$ rpki-client -vvf rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft (raw, json) Hash identifier: 60sua5VBtHNKKFpgQj+dGvLmsFde5blsKwDMXBbFgUk= Subject key identifier: 5E:25:33:24:73:B5:72:88:A9:E5:F1:90:B3:25:CC:D1:2A:6F:40:64 Authority key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Certificate issuer: /CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Certificate serial: 525E9BBA4D0521B3A7031F593ADACE171AC61151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft Manifest number: 6C Signing time: Thu 23 Jul 2026 18:37:53 +0000 Manifest this update: Thu 23 Jul 2026 18:32:53 +0000 Manifest next update: Fri 24 Jul 2026 20:49:53 +0000 Files and hashes: 1: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl (hash: O6SKaULtTTh1bkxm7Sn513+1k6rwYPLDcbj0E6DDsnQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5e:9b:ba:4d:05:21:b3:a7:03:1f:59:3a:da:ce:17:1a:c6:11:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Validity Not Before: Jul 23 18:32:53 2026 GMT Not After : Jul 24 20:49:53 2026 GMT Subject: CN=5E25332473B57288A9E5F190B325CCD12A6F4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:c6:40:28:eb:65:da:9d:2e:c8:0c:8f:23: 98:9d:7e:af:52:90:e0:97:8b:90:e4:ec:f7:1f:d6: 8d:35:cc:73:f7:7f:72:2f:9f:82:b9:75:9e:7f:47: 73:fe:84:5f:4d:d7:7b:47:ac:78:90:d3:a7:6f:69: 77:77:b6:fe:b6:ab:ae:d3:93:84:38:55:a1:73:6a: 0d:ad:91:a6:b0:66:00:c2:d6:cc:1a:44:54:70:c3: f8:89:86:5f:ad:e2:37:ae:71:6a:79:1e:8c:50:dd: 9a:e4:5e:22:11:0d:46:08:2f:2e:56:b1:91:aa:ab: 20:2f:cc:0e:0b:92:4d:21:23:f7:36:09:30:2c:b4: 11:ca:fc:b5:93:ff:31:ce:e8:69:a8:b4:52:23:29: 22:62:d7:83:a9:9f:f5:a2:00:23:69:36:1c:f8:40: b8:98:bf:c9:12:e7:1d:09:d9:88:7a:e0:82:14:84: 56:7d:27:dd:07:7d:c5:e5:95:d4:aa:4c:5c:b0:1b: 83:6e:d2:42:07:d0:8b:b0:fa:27:3d:99:6a:ae:86: ee:dd:bd:5f:cf:d2:1d:a2:bf:f0:49:97:b2:2e:14: db:5c:37:97:eb:d6:8d:8c:14:20:2c:53:69:88:72: 96:a9:9c:de:4d:62:97:b0:ab:97:d1:f5:7d:8f:50: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:33:24:73:B5:72:88:A9:E5:F1:90:B3:25:CC:D1:2A:6F:40:64 X509v3 Authority Key Identifier: keyid:C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:88:7a:00:0c:57:43:b6:d6:4d:84:3f:ae:4d:f4:6d:43:9c: 86:ee:bd:77:1b:f3:34:1b:bc:ff:42:4d:bf:d7:0b:45:83:6c: 22:3a:f8:c0:2c:80:a4:0b:79:cf:45:17:85:16:aa:bd:7c:ee: a3:64:28:19:1e:48:1a:ee:df:ad:09:5d:71:39:80:7f:9c:3a: 66:12:50:e7:74:fd:48:c0:18:a6:e4:0a:54:49:f1:c7:75:c3: 5e:64:55:ba:a2:a0:c3:29:8a:3d:b0:db:17:c1:0c:fb:b3:06: fa:aa:90:55:7b:e5:14:3b:3c:a4:45:18:b8:c8:c7:50:6b:a1: ca:e0:c1:85:08:ab:76:f0:49:f8:c0:de:c1:4a:d4:ba:f0:d6: 16:f6:80:74:0b:6e:bf:38:98:4d:48:67:d6:7f:7f:d2:e6:a0: 54:80:c4:df:bc:3e:7d:5c:81:d6:c9:9f:bd:28:5d:14:ec:b5: 38:ff:5a:57:2f:39:4f:7d:40:97:6d:24:6b:8f:5d:ba:48:92: 62:47:7e:a3:c0:4e:dd:fe:cc:22:e4:24:5f:01:9d:69:06:22: 9d:3c:9d:d2:e6:3a:59:61:01:46:10:e7:33:e2:6e:d7:37:87: 7e:c9:33:14:fa:d0:c7:b1:f0:49:bb:86:27:9a:cd:d1:21:1f: 3f:1b:c5:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUl6buk0FIbOnAx9ZOtrOFxrGEVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5 RjhBREEwMTAeFw0yNjA3MjMxODMyNTNaFw0yNjA3MjQyMDQ5NTNaMDMxMTAvBgNV BAMTKDVFMjUzMzI0NzNCNTcyODhBOUU1RjE5MEIzMjVDQ0QxMkE2RjQwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgssZAKOtl2p0uyAyPI5idfq9S kOCXi5Dk7Pcf1o01zHP3f3Ivn4K5dZ5/R3P+hF9N13tHrHiQ06dvaXd3tv62q67T k4Q4VaFzag2tkaawZgDC1swaRFRww/iJhl+t4jeucWp5HoxQ3ZrkXiIRDUYILy5W sZGqqyAvzA4Lkk0hI/c2CTAstBHK/LWT/zHO6GmotFIjKSJi14Opn/WiACNpNhz4 QLiYv8kS5x0J2Yh64IIUhFZ9J90HfcXlldSqTFywG4Nu0kIH0Iuw+ic9mWquhu7d vV/P0h2iv/BJl7IuFNtcN5fr1o2MFCAsU2mIcpapnN5NYpewq5fR9X2PUORhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXiUzJHO1coip5fGQsyXM0SpvQGQwHwYDVR0j BBgwFoAUx95gJczVaLcl0V0fn/owCJ+K2gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0MGY2NzItNzZkNC00MTU4LWFlZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVD Q0Q1NjhCNzI1RDE1RDFGOUZGQTMwMDg5RjhBREEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0RFNjAyNUNDRDU2OEI3MjVEMTVEMUY5RkZBMzAwODlGOEFE QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvQzdERTYwMjVDQ0Q1NjhCNzI1RDE1RDFGOUZGQTMw MDg5RjhBREEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyIegAMV0O21k2EP65N9G1DnIbuvXcb8zQb vP9CTb/XC0WDbCI6+MAsgKQLec9FF4UWqr187qNkKBkeSBru360JXXE5gH+cOmYS UOd0/UjAGKbkClRJ8cd1w15kVbqioMMpij2w2xfBDPuzBvqqkFV75RQ7PKRFGLjI x1BrocrgwYUIq3bwSfjA3sFK1Lrw1hb2gHQLbr84mE1IZ9Z/f9LmoFSAxN+8Pn1c gdbJn70oXRTstTj/WlcvOU99QJdtJGuPXbpIkmJHfqPATt3+zCLkJF8BnWkGIp08 ndLmOllhAUYQ5zPibtc3h37JMxT60Mex8Em7hieazdEhHz8bxVg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:19 2026 by rpki-client