$ rpki-client -vvf rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft File: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft (raw, json) Hash identifier: lLOd/wy76RDdLUeIIV7hCq28Eb+N/VtqLGXdae1axCQ= Subject key identifier: 70:27:12:C6:19:4C:A6:4A:46:3E:88:B0:EE:BE:6C:CE:E1:65:68:A3 Authority key identifier: 67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB Certificate issuer: /CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Certificate serial: 0818CD3BEEDEEB5DCE9208F3FFA36950BE6BC890 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft Manifest number: 6D Signing time: Fri 24 Jul 2026 00:50:05 +0000 Manifest this update: Fri 24 Jul 2026 00:45:05 +0000 Manifest next update: Sat 25 Jul 2026 03:58:05 +0000 Files and hashes: 1: 673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl (hash: No9le8lD/R51Vc0jjROfZtFFXPsKKFqXXKDGKGpqGvE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:18:cd:3b:ee:de:eb:5d:ce:92:08:f3:ff:a3:69:50:be:6b:c8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673A5D511FDCC0A498DE9E3428D35C44EB25AFBB Validity Not Before: Jul 24 00:45:05 2026 GMT Not After : Jul 25 03:58:05 2026 GMT Subject: CN=702712C6194CA64A463E88B0EEBE6CCEE16568A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:23:06:a5:8a:87:4f:e9:89:17:1f:5c:1f: 95:09:f1:9f:a0:2e:98:96:0d:ef:61:c7:79:3c:f3: d1:3a:11:e9:85:f9:0e:1f:c3:2b:8b:98:ff:63:0a: 1c:fd:eb:93:7f:f2:dc:2c:0c:24:79:24:c6:5b:d0: 80:a9:41:e1:f5:ec:dc:e1:11:f3:3c:d4:1b:c5:bf: a1:28:9b:99:bf:f1:a9:0b:c9:a6:da:54:fa:2b:5f: 0f:af:fb:ce:45:8d:6b:e7:d9:ed:36:59:1e:6c:16: bd:b6:12:24:b8:5b:7f:78:ff:ce:fd:25:23:b8:db: ae:db:cd:a4:4f:14:fb:4d:14:0c:a8:de:d6:28:d2: 54:cb:b0:21:3b:e1:c4:84:30:8c:1f:9c:69:db:55: fb:fc:74:26:1f:45:ee:5d:4f:1c:0a:f2:7a:5d:66: b3:b8:d0:89:39:3f:7e:2d:70:08:48:31:46:81:4a: b2:17:b7:bb:2a:26:76:0a:7b:7d:a5:bb:80:66:5e: 9d:39:53:43:be:43:a7:75:a9:9d:2e:8d:4d:44:46: ad:73:6e:56:69:e6:9d:5c:b9:ff:6f:11:31:2d:af: 39:18:8c:74:68:09:3b:ff:b1:9f:16:8e:a0:c5:aa: a1:60:2c:2f:7a:ee:fc:f2:65:ae:87:75:f3:d2:d7: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:12:C6:19:4C:A6:4A:46:3E:88:B0:EE:BE:6C:CE:E1:65:68:A3 X509v3 Authority Key Identifier: keyid:67:3A:5D:51:1F:DC:C0:A4:98:DE:9E:34:28:D3:5C:44:EB:25:AF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/673A5D511FDCC0A498DE9E3428D35C44EB25AFBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:57:dc:5d:c1:76:bf:5d:32:93:24:56:e0:e6:fa:3f:95:56: 46:8f:98:33:17:e8:f1:75:3f:44:c3:7d:f4:b9:2c:39:fa:4f: 38:a9:d7:d4:87:f8:85:7b:25:94:ef:ce:c2:12:27:a7:28:4f: 35:cf:81:94:c2:dd:fb:6d:df:60:93:ac:59:a8:ff:29:8a:bd: 57:46:b8:cc:aa:4e:70:34:23:8e:3a:db:23:73:14:b0:77:a5: 09:c7:aa:35:41:24:96:00:22:79:6e:d9:58:01:17:e0:9a:2b: 72:6e:98:bb:a8:95:4d:0d:b9:90:71:9b:a8:62:fb:9f:89:80: 52:1b:77:d8:0d:60:05:a7:1a:e6:7a:2a:3f:37:5c:10:5c:f6: 24:f6:d1:81:63:4b:98:1e:b9:8f:ff:46:30:ac:8d:ba:e0:5d: e7:a2:18:a4:12:4a:78:1f:5c:b4:55:4d:7f:90:ab:05:f4:d0: a1:7b:a0:dc:8c:2b:e4:ec:dc:b2:ab:00:30:66:c8:bd:dd:e7: 4e:dc:a8:cd:d1:f0:ee:8c:b8:47:05:c1:03:dd:ce:cb:f4:ca: ed:14:cb:a9:2e:a2:d6:dd:e0:17:54:c9:44:5a:7c:b0:86:ff: 4f:33:c8:22:23:b8:c0:89:b3:26:57:b9:91:39:43:67:5f:d5: 9c:3d:4e:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBjNO+7e613Okgjz/6NpUL5ryJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVDNDRF QjI1QUZCQjAeFw0yNjA3MjQwMDQ1MDVaFw0yNjA3MjUwMzU4MDVaMDMxMTAvBgNV BAMTKDcwMjcxMkM2MTk0Q0E2NEE0NjNFODhCMEVFQkU2Q0NFRTE2NTY4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QiMGpYqHT+mJFx9cH5UJ8Z+g LpiWDe9hx3k889E6EemF+Q4fwyuLmP9jChz965N/8twsDCR5JMZb0ICpQeH17Nzh EfM81BvFv6Eom5m/8akLyabaVPorXw+v+85FjWvn2e02WR5sFr22EiS4W394/879 JSO4267bzaRPFPtNFAyo3tYo0lTLsCE74cSEMIwfnGnbVfv8dCYfRe5dTxwK8npd ZrO40Ik5P34tcAhIMUaBSrIXt7sqJnYKe32lu4BmXp05U0O+Q6d1qZ0ujU1ERq1z blZp5p1cuf9vETEtrzkYjHRoCTv/sZ8WjqDFqqFgLC967vzyZa6HdfPS17olAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCcSxhlMpkpGPoiw7r5szuFlaKMwHwYDVR0j BBgwFoAUZzpdUR/cwKSY3p40KNNcROslr7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUwNGU0YzctN2EyZC00ZDY2LThmYjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTEx RkRDQzBBNDk4REU5RTM0MjhEMzVDNDRFQjI1QUZCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzNBNUQ1MTFGRENDMEE0OThERTlFMzQyOEQzNUM0NEVCMjVB RkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvNjczQTVENTExRkRDQzBBNDk4REU5RTM0MjhEMzVD NDRFQjI1QUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdX3F3Bdr9dMpMkVuDm+j+VVkaPmDMX6PF1 P0TDffS5LDn6Tzip19SH+IV7JZTvzsISJ6coTzXPgZTC3ftt32CTrFmo/ymKvVdG uMyqTnA0I4462yNzFLB3pQnHqjVBJJYAInlu2VgBF+CaK3JumLuolU0NuZBxm6hi +5+JgFIbd9gNYAWnGuZ6Kj83XBBc9iT20YFjS5geuY//RjCsjbrgXeeiGKQSSngf XLRVTX+QqwX00KF7oNyMK+Ts3LKrADBmyL3d507cqM3R8O6MuEcFwQPdzsv0yu0U y6kuotbd4BdUyURafLCG/08zyCIjuMCJsyZXuZE5Q2df1Zw9TqY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:18:56 2026 by rpki-client