$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft File: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft (raw, json) Hash identifier: Z5FOWemJapox55TsUT/7uzmoSFSxlnHt1wb5ZJqHJD4= Subject key identifier: ED:71:26:2D:D1:B2:9C:1D:B0:1F:CF:65:7E:55:BC:6D:00:CF:AD:40 Authority key identifier: C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C Certificate issuer: /CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Certificate serial: 0D99E9BCA96815E1DE90E5716616138B35E3441E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:25:58 +0000 Manifest this update: Fri 24 Jul 2026 01:20:58 +0000 Manifest next update: Sat 25 Jul 2026 02:58:58 +0000 Files and hashes: 1: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl (hash: USrKzOI2B0aUvoSaDXI6pxM2FK4rCbBK3yuORI9aSC8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:99:e9:bc:a9:68:15:e1:de:90:e5:71:66:16:13:8b:35:e3:44:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Validity Not Before: Jul 24 01:20:58 2026 GMT Not After : Jul 25 02:58:58 2026 GMT Subject: CN=ED71262DD1B29C1DB01FCF657E55BC6D00CFAD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:9e:ab:ca:c2:01:55:c9:25:57:30:2c:1f: 64:61:c8:72:dd:28:49:36:ec:8a:4f:51:cd:89:48: 50:8a:a9:86:17:e6:18:0d:79:cb:b4:27:f4:e4:61: 9f:31:cc:37:33:68:a0:f2:60:02:f9:07:16:9d:81: 60:18:9d:c9:06:1c:5e:f9:ca:90:b9:cd:ad:fb:92: b9:67:35:de:27:47:99:f5:01:d2:3b:9a:bd:3a:0c: 02:44:48:d1:b9:88:ff:6c:14:41:81:aa:e4:f4:57: 5e:31:d8:82:e1:87:58:50:76:08:1d:e7:b6:a6:7f: 66:df:c1:e6:2a:0a:4d:cd:e9:42:31:17:3f:af:45: ea:a8:b0:ad:8b:49:82:d5:d5:5a:dc:04:54:14:4f: e4:bc:f4:8e:8b:5d:f7:d1:51:e9:2d:ae:06:10:8e: 17:3b:de:bd:4d:22:3b:eb:2d:29:4c:cb:c2:9b:87: 7a:be:bb:72:8d:67:4f:46:37:f5:fe:c7:f6:ef:49: 6a:f3:8f:9d:97:46:9f:e5:00:12:c7:74:b7:9b:79: 26:b1:02:6d:30:ec:f6:a2:27:b0:31:94:f6:87:3b: 3e:62:cc:8c:7f:01:6b:05:05:fd:e7:84:2d:5b:fa: 12:97:07:b7:21:a9:87:0f:34:3e:20:4c:81:92:bd: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:71:26:2D:D1:B2:9C:1D:B0:1F:CF:65:7E:55:BC:6D:00:CF:AD:40 X509v3 Authority Key Identifier: keyid:C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8c:c2:35:4f:4c:ce:6d:f1:08:d9:d3:e5:c3:50:f0:14:5c: d7:10:54:d8:68:83:82:57:f4:5c:15:06:1b:1a:b1:22:fe:f9: 68:23:f4:3c:a6:3b:40:2f:ae:57:32:9b:0d:16:9a:e0:73:49: b5:b2:e2:9a:0d:c2:8a:15:1b:e6:2c:f8:4b:ed:ec:37:39:1e: 07:c7:ad:a5:af:bb:00:b4:78:15:aa:b4:cf:75:58:2d:5c:e5: b4:aa:bf:69:66:e9:07:2e:f7:7f:2f:b8:27:ca:f0:a9:2c:94: 70:0b:ae:5c:18:da:e3:9b:48:d6:f9:9f:74:97:89:f4:c3:be: 2c:9a:de:9a:01:49:9d:24:b7:c4:ef:ea:73:32:46:e8:f1:28: 3d:b6:e5:4a:93:0c:c4:2a:62:42:67:7a:34:00:27:1a:3f:41: d1:56:fe:0a:8c:0e:32:44:4f:f9:8e:33:f7:e3:49:b9:3a:1b: f6:1c:0d:1d:2a:83:dd:df:79:ed:59:71:6e:e0:1d:e1:de:5b: d7:73:81:6c:7e:f2:05:b6:24:79:67:6c:95:72:46:d4:30:4d: f8:54:90:35:e7:73:db:59:4b:58:42:c9:63:5c:24:f1:0b:b1: 3b:70:a3:65:3e:39:80:28:2a:da:d0:72:13:e4:60:39:ce:45: 85:0c:67:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZnpvKloFeHekOVxZhYTizXjRB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNBMTlC MjQ2REU4QzAeFw0yNjA3MjQwMTIwNThaFw0yNjA3MjUwMjU4NThaMDMxMTAvBgNV BAMTKEVENzEyNjJERDFCMjlDMURCMDFGQ0Y2NTdFNTVCQzZEMDBDRkFENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnc56rysIBVcklVzAsH2RhyHLd KEk27IpPUc2JSFCKqYYX5hgNecu0J/TkYZ8xzDczaKDyYAL5BxadgWAYnckGHF75 ypC5za37krlnNd4nR5n1AdI7mr06DAJESNG5iP9sFEGBquT0V14x2ILhh1hQdggd 57amf2bfweYqCk3N6UIxFz+vReqosK2LSYLV1VrcBFQUT+S89I6LXffRUektrgYQ jhc73r1NIjvrLSlMy8Kbh3q+u3KNZ09GN/X+x/bvSWrzj52XRp/lABLHdLebeSax Am0w7PaiJ7AxlPaHOz5izIx/AWsFBf3nhC1b+hKXB7chqYcPND4gTIGSvbirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7XEmLdGynB2wH89lflW8bQDPrUAwHwYDVR0j BBgwFoAUwsVOnuMKOW/NttVd9wI6GbJG3owwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNmM2MyMTEtMDY0NS00ODgyLWE0ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVF MzBBMzk2RkNEQjZENTVERjcwMjNBMTlCMjQ2REU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkM1NEU5RUUzMEEzOTZGQ0RCNkQ1NURGNzAyM0ExOUIyNDZE RThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNB MTlCMjQ2REU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWMwjVPTM5t8QjZ0+XDUPAUXNcQVNhog4JX 9FwVBhsasSL++Wgj9DymO0Avrlcymw0WmuBzSbWy4poNwooVG+Ys+Evt7Dc5HgfH raWvuwC0eBWqtM91WC1c5bSqv2lm6Qcu938vuCfK8KkslHALrlwY2uObSNb5n3SX ifTDviya3poBSZ0kt8Tv6nMyRujxKD225UqTDMQqYkJnejQAJxo/QdFW/gqMDjJE T/mOM/fjSbk6G/YcDR0qg93fee1ZcW7gHeHeW9dzgWx+8gW2JHlnbJVyRtQwTfhU kDXnc9tZS1hCyWNcJPELsTtwo2U+OYAoKtrQchPkYDnORYUMZ/M= -----END CERTIFICATE-----Generated at Fri Jul 24 04:18:52 2026 by rpki-client