$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft File: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft (raw, json) Hash identifier: M1QLnCEUMhRdncOcurUjoQWDLcJGYQJz07DzUnIrMzs= Subject key identifier: 95:9D:6E:9F:1C:94:B3:19:B0:71:33:AE:70:69:8D:25:30:5F:05:B6 Authority key identifier: 61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE Certificate issuer: /CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Certificate serial: 41EA35CA76F57082AB4E85CBC20FD038576EADD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:59:27 +0000 Manifest this update: Thu 23 Jul 2026 19:54:27 +0000 Manifest next update: Fri 24 Jul 2026 21:14:27 +0000 Files and hashes: 1: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl (hash: wsu4d7wmy6DFLAgb6Z7pawnO2ymDfTCB+yQlCV6LInk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ea:35:ca:76:f5:70:82:ab:4e:85:cb:c2:0f:d0:38:57:6e:ad:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE Validity Not Before: Jul 23 19:54:27 2026 GMT Not After : Jul 24 21:14:27 2026 GMT Subject: CN=959D6E9F1C94B319B07133AE70698D25305F05B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:47:8d:a0:f8:49:11:17:25:2f:1f:80:bd:cd: cd:ad:0f:b7:76:56:8a:16:a7:bb:d5:55:ab:da:5a: 64:ba:fe:57:c0:68:fa:80:36:20:7c:79:57:cc:25: d7:c8:f9:11:fc:8e:d6:cb:12:29:82:58:ad:85:3d: a7:b0:09:00:86:9d:c7:ec:b0:f0:43:3f:f9:11:d7: 29:b7:9a:87:6c:66:7a:cc:50:19:f5:9f:47:b8:e5: a0:c3:9a:76:76:0c:e7:be:2c:82:b8:fc:45:64:ae: 07:bc:41:03:65:01:54:3b:23:f3:0b:cd:6f:8c:4d: 50:b3:81:65:40:17:29:55:e9:78:b5:fd:55:45:e2: 83:fb:0f:b0:ed:64:44:64:3c:d5:30:43:7e:64:b5: df:cd:48:d8:97:59:0f:2a:56:ec:8e:1c:6a:75:cd: 72:6d:e5:6f:6c:af:9e:77:7a:3f:26:be:29:5c:b4: cd:d8:01:3b:74:b7:63:2c:04:c5:7a:dc:71:92:37: 20:b9:1d:4b:4f:d2:36:e8:64:80:78:99:3f:83:c0: 2c:5d:1e:43:5f:e0:f2:ab:81:dc:d6:85:a5:f3:c7: bf:59:b1:f8:b8:f8:19:ed:93:ef:f3:ec:50:74:77: 0c:f9:0f:4a:36:95:9e:8f:89:64:f2:d9:ce:e6:13: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:6E:9F:1C:94:B3:19:B0:71:33:AE:70:69:8D:25:30:5F:05:B6 X509v3 Authority Key Identifier: keyid:61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cd:c4:72:59:06:bd:cd:c1:c3:fe:16:9a:86:d7:82:62:0b: 8a:d4:b9:e1:37:8c:f3:dd:a8:d5:2a:eb:56:f1:4d:14:09:fe: b5:4b:45:b5:69:8a:31:72:f9:78:fb:43:f7:8a:68:47:7a:1f: 18:30:0d:7b:f4:8f:04:74:96:86:21:d8:c0:94:ed:c8:df:14: b5:46:5c:a9:ab:2b:59:d2:a7:0c:81:5b:70:53:6e:ed:fe:6c: 27:9b:2a:bd:6f:4f:72:3d:fd:5d:26:87:d2:d2:f2:18:a4:69: 29:e6:f9:02:94:c4:84:9c:8b:2e:43:24:ba:eb:de:15:0b:97: 3e:39:65:00:7e:88:cd:64:8b:5b:3e:db:a5:63:c9:43:d1:4c: b5:2f:58:09:37:d2:f4:57:69:67:74:9a:67:3e:47:bf:34:d6: 45:25:4d:cb:3f:8e:8f:41:22:4e:9c:90:28:0d:13:ef:f9:f9: ac:6b:b2:a1:17:96:52:58:9a:91:16:9c:b7:c9:09:2c:53:f4: 39:f7:17:2a:07:a2:bf:17:ae:cb:84:0a:56:fe:05:d4:ef:b4: 43:b6:46:fa:eb:ac:87:43:3d:e4:f8:53:85:65:df:e6:9f:dc: 1f:aa:9f:b4:ce:c6:7c:2b:f7:ef:00:fe:8d:28:02:40:79:b4: 3d:29:54:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeo1ynb1cIKrToXLwg/QOFdurdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3N0U5RDNEQkFCNjNFRjZDQkI0MzZDOTA2RDVDNUY3 NTM1NTZGRTAeFw0yNjA3MjMxOTU0MjdaFw0yNjA3MjQyMTE0MjdaMDMxMTAvBgNV BAMTKDk1OUQ2RTlGMUM5NEIzMTlCMDcxMzNBRTcwNjk4RDI1MzA1RjA1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3R42g+EkRFyUvH4C9zc2tD7d2 VooWp7vVVavaWmS6/lfAaPqANiB8eVfMJdfI+RH8jtbLEimCWK2FPaewCQCGncfs sPBDP/kR1ym3modsZnrMUBn1n0e45aDDmnZ2DOe+LIK4/EVkrge8QQNlAVQ7I/ML zW+MTVCzgWVAFylV6Xi1/VVF4oP7D7DtZERkPNUwQ35ktd/NSNiXWQ8qVuyOHGp1 zXJt5W9sr553ej8mvilctM3YATt0t2MsBMV63HGSNyC5HUtP0jboZIB4mT+DwCxd HkNf4PKrgdzWhaXzx79Zsfi4+Bntk+/z7FB0dwz5D0o2lZ6PiWTy2c7mEyd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlZ1unxyUsxmwcTOucGmNJTBfBbYwHwYDVR0j BBgwFoAUYXfp09urY+9su0NskG1cX3U1Vv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI5ODUxYjEtNWE2ZC00ZTc1LTlmZmYtYzAzYTljNDljZjY5LzAvNjE3N0U5RDNE QkFCNjNFRjZDQkI0MzZDOTA2RDVDNUY3NTM1NTZGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MTc3RTlEM0RCQUI2M0VGNkNCQjQzNkM5MDZENUM1Rjc1MzU1 NkZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvNjE3N0U5RDNEQkFCNjNFRjZDQkI0MzZDOTA2RDVD NUY3NTM1NTZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXNxHJZBr3NwcP+FpqG14JiC4rUueE3jPPd qNUq61bxTRQJ/rVLRbVpijFy+Xj7Q/eKaEd6HxgwDXv0jwR0loYh2MCU7cjfFLVG XKmrK1nSpwyBW3BTbu3+bCebKr1vT3I9/V0mh9LS8hikaSnm+QKUxISciy5DJLrr 3hULlz45ZQB+iM1ki1s+26VjyUPRTLUvWAk30vRXaWd0mmc+R7801kUlTcs/jo9B Ik6ckCgNE+/5+axrsqEXllJYmpEWnLfJCSxT9Dn3FyoHor8XrsuEClb+BdTvtEO2 RvrrrIdDPeT4U4Vl3+af3B+qn7TOxnwr9+8A/o0oAkB5tD0pVB0= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:39 2026 by rpki-client