$ rpki-client -vvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: OX/N4AKPh+bXxdo2EOi1tTxq7GopE5gequvu2xgLb/c= Subject key identifier: B9:A0:48:36:7E:00:BA:29:AD:BC:0D:19:0D:82:8F:5B:E2:3F:95:94 Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 280757EE65CC0291A6AE97BBAA9AD31CB51A5576 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 21:41:27 +0000 Manifest this update: Thu 23 Jul 2026 21:36:27 +0000 Manifest next update: Fri 24 Jul 2026 22:03:27 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: CM4Xs/BXyuRg71sSFx1uZ8yrCQzUyCLvpHFPaKl/8w8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:07:57:ee:65:cc:02:91:a6:ae:97:bb:aa:9a:d3:1c:b5:1a:55:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: Jul 23 21:36:27 2026 GMT Not After : Jul 24 22:03:27 2026 GMT Subject: CN=B9A048367E00BA29ADBC0D190D828F5BE23F9594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:96:8f:b6:cd:22:9a:f2:24:a1:e0:2e:a6: 36:b9:fe:5d:71:4c:44:13:98:94:95:90:50:1f:38: ee:99:8e:f8:13:07:37:14:0a:e4:c0:e9:0d:54:6a: b0:77:0d:4a:e3:cd:a8:07:55:8e:bb:e4:24:f9:49: 22:24:73:03:62:a4:40:72:de:6f:2c:e2:1b:65:78: a7:a0:d1:b6:a2:50:06:e3:0d:f8:4d:e6:53:d1:bf: a2:61:27:fd:af:c1:b5:85:fb:e4:be:45:f0:b1:e3: ae:cc:92:d1:d7:76:46:7e:ae:3f:3d:1d:ab:32:b2: 56:df:b9:7b:62:a9:9d:b9:88:59:7a:53:c4:6a:30: f1:52:79:3c:f9:2d:22:a9:3d:b0:54:1f:39:e9:bc: 44:bd:b0:08:dd:dd:a2:9f:8d:ba:89:3d:cb:82:b6: 02:a8:27:dd:a4:90:37:52:92:1a:c6:26:c6:06:44: 88:39:9e:b9:5e:52:2c:88:f7:cb:9c:7b:2d:c0:6c: a8:be:9a:b2:71:54:95:ed:b9:6e:11:31:2f:71:e9: 80:55:3d:1e:f8:3b:60:d0:74:c7:b0:15:49:d0:ce: 03:50:c7:cc:59:d2:f2:28:75:4c:83:db:8a:f3:b3: 34:86:e5:1f:05:71:09:27:d9:cb:d0:d3:63:ff:3b: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A0:48:36:7E:00:BA:29:AD:BC:0D:19:0D:82:8F:5B:E2:3F:95:94 X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5f:75:e5:cc:4b:54:14:f4:2c:a7:f6:e7:fe:6b:32:6c:5a: 9f:70:75:b9:41:2b:26:e9:e4:9d:e5:e5:8b:12:cc:c0:41:c9: 97:50:1f:8d:52:70:c9:c7:8f:fa:e7:10:47:13:db:73:cd:c1: 95:ab:9b:1d:eb:d7:65:c5:0a:cd:d5:23:b7:75:91:9f:96:f2: 46:b8:98:f4:6d:f8:71:26:cf:31:10:5a:0d:5a:82:aa:63:28: f2:a2:3e:f4:9d:e1:ad:5f:d3:35:23:21:2b:99:ec:3c:e1:73: bf:19:79:b7:93:9a:db:75:e4:19:c4:44:a6:72:d6:a6:9e:7f: bb:6e:a1:c9:47:71:62:dd:06:35:ca:96:57:f2:3d:77:a5:b6: 73:04:e4:a3:d4:dd:76:73:c3:b9:01:52:9f:01:0b:5c:94:16: e8:2d:4d:b0:d1:55:54:3c:a4:44:fb:cc:c1:14:36:bf:34:d9: 78:d2:32:fa:e6:90:bf:ee:8c:36:77:d7:8a:a1:c0:4a:f3:01: cf:ea:96:e9:53:ec:74:c5:f4:e6:39:a6:ba:2c:e2:d9:98:91: e6:96:44:4c:52:7e:e3:67:f4:02:89:39:cb:b0:80:a1:90:91: 95:cd:f7:08:80:ff:7d:36:66:ce:35:df:06:70:48:5a:b1:de: df:63:50:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAdX7mXMApGmrpe7qprTHLUaVXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA3MjMyMTM2MjdaFw0yNjA3MjQyMjAzMjdaMDMxMTAvBgNV BAMTKEI5QTA0ODM2N0UwMEJBMjlBREJDMEQxOTBEODI4RjVCRTIzRjk1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DZaPts0imvIkoeAupja5/l1x TEQTmJSVkFAfOO6ZjvgTBzcUCuTA6Q1UarB3DUrjzagHVY675CT5SSIkcwNipEBy 3m8s4htleKeg0baiUAbjDfhN5lPRv6JhJ/2vwbWF++S+RfCx467MktHXdkZ+rj89 HasyslbfuXtiqZ25iFl6U8RqMPFSeTz5LSKpPbBUHznpvES9sAjd3aKfjbqJPcuC tgKoJ92kkDdSkhrGJsYGRIg5nrleUiyI98ucey3AbKi+mrJxVJXtuW4RMS9x6YBV PR74O2DQdMewFUnQzgNQx8xZ0vIodUyD24rzszSG5R8FcQkn2cvQ02P/O0yfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaBINn4AuimtvA0ZDYKPW+I/lZQwHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBfdeXMS1QU9Cyn9uf+azJsWp9wdblBKybp 5J3l5YsSzMBByZdQH41ScMnHj/rnEEcT23PNwZWrmx3r12XFCs3VI7d1kZ+W8ka4 mPRt+HEmzzEQWg1agqpjKPKiPvSd4a1f0zUjISuZ7Dzhc78ZebeTmtt15BnERKZy 1qaef7tuoclHcWLdBjXKllfyPXeltnME5KPU3XZzw7kBUp8BC1yUFugtTbDRVVQ8 pET7zMEUNr802XjSMvrmkL/ujDZ314qhwErzAc/qlulT7HTF9OY5pros4tmYkeaW RExSfuNn9AKJOcuwgKGQkZXN9wiA/302Zs413wZwSFqx3t9jUFY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:31:52 2026 by rpki-client