$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: Z3bWbTqV80o5v6834hVLDXQ1sl32xX9DR1V88YEE/z8= Subject key identifier: 21:EE:57:F8:66:14:98:BD:B0:F9:02:98:BE:A2:EF:CF:54:CF:4C:B6 Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 746C85A1938561727A32F2A4BC9DC6D58E9F37F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 17:41:46 +0000 Manifest this update: Thu 23 Jul 2026 17:36:46 +0000 Manifest next update: Fri 24 Jul 2026 19:12:46 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: 5cxd8IamdOpfG1jXHuzhmm78wxBywc66xKS5wz/nKng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6c:85:a1:93:85:61:72:7a:32:f2:a4:bc:9d:c6:d5:8e:9f:37:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: Jul 23 17:36:46 2026 GMT Not After : Jul 24 19:12:46 2026 GMT Subject: CN=21EE57F8661498BDB0F90298BEA2EFCF54CF4CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:81:ab:c3:ec:23:11:74:d6:1d:0a:7b:79: b4:b8:74:c2:51:0e:9d:bc:eb:4b:b0:34:89:3e:0c: 00:bd:20:11:84:be:04:cf:d2:d1:29:f7:7f:57:03: 1d:21:71:0d:15:0d:94:53:cc:b5:a2:05:b1:cc:17: 37:a5:36:18:7f:97:15:3b:07:67:25:9c:be:63:ee: 98:34:be:34:30:87:d4:5a:c0:7b:35:92:4f:85:aa: 05:5b:9f:f0:42:05:a0:39:9c:c2:a4:9d:80:9c:97: 2c:94:bc:04:13:6a:90:87:77:76:73:39:d8:4d:35: 3e:62:6c:1a:4a:ea:5a:11:d0:98:5e:48:13:50:75: 37:08:c2:2f:ed:21:66:26:bc:9e:aa:59:d3:6e:28: be:a3:ba:c5:0e:92:6c:d4:d1:8d:8a:0d:f0:be:f5: 71:a1:c5:b6:83:1f:66:3c:00:be:7f:f4:04:ee:81: 60:a4:bf:bc:3f:7d:23:72:ba:59:2a:0e:47:be:79: cb:ad:5e:1a:ba:1e:28:c7:36:58:19:a6:4b:eb:8d: 06:36:7e:1d:9a:58:c5:1b:aa:d9:50:af:98:eb:0b: 0a:02:43:fd:a0:1b:08:44:c1:62:d7:21:f4:fe:12: d1:2b:ed:18:00:ee:28:05:e3:86:26:95:ca:bc:cb: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:57:F8:66:14:98:BD:B0:F9:02:98:BE:A2:EF:CF:54:CF:4C:B6 X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:af:ce:e0:f8:9b:8c:72:a5:31:5d:4e:c6:34:91:19:1c:c7: 26:4e:41:79:9d:25:7e:cc:e3:34:50:c8:34:36:ce:c9:b8:ae: df:89:c7:09:94:a8:05:22:3b:78:59:ca:55:57:bf:c4:3d:0b: be:e2:7d:de:39:22:d3:7c:d7:7b:83:ed:ae:c2:26:d8:f7:b6: 59:e4:98:80:e9:1d:4f:88:e8:a8:31:fa:99:eb:fd:96:a6:b3: f2:31:f8:60:21:36:06:88:71:e5:c5:dd:e6:77:d1:59:aa:e8: a6:7a:dc:81:06:26:8a:fb:83:3c:b1:c4:fd:1c:9c:c6:ae:61: 88:e7:cb:22:74:0b:25:77:ba:b2:31:cd:a9:9b:2c:ec:56:e1: 84:2e:da:3d:e3:30:e3:e3:48:89:02:ce:ed:46:0a:42:b1:3b: ff:44:90:00:a6:33:a3:f0:47:12:97:d6:ea:ca:d7:ac:57:f9: 32:f2:bb:48:a7:a9:f6:04:a7:ae:69:28:a4:bc:2b:11:5a:d6: d5:06:fd:ac:9f:17:8c:70:08:e2:1c:d5:f4:50:15:d0:4c:33: 64:8d:43:6b:7a:71:e5:8a:4a:67:cc:69:e0:0c:4d:00:2f:cc: df:f0:3b:3e:26:c3:84:e9:62:37:2b:e5:54:22:82:8a:91:95: ba:dd:eb:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGyFoZOFYXJ6MvKkvJ3G1Y6fN/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA3MjMxNzM2NDZaFw0yNjA3MjQxOTEyNDZaMDMxMTAvBgNV BAMTKDIxRUU1N0Y4NjYxNDk4QkRCMEY5MDI5OEJFQTJFRkNGNTRDRjRDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUoGrw+wjEXTWHQp7ebS4dMJR Dp2860uwNIk+DAC9IBGEvgTP0tEp939XAx0hcQ0VDZRTzLWiBbHMFzelNhh/lxU7 B2clnL5j7pg0vjQwh9RawHs1kk+FqgVbn/BCBaA5nMKknYCclyyUvAQTapCHd3Zz OdhNNT5ibBpK6loR0JheSBNQdTcIwi/tIWYmvJ6qWdNuKL6jusUOkmzU0Y2KDfC+ 9XGhxbaDH2Y8AL5/9ATugWCkv7w/fSNyulkqDke+ecutXhq6HijHNlgZpkvrjQY2 fh2aWMUbqtlQr5jrCwoCQ/2gGwhEwWLXIfT+EtEr7RgA7igF44Ymlcq8yxuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIe5X+GYUmL2w+QKYvqLvz1TPTLYwHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWvzuD4m4xypTFdTsY0kRkcxyZOQXmdJX7M 4zRQyDQ2zsm4rt+JxwmUqAUiO3hZylVXv8Q9C77ifd45ItN813uD7a7CJtj3tlnk mIDpHU+I6Kgx+pnr/Zams/Ix+GAhNgaIceXF3eZ30Vmq6KZ63IEGJor7gzyxxP0c nMauYYjnyyJ0CyV3urIxzambLOxW4YQu2j3jMOPjSIkCzu1GCkKxO/9EkACmM6Pw RxKX1urK16xX+TLyu0inqfYEp65pKKS8KxFa1tUG/ayfF4xwCOIc1fRQFdBMM2SN Q2t6ceWKSmfMaeAMTQAvzN/wOz4mw4TpYjcr5VQigoqRlbrd66g= -----END CERTIFICATE-----Generated at Fri Jul 24 12:16:37 2026 by rpki-client