$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: UfXdjcoX7v7Q0P44xg6lXxNuG3kMf3sQA2XtZyZXZOo= Subject key identifier: 4A:CB:09:CE:8E:20:9B:28:37:6E:0B:56:DA:DA:80:EE:96:13:19:83 Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 1EDFCB1F505AFCE462DB176E0B09E699548DAE70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:30:03 +0000 Manifest this update: Thu 23 Jul 2026 20:25:03 +0000 Manifest next update: Fri 24 Jul 2026 22:24:03 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: anPMiTkjZyhjPVBN5Uc+IZXC8M3bUZf7QjJY6oogS80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:df:cb:1f:50:5a:fc:e4:62:db:17:6e:0b:09:e6:99:54:8d:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: Jul 23 20:25:03 2026 GMT Not After : Jul 24 22:24:03 2026 GMT Subject: CN=4ACB09CE8E209B28376E0B56DADA80EE96131983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:b1:9f:0b:2f:ba:ea:a8:c9:1b:8c:e6:ee: f0:9a:f0:27:ae:0d:15:13:90:75:53:0a:0a:cb:ac: d5:c3:21:13:a6:e7:06:9e:72:c2:0d:ef:cb:52:d5: 04:a7:f3:c5:77:03:5d:82:79:dc:fb:14:44:a4:47: ef:fe:f4:81:d4:7d:b0:79:b1:ee:0f:40:0b:74:e0: 6c:91:89:24:42:1d:a9:64:70:80:bd:e7:47:8a:4f: fa:03:6c:ac:7d:97:17:49:9a:bc:56:83:37:d2:e4: 6a:ba:7c:e7:4b:66:68:f1:28:6f:f3:66:72:27:1c: 84:22:53:b9:ed:0f:16:a3:cf:6d:6e:4a:0a:84:5a: 1c:d8:34:06:95:c4:4d:5a:2b:35:a9:da:66:ff:6f: de:62:1c:3c:d7:88:05:15:a3:4f:99:f2:ac:e2:58: f3:ea:bc:2a:11:82:8e:c5:e1:47:f0:2f:96:32:ec: c0:77:4f:1e:ef:65:03:52:67:de:eb:cb:7a:a9:99: a4:01:f9:ca:63:bd:56:b8:62:81:d0:94:5b:b9:4f: b4:30:a2:4f:aa:57:c1:5c:cd:02:0f:2c:fc:92:29: f8:5f:78:d0:1c:61:4b:e3:00:6d:a0:f5:4e:e9:95: 9a:14:52:05:70:a7:59:70:96:9b:48:ac:a9:e5:bb: 68:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CB:09:CE:8E:20:9B:28:37:6E:0B:56:DA:DA:80:EE:96:13:19:83 X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:77:9d:c1:d2:30:54:de:d3:c4:af:94:b1:2f:db:22:1c: aa:82:b6:95:fb:1b:6c:4a:8e:3c:93:f7:50:40:6d:f0:66:e9: 8f:35:c2:d9:4d:1d:41:db:2c:88:b9:70:2e:8d:7f:73:8b:98: ab:b8:b3:76:8f:f7:04:c0:a2:ca:55:59:b0:ef:dd:32:7d:5e: 95:5f:e0:28:af:e8:ae:eb:63:e7:e5:cb:f5:20:ba:2c:dc:bd: 2e:99:58:d2:20:b4:7c:d5:b1:90:7c:96:69:03:d6:a8:8e:9c: 5c:7b:c5:ce:4f:4f:58:5f:4c:00:7b:dd:45:39:3e:7c:d8:a3: 55:e8:74:f3:df:82:fb:65:cb:e4:7e:fb:dc:53:67:06:f0:b2: 92:8d:1f:dd:e3:e4:f0:15:d1:80:83:0f:c3:a7:56:21:f6:ea: 21:7d:a7:7a:9e:2e:58:c6:e1:44:22:94:f0:5f:bb:4b:6b:63: c8:b4:ae:8f:7a:fd:e3:9e:45:78:0f:92:c1:77:27:50:3a:e9: ac:c8:42:35:e5:24:84:09:31:a1:ff:98:94:a2:49:42:6f:a4: 84:8e:aa:e8:92:66:9a:a8:b1:e1:ed:5e:a2:b5:a4:76:1f:22: 2c:c6:44:15:7f:58:75:77:03:69:76:7b:23:7e:ab:7e:de:27: 66:b9:c3:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHt/LH1Ba/ORi2xduCwnmmVSNrnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA3MjMyMDI1MDNaFw0yNjA3MjQyMjI0MDNaMDMxMTAvBgNV BAMTKDRBQ0IwOUNFOEUyMDlCMjgzNzZFMEI1NkRBREE4MEVFOTYxMzE5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCin7GfCy+66qjJG4zm7vCa8Ceu DRUTkHVTCgrLrNXDIROm5waecsIN78tS1QSn88V3A12Cedz7FESkR+/+9IHUfbB5 se4PQAt04GyRiSRCHalkcIC950eKT/oDbKx9lxdJmrxWgzfS5Gq6fOdLZmjxKG/z ZnInHIQiU7ntDxajz21uSgqEWhzYNAaVxE1aKzWp2mb/b95iHDzXiAUVo0+Z8qzi WPPqvCoRgo7F4UfwL5Yy7MB3Tx7vZQNSZ97ry3qpmaQB+cpjvVa4YoHQlFu5T7Qw ok+qV8FczQIPLPySKfhfeNAcYUvjAG2g9U7plZoUUgVwp1lwlptIrKnlu2htAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSssJzo4gmyg3bgtW2tqA7pYTGYMwHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk1d53B0jBU3tPEr5SxL9siHKqCtpX7G2xK jjyT91BAbfBm6Y81wtlNHUHbLIi5cC6Nf3OLmKu4s3aP9wTAospVWbDv3TJ9XpVf 4Civ6K7rY+fly/UguizcvS6ZWNIgtHzVsZB8lmkD1qiOnFx7xc5PT1hfTAB73UU5 PnzYo1XodPPfgvtly+R++9xTZwbwspKNH93j5PAV0YCDD8OnViH26iF9p3qeLljG 4UQilPBfu0trY8i0ro96/eOeRXgPksF3J1A66azIQjXlJIQJMaH/mJSiSUJvpISO quiSZpqoseHtXqK1pHYfIizGRBV/WHV3A2l2eyN+q37eJ2a5w+U= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:19 2026 by rpki-client