$ rpki-client -vvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: bQYi9T1K7R4nZKgUF8ysFcNKVKYu3hOo1ZOtlPhMx1Y= Subject key identifier: B2:76:24:E2:F8:E9:65:43:75:41:D8:48:19:71:8C:3B:B7:61:CD:39 Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 7E201CF6B8021716F8B0E095959D086569FBA45C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: 74 Signing time: Wed 29 Jul 2026 03:40:34 +0000 Manifest this update: Wed 29 Jul 2026 03:35:34 +0000 Manifest next update: Thu 30 Jul 2026 04:41:34 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: Z7FRlmfqA4Q6J5jT1/7DKkKYIdH+o+8uzD6dkA7U1Co=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:20:1c:f6:b8:02:17:16:f8:b0:e0:95:95:9d:08:65:69:fb:a4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Jul 29 03:35:34 2026 GMT Not After : Jul 30 04:41:34 2026 GMT Subject: CN=B27624E2F8E965437541D84819718C3BB761CD39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:52:80:0d:a3:e8:84:18:6f:99:12:5a:97: 40:5d:85:db:0b:b1:fb:82:10:2a:33:6b:d6:61:d5: 5e:4b:11:2b:fe:8a:fc:18:20:13:d4:91:42:9c:ca: 21:15:55:bb:1a:dc:b7:cb:01:94:71:61:bf:0b:73: b8:8c:76:0e:8d:ac:35:ad:a0:e6:5f:9d:86:96:24: 21:d3:79:ed:20:19:7b:89:3f:8f:72:85:37:05:ba: 32:97:00:af:2a:b3:7f:c1:cd:f8:27:de:25:a2:d2: c2:66:af:fa:e2:00:98:8f:65:17:c6:73:f2:9d:a6: 86:87:88:12:31:7a:34:c7:df:c4:26:2d:dc:7c:5d: 10:51:81:07:a7:fe:ec:00:af:5f:06:25:c8:42:27: 91:f0:7e:3b:35:8b:f2:20:af:04:83:ba:93:84:92: 92:54:12:1a:21:74:13:55:52:ce:f7:8e:16:31:ce: 04:b4:c1:9e:c5:ea:37:05:59:d4:dd:a6:e0:6b:3c: 29:39:03:0f:5d:3c:3b:eb:37:b3:1e:5d:f1:37:88: 18:ba:d1:42:75:2d:ba:8d:3c:e0:e3:0e:5d:d1:20: 4d:9d:f2:03:42:ba:2c:b3:f4:79:23:e6:8b:82:f7: 9e:46:08:39:82:6d:9b:b6:c0:2a:29:87:ec:ec:80: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:24:E2:F8:E9:65:43:75:41:D8:48:19:71:8C:3B:B7:61:CD:39 X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:03:a5:14:ac:9b:71:58:a7:4d:04:73:ef:d4:57:6d:5b:66: be:d3:83:dc:c6:bf:74:00:a5:67:07:5a:ba:8f:7d:b9:ab:36: 74:18:81:20:b7:58:54:47:0e:63:ca:f4:9f:b9:95:2b:72:fd: 98:1a:cd:2a:da:3c:78:65:b0:32:1f:98:91:81:ad:b2:d7:f6: f6:af:0a:f4:86:52:6e:93:71:43:90:a7:dc:ca:b2:7b:56:0e: 6d:04:fc:38:b0:71:5a:cf:8e:8a:6f:cd:e2:7a:e5:db:1f:d9: 29:f8:53:66:54:fc:ef:9c:b6:81:6c:42:38:81:76:46:e3:10: d2:0b:ef:51:0c:4d:39:0a:33:84:66:a3:8d:af:89:a5:a1:15: ed:00:27:fd:0b:0b:65:c4:07:b7:0a:b9:80:d3:f0:24:da:9b: 0f:9d:48:cd:ea:0a:a6:d7:c3:df:de:92:96:e5:d2:f6:82:60: 9e:c9:16:ce:22:47:20:38:06:cb:d2:ea:27:9b:cc:e4:50:9b: d1:ca:97:78:e0:ed:55:a1:42:6b:87:36:c8:d4:3a:3e:bc:93: 58:c1:88:a9:ea:4c:d0:95:70:5d:72:96:11:ee:02:99:76:cf: e2:23:d4:5c:02:8a:a5:0f:44:19:91:ee:58:ba:fb:91:25:19: 4e:6f:13:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiAc9rgCFxb4sOCVlZ0IZWn7pFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjA3MjkwMzM1MzRaFw0yNjA3MzAwNDQxMzRaMDMxMTAvBgNV BAMTKEIyNzYyNEUyRjhFOTY1NDM3NTQxRDg0ODE5NzE4QzNCQjc2MUNEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHVKADaPohBhvmRJal0BdhdsL sfuCECoza9Zh1V5LESv+ivwYIBPUkUKcyiEVVbsa3LfLAZRxYb8Lc7iMdg6NrDWt oOZfnYaWJCHTee0gGXuJP49yhTcFujKXAK8qs3/Bzfgn3iWi0sJmr/riAJiPZRfG c/KdpoaHiBIxejTH38QmLdx8XRBRgQen/uwAr18GJchCJ5Hwfjs1i/IgrwSDupOE kpJUEhohdBNVUs73jhYxzgS0wZ7F6jcFWdTdpuBrPCk5Aw9dPDvrN7MeXfE3iBi6 0UJ1LbqNPODjDl3RIE2d8gNCuiyz9Hkj5ouC955GCDmCbZu2wCoph+zsgNLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsnYk4vjpZUN1QdhIGXGMO7dhzTkwHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsDpRSsm3FYp00Ec+/UV21bZr7Tg9zGv3QA pWcHWrqPfbmrNnQYgSC3WFRHDmPK9J+5lSty/ZgazSraPHhlsDIfmJGBrbLX9vav CvSGUm6TcUOQp9zKsntWDm0E/DiwcVrPjopvzeJ65dsf2Sn4U2ZU/O+ctoFsQjiB dkbjENIL71EMTTkKM4Rmo42viaWhFe0AJ/0LC2XEB7cKuYDT8CTamw+dSM3qCqbX w9/ekpbl0vaCYJ7JFs4iRyA4BsvS6iebzORQm9HKl3jg7VWhQmuHNsjUOj68k1jB iKnqTNCVcF1ylhHuApl2z+Ij1FwCiqUPRBmR7li6+5ElGU5vE6U= -----END CERTIFICATE-----Generated at Wed Jul 29 08:33:19 2026 by rpki-client