$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft (raw, json) Hash identifier: qNz8DIbbIzCqwkfKFCN46P3QXy+YzlrUDtgCZMvQyxU= Subject key identifier: 59:AC:F4:ED:48:04:BD:DE:4E:33:5F:2D:B2:0B:F8:0F:07:B4:D9:3D Authority key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 Certificate issuer: /CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Certificate serial: 4B2CB2D167760E284F7285AF0C19765D1BBCBFF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 14:14:00 +0000 Manifest this update: Tue 28 Jul 2026 14:09:00 +0000 Manifest next update: Wed 29 Jul 2026 14:38:00 +0000 Files and hashes: 1: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl (hash: DzEQ8VuVPX9LvAU1Yl6QuFY2edv2Hn1EYD/Kv95i2os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2c:b2:d1:67:76:0e:28:4f:72:85:af:0c:19:76:5d:1b:bc:bf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Validity Not Before: Jul 28 14:09:00 2026 GMT Not After : Jul 29 14:38:00 2026 GMT Subject: CN=59ACF4ED4804BDDE4E335F2DB20BF80F07B4D93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:6d:92:78:95:69:f8:49:41:8b:40:6e:d3: 98:99:ec:04:06:aa:76:ae:06:35:7e:42:1f:72:b7: 07:04:e9:97:b4:25:05:c8:ce:d9:98:bc:e1:da:ff: 24:2c:b5:98:b2:94:7b:f6:92:b5:dd:3f:a4:fc:c6: 33:45:12:90:f3:ea:8d:23:02:6d:97:2d:e1:fa:41: 49:6f:75:62:e6:90:43:40:57:6c:44:b8:4f:af:b8: 8e:2a:84:5c:19:d6:85:91:a9:aa:ad:36:07:c0:fe: 58:50:c9:e7:7f:52:1c:be:d4:19:cb:da:45:0b:7e: e7:2f:51:57:2c:d3:60:6f:2a:c2:21:a4:87:c7:ca: ec:c2:38:a8:b5:02:e5:c4:2c:35:10:99:76:f0:ed: da:d3:06:97:44:e3:d1:69:02:8d:54:30:36:44:ae: ff:23:65:b7:7b:43:56:bd:3c:92:8f:81:5f:aa:e5: c9:00:58:af:9e:74:cd:1b:57:0c:22:53:3f:6c:6b: 50:f1:59:ab:fd:25:32:a5:d6:82:8e:f3:ab:4a:eb: 8a:6e:99:a1:7e:97:0c:14:d6:0d:ac:87:d0:f2:fc: 2c:1d:d2:bb:80:41:0f:a4:c0:84:3b:79:98:c6:98: 9c:eb:ee:f6:af:b5:c0:63:69:e5:2a:74:bc:99:41: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:F4:ED:48:04:BD:DE:4E:33:5F:2D:B2:0B:F8:0F:07:B4:D9:3D X509v3 Authority Key Identifier: keyid:A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9e:64:c1:59:cd:50:6b:8e:74:c3:a7:3d:86:d5:d6:fe:16: ab:34:2f:5e:00:62:2c:8e:13:ff:b6:46:28:60:04:a6:69:67: 8a:73:bf:37:60:4a:17:ba:58:39:86:5d:d6:ea:93:30:d4:05: b3:4a:16:4e:f1:fa:be:1d:0a:3c:c9:a9:22:d3:4e:26:1c:fc: a8:31:25:a8:05:19:d9:f8:73:69:66:72:99:b6:ae:4c:7f:c6: 1f:17:a9:db:6c:81:39:fc:3c:52:64:12:28:1d:54:96:92:52: b6:0c:3e:b8:66:9b:b6:35:b3:01:47:50:09:31:47:f9:81:d5: 09:9b:e4:19:70:50:de:e4:57:d7:5c:42:83:41:b4:fb:0a:72: aa:8c:19:a6:ee:7b:bc:41:7e:e4:3c:02:02:9f:d4:b9:6e:4d: a5:ec:f8:04:7e:48:4d:f3:98:6a:8c:f9:8a:38:41:fc:ab:46: 60:30:03:8d:1d:67:57:65:1c:b9:21:41:0a:f9:88:5b:8e:ef: 18:18:f3:47:fb:ca:e3:5d:53:78:f6:98:04:95:c5:01:fb:f9: af:4a:b4:89:8c:c4:ce:24:5f:6e:bf:17:69:3a:11:8e:1a:99: 1c:4c:f5:6c:b2:40:50:18:2c:59:5c:04:b9:97:73:eb:cc:85: 6f:9b:48:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyyy0Wd2DihPcoWvDBl2XRu8v/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0Yx RjQyRDU4OTAeFw0yNjA3MjgxNDA5MDBaFw0yNjA3MjkxNDM4MDBaMDMxMTAvBgNV BAMTKDU5QUNGNEVENDgwNEJEREU0RTMzNUYyREIyMEJGODBGMDdCNEQ5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqam2SeJVp+ElBi0Bu05iZ7AQG qnauBjV+Qh9ytwcE6Ze0JQXIztmYvOHa/yQstZiylHv2krXdP6T8xjNFEpDz6o0j Am2XLeH6QUlvdWLmkENAV2xEuE+vuI4qhFwZ1oWRqaqtNgfA/lhQyed/Uhy+1BnL 2kULfucvUVcs02BvKsIhpIfHyuzCOKi1AuXELDUQmXbw7drTBpdE49FpAo1UMDZE rv8jZbd7Q1a9PJKPgV+q5ckAWK+edM0bVwwiUz9sa1DxWav9JTKl1oKO86tK64pu maF+lwwU1g2sh9Dy/Cwd0ruAQQ+kwIQ7eZjGmJzr7vavtcBjaeUqdLyZQW/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWaz07UgEvd5OM18tsgv4Dwe02T0wHwYDVR0j BBgwFoAUqUGSyyYvp4xfxnzhi9uczx9C1YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0Iy NjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0YxRjQyRDU4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTQxOTJDQjI2MkZBNzhDNUZDNjdDRTE4QkRCOUNDRjFGNDJE NTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlD Q0YxRjQyRDU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKeZMFZzVBrjnTDpz2G1db+Fqs0L14AYiyO E/+2RihgBKZpZ4pzvzdgShe6WDmGXdbqkzDUBbNKFk7x+r4dCjzJqSLTTiYc/Kgx JagFGdn4c2lmcpm2rkx/xh8XqdtsgTn8PFJkEigdVJaSUrYMPrhmm7Y1swFHUAkx R/mB1Qmb5BlwUN7kV9dcQoNBtPsKcqqMGabue7xBfuQ8AgKf1LluTaXs+AR+SE3z mGqM+Yo4QfyrRmAwA40dZ1dlHLkhQQr5iFuO7xgY80f7yuNdU3j2mASVxQH7+a9K tImMxM4kX26/F2k6EY4amRxM9WyyQFAYLFlcBLmXc+vMhW+bSFE= -----END CERTIFICATE-----Generated at Tue Jul 28 20:50:49 2026 by rpki-client