$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft File: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft (raw, json) Hash identifier: QIvP0GAEpef6KXGeeOVnOmk/y/xu7BCJVxjfuOv5oJg= Subject key identifier: 62:D6:A1:9B:63:C1:DD:06:80:34:6D:2D:7C:3F:E1:A4:E7:07:4B:90 Authority key identifier: A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 Certificate issuer: /CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Certificate serial: 6DE9B9AEBA09B7CC0D88C635AC65BC84E8EBC0D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 15:54:24 +0000 Manifest this update: Thu 23 Jul 2026 15:49:24 +0000 Manifest next update: Fri 24 Jul 2026 19:06:24 +0000 Files and hashes: 1: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl (hash: PNbc8DM/jv0SM5eYn9YPKsA4g45I+gtBikyoeSJH2Hg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e9:b9:ae:ba:09:b7:cc:0d:88:c6:35:ac:65:bc:84:e8:eb:c0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Validity Not Before: Jul 23 15:49:24 2026 GMT Not After : Jul 24 19:06:24 2026 GMT Subject: CN=62D6A19B63C1DD0680346D2D7C3FE1A4E7074B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:50:11:e3:16:ca:d8:85:c4:47:a2:82:29: 4a:f2:25:34:3e:a5:55:0d:db:59:ee:cb:14:9f:c0: 32:1e:ba:24:c4:75:9d:4d:4a:f7:71:16:41:21:39: 9c:05:d9:4e:ae:10:95:0b:ea:de:49:47:eb:c5:7f: d8:80:1b:fe:28:f6:86:17:84:04:5a:7c:92:c2:08: f6:78:78:cc:ac:47:c1:15:1b:d1:37:76:b3:c5:25: ec:63:96:5e:2c:85:83:96:3a:c6:0b:c1:fd:54:32: 41:c3:4a:ea:ca:b2:3a:37:34:28:3a:b6:68:95:77: 5a:16:7a:cf:74:c1:77:29:52:95:a6:98:eb:2f:83: bf:fd:c0:5c:49:64:60:4c:c4:e2:83:69:18:ad:e1: a4:85:35:0d:7a:82:94:fe:ff:ce:84:2b:74:10:44: 0a:a4:c6:57:73:45:7c:75:bb:2d:fe:b7:f6:8d:3b: be:c2:66:c7:cf:d0:08:ea:1b:6c:bb:78:d9:25:37: 33:2a:34:ce:73:db:3a:ce:16:f6:c0:64:da:59:c5: 67:bf:c4:44:31:71:34:01:5f:5a:2e:0f:06:75:92: 56:26:32:e8:16:f1:6d:06:da:66:14:fb:2f:67:d2: a9:0d:87:0b:f7:05:ff:30:dc:8c:42:67:b8:22:dc: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D6:A1:9B:63:C1:DD:06:80:34:6D:2D:7C:3F:E1:A4:E7:07:4B:90 X509v3 Authority Key Identifier: keyid:A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:79:b3:17:3a:57:19:c8:3c:3d:81:37:eb:b7:a8:5c:19:62: 78:18:33:20:aa:f7:78:ec:46:33:17:e1:41:51:79:c7:e9:b1: 7b:63:9b:6e:39:53:9e:71:0f:b2:d2:36:0b:51:bd:20:dc:13: c3:16:ff:e1:f3:3e:13:de:63:c0:ee:4a:7f:e7:86:90:f1:ad: fa:36:c0:60:a8:05:e4:f5:1d:7b:be:af:09:a4:b3:56:14:22: 22:9a:0d:18:fa:ff:fa:75:a7:f0:6e:3a:0f:c1:5b:71:e7:3d: 1c:f1:35:c2:47:27:5e:cb:1f:1c:7d:34:34:e5:b7:6d:e1:b5: c5:87:e5:4b:d7:14:b2:c1:8f:ce:62:f8:30:02:9e:f5:f2:17: 7e:80:ea:5e:4e:c8:dd:e8:91:38:9d:3f:36:51:f0:6b:35:4f: 80:9e:1c:fa:86:21:75:2b:59:b6:1a:a0:9f:17:b2:b8:99:00: b2:4b:48:d5:ee:16:45:5d:2a:d8:28:8f:eb:00:72:67:2a:01: 39:36:3b:44:c4:c9:00:9a:9a:b0:7c:bc:d5:07:5a:c2:40:50: 65:84:51:3c:07:4c:33:89:9f:5a:7f:f2:19:7c:02:07:bf:ad: 98:5c:1a:d4:0a:81:8b:eb:5c:d8:27:3e:87:00:f8:b9:73:be: 54:2e:50:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbem5rroJt8wNiMY1rGW8hOjrwNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQxRjRE NjRDOUQyNzAeFw0yNjA3MjMxNTQ5MjRaFw0yNjA3MjQxOTA2MjRaMDMxMTAvBgNV BAMTKDYyRDZBMTlCNjNDMUREMDY4MDM0NkQyRDdDM0ZFMUE0RTcwNzRCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH1AR4xbK2IXER6KCKUryJTQ+ pVUN21nuyxSfwDIeuiTEdZ1NSvdxFkEhOZwF2U6uEJUL6t5JR+vFf9iAG/4o9oYX hARafJLCCPZ4eMysR8EVG9E3drPFJexjll4shYOWOsYLwf1UMkHDSurKsjo3NCg6 tmiVd1oWes90wXcpUpWmmOsvg7/9wFxJZGBMxOKDaRit4aSFNQ16gpT+/86EK3QQ RAqkxldzRXx1uy3+t/aNO77CZsfP0AjqG2y7eNklNzMqNM5z2zrOFvbAZNpZxWe/ xEQxcTQBX1ouDwZ1klYmMugW8W0G2mYU+y9n0qkNhwv3Bf8w3IxCZ7gi3PHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtahm2PB3QaANG0tfD/hpOcHS5AwHwYDVR0j BBgwFoAUo+jQ1WqpD8mNt7tq3KvR9NZMnScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwOTllNDItMmU5Zi00ZThhLTk5ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2 QUE5MEZDOThEQjdCQjZBRENBQkQxRjRENjRDOUQyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0U4RDBENTZBQTkwRkM5OERCN0JCNkFEQ0FCRDFGNEQ2NEM5 RDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQx RjRENjRDOUQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV5sxc6VxnIPD2BN+u3qFwZYngYMyCq93js RjMX4UFRecfpsXtjm245U55xD7LSNgtRvSDcE8MW/+HzPhPeY8DuSn/nhpDxrfo2 wGCoBeT1HXu+rwmks1YUIiKaDRj6//p1p/BuOg/BW3HnPRzxNcJHJ17LHxx9NDTl t23htcWH5UvXFLLBj85i+DACnvXyF36A6l5OyN3okTidPzZR8Gs1T4CeHPqGIXUr WbYaoJ8XsriZALJLSNXuFkVdKtgoj+sAcmcqATk2O0TEyQCamrB8vNUHWsJAUGWE UTwHTDOJn1p/8hl8Age/rZhcGtQKgYvrXNgnPocA+LlzvlQuUK8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:36:03 2026 by rpki-client