$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: H3+dHsbUknO8AkhnEjsALoagSyWDkhv0oSUMHW3CGEk= Subject key identifier: 3D:A1:7F:1D:93:03:F9:E7:59:9E:02:79:9F:E9:15:8C:DB:BC:D9:56 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 74A95E39561A6955FB698B4450A84EB076059A3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 17:46:51 +0000 Manifest this update: Thu 23 Jul 2026 17:41:51 +0000 Manifest next update: Fri 24 Jul 2026 20:30:51 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: UYA6meF9PaFnUnHi77r7TrtjCxnUJVOzWgAequPOMG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a9:5e:39:56:1a:69:55:fb:69:8b:44:50:a8:4e:b0:76:05:9a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Jul 23 17:41:51 2026 GMT Not After : Jul 24 20:30:51 2026 GMT Subject: CN=3DA17F1D9303F9E7599E02799FE9158CDBBCD956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:80:b2:c9:ad:0f:c5:91:07:17:2d:c6:30: 43:51:fe:e2:9d:bd:8b:e1:98:54:1d:9c:ff:56:dc: d9:c7:ca:69:af:d9:c5:91:e2:6e:4b:55:ea:4b:a7: 05:0b:36:73:a8:7d:67:da:60:e8:a8:62:b0:99:ad: 5b:52:92:85:d0:d9:2a:7e:5a:cb:ea:a1:ed:1e:88: 35:79:86:0e:26:e0:22:1d:22:94:86:0d:e7:b4:1f: 48:23:8b:3c:53:c4:44:79:50:dd:d0:65:e9:c7:4c: 74:b0:81:69:3c:25:f8:4d:c2:74:9d:1a:7a:08:6c: 1f:c8:fe:1e:10:72:04:95:de:6f:ae:70:c9:88:4b: 80:dc:64:d8:cc:30:a5:e5:e3:87:10:cf:93:87:8f: 54:8f:83:c4:79:d9:ae:ba:7c:07:81:b7:1e:63:9f: 9d:64:8b:a9:12:ed:56:ac:fe:10:e5:08:4c:60:1b: 17:28:a6:81:29:e5:d3:b6:ac:f8:6a:43:e2:00:14: d7:36:e1:41:11:b2:f6:a6:a3:e1:24:27:3c:fc:53: 1d:65:b3:a0:57:f8:32:8b:f3:a9:27:49:4f:f5:f0: f2:24:f7:1e:14:52:4f:72:23:04:0d:39:ff:06:49: 65:1b:b9:22:18:c4:0e:71:f5:69:58:50:f4:1b:7c: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A1:7F:1D:93:03:F9:E7:59:9E:02:79:9F:E9:15:8C:DB:BC:D9:56 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b9:12:72:fe:a2:d0:8d:56:f3:46:9b:b4:11:e9:13:22:72: bb:83:11:2b:32:c5:c0:03:75:a2:92:16:6f:45:af:e8:66:f8: ca:4c:a9:a4:07:a1:8b:b0:50:7d:f6:a7:55:44:c7:1d:55:aa: fe:59:f7:f6:a2:eb:b0:6c:27:97:8c:7a:2b:1b:3f:68:ca:ae: 36:80:c4:15:0b:6d:da:eb:3a:5c:a6:9e:54:2f:7e:65:81:09: fc:b8:8c:31:5d:a7:fb:71:14:ee:d9:ce:f5:ac:c2:d1:a8:52: 25:2a:ad:51:18:78:18:14:ce:bc:58:ff:b8:79:f7:3a:97:ce: b4:42:c4:eb:08:26:6c:15:b6:5c:0a:fb:ca:ff:90:2c:2e:7c: 0c:ed:79:5a:64:23:59:e3:df:3f:74:2d:e8:5f:55:82:3c:f8: 5d:72:b7:41:0f:d1:6e:c2:79:6b:fa:4e:83:ff:e9:6e:22:cd: 61:93:83:5e:04:f7:6b:35:22:00:b4:43:30:bf:e4:a7:35:dd: b1:a1:c4:7f:6d:f0:02:11:17:61:8d:51:be:47:54:74:b5:1f: 07:52:9f:8f:f8:a7:1c:4f:27:e4:87:64:5c:9f:e1:aa:16:ab: b3:85:9b:08:43:ca:ec:95:a1:79:e9:aa:bf:00:f1:80:a8:65: 28:81:f8:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKleOVYaaVX7aYtEUKhOsHYFmjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA3MjMxNzQxNTFaFw0yNjA3MjQyMDMwNTFaMDMxMTAvBgNV BAMTKDNEQTE3RjFEOTMwM0Y5RTc1OTlFMDI3OTlGRTkxNThDREJCQ0Q5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6poCyya0PxZEHFy3GMENR/uKd vYvhmFQdnP9W3NnHymmv2cWR4m5LVepLpwULNnOofWfaYOioYrCZrVtSkoXQ2Sp+ Wsvqoe0eiDV5hg4m4CIdIpSGDee0H0gjizxTxER5UN3QZenHTHSwgWk8JfhNwnSd GnoIbB/I/h4QcgSV3m+ucMmIS4DcZNjMMKXl44cQz5OHj1SPg8R52a66fAeBtx5j n51ki6kS7Vas/hDlCExgGxcopoEp5dO2rPhqQ+IAFNc24UERsvamo+EkJzz8Ux1l s6BX+DKL86knSU/18PIk9x4UUk9yIwQNOf8GSWUbuSIYxA5x9WlYUPQbfGUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaF/HZMD+edZngJ5n+kVjNu82VYwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC5EnL+otCNVvNGm7QR6RMicruDESsyxcAD daKSFm9Fr+hm+MpMqaQHoYuwUH32p1VExx1Vqv5Z9/ai67BsJ5eMeisbP2jKrjaA xBULbdrrOlymnlQvfmWBCfy4jDFdp/txFO7ZzvWswtGoUiUqrVEYeBgUzrxY/7h5 9zqXzrRCxOsIJmwVtlwK+8r/kCwufAzteVpkI1nj3z90LehfVYI8+F1yt0EP0W7C eWv6ToP/6W4izWGTg14E92s1IgC0QzC/5Kc13bGhxH9t8AIRF2GNUb5HVHS1HwdS n4/4pxxPJ+SHZFyf4aoWq7OFmwhDyuyVoXnpqr8A8YCoZSiB+Hw= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:55 2026 by rpki-client