$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: +CFV/JYdm0FkG8EIuCNm4CiZxeh1EzS9i//lE52TDWc= Subject key identifier: 32:54:3B:AD:B8:6D:97:A2:15:97:F8:95:C5:D1:8C:70:2C:30:33:A7 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 5F2B07EE5AF6858458A4424A79D291B131B709A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 08:33:04 +0000 Manifest this update: Sun 02 Aug 2026 08:28:04 +0000 Manifest next update: Mon 03 Aug 2026 10:22:04 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: hA+SEKOMFIzHrTR6+FcOf7AFgFY6BTwrFBMAzdIo+E4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2b:07:ee:5a:f6:85:84:58:a4:42:4a:79:d2:91:b1:31:b7:09:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Aug 2 08:28:04 2026 GMT Not After : Aug 3 10:22:04 2026 GMT Subject: CN=32543BADB86D97A21597F895C5D18C702C3033A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:6d:f4:9f:fb:d3:70:2c:74:10:46:35:6f: 0f:48:a8:c0:bd:92:f4:17:52:c8:03:b7:f8:a2:57: d0:50:7e:e8:8a:2d:7a:ff:82:7e:ee:6a:e5:8e:97: e5:9e:b7:09:46:14:38:6b:50:e3:f6:7a:45:ed:39: 32:53:94:de:38:18:8d:21:73:c4:46:02:c2:68:44: 3d:28:dd:d7:86:b7:e8:5b:20:ce:c3:7e:f9:3c:ea: c8:1f:50:e4:60:ff:d3:cf:8d:a1:78:96:56:3b:79: e6:87:0e:47:2b:a0:f8:5b:df:3a:fe:4e:f9:45:ec: f8:e5:a5:3a:1c:9a:95:01:ae:b0:ef:af:d2:8b:83: 80:f9:0f:e0:74:b8:e0:44:6c:72:1b:54:60:13:ad: d0:d8:33:22:f1:ce:8a:4a:70:d4:d1:88:d3:8b:1a: fe:a3:bf:b7:b1:31:bf:9b:fb:d7:e8:89:e2:7b:5c: db:f6:ee:6d:f2:c8:52:e1:57:a0:5a:02:7b:77:01: cf:0e:09:e0:b9:92:28:f3:22:1e:55:58:36:c6:ac: fe:31:c0:76:22:ac:aa:41:4e:4c:98:bd:e5:53:7d: f9:9a:2c:85:d5:99:d4:f1:ba:ac:b3:65:4c:2f:24: 2c:43:05:de:ed:c2:bf:31:0a:1c:49:b7:5f:4d:e2: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:3B:AD:B8:6D:97:A2:15:97:F8:95:C5:D1:8C:70:2C:30:33:A7 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:85:2b:27:0c:be:ed:c6:61:97:57:48:34:b4:8c:a5:21:0d: 94:7d:56:4f:d3:46:df:55:c4:73:f4:c3:e1:f4:65:cd:6b:fd: 71:6c:ad:f8:27:ac:1a:04:0c:7b:ec:9f:0c:4b:c9:5f:b0:c8: b1:70:a7:1a:bd:78:03:c9:73:09:e4:14:10:35:52:de:cd:80: 79:fa:b1:f5:33:87:8a:91:4b:93:68:2e:9d:ce:bb:9f:ae:b5: f4:12:cd:9b:cb:fc:c3:13:65:d0:94:04:a2:1f:2e:70:76:66: 69:5e:47:9b:8f:d4:ea:be:09:ea:c6:d9:bb:be:64:45:f3:11: af:e7:22:b0:3c:95:c0:1d:08:44:67:de:81:61:4a:5e:09:f0: fb:40:44:39:21:2a:a3:6c:eb:6c:43:b9:42:6d:70:08:b3:e7: 8f:7f:80:7f:f2:5b:f2:c0:22:89:83:f8:74:d4:26:54:22:74: f4:70:f6:e0:0f:7e:9b:b1:d9:20:1e:01:17:5f:5f:c1:50:26: e9:95:14:c7:40:9a:73:2f:c8:54:aa:19:47:7f:d4:cb:94:72: 0f:32:1a:ad:9d:13:36:42:20:ac:b6:6a:b6:e1:ae:29:96:08: 15:6c:d5:8b:4d:fc:2b:ef:96:8a:bd:86:d4:d8:40:a2:64:bd: dd:76:3c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXysH7lr2hYRYpEJKedKRsTG3CakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA4MDIwODI4MDRaFw0yNjA4MDMxMDIyMDRaMDMxMTAvBgNV BAMTKDMyNTQzQkFEQjg2RDk3QTIxNTk3Rjg5NUM1RDE4QzcwMkMzMDMzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NG30n/vTcCx0EEY1bw9IqMC9 kvQXUsgDt/iiV9BQfuiKLXr/gn7uauWOl+WetwlGFDhrUOP2ekXtOTJTlN44GI0h c8RGAsJoRD0o3deGt+hbIM7Dfvk86sgfUORg/9PPjaF4llY7eeaHDkcroPhb3zr+ TvlF7PjlpTocmpUBrrDvr9KLg4D5D+B0uOBEbHIbVGATrdDYMyLxzopKcNTRiNOL Gv6jv7exMb+b+9foieJ7XNv27m3yyFLhV6BaAnt3Ac8OCeC5kijzIh5VWDbGrP4x wHYirKpBTkyYveVTffmaLIXVmdTxuqyzZUwvJCxDBd7twr8xChxJt19N4nTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMlQ7rbhtl6IVl/iVxdGMcCwwM6cwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiFKycMvu3GYZdXSDS0jKUhDZR9Vk/TRt9V xHP0w+H0Zc1r/XFsrfgnrBoEDHvsnwxLyV+wyLFwpxq9eAPJcwnkFBA1Ut7NgHn6 sfUzh4qRS5NoLp3Ou5+utfQSzZvL/MMTZdCUBKIfLnB2ZmleR5uP1Oq+CerG2bu+ ZEXzEa/nIrA8lcAdCERn3oFhSl4J8PtARDkhKqNs62xDuUJtcAiz549/gH/yW/LA IomD+HTUJlQidPRw9uAPfpux2SAeARdfX8FQJumVFMdAmnMvyFSqGUd/1MuUcg8y Gq2dEzZCIKy2arbhrimWCBVs1YtN/Cvvloq9htTYQKJkvd12PEE= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:59 2026 by rpki-client