$ rpki-client -vvf rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft File: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft (raw, json) Hash identifier: sOyr/p6l0YtwJPuyoo9VdAgn5+3JfGkhOyzBoS1WLmA= Subject key identifier: AA:29:39:F5:30:F0:A7:C0:27:BF:A7:F8:28:B3:0C:E8:46:F2:BB:EE Authority key identifier: DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E Certificate issuer: /CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Certificate serial: 0627D1A96B5D01557C34496B6993FFC5F6437810 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 11:31:40 +0000 Manifest this update: Sun 02 Aug 2026 11:26:40 +0000 Manifest next update: Mon 03 Aug 2026 12:12:40 +0000 Files and hashes: 1: DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl (hash: qlREDZgSPUtafdy6rOHSisswDmXdpKFUnEeL5Lazv18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 12:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:27:d1:a9:6b:5d:01:55:7c:34:49:6b:69:93:ff:c5:f6:43:78:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD598E1BB749782DDE6393D43B8066BB8F92A3E Validity Not Before: Aug 2 11:26:40 2026 GMT Not After : Aug 3 12:12:40 2026 GMT Subject: CN=AA2939F530F0A7C027BFA7F828B30CE846F2BBEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:d3:fb:bd:45:b4:77:75:01:79:63:16:3f: 04:0f:3e:34:50:df:dc:cb:e3:72:9d:48:3d:e5:4b: 69:aa:a0:d4:29:51:a1:fd:07:69:13:74:6f:4f:b5: 52:60:7e:39:17:7a:7a:d4:55:7f:75:46:78:d7:e3: 8e:9e:9e:ac:67:93:5e:e9:01:54:73:af:51:6c:29: 3e:d1:42:a4:e1:d9:33:a5:2e:28:48:39:aa:56:4e: 61:fb:7a:21:06:58:89:df:07:f5:91:3b:ea:21:2c: f1:dc:13:72:de:d0:d2:9a:2c:08:bf:0d:d6:bf:49: 1e:72:17:0b:13:92:09:08:eb:84:9e:41:41:03:26: cc:aa:60:1d:2b:aa:a0:81:e5:1e:ca:5f:76:d5:aa: 17:f6:d7:1c:bf:43:f1:06:5d:56:c4:4a:e8:db:fd: f1:61:49:ad:b3:6d:1d:b1:85:77:66:1d:21:7a:d5: 9e:88:a5:6f:02:a1:1d:09:e7:52:c8:2d:37:c5:77: f6:10:04:dc:dc:f9:85:f9:f3:ed:55:b1:6e:60:55: 62:64:f2:0c:81:a7:67:76:42:20:5d:78:7f:e7:f2: 47:c4:54:91:cc:b5:1f:b7:73:ad:d6:c1:ed:64:3f: f8:39:40:b0:9b:5b:2c:25:d3:8d:ed:74:4a:26:71: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:39:F5:30:F0:A7:C0:27:BF:A7:F8:28:B3:0C:E8:46:F2:BB:EE X509v3 Authority Key Identifier: keyid:DB:D5:98:E1:BB:74:97:82:DD:E6:39:3D:43:B8:06:6B:B8:F9:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/0/DBD598E1BB749782DDE6393D43B8066BB8F92A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f7:3d:e0:8a:6a:22:e2:69:77:c4:54:fe:95:2d:8f:96:94: ad:a5:d9:4f:9b:df:c6:45:d2:50:12:8b:9d:6e:6f:f1:5f:a8: bd:73:26:8a:68:5a:22:29:9c:3e:b2:7e:4c:94:11:0d:87:0f: bc:08:67:e1:e4:00:90:64:22:39:a0:dc:a9:ab:97:16:28:7e: cc:27:89:f3:72:fb:2b:2c:75:1e:fc:c2:d1:25:b3:c9:56:51: 1e:ec:34:f3:e6:10:3d:e9:2c:cb:9f:25:5a:eb:c6:c1:3d:a7: 8d:9a:e4:20:3b:7b:e3:6f:b4:a3:1b:18:ac:a1:51:79:47:56: f1:2b:fa:b5:65:9e:80:e0:d4:07:d9:07:2e:28:dc:4e:44:dc: f1:98:9e:cc:0c:d6:6c:3a:56:56:e8:4d:19:3e:e7:6b:92:98: 65:f4:10:c1:1f:39:a7:81:19:da:f2:1d:79:62:40:c0:76:ef: 4f:22:66:21:29:f8:2c:80:e4:64:b0:53:81:fc:ec:e8:a7:f0: f1:c9:83:55:0b:cd:78:70:6c:c9:be:23:3c:80:80:b5:55:51: 01:f0:a9:a1:c1:ad:22:11:08:0b:ea:af:26:dc:7f:e6:b3:6e: a9:6f:46:70:f2:10:e3:9d:f0:bd:b0:9a:7d:13:e1:ac:3a:50: 2f:d3:33:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBifRqWtdAVV8NElraZP/xfZDeBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2NkJC OEY5MkEzRTAeFw0yNjA4MDIxMTI2NDBaFw0yNjA4MDMxMjEyNDBaMDMxMTAvBgNV BAMTKEFBMjkzOUY1MzBGMEE3QzAyN0JGQTdGODI4QjMwQ0U4NDZGMkJCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC849P7vUW0d3UBeWMWPwQPPjRQ 39zL43KdSD3lS2mqoNQpUaH9B2kTdG9PtVJgfjkXenrUVX91RnjX446enqxnk17p AVRzr1FsKT7RQqTh2TOlLihIOapWTmH7eiEGWInfB/WRO+ohLPHcE3Le0NKaLAi/ Dda/SR5yFwsTkgkI64SeQUEDJsyqYB0rqqCB5R7KX3bVqhf21xy/Q/EGXVbESujb /fFhSa2zbR2xhXdmHSF61Z6IpW8CoR0J51LILTfFd/YQBNzc+YX58+1VsW5gVWJk 8gyBp2d2QiBdeH/n8kfEVJHMtR+3c63Wwe1kP/g5QLCbWywl043tdEomcU0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqik59TDwp8Anv6f4KLMM6Ebyu+4wHwYDVR0j BBgwFoAU29WY4bt0l4Ld5jk9Q7gGa7j5Kj4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIzOGU1NmUtZWRhNS00MDVhLWFiYmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFC Qjc0OTc4MkRERTYzOTNENDNCODA2NkJCOEY5MkEzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EQkQ1OThFMUJCNzQ5NzgyRERFNjM5M0Q0M0I4MDY2QkI4Rjky QTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzAvREJENTk4RTFCQjc0OTc4MkRERTYzOTNENDNCODA2 NkJCOEY5MkEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH3PeCKaiLiaXfEVP6VLY+WlK2l2U+b38ZF 0lASi51ub/FfqL1zJopoWiIpnD6yfkyUEQ2HD7wIZ+HkAJBkIjmg3KmrlxYofswn ifNy+yssdR78wtEls8lWUR7sNPPmED3pLMufJVrrxsE9p42a5CA7e+NvtKMbGKyh UXlHVvEr+rVlnoDg1AfZBy4o3E5E3PGYnswM1mw6VlboTRk+52uSmGX0EMEfOaeB GdryHXliQMB2708iZiEp+CyA5GSwU4H87Oin8PHJg1ULzXhwbMm+IzyAgLVVUQHw qaHBrSIRCAvqrybcf+azbqlvRnDyEOOd8L2wmn0T4aw6UC/TM/g= -----END CERTIFICATE-----Generated at Sun Aug 2 20:31:39 2026 by rpki-client