$ rpki-client -vvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: iEy9LBUBYsN5BcxM2WrpRUNxq4omtcRombYNu3oiF34= Subject key identifier: 84:8D:BE:A9:58:E8:21:7C:D2:C1:33:3B:0C:A3:30:24:6A:FE:3C:6E Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 5A7A712CAAB1BA959AF3C1786AB3DF14E554609C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:59:39 +0000 Manifest this update: Sun 02 Aug 2026 05:54:39 +0000 Manifest next update: Mon 03 Aug 2026 07:09:39 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: 2JRcb99bvgq92eJIOjnQ5yViivSOFXsGdlPLNGkxWhA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7a:71:2c:aa:b1:ba:95:9a:f3:c1:78:6a:b3:df:14:e5:54:60:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Aug 2 05:54:39 2026 GMT Not After : Aug 3 07:09:39 2026 GMT Subject: CN=848DBEA958E8217CD2C1333B0CA330246AFE3C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:ff:83:04:b7:48:78:c5:99:5c:d7:62:a2: 9d:c2:b3:20:af:fc:a5:25:0f:a7:2a:63:39:3c:98: 10:f7:97:fc:35:6e:70:e6:bd:8e:40:eb:c0:f5:63: 07:fe:22:09:b9:04:a8:db:46:fa:cb:06:3f:3a:16: 57:03:34:80:c9:07:95:8d:67:e2:f6:c0:eb:8c:cf: 99:5d:92:e1:81:c0:27:9a:a3:2a:8c:81:6f:6d:de: 81:d3:12:9d:79:2e:76:75:e3:44:de:4f:d0:60:53: 5b:9f:91:7e:8e:6e:20:99:5d:4e:29:a2:f5:6e:de: ee:cf:68:1a:f4:05:85:58:93:d3:9d:9f:5b:ef:fb: f8:2c:21:a0:76:d6:27:a4:9b:28:26:4c:65:36:63: 18:40:02:0a:1f:3d:7d:9a:27:0b:dc:7c:62:e8:61: 7a:63:e3:b0:2e:4c:f8:ef:13:f1:5f:c9:c3:da:80: b5:12:55:22:9c:8d:2f:84:bf:6a:4c:4b:73:8d:5c: f0:53:58:9e:cb:5e:6e:db:78:d5:28:f0:bc:10:45: 9c:94:f9:0c:b8:22:b4:d1:12:51:f8:54:b9:2a:9f: 2c:20:01:5b:20:0a:b3:a1:62:01:6b:4b:be:a8:a4: c3:61:f8:5a:5f:86:ca:9f:9b:dd:ee:e8:14:72:1f: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:BE:A9:58:E8:21:7C:D2:C1:33:3B:0C:A3:30:24:6A:FE:3C:6E X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:02:59:c9:e1:11:de:ee:42:d7:4d:dd:8b:6e:d0:e2:5f:d7: f9:d3:65:14:6a:78:7c:cf:4b:c5:93:81:ed:fd:24:2c:6c:4c: d0:91:a9:21:41:b9:78:6e:a7:a3:0a:7a:db:7b:c8:f1:fc:39: 6e:a4:35:e1:be:f2:52:fa:56:de:7d:7e:fc:f2:8c:a4:17:23: 25:80:b8:21:92:55:1d:0c:9a:21:a3:c1:7a:a5:b5:3a:d7:33: 5b:72:c2:86:05:b6:9d:06:2f:16:4d:35:1d:3f:c1:7a:e7:6a: 03:f7:5e:91:d0:9a:91:f7:24:7a:66:54:87:3f:07:9b:a5:78: fb:dc:bb:f4:09:37:bb:b1:38:9c:55:83:81:7b:ad:dd:91:72: 73:d4:80:34:c2:25:52:3a:0d:14:08:82:7a:8b:e0:e1:2f:1a: 17:31:c5:95:89:01:2f:c8:7c:89:f8:49:fe:b5:84:4e:0f:71: fc:88:ee:f0:b2:a0:43:59:82:8c:8f:cf:20:d0:08:85:3c:a5: 2f:25:1c:a9:fd:7e:f2:a1:c8:75:39:54:c7:f0:c7:13:8f:df: 57:b0:e7:02:50:9e:cb:84:a5:2e:59:e9:9f:98:d0:90:e5:b8: 6c:c9:99:0a:44:18:57:55:7d:9e:59:ca:8f:75:a3:a0:00:34: 09:c8:6b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnpxLKqxupWa88F4arPfFOVUYJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA4MDIwNTU0MzlaFw0yNjA4MDMwNzA5MzlaMDMxMTAvBgNV BAMTKDg0OERCRUE5NThFODIxN0NEMkMxMzMzQjBDQTMzMDI0NkFGRTNDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sf+DBLdIeMWZXNdiop3CsyCv /KUlD6cqYzk8mBD3l/w1bnDmvY5A68D1Ywf+Igm5BKjbRvrLBj86FlcDNIDJB5WN Z+L2wOuMz5ldkuGBwCeaoyqMgW9t3oHTEp15LnZ140TeT9BgU1ufkX6ObiCZXU4p ovVu3u7PaBr0BYVYk9Odn1vv+/gsIaB21iekmygmTGU2YxhAAgofPX2aJwvcfGLo YXpj47AuTPjvE/FfycPagLUSVSKcjS+Ev2pMS3ONXPBTWJ7LXm7beNUo8LwQRZyU +Qy4IrTRElH4VLkqnywgAVsgCrOhYgFrS76opMNh+Fpfhsqfm93u6BRyH3cZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhI2+qVjoIXzSwTM7DKMwJGr+PG4wHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8CWcnhEd7uQtdN3Ytu0OJf1/nTZRRqeHzP S8WTge39JCxsTNCRqSFBuXhup6MKett7yPH8OW6kNeG+8lL6Vt59fvzyjKQXIyWA uCGSVR0MmiGjwXqltTrXM1tywoYFtp0GLxZNNR0/wXrnagP3XpHQmpH3JHpmVIc/ B5ulePvcu/QJN7uxOJxVg4F7rd2RcnPUgDTCJVI6DRQIgnqL4OEvGhcxxZWJAS/I fIn4Sf61hE4PcfyI7vCyoENZgoyPzyDQCIU8pS8lHKn9fvKhyHU5VMfwxxOP31ew 5wJQnsuEpS5Z6Z+Y0JDluGzJmQpEGFdVfZ5Zyo91o6AANAnIaw0= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:35 2026 by rpki-client