$ rpki-client -vvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: 5qI6Raw33spG6vGLOZF7dM2KK/zM4H/chPEvQo1Kr2U= Subject key identifier: 7A:13:3C:96:92:01:41:AD:DA:9E:36:7C:C3:BB:C3:5D:44:CD:4B:9A Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 0815497FBB3957C96378FCECA9D9E5AACE76B0CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 21:41:32 +0000 Manifest this update: Thu 23 Jul 2026 21:36:32 +0000 Manifest next update: Sat 25 Jul 2026 00:32:32 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: 9UBzLyYzf3FvfS59XJP8xOKnFeGyaCOpkvDJQgTb0iM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:15:49:7f:bb:39:57:c9:63:78:fc:ec:a9:d9:e5:aa:ce:76:b0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: Jul 23 21:36:32 2026 GMT Not After : Jul 25 00:32:32 2026 GMT Subject: CN=7A133C96920141ADDA9E367CC3BBC35D44CD4B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:88:02:5e:01:2a:43:56:75:45:ea:9f:32:c9: 97:d7:02:a2:51:47:99:16:f1:9b:15:eb:6d:1f:49: ea:b3:31:73:d1:5c:68:ff:c1:a5:cb:b2:cb:f2:af: 07:f8:0d:76:cc:7f:ff:e0:58:02:95:6b:64:e0:7c: fd:ad:2c:8e:04:80:4d:11:c8:e7:7f:a9:55:08:ae: 5d:f5:b7:24:34:80:07:d6:9c:a0:4d:c6:d6:55:d7: ae:81:3e:69:72:32:72:97:d6:5a:17:fc:25:d8:51: 06:10:aa:10:16:62:ad:e7:96:20:6c:d7:5f:d8:85: c6:1a:0a:13:17:5b:ba:26:7a:20:83:e5:e0:73:6e: ab:5a:78:fe:5d:15:fb:27:8a:74:50:fc:d7:70:6b: 9a:55:1d:b1:f4:41:a1:72:af:10:e4:29:0a:8b:bf: 4d:86:fe:2a:2c:d7:d5:be:d7:5c:76:fe:5a:34:0b: 0a:b1:64:5b:b5:69:b2:10:05:6f:d6:8f:47:1e:f6: 97:d4:63:04:2f:12:2f:49:58:50:b6:02:a9:07:43: 87:4f:6e:8a:27:eb:97:c5:59:a9:8b:43:08:e7:00: 90:49:f7:28:25:6a:24:ad:29:5f:86:b3:7b:68:0a: e1:25:d0:b4:25:a1:d0:cd:c8:8c:a0:3f:31:80:92: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:13:3C:96:92:01:41:AD:DA:9E:36:7C:C3:BB:C3:5D:44:CD:4B:9A X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d3:2a:43:5a:5f:8f:41:d1:86:04:02:a3:b1:a4:d6:77:02: ec:8e:92:32:df:5d:ed:79:38:75:cd:87:0b:ce:c7:3a:59:24: 29:a6:07:1d:e6:45:31:45:7a:88:cf:81:f7:e3:eb:9d:13:17: ed:ee:a6:6f:3b:59:77:c6:b5:05:3a:51:6b:76:4d:e3:51:7d: c1:da:2f:30:08:d5:27:4c:ad:41:e6:f1:d4:d8:88:da:b8:b7: 12:78:8e:70:ea:1b:1f:9f:7a:54:d0:bf:99:23:af:05:da:c6: 2a:b3:c3:92:c9:62:ab:ba:04:17:d5:f5:f8:d9:cd:5e:42:5e: 94:6d:3a:1e:7b:38:1c:aa:73:91:c7:8c:5d:8d:6b:35:a1:30: 4e:1a:52:20:2f:b8:a5:c6:25:19:89:50:74:15:9c:04:bf:3b: 43:32:a1:81:a6:3d:ea:ea:ff:9d:6e:32:25:43:34:32:2c:a0: cb:b4:27:21:2f:69:58:6d:e1:40:dc:ef:c7:94:e1:0d:c6:f2: 85:c6:08:2b:7f:1c:88:50:c7:e6:aa:20:d9:72:e2:87:79:bf: 72:88:5d:e9:58:c8:85:3d:e8:53:cd:0a:dc:8d:1d:02:5a:ed: 3d:2b:4a:fd:72:fe:4d:f4:cd:39:f0:52:1d:a2:64:9d:0e:84: 71:e9:cb:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBVJf7s5V8ljePzsqdnlqs52sMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA3MjMyMTM2MzJaFw0yNjA3MjUwMDMyMzJaMDMxMTAvBgNV BAMTKDdBMTMzQzk2OTIwMTQxQUREQTlFMzY3Q0MzQkJDMzVENDRDRDRCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsiAJeASpDVnVF6p8yyZfXAqJR R5kW8ZsV620fSeqzMXPRXGj/waXLssvyrwf4DXbMf//gWAKVa2TgfP2tLI4EgE0R yOd/qVUIrl31tyQ0gAfWnKBNxtZV166BPmlyMnKX1loX/CXYUQYQqhAWYq3nliBs 11/YhcYaChMXW7omeiCD5eBzbqtaeP5dFfsninRQ/Ndwa5pVHbH0QaFyrxDkKQqL v02G/ios19W+11x2/lo0CwqxZFu1abIQBW/Wj0ce9pfUYwQvEi9JWFC2AqkHQ4dP boon65fFWamLQwjnAJBJ9yglaiStKV+Gs3toCuEl0LQlodDNyIygPzGAkmuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUehM8lpIBQa3anjZ8w7vDXUTNS5owHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHTKkNaX49B0YYEAqOxpNZ3AuyOkjLfXe15 OHXNhwvOxzpZJCmmBx3mRTFFeojPgffj650TF+3upm87WXfGtQU6UWt2TeNRfcHa LzAI1SdMrUHm8dTYiNq4txJ4jnDqGx+felTQv5kjrwXaxiqzw5LJYqu6BBfV9fjZ zV5CXpRtOh57OByqc5HHjF2NazWhME4aUiAvuKXGJRmJUHQVnAS/O0MyoYGmPerq /51uMiVDNDIsoMu0JyEvaVht4UDc78eU4Q3G8oXGCCt/HIhQx+aqINly4od5v3KI XelYyIU96FPNCtyNHQJa7T0rSv1y/k30zTnwUh2iZJ0OhHHpy4I= -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:01 2026 by rpki-client