$ rpki-client -vvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: ncuGPh0CQkN635BriJZIJzD+IVUk4kIecf7Du63PFSk= Subject key identifier: 26:3D:37:E3:AD:71:FC:E6:B1:00:B0:E3:FC:DF:CE:89:B6:9D:6A:8F Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 38DB45378D65DF822A081F26785B81E2B519B6F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 19:08:35 +0000 Manifest this update: Thu 23 Jul 2026 19:03:35 +0000 Manifest next update: Fri 24 Jul 2026 20:54:35 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: t5UKdTaM8jqPYl7d0IQazargaFv9ydT2xrGxFHkyRxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:db:45:37:8d:65:df:82:2a:08:1f:26:78:5b:81:e2:b5:19:b6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Jul 23 19:03:35 2026 GMT Not After : Jul 24 20:54:35 2026 GMT Subject: CN=263D37E3AD71FCE6B100B0E3FCDFCE89B69D6A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:9b:54:af:2c:1d:4b:73:44:e1:db:87:ec: 9d:a2:7d:7f:bc:f5:68:87:b7:6a:8f:d2:c3:3e:c4: cc:f6:3b:a8:5b:b1:78:48:ee:61:d5:e7:d1:44:d1: 36:4c:4d:ba:96:9e:a4:30:e3:a9:b0:d1:6c:7b:f6: 7f:85:6e:5e:67:63:a4:95:b3:d7:10:71:0f:26:5d: 8b:48:a6:d9:db:b1:30:a2:a1:98:ea:80:ca:9c:e1: 9a:1c:6e:11:f6:86:bd:b9:96:ef:bd:dd:9f:70:b0: 3f:5e:f7:fb:78:7c:28:82:c1:56:f2:ec:5e:4c:19: 2a:ff:29:cc:db:99:ed:0a:d6:3c:9c:66:bb:66:51: f2:07:37:6c:4c:77:ce:ab:0b:3f:b5:22:e5:15:8e: 5b:7e:37:27:2c:08:3b:83:9a:5a:8e:ed:50:99:a1: 4c:c8:f5:0a:3b:78:4d:c0:7b:94:06:ff:f6:84:55: 09:8a:1c:ef:94:20:c6:a6:6b:56:a0:e4:ba:66:89: 90:ea:e9:50:3f:91:f5:8d:d8:b8:ca:a0:19:52:dc: fd:c5:70:d0:54:d2:58:8e:fe:cd:bd:e1:74:ee:c4: a4:f1:ec:3e:1a:52:da:0a:59:a3:b5:6e:17:3e:ba: b2:cd:ea:31:0a:96:11:4f:be:94:63:71:9d:f6:ca: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3D:37:E3:AD:71:FC:E6:B1:00:B0:E3:FC:DF:CE:89:B6:9D:6A:8F X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bf:c2:c7:8b:d2:63:80:3f:9a:fe:06:15:8c:83:38:42:b7: 83:9b:01:0c:46:90:af:ab:80:ef:ef:98:5e:ee:b9:75:87:35: 39:82:8c:5e:37:82:b9:be:a8:7e:d4:a6:9c:fa:ce:31:ca:f6: a5:6c:4e:dc:e6:70:39:0c:1a:b9:7a:50:c3:8e:34:80:e8:37: b6:2f:dd:d6:de:a6:c6:fe:46:3c:62:b0:e5:1e:9f:a4:63:93: e3:45:6c:6f:03:1e:12:85:8e:10:4b:e8:59:23:44:b9:51:76: 8d:19:bb:51:ae:0b:c3:13:0d:3f:c7:79:3e:de:e2:b3:4d:a0: d5:a4:6c:01:a3:45:fb:82:d8:91:17:d6:3d:21:09:57:d5:83: 3c:19:90:a1:ce:ab:83:68:7d:f0:ea:3e:55:01:c5:b8:96:22: 98:c2:6f:6c:99:7c:66:2f:20:a0:2a:74:48:f7:f6:b3:76:79: 0f:a4:ce:50:c9:62:1d:3d:8c:b7:d5:4f:20:e9:be:6f:ec:a6: 31:a8:1c:97:9a:b1:e5:ed:f8:d1:a4:22:79:3e:38:c2:d9:a7: d3:47:dc:5e:04:5e:94:a8:f5:21:60:13:a9:25:54:f3:5a:47: 91:64:4a:cc:2e:65:4c:03:17:4a:7c:3e:c0:d9:55:c5:a3:99: 1d:29:01:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONtFN41l34IqCB8meFuB4rUZtvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjA3MjMxOTAzMzVaFw0yNjA3MjQyMDU0MzVaMDMxMTAvBgNV BAMTKDI2M0QzN0UzQUQ3MUZDRTZCMTAwQjBFM0ZDREZDRTg5QjY5RDZBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDZtUrywdS3NE4duH7J2ifX+8 9WiHt2qP0sM+xMz2O6hbsXhI7mHV59FE0TZMTbqWnqQw46mw0Wx79n+Fbl5nY6SV s9cQcQ8mXYtIptnbsTCioZjqgMqc4ZocbhH2hr25lu+93Z9wsD9e9/t4fCiCwVby 7F5MGSr/Kczbme0K1jycZrtmUfIHN2xMd86rCz+1IuUVjlt+NycsCDuDmlqO7VCZ oUzI9Qo7eE3Ae5QG//aEVQmKHO+UIMama1ag5LpmiZDq6VA/kfWN2LjKoBlS3P3F cNBU0liO/s294XTuxKTx7D4aUtoKWaO1bhc+urLN6jEKlhFPvpRjcZ32ypVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJj03461x/OaxALDj/N/Oibadao8wHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG/wseL0mOAP5r+BhWMgzhCt4ObAQxGkK+r gO/vmF7uuXWHNTmCjF43grm+qH7Uppz6zjHK9qVsTtzmcDkMGrl6UMOONIDoN7Yv 3dbepsb+RjxisOUen6Rjk+NFbG8DHhKFjhBL6FkjRLlRdo0Zu1GuC8MTDT/HeT7e 4rNNoNWkbAGjRfuC2JEX1j0hCVfVgzwZkKHOq4NoffDqPlUBxbiWIpjCb2yZfGYv IKAqdEj39rN2eQ+kzlDJYh09jLfVTyDpvm/spjGoHJeaseXt+NGkInk+OMLZp9NH 3F4EXpSo9SFgE6klVPNaR5FkSswuZUwDF0p8PsDZVcWjmR0pAe8= -----END CERTIFICATE-----Generated at Fri Jul 24 10:26:42 2026 by rpki-client