$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: J09pH8Od03C7t+cE+59EGZ7UUsxKwiQY/74cSQ/LvEM= Subject key identifier: 2E:72:62:6E:48:4B:AE:BB:47:5C:6E:47:82:7A:32:4E:59:81:B4:5D Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 042C6E6E13B6B53656A865F8DE72883F7FFFFFF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:59:30 +0000 Manifest this update: Thu 23 Jul 2026 19:54:30 +0000 Manifest next update: Fri 24 Jul 2026 20:38:30 +0000 Files and hashes: 1: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: cWU1fBF1nKhE6PbyaromoTj3YxeQ7yGkIbg+T3eNyIY=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2c:6e:6e:13:b6:b5:36:56:a8:65:f8:de:72:88:3f:7f:ff:ff:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: Jul 23 19:54:30 2026 GMT Not After : Jul 24 20:38:30 2026 GMT Subject: CN=2E72626E484BAEBB475C6E47827A324E5981B45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:e9:ee:4d:58:35:5d:dd:fb:83:c5:d2:7d: 89:e0:c3:9f:a0:6b:e9:ea:f7:df:5d:9e:65:f9:8a: f4:50:4f:84:8a:f7:fa:58:c6:35:6d:a3:eb:f7:37: 72:a3:6d:9d:ff:bc:c2:f7:ec:69:ad:bc:86:a4:c6: b9:64:75:96:b7:e5:31:ba:c2:0f:32:7e:10:82:81: 50:3f:8a:c1:51:b4:fe:b9:5d:56:38:a9:29:fa:57: a1:73:6b:b9:d8:1e:0e:ff:2d:7c:8d:a7:4a:e7:2f: 44:76:e5:b2:da:1e:31:34:30:f5:d6:20:ec:34:54: 24:24:90:b1:0f:d1:9b:73:df:ba:0a:0f:df:88:d0: 91:e8:ee:88:59:99:54:fc:55:c8:a9:c8:5e:65:27: f4:13:ec:12:87:80:18:2e:97:66:cd:59:70:40:66: cb:45:b1:51:11:e7:59:b7:5f:f6:c0:13:cd:e9:c0: a1:f2:13:83:4b:7a:56:9e:20:5a:5e:d2:38:f7:5d: b3:fb:93:32:15:9c:4a:34:f5:33:8e:1f:f4:7c:82: 4a:4e:77:c3:43:25:9f:86:05:aa:40:b6:0d:2d:29: 48:38:5c:52:c0:8b:25:e1:bd:2c:b0:01:5a:64:aa: b2:1e:68:a2:3c:f2:1b:84:81:13:8d:5a:5f:c2:47: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:72:62:6E:48:4B:AE:BB:47:5C:6E:47:82:7A:32:4E:59:81:B4:5D X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e1:8f:d8:02:be:76:b8:40:8d:94:4b:54:f4:ce:85:33:5a: 13:0b:e1:08:0f:f5:31:a2:b6:3c:22:53:ae:b6:cd:07:99:63: 5b:db:7a:65:7d:6d:9b:71:33:1b:2b:84:59:22:be:07:ed:26: 51:4a:d8:61:c0:42:e4:d6:2a:bb:fe:52:8b:41:fc:4d:1a:71: ba:d3:c4:70:58:d7:07:e0:2b:de:55:d4:5e:7b:e0:00:72:23: a9:ee:bf:0c:d1:70:9d:7d:11:43:62:d7:34:85:fe:78:85:35: c4:55:1b:79:a5:53:d6:1c:b3:b9:6c:ee:7c:0a:9e:2b:03:54: 42:c6:4a:35:a4:37:e9:e3:07:77:c4:1a:e8:d0:67:6a:3a:f3: 9a:d1:f4:7c:17:7a:94:21:e1:a1:1d:00:ab:1f:d3:47:00:4e: d6:a2:68:6c:8f:82:48:52:b0:0b:e1:47:49:96:1a:91:b0:54: 69:3f:d4:a3:ad:13:d3:2b:97:5c:7d:87:6a:46:bd:c4:17:02: ba:4e:ff:06:8c:4a:67:05:c3:cf:eb:5d:1b:6b:4e:5e:ae:d9: 25:43:3e:fb:8c:69:0b:00:82:64:1e:c1:cc:bf:d5:6d:c5:95: a6:bd:f7:d0:b6:92:fa:b0:c0:ed:f6:4a:54:03:b8:f5:62:96: 09:4b:b2:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCxubhO2tTZWqGX43nKIP3////cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjA3MjMxOTU0MzBaFw0yNjA3MjQyMDM4MzBaMDMxMTAvBgNV BAMTKDJFNzI2MjZFNDg0QkFFQkI0NzVDNkU0NzgyN0EzMjRFNTk4MUI0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJeunuTVg1Xd37g8XSfYngw5+g a+nq999dnmX5ivRQT4SK9/pYxjVto+v3N3KjbZ3/vML37GmtvIakxrlkdZa35TG6 wg8yfhCCgVA/isFRtP65XVY4qSn6V6Fza7nYHg7/LXyNp0rnL0R25bLaHjE0MPXW IOw0VCQkkLEP0Ztz37oKD9+I0JHo7ohZmVT8VcipyF5lJ/QT7BKHgBgul2bNWXBA ZstFsVER51m3X/bAE83pwKHyE4NLelaeIFpe0jj3XbP7kzIVnEo09TOOH/R8gkpO d8NDJZ+GBapAtg0tKUg4XFLAiyXhvSywAVpkqrIeaKI88huEgRONWl/CR4W3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULnJibkhLrrtHXG5HgnoyTlmBtF0wHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrhj9gCvna4QI2US1T0zoUzWhML4QgP9TGi tjwiU662zQeZY1vbemV9bZtxMxsrhFkivgftJlFK2GHAQuTWKrv+UotB/E0acbrT xHBY1wfgK95V1F574AByI6nuvwzRcJ19EUNi1zSF/niFNcRVG3mlU9Ycs7ls7nwK nisDVELGSjWkN+njB3fEGujQZ2o685rR9HwXepQh4aEdAKsf00cATtaiaGyPgkhS sAvhR0mWGpGwVGk/1KOtE9Mrl1x9h2pGvcQXArpO/waMSmcFw8/rXRtrTl6u2SVD PvuMaQsAgmQewcy/1W3Flaa999C2kvqwwO32SlQDuPVilglLsis= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:43 2026 by rpki-client