$ rpki-client -vvf rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft File: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft (raw, json) Hash identifier: neAKylaJk4VE8sPKZLqoAyVW3LFkUcx/WoEhbXTogXU= Subject key identifier: A6:08:0D:BF:FD:49:7E:B5:2E:ED:58:7E:A1:14:71:53:B1:D5:51:30 Authority key identifier: E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 Certificate issuer: /CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Certificate serial: 0BB65141036C487995BC202EC7942741A33069E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:57:01 +0000 Manifest this update: Thu 23 Jul 2026 17:52:01 +0000 Manifest next update: Fri 24 Jul 2026 18:58:01 +0000 Files and hashes: 1: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl (hash: qBZhIFnKvMyYKAhY8aeQzj7cTnJbvMujYH1nqInq/xA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b6:51:41:03:6c:48:79:95:bc:20:2e:c7:94:27:41:a3:30:69:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788 Validity Not Before: Jul 23 17:52:01 2026 GMT Not After : Jul 24 18:58:01 2026 GMT Subject: CN=A6080DBFFD497EB52EED587EA1147153B1D55130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:b9:7e:ea:4b:b9:9d:c2:a3:5e:c2:b7:df: 0b:7a:5d:40:05:a9:0f:80:e6:56:dd:9d:c6:93:84: 80:d0:cc:e9:57:60:74:34:bc:f1:eb:2a:e6:d7:90: 97:fb:5b:6e:ca:de:9d:f9:92:7c:b2:c5:bb:de:d5: 8d:56:f4:8d:f3:ca:c7:dc:16:03:04:b2:69:92:68: ba:a2:be:ce:df:0d:25:7f:d9:e4:29:46:fa:7c:d0: b4:4b:5d:c6:84:d8:d5:3d:28:f2:89:67:ae:a5:20: c7:ec:2f:33:00:ae:8b:50:4d:a3:cf:8f:7e:ac:01: 35:3f:08:4e:da:65:40:b4:c2:ce:3e:aa:3a:21:f7: 18:03:63:f1:e5:f5:ec:0d:3b:20:74:3d:52:32:36: 3a:1a:5b:bd:d3:94:33:58:6f:66:99:b0:78:04:3d: ca:96:ec:42:9f:4f:75:2d:f3:e9:ee:86:ed:97:cb: cf:ca:09:77:98:ce:dc:a7:41:62:ad:55:2f:3c:26: 01:1a:9e:08:43:27:47:24:6f:e9:da:7b:2a:b8:20: c0:96:cd:07:af:52:04:41:fd:81:a2:09:6d:24:8c: cf:09:6f:a9:64:06:77:95:c7:45:cb:0f:53:67:4e: aa:eb:1f:c2:ad:13:3e:92:b3:b6:42:b1:09:49:33: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:08:0D:BF:FD:49:7E:B5:2E:ED:58:7E:A1:14:71:53:B1:D5:51:30 X509v3 Authority Key Identifier: keyid:E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:65:4f:22:a4:c2:ef:69:22:4f:26:6c:8c:83:d5:9a:69:42: 8c:20:76:97:c3:d0:d0:d5:ac:e7:b7:d7:fd:63:8f:bd:fa:b4: bd:de:4e:3f:d3:c6:5a:b9:f7:a2:cf:6c:63:01:1b:37:d6:27: 30:04:29:15:6b:0d:02:4a:f8:b6:4f:ed:dd:ff:24:f6:48:33: 99:f7:31:8c:8e:0c:bc:06:b1:eb:ea:c6:5b:52:4a:fa:0c:4f: 26:b4:a0:69:b7:7e:bf:2d:07:13:64:02:e1:1f:d0:3d:08:80: 24:0f:cc:85:bb:fd:9a:99:9a:76:7e:7b:e5:4d:ff:e6:bf:1e: 8e:28:a4:52:c4:4f:66:8c:b4:39:c4:64:82:f3:87:bb:0c:5b: 6e:99:c3:5a:95:08:33:94:2a:41:90:78:12:7b:96:63:76:c7: 3b:14:e2:93:80:9d:4f:94:e2:48:1b:6f:d3:3c:22:85:5a:de: b5:97:49:80:27:4f:cd:8a:e4:50:2b:0c:a1:ec:f6:83:a0:18: 8d:07:b5:90:b9:ce:5b:d7:0c:20:ec:48:13:c5:3c:9c:6f:ce: 01:2d:f3:d4:df:fc:89:b0:d0:7c:fc:cc:c5:29:c9:5a:47:62: 35:59:11:48:ff:1d:9e:f8:9c:fe:ca:6b:88:79:44:36:bc:32: e8:d2:85:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7ZRQQNsSHmVvCAux5QnQaMwaeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZBMzhG RDBDQTc4ODAeFw0yNjA3MjMxNzUyMDFaFw0yNjA3MjQxODU4MDFaMDMxMTAvBgNV BAMTKEE2MDgwREJGRkQ0OTdFQjUyRUVENTg3RUExMTQ3MTUzQjFENTUxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJbl+6ku5ncKjXsK33wt6XUAF qQ+A5lbdncaThIDQzOlXYHQ0vPHrKubXkJf7W27K3p35knyyxbve1Y1W9I3zysfc FgMEsmmSaLqivs7fDSV/2eQpRvp80LRLXcaE2NU9KPKJZ66lIMfsLzMArotQTaPP j36sATU/CE7aZUC0ws4+qjoh9xgDY/Hl9ewNOyB0PVIyNjoaW73TlDNYb2aZsHgE PcqW7EKfT3Ut8+nuhu2Xy8/KCXeYztynQWKtVS88JgEanghDJ0ckb+naeyq4IMCW zQevUgRB/YGiCW0kjM8Jb6lkBneVx0XLD1NnTqrrH8KtEz6Ss7ZCsQlJM6G5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpggNv/1JfrUu7Vh+oRRxU7HVUTAwHwYDVR0j BBgwFoAU4GM/6apOG7jBTLh2S2r6OP0Mp4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYyYjE3ODYtMTgzMy00ZDBhLWExMzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlB QTRFMUJCOEMxNENCODc2NEI2QUZBMzhGRDBDQTc4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDYzM0ZFOUFBNEUxQkI4QzE0Q0I4NzY0QjZBRkEzOEZEMENB Nzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvRTA2MzNGRTlBQTRFMUJCOEMxNENCODc2NEI2QUZB MzhGRDBDQTc4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEllTyKkwu9pIk8mbIyD1ZppQowgdpfD0NDV rOe31/1jj736tL3eTj/Txlq596LPbGMBGzfWJzAEKRVrDQJK+LZP7d3/JPZIM5n3 MYyODLwGsevqxltSSvoMTya0oGm3fr8tBxNkAuEf0D0IgCQPzIW7/ZqZmnZ+e+VN /+a/Ho4opFLET2aMtDnEZILzh7sMW26Zw1qVCDOUKkGQeBJ7lmN2xzsU4pOAnU+U 4kgbb9M8IoVa3rWXSYAnT82K5FArDKHs9oOgGI0HtZC5zlvXDCDsSBPFPJxvzgEt 89Tf/Imw0Hz8zMUpyVpHYjVZEUj/HZ74nP7Ka4h5RDa8MujShas= -----END CERTIFICATE-----Generated at Fri Jul 24 08:01:05 2026 by rpki-client