$ rpki-client -vvf rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft (raw, json) Hash identifier: TOjTcLRffz7tWF1+KsHtHUZryChFeHx+U8UwHGBhkF0= Subject key identifier: C1:69:04:A5:06:52:B0:5E:BA:42:0F:15:68:24:FE:43:64:11:60:D2 Authority key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Certificate issuer: /CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Certificate serial: 2E2D48F52BCDF388200F680CD5447829A1FBF929 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:18:40 +0000 Manifest this update: Thu 23 Jul 2026 15:13:40 +0000 Manifest next update: Fri 24 Jul 2026 17:11:40 +0000 Files and hashes: 1: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl (hash: CnnT4GpAmY/AG5UyQUa4F6wIfgZq34dnyFrYK0QaZ4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2d:48:f5:2b:cd:f3:88:20:0f:68:0c:d5:44:78:29:a1:fb:f9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Validity Not Before: Jul 23 15:13:40 2026 GMT Not After : Jul 24 17:11:40 2026 GMT Subject: CN=C16904A50652B05EBA420F156824FE43641160D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a6:b8:a3:11:d2:05:e1:cc:22:6c:06:fa:f7: 49:4c:78:75:5b:3e:3a:07:75:55:dd:5b:2a:9a:1c: 94:6c:0c:26:34:0f:c8:1c:c7:8e:82:cd:4f:7f:cc: 5a:cf:8c:04:02:48:39:5d:be:cc:2f:ae:a4:37:d7: 61:fb:92:30:33:b8:e9:d3:4a:d0:39:94:ef:9c:5c: 5a:76:ae:4e:1a:b8:d7:43:cc:1c:aa:96:60:01:c9: 35:e8:9a:93:4e:71:fe:3d:69:ae:d4:34:5a:64:61: ec:56:08:c1:c3:1a:6c:ba:94:c3:0e:0a:98:e9:ff: dc:ea:27:6d:af:9f:97:ab:89:bf:35:9b:1e:84:76: c2:d4:ad:1a:98:b0:ae:f6:70:46:5c:42:5f:53:08: 16:ae:95:4d:0f:77:44:01:ea:4c:f5:a7:cc:14:8e: d4:26:d8:15:e6:25:28:ee:b7:4c:d6:4a:28:29:d1: 19:62:6d:07:ec:d4:1c:e3:42:d9:f4:7b:2d:ea:d8: d5:c9:9f:9f:d4:bc:cb:41:66:27:40:8f:0f:d2:23: 30:a6:ea:e6:23:95:82:12:3b:8b:ae:ec:a5:49:61: 36:2e:b7:d0:ff:a8:75:78:cb:64:85:81:ec:41:06: b8:e2:b9:e9:3e:d9:f7:b0:22:24:58:b9:37:82:08: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:69:04:A5:06:52:B0:5E:BA:42:0F:15:68:24:FE:43:64:11:60:D2 X509v3 Authority Key Identifier: keyid:D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:90:af:63:2a:87:94:74:ea:5f:82:52:9d:ef:ad:0c:45:87: 3f:17:e7:72:c8:2b:9f:51:ae:03:a4:6b:0f:0e:b2:81:59:5e: 0c:4f:ea:4d:25:0e:02:31:ef:a5:82:7f:2e:6c:f6:a7:f2:36: 54:a6:aa:07:5c:ca:e1:b7:a1:3e:e6:43:04:ab:45:fb:b8:18: 5c:b2:f1:f5:f7:83:98:f2:0f:ec:b6:04:87:6f:a2:58:11:13: 8d:97:86:4e:8d:65:1d:8b:58:83:3e:f4:03:e1:5c:c4:29:c7: 96:16:d7:4b:95:c4:2f:9a:43:13:84:38:29:f5:97:b2:4b:6f: 3a:10:78:aa:20:39:3f:aa:ff:95:9f:a0:e8:0f:59:55:83:97: 2d:b7:be:ae:7e:4d:7d:cc:46:cd:8c:23:1b:e4:2a:ac:ab:85: 50:18:40:1c:c1:76:cd:77:f7:d5:b0:95:f0:99:d7:12:c3:46: c4:a7:63:74:02:94:d3:9b:dc:bb:73:c3:97:2a:42:69:c4:a1: 46:d1:1c:be:4b:72:41:1c:de:ab:59:87:91:a4:11:18:5d:0a: 6a:5c:93:00:65:98:b3:f2:fd:a1:ec:ed:05:27:f5:1a:e7:3b: 69:1b:f4:90:d2:e0:0e:37:8d:c8:d7:9d:ba:19:82:0a:73:7a: 7f:9d:21:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULi1I9SvN84ggD2gM1UR4KaH7+SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNC MzAwRkFGNjAeFw0yNjA3MjMxNTEzNDBaFw0yNjA3MjQxNzExNDBaMDMxMTAvBgNV BAMTKEMxNjkwNEE1MDY1MkIwNUVCQTQyMEYxNTY4MjRGRTQzNjQxMTYwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRprijEdIF4cwibAb690lMeHVb PjoHdVXdWyqaHJRsDCY0D8gcx46CzU9/zFrPjAQCSDldvswvrqQ312H7kjAzuOnT StA5lO+cXFp2rk4auNdDzByqlmAByTXompNOcf49aa7UNFpkYexWCMHDGmy6lMMO Cpjp/9zqJ22vn5erib81mx6EdsLUrRqYsK72cEZcQl9TCBaulU0Pd0QB6kz1p8wU jtQm2BXmJSjut0zWSigp0RlibQfs1BzjQtn0ey3q2NXJn5/UvMtBZidAjw/SIzCm 6uYjlYISO4uu7KVJYTYut9D/qHV4y2SFgexBBrjiuek+2fewIiRYuTeCCLxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWkEpQZSsF66Qg8VaCT+Q2QRYNIwHwYDVR0j BBgwFoAU1B70fyP+UcCjjwnk6yMwg7MA+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg1NDc3Y2UtMDcxNy00N2MwLTg3NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0Yy M0ZFNTFDMEEzOEYwOUU0RUIyMzMwODNCMzAwRkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDFFRjQ3RjIzRkU1MUMwQTM4RjA5RTRFQjIzMzA4M0IzMDBG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvRDQxRUY0N0YyM0ZFNTFDMEEzOEYwOUU0RUIyMzMw ODNCMzAwRkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmQr2Mqh5R06l+CUp3vrQxFhz8X53LIK59R rgOkaw8OsoFZXgxP6k0lDgIx76WCfy5s9qfyNlSmqgdcyuG3oT7mQwSrRfu4GFyy 8fX3g5jyD+y2BIdvolgRE42Xhk6NZR2LWIM+9APhXMQpx5YW10uVxC+aQxOEOCn1 l7JLbzoQeKogOT+q/5WfoOgPWVWDly23vq5+TX3MRs2MIxvkKqyrhVAYQBzBds13 99WwlfCZ1xLDRsSnY3QClNOb3Ltzw5cqQmnEoUbRHL5LckEc3qtZh5GkERhdCmpc kwBlmLPy/aHs7QUn9RrnO2kb9JDS4A43jcjXnboZggpzen+dIec= -----END CERTIFICATE-----Generated at Fri Jul 24 03:18:48 2026 by rpki-client