$ rpki-client -vvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: QfQm8pdJGgTRUhww+ldrUb11pPERBitjWXsSxSUqQ+g= Subject key identifier: 0D:D9:F9:D7:D3:2F:5B:07:85:91:D5:35:BD:73:52:A3:92:1D:7E:33 Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 67750E6366EC23AF5916C86A6B3B9E9714F430CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:49:32 +0000 Manifest this update: Thu 23 Jul 2026 11:44:32 +0000 Manifest next update: Fri 24 Jul 2026 13:06:32 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: HOfBBHpsiYtwT807JInkzkHeIY7oZYFWwONkg6SOKMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:75:0e:63:66:ec:23:af:59:16:c8:6a:6b:3b:9e:97:14:f4:30:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Jul 23 11:44:32 2026 GMT Not After : Jul 24 13:06:32 2026 GMT Subject: CN=0DD9F9D7D32F5B078591D535BD7352A3921D7E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:67:5f:19:88:70:25:37:e7:b1:41:11:67: dc:23:ff:0a:d3:71:46:8a:d3:36:a0:25:8f:f7:fe: e9:d0:ab:d5:e4:99:26:20:83:ea:b4:b1:67:e6:72: d4:6c:63:22:df:35:03:c0:51:5f:b2:8d:3f:1e:b6: f6:90:3d:6e:63:c6:bd:37:4f:e8:1d:94:0f:6f:06: 5c:04:65:e1:36:fd:f8:98:66:ff:c9:54:3d:cd:0f: 9c:07:24:3e:a4:1c:b5:58:0c:97:42:b7:a8:79:0e: 1e:02:68:13:5f:14:41:76:f2:4d:77:dd:f1:44:99: 5c:03:57:c3:1d:f2:fe:5d:af:39:08:77:1e:ee:05: 22:b9:7d:7b:80:c7:ad:ae:2a:f7:a0:67:60:d8:4b: a3:6e:ad:ef:f8:f2:c4:13:61:54:36:4b:02:84:bb: e4:43:49:56:0b:ce:11:b0:82:46:c4:52:34:29:41: 24:81:46:0c:c8:63:b6:83:cf:52:f5:64:2c:8a:c0: a0:c9:3f:c6:05:8a:b0:0c:c9:b1:66:4b:da:37:54: b3:9e:8a:bb:3b:66:29:44:ab:2f:bc:20:55:bb:a9: 59:ba:db:c5:d8:db:e3:a4:5a:83:d1:9e:a4:ce:62: a9:f4:69:40:ab:5e:f0:f7:08:03:ac:8f:e1:0a:05: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D9:F9:D7:D3:2F:5B:07:85:91:D5:35:BD:73:52:A3:92:1D:7E:33 X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:06:58:e4:40:e6:27:81:d8:dc:2a:81:4d:b7:93:a9:28:95: f6:5a:e9:49:a5:06:4f:61:cc:af:15:c5:42:10:cb:29:b2:90: d8:71:de:88:98:4f:c5:99:ac:d4:a7:16:c0:b4:33:44:f1:cb: 66:fc:14:b2:1a:ba:4e:41:a6:be:1d:99:e8:52:74:81:8b:52: 50:d4:2c:98:19:c4:a6:2f:6d:26:12:3f:7a:3b:be:ea:21:06: 15:ea:b1:c3:5c:e3:71:56:16:a2:98:db:60:a8:78:c8:f2:e5: b5:3e:0e:4c:bf:06:d8:d0:3d:fc:50:96:ad:db:e9:7d:4e:07: cd:4b:88:c8:bb:fd:0d:aa:90:9d:47:ef:9b:4f:d2:0c:33:68: 58:04:3b:0f:f7:c1:dc:f9:82:92:84:66:3e:29:21:b8:f6:79: 60:18:14:74:d7:c4:3c:b1:0e:ab:fb:89:50:40:f8:cf:33:f5: ad:e0:86:3d:4b:85:87:dd:c8:c6:14:88:c1:f7:29:d0:ad:6e: 60:1c:73:75:b2:16:04:96:67:24:c1:b3:f2:f8:10:f8:dd:4a: ce:9d:b0:27:82:63:df:1e:7d:25:57:59:c6:1b:c8:db:74:b4: 69:0f:13:ab:ee:f2:f8:91:29:ed:54:93:ac:f1:a5:c0:08:ef: a1:19:67:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3UOY2bsI69ZFshqazuelxT0MM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA3MjMxMTQ0MzJaFw0yNjA3MjQxMzA2MzJaMDMxMTAvBgNV BAMTKDBERDlGOUQ3RDMyRjVCMDc4NTkxRDUzNUJENzM1MkEzOTIxRDdFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KmdfGYhwJTfnsUERZ9wj/wrT cUaK0zagJY/3/unQq9XkmSYgg+q0sWfmctRsYyLfNQPAUV+yjT8etvaQPW5jxr03 T+gdlA9vBlwEZeE2/fiYZv/JVD3ND5wHJD6kHLVYDJdCt6h5Dh4CaBNfFEF28k13 3fFEmVwDV8Md8v5drzkIdx7uBSK5fXuAx62uKvegZ2DYS6Nure/48sQTYVQ2SwKE u+RDSVYLzhGwgkbEUjQpQSSBRgzIY7aDz1L1ZCyKwKDJP8YFirAMybFmS9o3VLOe irs7ZilEqy+8IFW7qVm628XY2+OkWoPRnqTOYqn0aUCrXvD3CAOsj+EKBT4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdn519MvWweFkdU1vXNSo5IdfjMwHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIGWORA5ieB2NwqgU23k6kolfZa6UmlBk9h zK8VxUIQyymykNhx3oiYT8WZrNSnFsC0M0Txy2b8FLIauk5Bpr4dmehSdIGLUlDU LJgZxKYvbSYSP3o7vuohBhXqscNc43FWFqKY22CoeMjy5bU+Dky/BtjQPfxQlq3b 6X1OB81LiMi7/Q2qkJ1H75tP0gwzaFgEOw/3wdz5gpKEZj4pIbj2eWAYFHTXxDyx Dqv7iVBA+M8z9a3ghj1LhYfdyMYUiMH3KdCtbmAcc3WyFgSWZyTBs/L4EPjdSs6d sCeCY98efSVXWcYbyNt0tGkPE6vu8viRKe1Uk6zxpcAI76EZZ/8= -----END CERTIFICATE-----Generated at Fri Jul 24 03:44:11 2026 by rpki-client