$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: ZBWqHuWxC2eHGK3VIeAHOlHmHBRZY+m6XHJPm/ucpiM= Subject key identifier: 98:09:99:19:DA:71:0A:9B:5F:E3:44:44:02:F1:DA:5B:C2:00:73:1D Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 28728408EFEADED08DB6650835CC87C84808075F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 04:09:31 +0000 Manifest this update: Fri 24 Jul 2026 04:04:31 +0000 Manifest next update: Sat 25 Jul 2026 05:16:31 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: e61blX3GOLDBVcy0jarmtGWzG3nk4p5Fhzi2rCqtHhs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:72:84:08:ef:ea:de:d0:8d:b6:65:08:35:cc:87:c8:48:08:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: Jul 24 04:04:31 2026 GMT Not After : Jul 25 05:16:31 2026 GMT Subject: CN=98099919DA710A9B5FE3444402F1DA5BC200731D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:8f:d9:47:20:8f:d9:0f:55:b0:ec:a9:89: bc:98:7b:41:d3:30:4d:bc:38:c6:24:d2:b3:85:82: 35:8b:61:64:32:44:7a:16:dd:a7:68:02:a4:22:a7: 1c:2f:70:6b:ec:57:05:da:38:c6:db:a8:54:94:e5: d5:61:9f:21:d2:de:0f:27:6a:09:20:cf:5b:23:54: 54:96:53:e1:d9:8e:c9:15:32:64:5d:3b:c2:32:55: 09:3b:5b:db:4f:95:7f:3d:6d:ee:a7:e7:4b:ac:bb: 65:49:5d:73:20:8d:d6:4c:71:ef:22:05:e3:1b:74: 8a:8b:98:07:3e:e9:3a:66:84:62:2e:b7:c5:e0:5f: ba:34:43:3e:2a:42:2a:9f:a8:8c:c9:54:ec:71:77: b4:78:d7:fb:e6:af:f6:d2:82:52:87:a8:3f:57:87: 11:6d:e3:fd:64:7a:67:94:f4:36:14:61:a6:6f:4a: 57:11:4b:15:9e:a1:f2:65:21:07:e8:98:64:7d:7a: 4b:3e:85:f0:13:be:b8:ce:d1:7f:dd:a3:dd:ae:f5: 51:dc:75:75:51:38:b4:2d:78:4b:fd:1b:ab:a3:25: 8e:81:54:a5:5b:68:1a:78:53:d2:a9:ac:42:e0:63: 86:cd:e1:a7:47:33:b7:89:08:d5:e4:36:3a:c1:1c: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:09:99:19:DA:71:0A:9B:5F:E3:44:44:02:F1:DA:5B:C2:00:73:1D X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e1:c0:51:12:86:d9:65:b6:62:af:49:1e:0c:de:ce:94:00: 4f:ef:4e:86:1f:ed:50:1f:d4:bb:54:2f:19:c5:fc:34:77:e0: d2:37:fa:3d:f5:65:b6:ca:e4:a4:4b:67:ec:b1:47:e9:4a:58: 47:32:fe:38:8b:58:de:e1:62:7e:f9:74:84:9d:06:e4:41:45: 16:ba:c3:17:4f:2d:62:4a:22:7f:fe:d5:79:db:be:25:9d:2f: 26:76:f7:f4:1a:54:fc:22:17:6d:ec:45:8a:f1:81:b5:4f:d8: ff:29:47:c9:87:3a:35:60:a8:cc:56:70:d9:19:14:f8:40:d9: d6:47:df:d6:e1:28:3c:4b:7f:05:48:d8:dd:7a:10:7d:58:25: 1a:03:37:b0:42:9e:f6:ff:9c:92:7f:e5:c5:02:ea:c1:53:c8: f1:4c:0b:d5:00:e8:77:6e:96:88:41:6d:ee:35:50:ae:78:85: 03:78:b6:0d:ed:cc:a0:cb:e5:70:1a:70:47:ab:0f:69:b6:c1: 04:04:c3:2c:fc:d1:0e:ae:fd:90:9e:b8:9c:98:36:12:86:45: 6e:34:5a:23:fa:2a:bf:74:f4:bd:46:e0:08:37:9f:9e:1b:08: 05:59:8e:24:ab:e2:a1:45:6f:48:ad:32:2d:ff:a6:cf:7b:80: b5:4c:94:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHKECO/q3tCNtmUINcyHyEgIB18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA3MjQwNDA0MzFaFw0yNjA3MjUwNTE2MzFaMDMxMTAvBgNV BAMTKDk4MDk5OTE5REE3MTBBOUI1RkUzNDQ0NDAyRjFEQTVCQzIwMDczMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsno/ZRyCP2Q9VsOypibyYe0HT ME28OMYk0rOFgjWLYWQyRHoW3adoAqQipxwvcGvsVwXaOMbbqFSU5dVhnyHS3g8n agkgz1sjVFSWU+HZjskVMmRdO8IyVQk7W9tPlX89be6n50usu2VJXXMgjdZMce8i BeMbdIqLmAc+6TpmhGIut8XgX7o0Qz4qQiqfqIzJVOxxd7R41/vmr/bSglKHqD9X hxFt4/1kemeU9DYUYaZvSlcRSxWeofJlIQfomGR9eks+hfATvrjO0X/do92u9VHc dXVROLQteEv9G6ujJY6BVKVbaBp4U9KprELgY4bN4adHM7eJCNXkNjrBHHi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmAmZGdpxCptf40REAvHaW8IAcx0wHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrhwFEShtlltmKvSR4M3s6UAE/vToYf7VAf 1LtULxnF/DR34NI3+j31ZbbK5KRLZ+yxR+lKWEcy/jiLWN7hYn75dISdBuRBRRa6 wxdPLWJKIn/+1XnbviWdLyZ29/QaVPwiF23sRYrxgbVP2P8pR8mHOjVgqMxWcNkZ FPhA2dZH39bhKDxLfwVI2N16EH1YJRoDN7BCnvb/nJJ/5cUC6sFTyPFMC9UA6Hdu lohBbe41UK54hQN4tg3tzKDL5XAacEerD2m2wQQEwyz80Q6u/ZCeuJyYNhKGRW40 WiP6Kr909L1G4Ag3n54bCAVZjiSr4qFFb0itMi3/ps97gLVMlMI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:10 2026 by rpki-client