$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: UeWQy7/R9ZAliUtp3FvPXwnpkzPw9pHq0G7aovbyW7Q= Subject key identifier: B1:DB:31:64:3A:58:DC:6B:CE:60:A8:58:0D:31:88:86:D7:00:D0:0C Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 76ECA56882C5F1D0FAF5DA357A161714661FC167 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: 73 Signing time: Tue 28 Jul 2026 08:37:28 +0000 Manifest this update: Tue 28 Jul 2026 08:32:28 +0000 Manifest next update: Wed 29 Jul 2026 09:14:28 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: TFfV04vnBXpXGuoaHYkSvplPTKKJk8hjAH4vnP4LOdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ec:a5:68:82:c5:f1:d0:fa:f5:da:35:7a:16:17:14:66:1f:c1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Jul 28 08:32:28 2026 GMT Not After : Jul 29 09:14:28 2026 GMT Subject: CN=B1DB31643A58DC6BCE60A8580D318886D700D00C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:c7:84:a3:26:85:e2:59:87:07:95:a7:2c: 48:c3:f2:5d:2b:8f:0b:92:cd:e4:7f:9f:8f:db:a1: 31:85:38:dd:c3:33:46:55:cc:bb:52:04:28:62:15: 07:26:8d:4e:2d:89:66:12:cf:4a:7a:f7:c1:13:8b: a7:f3:8c:56:a1:dd:73:c2:38:ba:69:e3:e1:d7:43: 62:9a:4d:2d:a3:68:0c:82:4b:ae:b0:fb:1d:2a:72: 29:29:28:77:be:03:e8:76:1c:c9:dc:bf:9b:04:ae: 65:97:08:d2:9a:ff:62:2d:ae:45:f1:2a:f1:b1:68: c7:dc:05:a3:d8:7b:95:53:e3:ed:b8:81:8f:84:a0: 9f:17:05:e2:99:07:60:98:01:87:d2:dc:5e:7c:3c: 60:d5:77:3f:c2:1c:4a:63:a7:ea:f9:2e:53:7f:9e: ac:64:df:33:26:61:79:b2:1b:25:c1:3f:0c:8d:e0: ac:6c:96:17:e4:21:62:57:d0:29:4d:35:38:70:55: 36:b9:53:de:cd:52:a4:64:10:47:5b:24:15:ca:4b: 96:69:d8:93:da:0c:26:6c:72:2a:85:67:0b:71:d1: 70:a6:2c:65:1f:00:83:0b:e9:b3:c6:73:d0:9f:41: 14:f1:c3:b6:40:2d:b4:b4:a9:2f:de:8c:96:d2:a5: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DB:31:64:3A:58:DC:6B:CE:60:A8:58:0D:31:88:86:D7:00:D0:0C X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:31:b9:6f:c2:d0:c7:da:bf:1e:6f:be:e2:4b:31:b9:15:c9: e3:a8:87:7a:56:18:dd:95:4f:b4:47:fd:6f:8a:07:4b:01:e8: be:25:c1:07:73:42:e9:8f:27:bd:94:fb:d5:bf:4b:92:a9:24: 8b:52:b3:50:56:c6:3b:3c:54:03:cd:2c:d8:e5:ad:d1:2b:0f: 41:ef:e5:53:42:ab:0e:c9:5e:f6:b3:6c:24:f9:6b:b9:1b:90: f0:23:51:8b:da:f3:64:84:82:29:1a:ad:dc:b2:ad:74:29:45: f5:c5:98:01:07:34:4e:f7:36:fb:db:1c:e1:2a:64:88:ce:e2: 39:96:bf:66:1a:cb:a2:06:9c:94:c0:0f:b1:4e:bb:c3:ee:61: f2:36:12:74:16:ac:62:f7:b6:ce:75:bd:52:be:66:8a:3b:e0: 95:e9:37:32:c0:da:ce:90:1e:c0:f7:fd:cb:3a:32:80:0c:e3: af:9d:ad:7c:d3:06:d3:4b:03:05:cd:e5:fb:b3:a4:4d:7c:db: f5:41:e1:c4:67:c9:84:6a:a9:f8:8a:34:cc:e3:76:32:43:01: 15:5d:e3:23:90:7f:99:1b:3c:cc:6f:e8:68:02:15:1e:22:bf: 32:75:d4:c8:cb:a3:75:e3:06:04:3b:e9:01:2e:7f:57:0e:fb: 7a:39:90:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUduylaILF8dD69do1ehYXFGYfwWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA3MjgwODMyMjhaFw0yNjA3MjkwOTE0MjhaMDMxMTAvBgNV BAMTKEIxREIzMTY0M0E1OERDNkJDRTYwQTg1ODBEMzE4ODg2RDcwMEQwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxu8eEoyaF4lmHB5WnLEjD8l0r jwuSzeR/n4/boTGFON3DM0ZVzLtSBChiFQcmjU4tiWYSz0p698ETi6fzjFah3XPC OLpp4+HXQ2KaTS2jaAyCS66w+x0qcikpKHe+A+h2HMncv5sErmWXCNKa/2ItrkXx KvGxaMfcBaPYe5VT4+24gY+EoJ8XBeKZB2CYAYfS3F58PGDVdz/CHEpjp+r5LlN/ nqxk3zMmYXmyGyXBPwyN4KxslhfkIWJX0ClNNThwVTa5U97NUqRkEEdbJBXKS5Zp 2JPaDCZsciqFZwtx0XCmLGUfAIML6bPGc9CfQRTxw7ZALbS0qS/ejJbSpaOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdsxZDpY3GvOYKhYDTGIhtcA0AwwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgxuW/C0Mfavx5vvuJLMbkVyeOoh3pWGN2V T7RH/W+KB0sB6L4lwQdzQumPJ72U+9W/S5KpJItSs1BWxjs8VAPNLNjlrdErD0Hv 5VNCqw7JXvazbCT5a7kbkPAjUYva82SEgikardyyrXQpRfXFmAEHNE73NvvbHOEq ZIjO4jmWv2Yay6IGnJTAD7FOu8PuYfI2EnQWrGL3ts51vVK+Zoo74JXpNzLA2s6Q HsD3/cs6MoAM46+drXzTBtNLAwXN5fuzpE182/VB4cRnyYRqqfiKNMzjdjJDARVd 4yOQf5kbPMxv6GgCFR4ivzJ11MjLo3XjBgQ76QEuf1cO+3o5kIM= -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:14 2026 by rpki-client