$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: DxBtAKOE8jj5JfJmyzaMf3j3VDVY4ooTIIphtMghMtU= Subject key identifier: 71:FE:E9:7D:93:5D:35:E3:97:49:EF:87:2D:6E:85:7B:D3:E5:16:70 Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 19C2DF43E4BAF56E5DA4D7CEF6999220EBDC2675 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:02:59 +0000 Manifest this update: Fri 24 Jul 2026 06:57:59 +0000 Manifest next update: Sat 25 Jul 2026 07:42:59 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: EHcd3ygvxafiM8ocOKbDuL4FJcwC6zgqjsnb1JjusDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c2:df:43:e4:ba:f5:6e:5d:a4:d7:ce:f6:99:92:20:eb:dc:26:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Jul 24 06:57:59 2026 GMT Not After : Jul 25 07:42:59 2026 GMT Subject: CN=71FEE97D935D35E39749EF872D6E857BD3E51670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:74:c6:5a:38:02:92:a5:18:6c:a4:e1:d7: 55:f2:b7:81:6f:b0:40:0d:ca:46:b3:a2:ba:bc:aa: 9c:3b:12:c2:cd:26:24:84:bc:d0:e5:11:fa:3c:59: b2:28:37:55:bd:ce:f8:c6:74:99:f2:c3:44:dd:e4: fd:ca:ec:16:c7:93:84:59:3b:d7:d6:92:3f:62:48: a7:50:8e:58:7e:65:b4:da:3f:e7:af:25:39:ed:a7: 35:ba:24:a9:a8:86:0d:aa:25:66:1f:4c:d7:96:85: 8c:59:37:79:dd:91:db:73:12:da:7b:75:60:10:c0: 08:16:84:e5:d4:fa:7c:f7:3a:00:50:9f:0e:b3:11: e2:1d:66:38:c5:0b:f2:1b:0a:eb:89:9a:64:92:86: 02:42:a6:fb:db:7f:64:d3:65:b2:21:fd:4d:e2:d8: f6:45:8e:9a:68:d3:5b:d3:a5:79:8d:86:81:fe:ae: d3:f3:ef:34:3b:7f:67:fa:b9:48:25:0f:37:82:96: 5f:b0:cc:fd:2d:d3:b7:ac:c8:b5:d6:61:10:10:90: 31:dd:5c:f6:fd:dc:28:19:a7:46:76:e9:c7:df:52: bc:a1:e7:4d:8e:6c:45:cf:03:37:a4:ef:63:42:5c: 14:0f:f5:cc:b0:fc:d4:3c:cf:93:ed:c5:45:34:df: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FE:E9:7D:93:5D:35:E3:97:49:EF:87:2D:6E:85:7B:D3:E5:16:70 X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0c:f7:19:ac:1d:19:90:e5:58:c7:4a:60:43:83:51:fa:5c: 10:3e:06:76:15:d9:b7:2c:b1:86:d8:92:ed:33:18:cf:c8:68: 15:9c:c6:be:9a:8b:0d:08:95:87:87:c3:e0:6a:eb:3c:10:39: 61:78:c5:39:0a:8a:8b:f6:45:b7:4f:b0:15:8e:63:5f:e6:1b: 91:bf:1f:0b:d8:16:8e:b6:15:77:d4:17:a4:b7:2d:aa:f9:1d: 02:72:41:68:17:26:52:ff:80:e9:b3:f9:ac:c3:64:0d:53:84: ea:64:5c:21:6a:aa:b2:2a:19:82:4c:51:2f:96:f7:2b:cc:b7: 34:e0:2a:19:82:9e:79:5e:54:12:a0:78:73:8b:51:33:fa:a0: 1e:15:fa:14:6f:60:21:a4:d3:2c:2e:07:fc:c5:42:fb:74:6e: 6a:d9:56:ea:ea:46:50:fb:04:de:62:fe:b9:2f:82:ce:96:80: 9c:96:a3:27:bd:74:42:ef:2c:37:92:17:d7:b2:ad:09:b0:ce: 76:00:9d:44:dc:a2:00:ec:54:59:b6:1f:92:b9:78:68:95:04: 9c:b5:24:a2:62:80:58:f1:21:cc:34:23:53:b4:81:66:39:de: 31:b0:06:22:2e:1b:34:ef:28:cd:3b:0c:c5:e6:07:5c:a3:07: d3:c7:bd:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcLfQ+S69W5dpNfO9pmSIOvcJnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA3MjQwNjU3NTlaFw0yNjA3MjUwNzQyNTlaMDMxMTAvBgNV BAMTKDcxRkVFOTdEOTM1RDM1RTM5NzQ5RUY4NzJENkU4NTdCRDNFNTE2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4HTGWjgCkqUYbKTh11Xyt4Fv sEANykazorq8qpw7EsLNJiSEvNDlEfo8WbIoN1W9zvjGdJnyw0Td5P3K7BbHk4RZ O9fWkj9iSKdQjlh+ZbTaP+evJTntpzW6JKmohg2qJWYfTNeWhYxZN3ndkdtzEtp7 dWAQwAgWhOXU+nz3OgBQnw6zEeIdZjjFC/IbCuuJmmSShgJCpvvbf2TTZbIh/U3i 2PZFjppo01vTpXmNhoH+rtPz7zQ7f2f6uUglDzeCll+wzP0t07esyLXWYRAQkDHd XPb93CgZp0Z26cffUryh502ObEXPAzek72NCXBQP9cyw/NQ8z5PtxUU03xiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcf7pfZNdNeOXSe+HLW6Fe9PlFnAwHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAM9xmsHRmQ5VjHSmBDg1H6XBA+BnYV2bcs sYbYku0zGM/IaBWcxr6aiw0IlYeHw+Bq6zwQOWF4xTkKiov2RbdPsBWOY1/mG5G/ HwvYFo62FXfUF6S3Lar5HQJyQWgXJlL/gOmz+azDZA1ThOpkXCFqqrIqGYJMUS+W 9yvMtzTgKhmCnnleVBKgeHOLUTP6oB4V+hRvYCGk0ywuB/zFQvt0bmrZVurqRlD7 BN5i/rkvgs6WgJyWoye9dELvLDeSF9eyrQmwznYAnUTcogDsVFm2H5K5eGiVBJy1 JKJigFjxIcw0I1O0gWY53jGwBiIuGzTvKM07DMXmB1yjB9PHvQc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:28:30 2026 by rpki-client