$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft File: 13E8109758E3F09B256C9654C5812DA9993E9D23.mft (raw, json) Hash identifier: ZLG9DOSX4BbuVz91SfR10i7xpeCq4F3o/ASJ6/swbVY= Subject key identifier: 8C:BD:A2:4A:EB:1D:CB:23:8D:59:98:80:18:15:F5:29:85:2A:2A:7F Authority key identifier: 13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 Certificate issuer: /CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Certificate serial: 0E10575FE6741B913C0D91E0B6376BA225EF5746 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 23:33:31 +0000 Manifest this update: Thu 23 Jul 2026 23:28:31 +0000 Manifest next update: Sat 25 Jul 2026 02:43:31 +0000 Files and hashes: 1: 13E8109758E3F09B256C9654C5812DA9993E9D23.crl (hash: GNfokF0JBhlPNM+0zYkIw9NdssY97TDeVdDPCdOsX8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:10:57:5f:e6:74:1b:91:3c:0d:91:e0:b6:37:6b:a2:25:ef:57:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E8109758E3F09B256C9654C5812DA9993E9D23 Validity Not Before: Jul 23 23:28:31 2026 GMT Not After : Jul 25 02:43:31 2026 GMT Subject: CN=8CBDA24AEB1DCB238D5998801815F529852A2A7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:2a:36:1f:a9:67:ac:55:ea:d4:14:2f:98: bb:1d:f2:37:be:e9:dc:a4:ee:57:6a:a5:34:b2:7b: 40:87:40:6e:b6:1a:63:af:7d:93:48:f2:5b:e5:2e: ef:3e:27:ad:07:5a:f9:39:b9:93:1a:de:e2:62:1d: 7d:7c:9b:19:1c:0c:ce:97:0d:a5:55:d9:d4:c3:fe: 20:b4:2f:5b:b8:7e:9d:1c:44:fb:a3:7c:7c:7e:55: 7d:83:34:68:27:de:7f:af:59:f8:e4:80:73:ac:d4: cf:d6:03:60:67:36:6a:55:40:a9:46:b4:2d:af:34: 2f:1a:e3:a0:54:e9:21:05:9c:11:95:dc:68:12:7d: 61:6d:fb:af:79:3b:9c:d7:99:58:b1:ba:1e:67:23: da:80:6a:84:ca:e7:52:df:c8:33:ff:9a:45:e6:e0: 34:39:25:3e:99:59:9c:54:b9:32:44:98:f2:e0:46: 40:b1:58:6b:d0:66:d6:d1:c2:ea:3b:4d:97:f3:4d: 40:f9:7e:31:8a:97:fc:13:b0:a5:21:1c:ff:ca:19: b1:06:a9:02:ec:ef:94:5f:76:e0:ad:fb:3c:ff:bd: 5d:cd:f3:9d:f2:d1:03:34:05:25:a2:79:7c:6e:93: 19:2e:b6:de:ce:35:44:9d:bd:27:6e:20:3e:cd:34: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BD:A2:4A:EB:1D:CB:23:8D:59:98:80:18:15:F5:29:85:2A:2A:7F X509v3 Authority Key Identifier: keyid:13:E8:10:97:58:E3:F0:9B:25:6C:96:54:C5:81:2D:A9:99:3E:9D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13E8109758E3F09B256C9654C5812DA9993E9D23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/13E8109758E3F09B256C9654C5812DA9993E9D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6f:da:81:1e:76:b1:ee:2f:f5:df:6b:51:c0:aa:2b:6d:c2: 70:b9:a2:ad:ae:42:2f:73:69:56:7b:89:92:b5:4b:98:cc:29: 6c:f5:e5:65:d2:10:f1:e0:30:12:76:a4:c8:77:e8:84:cd:3c: 64:cf:3b:bc:0a:e3:cf:dc:3a:ed:ef:97:df:65:06:41:90:5c: 0e:ce:b8:0c:83:79:9f:2b:56:4e:cf:4c:fe:2a:32:60:84:af: eb:b4:24:f7:10:74:b1:e7:fd:26:db:1c:ee:83:60:63:a7:aa: 5d:bd:85:9a:dd:90:bf:e5:1d:80:af:7a:b9:7e:4d:5c:bb:33: f5:7d:df:e2:5d:38:7d:a2:38:d4:93:61:55:32:7f:d5:c4:7c: d7:48:15:d5:f3:b3:6c:47:22:97:6e:4a:3f:bf:0a:a9:4c:12: a4:7f:68:e9:55:ed:ff:65:dc:e6:14:cc:2d:58:11:0d:a7:4d: dd:cd:ab:37:43:10:b8:13:a2:79:ae:4b:b7:3f:63:a7:bb:a5: 82:72:21:fd:1c:e7:5e:a8:ce:0e:b0:4a:e9:21:a8:f7:7a:6c: f6:a4:a0:06:64:c2:0b:53:5e:8c:18:9b:6d:bb:2b:f3:b5:5e: d2:8a:22:41:f7:2e:d0:1f:df:df:ff:5a:3e:cd:2f:1c:71:14: 12:65:df:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhBXX+Z0G5E8DZHgtjdroiXvV0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5 OTNFOUQyMzAeFw0yNjA3MjMyMzI4MzFaFw0yNjA3MjUwMjQzMzFaMDMxMTAvBgNV BAMTKDhDQkRBMjRBRUIxRENCMjM4RDU5OTg4MDE4MTVGNTI5ODUyQTJBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZyo2H6lnrFXq1BQvmLsd8je+ 6dyk7ldqpTSye0CHQG62GmOvfZNI8lvlLu8+J60HWvk5uZMa3uJiHX18mxkcDM6X DaVV2dTD/iC0L1u4fp0cRPujfHx+VX2DNGgn3n+vWfjkgHOs1M/WA2BnNmpVQKlG tC2vNC8a46BU6SEFnBGV3GgSfWFt+695O5zXmVixuh5nI9qAaoTK51LfyDP/mkXm 4DQ5JT6ZWZxUuTJEmPLgRkCxWGvQZtbRwuo7TZfzTUD5fjGKl/wTsKUhHP/KGbEG qQLs75RfduCt+zz/vV3N853y0QM0BSWieXxukxkutt7ONUSdvSduID7NNDzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjL2iSusdyyONWZiAGBX1KYUqKn8wHwYDVR0j BBgwFoAUE+gQl1jj8JslbJZUxYEtqZk+nSMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1 OEUzRjA5QjI1NkM5NjU0QzU4MTJEQTk5OTNFOUQyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0U4MTA5NzU4RTNGMDlCMjU2Qzk2NTRDNTgxMkRBOTk5M0U5 RDIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMTNFODEwOTc1OEUzRjA5QjI1NkM5NjU0QzU4MTJE QTk5OTNFOUQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRv2oEedrHuL/Xfa1HAqittwnC5oq2uQi9z aVZ7iZK1S5jMKWz15WXSEPHgMBJ2pMh36ITNPGTPO7wK48/cOu3vl99lBkGQXA7O uAyDeZ8rVk7PTP4qMmCEr+u0JPcQdLHn/SbbHO6DYGOnql29hZrdkL/lHYCverl+ TVy7M/V93+JdOH2iONSTYVUyf9XEfNdIFdXzs2xHIpduSj+/CqlMEqR/aOlV7f9l 3OYUzC1YEQ2nTd3NqzdDELgTonmuS7c/Y6e7pYJyIf0c516ozg6wSukhqPd6bPak oAZkwgtTXowYm227K/O1XtKKIkH3LtAf39//Wj7NLxxxFBJl35Y= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:35 2026 by rpki-client