$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: Wjgxi8V/UOkFA3fnss564y7VydAnPq1v2RjAFBbKZmY= Subject key identifier: 6C:47:32:C6:C8:7B:BE:40:66:B3:0D:F0:B8:B4:B2:30:26:DD:3E:71 Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 36840D64A89F0FF0AA023F941FDFC245B901DCF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:37:48 +0000 Manifest this update: Thu 23 Jul 2026 14:32:48 +0000 Manifest next update: Fri 24 Jul 2026 16:34:48 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: VyFLQlDuH3dqWTVusP0C645yJ5bCuCjyA/0sCqzPu3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:84:0d:64:a8:9f:0f:f0:aa:02:3f:94:1f:df:c2:45:b9:01:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: Jul 23 14:32:48 2026 GMT Not After : Jul 24 16:34:48 2026 GMT Subject: CN=6C4732C6C87BBE4066B30DF0B8B4B23026DD3E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:93:a1:a8:66:88:32:df:e3:24:e2:a9:24: 0f:3e:29:59:58:6f:a3:7e:90:ee:b0:8d:b9:21:f3: 42:d0:41:d3:2f:45:5f:6a:66:13:04:52:a9:08:ff: 04:91:1d:f4:3f:77:a8:69:d3:03:f8:d6:31:20:10: b7:fb:7d:d2:81:3b:5c:55:f5:dc:49:37:a9:94:85: 01:d3:6f:08:6c:1c:24:ce:82:c9:33:2c:f4:7e:48: c6:40:78:4a:09:a5:77:4a:95:f3:47:9d:58:62:a0: d6:b1:21:22:e4:99:d4:74:c1:be:0d:7e:05:6d:62: c5:37:e1:bd:58:ec:f3:97:81:50:e4:44:9e:91:e7: 67:dc:c8:0c:ca:77:48:87:32:42:20:27:c4:10:d8: c7:ed:25:7e:0f:89:f1:d0:51:bd:0d:b7:a4:47:4c: 08:6e:e6:d6:fc:45:e4:6b:09:06:40:2d:b4:97:b6: 55:9f:c8:c5:cb:46:80:28:0c:c5:24:0e:26:bb:5d: bb:f0:da:bb:07:f7:d1:34:62:f2:43:98:b5:9e:3e: 1c:04:b1:77:b9:73:fd:f7:7b:4b:a2:bc:47:ed:86: b2:a0:c0:ef:ca:11:2c:fb:ca:d1:41:29:0e:70:fd: 4b:54:bc:df:79:2d:6f:d1:7a:16:6a:3b:18:13:fd: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:47:32:C6:C8:7B:BE:40:66:B3:0D:F0:B8:B4:B2:30:26:DD:3E:71 X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:63:b1:b7:94:02:b8:1d:c8:30:53:b0:5b:95:e2:6e:c6:e0: b2:48:80:55:ac:f9:3b:f8:c7:42:ca:19:b8:1b:cc:db:4d:1d: 6f:d8:97:15:0e:18:7f:2d:66:ae:33:10:9e:21:f1:09:32:94: 71:e3:c7:97:bd:e1:d0:54:23:db:c5:42:28:40:e8:33:38:62: 60:fe:9e:bc:c8:04:6e:c8:b2:42:ac:75:6e:e0:e4:9f:1f:18: db:3f:c7:35:dd:89:a3:82:45:8f:df:72:16:3f:4f:18:c8:e8: ea:10:79:ab:71:20:3e:eb:c4:65:2a:de:6b:ac:85:77:76:7d: ee:e8:ce:1a:4a:9c:23:b6:98:ee:a9:5d:a4:35:3d:e7:f4:b3: d4:28:d3:81:21:a1:bd:7a:26:19:f8:ae:ac:ca:a1:5f:12:a3: 7f:85:d2:fd:f0:55:f2:d3:3d:1f:2c:ae:e5:33:f0:8c:e8:eb: 1b:a5:cb:4a:9c:ae:f1:db:d2:4d:27:ee:9e:f5:77:68:47:e5: ff:12:80:2c:67:e4:e6:e3:14:fc:19:04:8f:76:5c:c9:fa:bd: f5:c6:7b:22:ff:07:32:fa:48:24:05:56:dd:22:f3:0c:71:24: 60:ad:ad:47:0a:84:17:c9:db:35:55:5b:67:c1:1e:20:30:50: 78:57:5f:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoQNZKifD/CqAj+UH9/CRbkB3PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA3MjMxNDMyNDhaFw0yNjA3MjQxNjM0NDhaMDMxMTAvBgNV BAMTKDZDNDczMkM2Qzg3QkJFNDA2NkIzMERGMEI4QjRCMjMwMjZERDNFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk5OhqGaIMt/jJOKpJA8+KVlY b6N+kO6wjbkh80LQQdMvRV9qZhMEUqkI/wSRHfQ/d6hp0wP41jEgELf7fdKBO1xV 9dxJN6mUhQHTbwhsHCTOgskzLPR+SMZAeEoJpXdKlfNHnVhioNaxISLkmdR0wb4N fgVtYsU34b1Y7POXgVDkRJ6R52fcyAzKd0iHMkIgJ8QQ2MftJX4PifHQUb0Nt6RH TAhu5tb8ReRrCQZALbSXtlWfyMXLRoAoDMUkDia7Xbvw2rsH99E0YvJDmLWePhwE sXe5c/33e0uivEfthrKgwO/KESz7ytFBKQ5w/UtUvN95LW/RehZqOxgT/WvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbEcyxsh7vkBmsw3wuLSyMCbdPnEwHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1jsbeUArgdyDBTsFuV4m7G4LJIgFWs+Tv4 x0LKGbgbzNtNHW/YlxUOGH8tZq4zEJ4h8QkylHHjx5e94dBUI9vFQihA6DM4YmD+ nrzIBG7IskKsdW7g5J8fGNs/xzXdiaOCRY/fchY/TxjI6OoQeatxID7rxGUq3mus hXd2fe7ozhpKnCO2mO6pXaQ1Pef0s9Qo04Ehob16Jhn4rqzKoV8So3+F0v3wVfLT PR8sruUz8Izo6xuly0qcrvHb0k0n7p71d2hH5f8SgCxn5ObjFPwZBI92XMn6vfXG eyL/BzL6SCQFVt0i8wxxJGCtrUcKhBfJ2zVVW2fBHiAwUHhXX6M= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:04 2026 by rpki-client