$ rpki-client -vvf rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft File: E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft (raw, json) Hash identifier: YjmGY8557AoKeyDsxhLT+E7gheQFbW8aBhfsAviCgYo= Subject key identifier: 25:51:28:36:D7:CB:C0:67:0E:F4:D2:BF:DF:FA:2C:46:4B:A2:26:91 Authority key identifier: E9:30:6C:A0:27:A6:C7:39:45:DD:11:7F:FC:FB:3B:AB:04:C6:65:43 Certificate issuer: /CN=E9306CA027A6C73945DD117FFCFB3BAB04C66543 Certificate serial: 689CC9B184E21CF2CA7077C0FC5A34134C88F6F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:23:24 +0000 Manifest this update: Thu 23 Jul 2026 23:18:24 +0000 Manifest next update: Fri 24 Jul 2026 23:44:24 +0000 Files and hashes: 1: E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl (hash: jy++Gd5ns9O8HuVncEN76Vp3FVw02TGxJYtKS4Kd0Wo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9c:c9:b1:84:e2:1c:f2:ca:70:77:c0:fc:5a:34:13:4c:88:f6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9306CA027A6C73945DD117FFCFB3BAB04C66543 Validity Not Before: Jul 23 23:18:24 2026 GMT Not After : Jul 24 23:44:24 2026 GMT Subject: CN=25512836D7CBC0670EF4D2BFDFFA2C464BA22691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:60:4e:2e:cb:cb:67:74:0a:5b:b1:68:ad: 05:6a:36:6a:ff:6e:db:00:97:84:41:36:cb:50:e4: 2d:16:25:a1:88:17:3c:eb:69:5f:d7:74:da:ac:c4: 18:35:14:a6:33:6d:bb:ff:f7:fa:a2:d1:92:4f:50: 98:ce:90:8e:28:06:b8:5a:7e:6d:a9:41:59:eb:ac: b1:1d:16:56:a6:ad:b4:cd:c2:30:31:f4:27:5c:a3: 81:7f:d8:27:48:99:de:c5:8b:e1:b8:e6:67:55:4c: be:3c:60:09:6b:db:37:a0:1c:4b:0a:1a:02:59:5e: 48:90:d9:4c:a2:6a:f6:62:8a:34:5a:d1:69:aa:a7: 83:9e:c5:74:53:ef:aa:44:83:ca:bd:38:5a:51:7a: 7d:6e:79:a4:26:33:07:1a:d2:92:cc:3a:3f:bc:fa: d5:22:32:12:13:f0:ef:5c:28:f4:02:fd:c5:58:24: 79:f9:ca:b2:5a:08:e8:fe:e3:e5:25:ff:2c:37:54: 05:90:1f:78:24:60:46:0f:7b:c0:ff:ab:c2:ce:e8: 33:36:99:9c:22:b7:c3:b1:93:84:ff:11:f0:bd:1a: 75:59:e1:f1:2c:54:75:a3:ee:bd:8a:58:3e:93:70: 5c:f5:e4:d7:0c:69:eb:2a:27:e9:89:e8:d8:ad:a1: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:51:28:36:D7:CB:C0:67:0E:F4:D2:BF:DF:FA:2C:46:4B:A2:26:91 X509v3 Authority Key Identifier: keyid:E9:30:6C:A0:27:A6:C7:39:45:DD:11:7F:FC:FB:3B:AB:04:C6:65:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a8:19:0e:f5:f4:7d:5b:fc:db:8c:59:8e:52:fc:fa:5e:7f: e6:77:dd:91:a0:15:d3:bb:55:6b:48:4f:0b:a3:1e:58:45:07: 51:da:e5:91:54:5d:35:3a:f8:7b:09:d9:c1:f2:99:43:40:4e: ab:ec:4d:b2:32:22:f6:31:5a:34:8c:46:7f:16:b8:7b:e6:a4: 98:36:aa:87:92:b9:c6:c8:87:c4:de:e0:f1:bf:1b:86:43:25: 28:a8:3b:fb:48:28:f5:76:78:cc:39:59:a3:53:9a:80:77:31: de:fe:1f:17:e1:2d:4a:9e:2d:2f:7c:7b:a0:6e:b8:e1:4b:56: ea:10:9e:58:76:41:46:fe:63:e0:43:a0:d8:70:c3:95:7a:c3: fd:8a:0b:6c:28:8e:ba:4f:25:07:ab:ec:74:b0:90:a8:6c:a1: 92:cf:52:4c:f2:84:42:58:e3:5d:1b:a2:fb:32:4b:ef:bb:a1: a7:9c:cb:95:90:60:63:29:20:6a:42:41:e9:97:be:ab:b1:40: c9:cd:67:e2:f5:46:62:74:fc:9a:27:4a:6a:6e:6f:78:fa:a8: 1f:56:95:05:69:26:68:12:a6:73:d8:3d:23:2a:40:4c:64:ae: 46:10:3e:7c:b8:29:af:d8:e0:78:9e:d1:7f:8b:2c:c2:fa:f9: d3:ed:ac:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJzJsYTiHPLKcHfA/Fo0E0yI9vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMDZDQTAyN0E2QzczOTQ1REQxMTdGRkNGQjNCQUIw NEM2NjU0MzAeFw0yNjA3MjMyMzE4MjRaFw0yNjA3MjQyMzQ0MjRaMDMxMTAvBgNV BAMTKDI1NTEyODM2RDdDQkMwNjcwRUY0RDJCRkRGRkEyQzQ2NEJBMjI2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14GBOLsvLZ3QKW7ForQVqNmr/ btsAl4RBNstQ5C0WJaGIFzzraV/XdNqsxBg1FKYzbbv/9/qi0ZJPUJjOkI4oBrha fm2pQVnrrLEdFlamrbTNwjAx9Cdco4F/2CdImd7Fi+G45mdVTL48YAlr2zegHEsK GgJZXkiQ2UyiavZiijRa0Wmqp4OexXRT76pEg8q9OFpRen1ueaQmMwca0pLMOj+8 +tUiMhIT8O9cKPQC/cVYJHn5yrJaCOj+4+Ul/yw3VAWQH3gkYEYPe8D/q8LO6DM2 mZwit8Oxk4T/EfC9GnVZ4fEsVHWj7r2KWD6TcFz15NcMaesqJ+mJ6NitoWXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJVEoNtfLwGcO9NK/3/osRkuiJpEwHwYDVR0j BBgwFoAU6TBsoCemxzlF3RF//Ps7qwTGZUMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0YmVmMzctNzQ1Yi00ZmZmLWJiMWYtYWZmMWYzM2Y1ZTVhLzAvRTkzMDZDQTAy N0E2QzczOTQ1REQxMTdGRkNGQjNCQUIwNEM2NjU0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTMwNkNBMDI3QTZDNzM5NDVERDExN0ZGQ0ZCM0JBQjA0QzY2 NTQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvRTkzMDZDQTAyN0E2QzczOTQ1REQxMTdGRkNGQjNC QUIwNEM2NjU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+oGQ719H1b/NuMWY5S/Ppef+Z33ZGgFdO7 VWtITwujHlhFB1Ha5ZFUXTU6+HsJ2cHymUNATqvsTbIyIvYxWjSMRn8WuHvmpJg2 qoeSucbIh8Te4PG/G4ZDJSioO/tIKPV2eMw5WaNTmoB3Md7+HxfhLUqeLS98e6Bu uOFLVuoQnlh2QUb+Y+BDoNhww5V6w/2KC2wojrpPJQer7HSwkKhsoZLPUkzyhEJY 410bovsyS++7oaecy5WQYGMpIGpCQemXvquxQMnNZ+L1RmJ0/JonSmpub3j6qB9W lQVpJmgSpnPYPSMqQExkrkYQPny4Ka/Y4Hie0X+LLML6+dPtrEo= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:14 2026 by rpki-client