$ rpki-client -vvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft (raw, json) Hash identifier: 7Srf9/agVD8toxF7npSNETrn9hKTya6vgKCMOxgw2CM= Subject key identifier: 24:80:93:53:5B:6D:4E:FA:D7:87:A4:F9:98:7D:19:6A:C6:C3:BE:8E Authority key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 Certificate issuer: /CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Certificate serial: 033F49D1A2821F0E8529DD0189AF223E842E8E48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 13:22:04 +0000 Manifest this update: Fri 19 Jun 2026 13:17:04 +0000 Manifest next update: Sat 20 Jun 2026 17:05:04 +0000 Files and hashes: 1: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl (hash: iVvOdyTq/Nwd4mPiPxxzdRbUivYJIBngbhuHI4khFmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3f:49:d1:a2:82:1f:0e:85:29:dd:01:89:af:22:3e:84:2e:8e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589 Validity Not Before: Jun 19 13:17:04 2026 GMT Not After : Jun 20 17:05:04 2026 GMT Subject: CN=248093535B6D4EFAD787A4F9987D196AC6C3BE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:3e:2a:aa:05:d7:47:f7:a7:5f:e1:e2:01: c1:ed:25:fc:a1:c7:cd:c4:bb:01:c2:35:c0:96:5a: 66:39:d6:8f:14:87:82:e9:54:a1:6f:41:8d:6a:8f: f8:66:48:ea:c3:7e:37:78:68:43:dd:84:a0:cf:e7: 4f:5e:89:de:6e:87:46:c7:82:4d:20:ff:39:b9:c2: f0:6c:88:1b:ad:5b:a6:32:6d:88:6d:f2:dc:79:97: 22:ab:ee:47:71:04:45:7b:ce:69:04:9f:5c:6e:e0: 05:5f:74:92:6b:41:04:50:08:e9:d6:5e:c6:8b:db: 0f:ec:16:5f:42:4b:cc:a3:29:af:e2:ce:e7:7d:3f: 59:96:df:d5:d7:f1:1a:51:cf:1d:ed:30:3d:3e:99: f0:4a:7b:4f:6f:9b:5f:c5:02:bb:3f:84:fd:f6:63: e0:71:90:64:2e:f1:d5:71:f6:8c:5a:59:9d:7e:a4: 3d:3e:5e:f1:a7:ef:23:49:ec:24:7b:85:23:18:27: 83:08:7c:56:62:d1:c2:c9:b3:ff:8a:d6:5b:51:db: 9d:84:92:23:1a:25:0e:4f:2e:f7:80:c3:a9:2f:8d: 36:7a:bf:1f:a5:cc:ac:99:0a:7a:62:d0:2a:a8:01: b1:0c:64:0c:f4:10:91:c0:b7:2e:d6:1b:b6:cf:ba: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:93:53:5B:6D:4E:FA:D7:87:A4:F9:98:7D:19:6A:C6:C3:BE:8E X509v3 Authority Key Identifier: keyid:A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:20:56:e7:82:a0:21:66:0a:e4:b2:71:de:5b:ed:91:53:a7: 4c:b6:df:74:0f:36:7e:f2:8c:9c:15:36:f9:d9:52:69:03:4a: 01:11:4e:cb:61:79:39:e8:56:cd:d7:9d:b4:29:c5:3e:d3:81: 69:0c:0f:c0:7d:fb:90:86:c5:5b:ff:9b:65:16:41:80:4b:d9: 31:80:f5:3d:39:f9:19:21:8a:16:dd:3c:4e:f5:50:ad:26:70: bb:5e:10:ed:3f:ff:7e:6d:4c:ab:5b:c0:16:8d:0c:a5:6c:4c: c4:d3:84:b5:10:9a:d0:1a:3b:40:ca:16:dd:52:5d:e1:14:9a: 2d:c7:b9:5f:e2:e6:83:07:8f:c7:7b:9c:bd:d0:9b:7b:f5:ef: fc:5d:f1:a8:59:43:9f:55:64:52:54:ac:58:1a:43:d9:d7:09: 1f:fc:0c:99:ea:e1:07:62:9f:64:da:cc:f9:41:bc:0c:20:13: 62:16:19:a7:a9:b1:da:8f:5b:9b:40:59:14:72:3c:c7:0a:95: 2c:f7:0a:40:30:31:91:38:dd:b2:fb:a6:ee:d7:dd:8b:26:15: 9d:a9:92:b4:7a:fb:13:2d:4c:81:86:fe:b2:9e:4a:f8:57:ff: 91:9d:c9:c0:98:1f:df:e4:00:ff:8f:c5:3d:48:c8:2c:dd:05: 5a:4e:25:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAz9J0aKCHw6FKd0Bia8iPoQujkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0Yx RjQyRDU4OTAeFw0yNjA2MTkxMzE3MDRaFw0yNjA2MjAxNzA1MDRaMDMxMTAvBgNV BAMTKDI0ODA5MzUzNUI2RDRFRkFENzg3QTRGOTk4N0QxOTZBQzZDM0JFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWiT4qqgXXR/enX+HiAcHtJfyh x83EuwHCNcCWWmY51o8Uh4LpVKFvQY1qj/hmSOrDfjd4aEPdhKDP509eid5uh0bH gk0g/zm5wvBsiButW6YybYht8tx5lyKr7kdxBEV7zmkEn1xu4AVfdJJrQQRQCOnW XsaL2w/sFl9CS8yjKa/izud9P1mW39XX8RpRzx3tMD0+mfBKe09vm1/FArs/hP32 Y+BxkGQu8dVx9oxaWZ1+pD0+XvGn7yNJ7CR7hSMYJ4MIfFZi0cLJs/+K1ltR252E kiMaJQ5PLveAw6kvjTZ6vx+lzKyZCnpi0CqoAbEMZAz0EJHAty7WG7bPurZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJICTU1ttTvrXh6T5mH0ZasbDvo4wHwYDVR0j BBgwFoAUqUGSyyYvp4xfxnzhi9uczx9C1YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDBhNmZlYWEtNmI0Zi00N2NmLTllM2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0Iy NjJGQTc4QzVGQzY3Q0UxOEJEQjlDQ0YxRjQyRDU4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTQxOTJDQjI2MkZBNzhDNUZDNjdDRTE4QkRCOUNDRjFGNDJE NTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvQTk0MTkyQ0IyNjJGQTc4QzVGQzY3Q0UxOEJEQjlD Q0YxRjQyRDU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKggVueCoCFmCuSycd5b7ZFTp0y233QPNn7y jJwVNvnZUmkDSgERTstheTnoVs3XnbQpxT7TgWkMD8B9+5CGxVv/m2UWQYBL2TGA 9T05+RkhihbdPE71UK0mcLteEO0//35tTKtbwBaNDKVsTMTThLUQmtAaO0DKFt1S XeEUmi3HuV/i5oMHj8d7nL3Qm3v17/xd8ahZQ59VZFJUrFgaQ9nXCR/8DJnq4Qdi n2TazPlBvAwgE2IWGaepsdqPW5tAWRRyPMcKlSz3CkAwMZE43bL7pu7X3YsmFZ2p krR6+xMtTIGG/rKeSvhX/5GdycCYH9/kAP+PxT1IyCzdBVpOJZI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:45 2026 by rpki-client