$ rpki-client -vvf rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft File: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft (raw, json) Hash identifier: HhY3ykVm43rn17loutvpsv1FkISrmHomKP6weXsea90= Subject key identifier: 59:95:DD:BF:07:3B:91:B7:35:46:52:72:C7:DF:B3:7A:43:2D:A1:EC Authority key identifier: 1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA Certificate issuer: /CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Certificate serial: 371074BE9A4B9C9F53CC470BCEF3DF6FB29EB049 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 10:27:50 +0000 Manifest this update: Thu 23 Jul 2026 10:22:50 +0000 Manifest next update: Fri 24 Jul 2026 13:40:50 +0000 Files and hashes: 1: 1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl (hash: wtkCEx4H8tML/6sQOzQUpuZAT8cRXTWbksmH69Jscmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:10:74:be:9a:4b:9c:9f:53:cc:47:0b:ce:f3:df:6f:b2:9e:b0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA Validity Not Before: Jul 23 10:22:50 2026 GMT Not After : Jul 24 13:40:50 2026 GMT Subject: CN=5995DDBF073B91B735465272C7DFB37A432DA1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:2b:7d:ea:44:5f:a4:bf:0b:8e:2f:5c:f7: b4:f2:8c:f2:de:d7:85:e8:da:57:3e:af:60:37:e1: e3:a0:6a:8f:b7:c1:33:24:d5:6c:48:f9:24:41:d0: 43:84:c9:80:fa:7f:89:13:b9:cf:65:9c:c7:b9:3f: 3b:7a:db:6a:0c:37:88:ac:3b:72:2f:9c:fe:41:5a: 09:e0:ea:10:fb:7f:48:4e:33:c1:ea:f6:0e:67:15: be:99:97:57:19:ed:3d:6a:8d:86:c8:48:84:57:35: 25:26:d1:05:d8:4a:07:85:c0:57:e7:e8:03:93:7e: 53:e6:90:fd:d9:9d:50:89:fc:35:0d:0c:7e:b8:10: e4:70:9d:84:2e:07:eb:60:08:49:35:b8:f6:58:90: ec:96:ab:9e:fb:d4:da:a3:65:0e:e1:cc:a5:d6:fb: 9d:88:d9:fe:93:cd:5c:4f:0c:ec:9a:32:60:35:34: 78:c4:35:ef:78:03:a3:80:71:01:2d:df:e4:2e:1a: 86:4b:f1:7d:71:90:53:f9:ab:bd:29:b8:d9:68:c2: 64:2b:64:22:5a:a6:3a:0b:6f:7e:c5:42:4a:0c:a2: 7d:39:e9:20:da:ed:5b:b0:7d:4d:fe:9f:4c:12:66: e5:dc:dd:ea:54:c5:2f:93:c2:f0:52:64:a6:29:1d: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:DD:BF:07:3B:91:B7:35:46:52:72:C7:DF:B3:7A:43:2D:A1:EC X509v3 Authority Key Identifier: keyid:1A:84:6D:C7:EE:A8:A9:0C:9D:5E:86:7F:6C:C5:2E:B5:A5:F5:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/1A846DC7EEA8A90C9D5E867F6CC52EB5A5F51ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ca:c5:ef:a0:82:30:2a:c9:6c:94:fe:23:37:34:1b:f2:e3: 45:a4:dd:4c:f7:00:81:df:f7:92:0d:fc:dc:7a:fc:7e:e4:95: cc:64:8f:ed:c3:2e:3c:49:82:9f:ab:b5:1f:cf:5d:e8:37:d4: 07:c3:a2:22:4d:cd:08:a9:e5:13:ba:2a:f7:7c:3e:ed:c8:9a: b2:33:36:f5:32:79:b9:be:08:05:49:f5:6c:ca:12:ea:1f:78: c7:32:23:52:a5:80:84:ea:26:9d:a6:d1:89:a5:e4:cc:3e:2a: 40:d5:e5:e9:24:05:35:f4:b9:5a:19:9f:93:e0:b8:2d:bd:31: 79:c9:b1:13:99:a5:2f:b5:10:9e:e1:eb:54:57:db:dc:c1:05: 04:96:94:7a:7c:51:8b:32:9b:1b:17:e2:f3:36:9d:4f:90:b2: 11:0b:20:be:76:b3:23:ad:56:d6:cc:09:15:7d:bf:88:78:1f: 65:9d:b2:4b:a1:c1:3d:24:3b:13:d0:5a:2b:25:08:38:78:46: b4:6f:e0:14:a1:54:c6:ed:06:3e:74:49:6b:9f:08:b7:13:9f: 08:20:f4:6f:5a:66:f8:41:0f:1c:df:56:8f:a7:15:32:f2:3a: 1f:b4:c9:80:a2:ec:4f:bd:36:b1:55:6d:3d:99:b7:4e:de:8d: c8:1a:54:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxB0vppLnJ9TzEcLzvPfb7KesEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJFQjVB NUY1MUVDQTAeFw0yNjA3MjMxMDIyNTBaFw0yNjA3MjQxMzQwNTBaMDMxMTAvBgNV BAMTKDU5OTVEREJGMDczQjkxQjczNTQ2NTI3MkM3REZCMzdBNDMyREExRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJit96kRfpL8Lji9c97TyjPLe 14Xo2lc+r2A34eOgao+3wTMk1WxI+SRB0EOEyYD6f4kTuc9lnMe5Pzt622oMN4is O3IvnP5BWgng6hD7f0hOM8Hq9g5nFb6Zl1cZ7T1qjYbISIRXNSUm0QXYSgeFwFfn 6AOTflPmkP3ZnVCJ/DUNDH64EORwnYQuB+tgCEk1uPZYkOyWq5771NqjZQ7hzKXW +52I2f6TzVxPDOyaMmA1NHjENe94A6OAcQEt3+QuGoZL8X1xkFP5q70puNlowmQr ZCJapjoLb37FQkoMon056SDa7VuwfU3+n0wSZuXc3epUxS+TwvBSZKYpHQ47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZXdvwc7kbc1RlJyx9+zekMtoewwHwYDVR0j BBgwFoAUGoRtx+6oqQydXoZ/bMUutaX1HsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk2NWRkMzktNDhkMC00NTc4LThmZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdF RUE4QTkwQzlENUU4NjdGNkNDNTJFQjVBNUY1MUVDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTg0NkRDN0VFQThBOTBDOUQ1RTg2N0Y2Q0M1MkVCNUE1RjUx RUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvMUE4NDZEQzdFRUE4QTkwQzlENUU4NjdGNkNDNTJF QjVBNUY1MUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvKxe+ggjAqyWyU/iM3NBvy40Wk3Uz3AIHf 95IN/Nx6/H7klcxkj+3DLjxJgp+rtR/PXeg31AfDoiJNzQip5RO6Kvd8Pu3ImrIz NvUyebm+CAVJ9WzKEuofeMcyI1KlgITqJp2m0Yml5Mw+KkDV5ekkBTX0uVoZn5Pg uC29MXnJsROZpS+1EJ7h61RX29zBBQSWlHp8UYsymxsX4vM2nU+QshELIL52syOt VtbMCRV9v4h4H2WdskuhwT0kOxPQWislCDh4RrRv4BShVMbtBj50SWufCLcTnwgg 9G9aZvhBDxzfVo+nFTLyOh+0yYCi7E+9NrFVbT2Zt07ejcgaVJM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:11 2026 by rpki-client