$ rpki-client -vvf rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft File: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft (raw, json) Hash identifier: Iz6ziodx1/UpLTLvHSbvbDZyP5zIlOUpXVl8go8SjvE= Subject key identifier: 64:72:D9:89:E2:FB:E2:AA:9B:33:46:BB:E4:E6:97:66:7A:49:E7:F1 Authority key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 Certificate issuer: /CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Certificate serial: 723E66AC3180343983B490B58A419FFB76DDAC48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:33:09 +0000 Manifest this update: Fri 19 Jun 2026 18:28:09 +0000 Manifest next update: Sat 20 Jun 2026 20:31:09 +0000 Files and hashes: 1: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl (hash: v/GLjKTe8875k1+qzPbrzhLGueESO+3g9SktRq6PEls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3e:66:ac:31:80:34:39:83:b4:90:b5:8a:41:9f:fb:76:dd:ac:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Validity Not Before: Jun 19 18:28:09 2026 GMT Not After : Jun 20 20:31:09 2026 GMT Subject: CN=6472D989E2FBE2AA9B3346BBE4E697667A49E7F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:04:ed:62:19:ec:88:5d:23:88:0d:5e:76: f5:8f:e1:0b:34:ed:40:4e:09:3c:29:c8:be:1f:b6: e2:6e:53:e6:99:be:a4:5c:5d:a9:73:55:64:53:c8: 11:a4:e3:1a:b0:8a:38:71:6d:cd:89:47:06:a0:6e: ff:22:22:a8:88:95:73:7b:55:c0:52:6d:b4:16:1d: ee:66:9d:0f:14:5a:a4:06:e0:f4:aa:2a:89:72:5f: 48:50:28:5e:a6:f5:b2:20:06:73:50:47:d8:46:3b: 80:60:15:c3:38:22:9c:fe:d0:c8:94:82:8e:36:30: 44:78:48:ad:d5:16:cc:c0:f3:74:e2:7c:66:9b:6e: 38:91:1e:7c:42:74:c5:18:c4:b1:c6:33:30:84:80: 61:ce:d5:f2:5d:b0:e0:b5:cf:92:1a:85:80:ea:54: 94:85:83:48:f9:5e:a8:44:e0:a4:19:c4:08:a7:6f: c5:b0:58:2e:66:0c:df:2f:4d:64:19:81:08:9e:a1: 5a:8c:70:80:1d:f6:3b:c9:0e:a3:ef:71:88:20:86: 7a:1b:6a:fd:14:89:12:f5:cb:c9:60:a6:d4:29:f7: 02:7e:79:ef:46:9b:1c:a5:ae:77:85:a7:37:0c:3e: 2c:d4:e8:f9:9b:b4:76:3a:d1:da:31:a0:f0:16:2d: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:72:D9:89:E2:FB:E2:AA:9B:33:46:BB:E4:E6:97:66:7A:49:E7:F1 X509v3 Authority Key Identifier: keyid:DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ed:93:8f:e2:c4:ca:5f:b0:f7:3a:ea:a8:78:03:b4:fa:f3: d6:73:69:1b:30:e2:7f:14:79:4d:9b:74:17:35:47:82:66:b6: ea:2d:01:b3:ca:74:dd:09:1d:a5:a2:52:6f:44:e8:3b:51:1c: 18:17:0c:ae:24:34:65:9d:10:8d:f6:b6:f2:e1:29:5c:3a:05: 7b:4d:7c:e2:f9:ee:57:a7:f0:34:8c:88:0b:4a:51:36:7f:ef: d0:a9:ed:31:c8:f6:1b:f9:b4:2b:b8:cc:27:80:ef:a3:dd:cb: ff:84:33:4d:91:df:0c:d7:de:dd:bc:ce:df:5b:13:89:9c:89: d1:c7:c6:8e:b4:e8:6f:d4:0e:39:7d:35:24:52:78:cc:38:4e: 3c:db:f2:0a:70:01:59:79:63:de:2a:c8:44:fb:86:b8:81:ab: 98:22:fb:0c:f9:5d:b7:cd:96:2e:1a:33:88:ee:e4:fe:02:28: 77:bc:4e:44:7a:4c:ac:da:54:51:eb:a6:71:dc:e5:84:4f:79: 04:bd:a0:cf:d2:4f:67:a6:a1:78:ba:69:5b:3c:70:7a:11:e6: b0:8a:55:a6:96:44:72:ea:70:2f:80:74:bb:84:e1:81:51:73: 0e:cc:97:27:f8:76:eb:8d:ec:9c:b9:54:be:de:25:07:51:bb: 19:5a:be:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcj5mrDGANDmDtJC1ikGf+3bdrEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlG Q0YzMTIxMDAeFw0yNjA2MTkxODI4MDlaFw0yNjA2MjAyMDMxMDlaMDMxMTAvBgNV BAMTKDY0NzJEOTg5RTJGQkUyQUE5QjMzNDZCQkU0RTY5NzY2N0E0OUU3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkQTtYhnsiF0jiA1edvWP4Qs0 7UBOCTwpyL4ftuJuU+aZvqRcXalzVWRTyBGk4xqwijhxbc2JRwagbv8iIqiIlXN7 VcBSbbQWHe5mnQ8UWqQG4PSqKolyX0hQKF6m9bIgBnNQR9hGO4BgFcM4Ipz+0MiU go42MER4SK3VFszA83TifGabbjiRHnxCdMUYxLHGMzCEgGHO1fJdsOC1z5IahYDq VJSFg0j5XqhE4KQZxAinb8WwWC5mDN8vTWQZgQieoVqMcIAd9jvJDqPvcYgghnob av0UiRL1y8lgptQp9wJ+ee9GmxylrneFpzcMPizU6PmbtHY60doxoPAWLWGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZHLZieL74qqbM0a75OaXZnpJ5/EwHwYDVR0j BBgwFoAU2uWdfDIJwzSd4BeOcBy06fzzEhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA0MWI0OGQtNzNjNC00Y2RkLWJjYWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0Mz MjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlGQ0YzMTIxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQUU1OUQ3QzMyMDlDMzM0OURFMDE3OEU3MDFDQjRFOUZDRjMx MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0 RTlGQ0YzMTIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDtk4/ixMpfsPc66qh4A7T689ZzaRsw4n8U eU2bdBc1R4JmtuotAbPKdN0JHaWiUm9E6DtRHBgXDK4kNGWdEI32tvLhKVw6BXtN fOL57len8DSMiAtKUTZ/79Cp7THI9hv5tCu4zCeA76Pdy/+EM02R3wzX3t28zt9b E4mcidHHxo606G/UDjl9NSRSeMw4Tjzb8gpwAVl5Y94qyET7hriBq5gi+wz5XbfN li4aM4ju5P4CKHe8TkR6TKzaVFHrpnHc5YRPeQS9oM/ST2emoXi6aVs8cHoR5rCK VaaWRHLqcC+AdLuE4YFRcw7Mlyf4duuN7Jy5VL7eJQdRuxlavgU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:41 2026 by rpki-client