD1A1C0FD3996198ED6A1E3C291EDA68D4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:37:31 +0000 Manifest this update: Thu 23 Jul 2026 22:32:31 +0000 Manifest next update: Fri 24 Jul 2026 22:37:31 +0000 Files and hashes: 1: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl (hash: iiPBHpAEdomCFouQ6LbsaKQC/e5cDjaYiIGK930OPqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b2:ca:d1:a1:c0:fd:39:96:19:8e:d6:a1:e3:c2:91:ed:a6:8d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Validity Not Before: Jul 23 22:32:31 2026 GMT Not After : Jul 24 22:37:31 2026 GMT Subject: CN=8500BA5719091CA060C717D6DF206BD212473F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:1e:df:5b:88:15:21:13:c3:2f:1f:c5:a4: b3:ef:f5:6d:c1:6c:42:e3:e7:de:f6:58:fa:f6:da: e5:6f:e8:b5:27:c4:5c:87:98:d2:bb:3d:0f:e2:6c: c2:9b:1b:67:89:70:f0:f3:71:73:8a:d7:62:f2:1c: 89:d0:49:f9:2f:e6:ae:cb:c5:54:7d:0a:de:0c:bd: 08:00:8d:81:fe:3f:35:b4:82:45:fd:b1:a6:17:59: ad:55:4d:a7:a6:30:be:a8:45:97:3b:be:a7:61:7d: 93:21:32:4b:b2:2c:5f:11:5d:91:95:2d:d0:a4:15: 41:c0:dc:9f:41:73:0d:bf:d0:92:07:98:11:4d:0e: af:53:bc:0c:89:b4:e1:b4:dd:04:c9:76:dd:a1:d5: 18:63:ed:be:4c:2f:a6:f5:18:49:26:7c:db:b7:30: 09:82:9d:1f:4f:2b:89:f6:5d:d4:32:e6:41:23:56: 02:cb:45:ff:00:10:52:fa:e5:44:c5:41:9b:de:92: c8:59:77:93:1c:65:88:29:90:59:d8:a2:7c:47:12: d8:f4:95:b1:39:b2:d0:be:b6:65:51:c4:a9:20:9d: 47:e6:87:7c:67:e7:8c:ce:a9:f0:07:17:ea:8f:76: 24:37:fa:3a:15:76:31:46:d9:68:0e:39:15:5a:82: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:00:BA:57:19:09:1C:A0:60:C7:17:D6:DF:20:6B:D2:12:47:3F:8E X509v3 Authority Key Identifier: keyid:C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8d:e2:3e:60:9e:53:1b:d9:57:77:b6:23:6c:35:b1:f4:ab: 81:53:4c:55:f5:b5:51:0d:32:66:cd:49:f0:30:a2:53:bc:f8: 31:bf:6a:cd:91:f7:6d:23:89:48:10:d4:6f:1e:04:06:1f:89: 66:8c:f9:4f:a9:cc:fd:84:2e:ed:30:e2:87:8a:7f:7e:a0:23: 60:05:03:02:6d:20:d5:d1:9b:96:0d:b8:4e:39:30:87:e9:59: 74:d7:45:fe:8a:d1:c4:44:ac:41:1e:57:6a:21:29:a3:c9:fe: 6b:09:8f:1e:b4:ad:6c:88:10:76:67:64:dd:dd:20:d6:ef:df: ea:6a:22:26:f7:b3:3f:0f:c7:37:35:1b:b8:ea:d9:82:91:b3: 02:b1:92:a7:a3:b6:41:e8:9a:5c:86:47:ec:9d:16:7d:09:22: 9a:55:1f:19:77:b7:1c:5a:3e:58:44:3a:fb:f3:7a:c7:78:6d: f1:21:8e:a0:85:0d:04:2d:f2:85:93:c7:a9:45:f3:30:76:ea: 7d:b7:f6:52:a7:9a:95:e1:9b:a9:61:4c:7a:86:d9:5e:40:11: c5:66:23:61:18:39:d5:00:49:df:27:e9:60:bf:77:d6:8f:67: 44:a3:67:be:40:a9:d5:62:f4:cd:79:b4:a7:67:10:c6:32:71: b9:23:76:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7LK0aHA/TmWGY7WoePCke2mjU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4 M0VCQkRERDAeFw0yNjA3MjMyMjMyMzFaFw0yNjA3MjQyMjM3MzFaMDMxMTAvBgNV BAMTKDg1MDBCQTU3MTkwOTFDQTA2MEM3MTdENkRGMjA2QkQyMTI0NzNGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMB7fW4gVIRPDLx/FpLPv9W3B bELj5972WPr22uVv6LUnxFyHmNK7PQ/ibMKbG2eJcPDzcXOK12LyHInQSfkv5q7L xVR9Ct4MvQgAjYH+PzW0gkX9saYXWa1VTaemML6oRZc7vqdhfZMhMkuyLF8RXZGV LdCkFUHA3J9Bcw2/0JIHmBFNDq9TvAyJtOG03QTJdt2h1Rhj7b5ML6b1GEkmfNu3 MAmCnR9PK4n2XdQy5kEjVgLLRf8AEFL65UTFQZvekshZd5McZYgpkFnYonxHEtj0 lbE5stC+tmVRxKkgnUfmh3xn54zOqfAHF+qPdiQ3+joVdjFG2WgOORVaguehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQC6VxkJHKBgxxfW3yBr0hJHP44wHwYDVR0j BBgwFoAUyQRo1+uxVQx+dIYy9o9v4IPrvd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NkMzIzYmUtODM3ZC00MjQ0LTg0NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdF QkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4M0VCQkRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTA0NjhEN0VCQjE1NTBDN0U3NDg2MzJGNjhGNkZFMDgzRUJC RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZG RTA4M0VCQkRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWN4j5gnlMb2Vd3tiNsNbH0q4FTTFX1tVEN MmbNSfAwolO8+DG/as2R920jiUgQ1G8eBAYfiWaM+U+pzP2ELu0w4oeKf36gI2AF AwJtINXRm5YNuE45MIfpWXTXRf6K0cRErEEeV2ohKaPJ/msJjx60rWyIEHZnZN3d INbv3+pqIib3sz8Pxzc1G7jq2YKRswKxkqejtkHomlyGR+ydFn0JIppVHxl3txxa PlhEOvvzesd4bfEhjqCFDQQt8oWTx6lF8zB26n239lKnmpXhm6lhTHqG2V5AEcVm I2EYOdUASd8n6WC/d9aPZ0SjZ75AqdVi9M15tKdnEMYycbkjduE= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:36 2026 by rpki-client