$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: DsV1gDS//X69plPauzLyGislUeunBDmhHilBjcvuItU= Subject key identifier: A1:5C:86:DC:44:5D:1F:F0:F3:9B:56:4D:BE:C5:52:08:88:45:6E:C1 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 7A8053ED7CCF728FEA56F0EAE7248190753D0A32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 16:01:43 +0000 Manifest this update: Sun 02 Aug 2026 15:56:43 +0000 Manifest next update: Mon 03 Aug 2026 19:16:43 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: q3beMzs2chpg/VORgv1PvhOyYpads175w5IkJQNBrbY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:80:53:ed:7c:cf:72:8f:ea:56:f0:ea:e7:24:81:90:75:3d:0a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Aug 2 15:56:43 2026 GMT Not After : Aug 3 19:16:43 2026 GMT Subject: CN=A15C86DC445D1FF0F39B564DBEC5520888456EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8f:fc:a6:26:cb:6c:89:07:0d:68:9c:1e:f4: 62:79:5f:6f:b8:f5:73:20:59:16:bb:93:c9:50:bb: 3c:a3:d1:b8:f1:22:21:cb:75:2f:9d:9c:5d:df:2e: ef:d4:26:9d:38:4b:21:74:c6:b0:3b:bc:3c:07:9c: 45:96:b3:1d:22:ac:4e:fd:47:1b:94:bf:5d:5f:fd: 74:4e:59:bc:07:d1:f8:6b:92:0f:c5:94:6e:4b:09: c0:29:dd:87:40:70:62:73:24:95:f8:8b:36:0f:a8: a6:a9:1b:75:f3:59:76:a9:c6:4c:4a:e8:e4:7e:11: 90:f9:a6:39:90:aa:e4:89:78:19:b0:96:f5:9d:ab: f2:0d:5d:a2:17:6e:71:6e:01:0e:a2:5d:0e:2e:92: 9c:cd:a0:c7:5a:3f:34:df:cc:e6:e5:c6:35:01:aa: c8:f5:7b:c4:03:a5:2d:ae:04:cd:ff:17:cf:54:2f: 1d:dc:54:24:52:8e:22:c6:87:db:0f:e3:8d:42:78: 0e:4c:ab:8c:8e:07:4e:2f:18:de:b1:d4:45:6f:3d: 5f:18:6c:af:b6:37:da:7d:78:f4:4c:36:f9:65:b1: 4f:7e:72:8d:36:42:fb:7c:f3:b7:bd:22:db:40:bc: 2a:e6:51:c6:ae:c2:5f:33:81:f1:fb:0a:01:97:9a: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5C:86:DC:44:5D:1F:F0:F3:9B:56:4D:BE:C5:52:08:88:45:6E:C1 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:90:47:0b:57:61:10:4d:4d:f5:20:3b:21:13:cc:a0:53:a4: 8b:5c:fd:23:1e:7e:4b:9c:39:c8:83:2d:a1:f2:c5:35:6b:2c: 0b:78:3c:09:c6:9b:cf:c9:88:01:22:7a:e8:7f:8a:24:ee:6b: 07:2e:2b:0b:90:e5:31:a6:0b:c6:25:7d:92:3a:1a:5b:63:ab: f1:4d:9d:d4:68:fb:94:39:a9:02:58:21:99:5f:82:d9:25:ea: 61:25:26:9c:c5:dc:aa:6e:2f:c1:f0:5f:85:8e:ea:9b:2b:e9: 01:07:f6:f1:c4:08:a5:3c:cd:9e:4d:d1:bb:f9:37:5e:57:34: 86:f0:ea:ac:22:d0:33:fe:b4:89:76:d0:f7:62:38:6f:8c:44: c1:09:57:40:58:2b:21:21:45:bb:d8:3a:96:92:ca:6c:35:15: c2:77:1c:da:39:15:d7:3e:98:af:00:1c:69:b5:1a:1d:3f:80: d8:0f:d4:f7:de:39:b2:30:8e:ac:1a:dd:63:ae:bb:7f:58:20: e8:0d:76:d6:5e:83:9a:1e:22:b8:ac:ec:71:a5:64:44:54:14: a1:f1:78:48:37:f5:0e:81:f6:34:98:4e:c4:cf:02:37:6a:3b: 26:55:ad:6e:4d:03:f3:81:52:60:b8:6e:6e:b8:ce:04:54:b6: 8e:ef:6e:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoBT7XzPco/qVvDq5ySBkHU9CjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA4MDIxNTU2NDNaFw0yNjA4MDMxOTE2NDNaMDMxMTAvBgNV BAMTKEExNUM4NkRDNDQ1RDFGRjBGMzlCNTY0REJFQzU1MjA4ODg0NTZFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0j/ymJstsiQcNaJwe9GJ5X2+4 9XMgWRa7k8lQuzyj0bjxIiHLdS+dnF3fLu/UJp04SyF0xrA7vDwHnEWWsx0irE79 RxuUv11f/XROWbwH0fhrkg/FlG5LCcAp3YdAcGJzJJX4izYPqKapG3XzWXapxkxK 6OR+EZD5pjmQquSJeBmwlvWdq/INXaIXbnFuAQ6iXQ4ukpzNoMdaPzTfzOblxjUB qsj1e8QDpS2uBM3/F89ULx3cVCRSjiLGh9sP441CeA5Mq4yOB04vGN6x1EVvPV8Y bK+2N9p9ePRMNvllsU9+co02Qvt887e9IttAvCrmUcauwl8zgfH7CgGXmnKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVyG3ERdH/Dzm1ZNvsVSCIhFbsEwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeQRwtXYRBNTfUgOyETzKBTpItc/SMefkuc OciDLaHyxTVrLAt4PAnGm8/JiAEieuh/iiTuawcuKwuQ5TGmC8YlfZI6Gltjq/FN ndRo+5Q5qQJYIZlfgtkl6mElJpzF3KpuL8HwX4WO6psr6QEH9vHECKU8zZ5N0bv5 N15XNIbw6qwi0DP+tIl20PdiOG+MRMEJV0BYKyEhRbvYOpaSymw1FcJ3HNo5Fdc+ mK8AHGm1Gh0/gNgP1PfeObIwjqwa3WOuu39YIOgNdtZeg5oeIris7HGlZERUFKHx eEg39Q6B9jSYTsTPAjdqOyZVrW5NA/OBUmC4bm64zgRUto7vbkA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:37 2026 by rpki-client