$ rpki-client -vvf rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.mft (raw, json) Hash identifier: TgL47sLp28Q9mmopXXGrn6gcNzQFm3DcIpo9YwBCl0g= Subject key identifier: 50:A9:7E:48:60:E4:75:C4:A7:95:E9:F1:A8:CE:C6:55:D6:9B:2B:7D Authority key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Certificate issuer: /CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Certificate serial: 383F70076B289CF71C36A13D08D4230AEB7109C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 03:55:51 +0000 Manifest this update: Wed 29 Jul 2026 03:50:51 +0000 Manifest next update: Thu 30 Jul 2026 04:15:51 +0000 Files and hashes: 1: 1859662B11A1F7335B5E5F6093D493B45F785BCF.crl (hash: CnKeBQ+Hl/XzrmFf1/dI74TXvdhixvs59F8FjDxDRc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3f:70:07:6b:28:9c:f7:1c:36:a1:3d:08:d4:23:0a:eb:71:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Validity Not Before: Jul 29 03:50:51 2026 GMT Not After : Jul 30 04:15:51 2026 GMT Subject: CN=50A97E4860E475C4A795E9F1A8CEC655D69B2B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:08:2e:f8:9e:a4:bc:37:3a:bc:b6:6b:5a: 3f:b7:57:26:5b:8f:86:f5:63:34:81:31:41:2b:f0: 88:7e:53:f0:25:7d:ef:2f:15:e9:29:58:76:28:2a: 01:0b:85:18:27:3d:f0:2c:3d:7c:f5:f8:0b:30:2f: ba:32:21:0c:38:3b:c9:88:87:1a:2b:c8:b9:51:05: 7e:ff:95:a4:35:4f:d1:2d:ef:49:7f:41:17:13:3c: bf:3a:0e:21:41:8b:92:f3:3e:53:9b:62:84:60:14: 2f:be:46:93:e3:0d:42:6f:02:0e:86:ba:6e:3a:0c: fb:ab:ef:2a:5d:aa:1f:2c:00:f1:da:d8:25:97:f2: 7a:e9:d8:d5:b8:a2:1f:6b:fb:4e:ce:c6:d3:d8:93: 99:64:a9:ed:1a:4e:95:86:a6:de:4e:ad:ef:e0:cc: 44:72:7c:0e:0d:e6:68:a8:cb:ab:82:cf:56:cc:4b: 8d:a7:6e:c4:9e:17:09:cb:7f:80:6c:ad:aa:da:c4: 86:ae:ce:5a:2b:96:03:52:c3:e6:cc:20:67:6c:23: 83:d7:31:41:76:2c:59:43:c8:8b:54:a0:6c:71:fc: 49:c0:c5:6f:1a:f1:78:92:53:f7:32:05:15:f1:68: 39:79:c8:4d:4b:cf:5c:3b:c1:0a:b3:d2:2d:e2:e5: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A9:7E:48:60:E4:75:C4:A7:95:E9:F1:A8:CE:C6:55:D6:9B:2B:7D X509v3 Authority Key Identifier: keyid:18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:ff:4f:61:3c:89:a9:7e:bb:5e:d7:92:d7:10:39:de:d8: 79:d2:cd:4a:8a:18:a5:c1:2b:70:17:fa:9c:aa:6b:13:9e:22: f8:53:34:1c:43:1e:1d:12:3f:10:19:04:0a:7c:e2:00:c4:1d: 9a:7d:4a:ad:89:a2:d8:82:fb:50:bf:41:c6:32:ef:1b:64:42: 59:73:ca:95:af:89:9e:5a:9a:0d:a5:5b:4c:88:94:80:64:c0: 28:db:56:2e:dd:97:2a:39:17:2b:1f:09:a0:3d:c1:25:55:d1: 0e:87:ee:85:0e:ce:e9:83:c1:04:ff:81:85:e3:ba:7e:3b:b4: 38:77:1f:72:7e:d5:a7:6b:87:e9:15:3f:54:d3:24:22:23:7b: 63:19:5d:e8:8d:e8:a6:42:35:08:60:94:2c:24:8f:86:cd:8e: 1c:93:b7:a4:75:8f:2c:30:5a:90:7a:69:1d:7a:eb:37:25:59: 77:1e:44:21:5f:32:2a:9f:b9:b7:82:7b:67:1a:66:eb:0c:31: e8:e6:60:e2:22:2c:cd:71:1e:a7:89:f9:d5:9a:1e:78:a6:5f: 96:ef:87:e7:ae:bc:95:ea:ba:3d:0e:2e:5d:33:f5:83:76:21: 5c:bc:2d:17:80:18:25:f1:65:ca:ff:6d:39:09:d4:7a:4e:22: dc:ee:bb:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOD9wB2sonPccNqE9CNQjCutxCcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkzQjQ1 Rjc4NUJDRjAeFw0yNjA3MjkwMzUwNTFaFw0yNjA3MzAwNDE1NTFaMDMxMTAvBgNV BAMTKDUwQTk3RTQ4NjBFNDc1QzRBNzk1RTlGMUE4Q0VDNjU1RDY5QjJCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJggu+J6kvDc6vLZrWj+3VyZb j4b1YzSBMUEr8Ih+U/Alfe8vFekpWHYoKgELhRgnPfAsPXz1+AswL7oyIQw4O8mI hxoryLlRBX7/laQ1T9Et70l/QRcTPL86DiFBi5LzPlObYoRgFC++RpPjDUJvAg6G um46DPur7ypdqh8sAPHa2CWX8nrp2NW4oh9r+07OxtPYk5lkqe0aTpWGpt5Ore/g zERyfA4N5mioy6uCz1bMS42nbsSeFwnLf4BsraraxIauzlorlgNSw+bMIGdsI4PX MUF2LFlDyItUoGxx/EnAxW8a8XiSU/cyBRXxaDl5yE1Lz1w7wQqz0i3i5ZxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKl+SGDkdcSnlenxqM7GVdabK30wHwYDVR0j BBgwFoAUGFlmKxGh9zNbXl9gk9STtF94W88wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwYWM1Y2EtMzVkZi00NjA3LTk0MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIx MUExRjczMzVCNUU1RjYwOTNENDkzQjQ1Rjc4NUJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODU5NjYyQjExQTFGNzMzNUI1RTVGNjA5M0Q0OTNCNDVGNzg1 QkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTg1OTY2MkIxMUExRjczMzVCNUU1RjYwOTNENDkz QjQ1Rjc4NUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnf/09hPImpfrte15LXEDne2HnSzUqKGKXB K3AX+pyqaxOeIvhTNBxDHh0SPxAZBAp84gDEHZp9Sq2JotiC+1C/QcYy7xtkQllz ypWviZ5amg2lW0yIlIBkwCjbVi7dlyo5FysfCaA9wSVV0Q6H7oUOzumDwQT/gYXj un47tDh3H3J+1adrh+kVP1TTJCIje2MZXeiN6KZCNQhglCwkj4bNjhyTt6R1jyww WpB6aR166zclWXceRCFfMiqfubeCe2caZusMMejmYOIiLM1xHqeJ+dWaHnimX5bv h+euvJXquj0OLl0z9YN2IVy8LReAGCXxZcr/bTkJ1HpOItzuu1Q= -----END CERTIFICATE-----Generated at Wed Jul 29 07:50:41 2026 by rpki-client