$ rpki-client -vvf rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft File: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft (raw, json) Hash identifier: dsDUGRdjnOR9kf0LgJUHSIaY6IntBW5MAJactKBxamo= Subject key identifier: 66:86:8D:1F:85:CE:E2:F6:10:90:9F:A5:4C:45:FB:58:30:0C:E7:02 Authority key identifier: 0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B Certificate issuer: /CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Certificate serial: 140B55968ABF8FE34AB61B62961A9682CD853E16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 21:52:21 +0000 Manifest this update: Fri 19 Jun 2026 21:47:21 +0000 Manifest next update: Sat 20 Jun 2026 22:29:21 +0000 Files and hashes: 1: 0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl (hash: z1v/0hAfLSBlLFnpkTMUA1npJzB4LcYobdSI6JqKPhA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0b:55:96:8a:bf:8f:e3:4a:b6:1b:62:96:1a:96:82:cd:85:3e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B Validity Not Before: Jun 19 21:47:21 2026 GMT Not After : Jun 20 22:29:21 2026 GMT Subject: CN=66868D1F85CEE2F610909FA54C45FB58300CE702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:31:0f:13:47:38:50:a9:b4:8c:59:4e:d8: fa:c6:e2:fd:10:1b:91:a1:9a:f5:93:7b:43:f7:d6: 61:a6:85:f0:f6:3f:e6:e0:d2:f3:4a:ad:e0:e1:63: 87:be:ef:96:fe:4b:da:15:6c:80:4a:92:19:f2:c3: 89:5e:96:8c:e8:8c:55:fe:96:9f:67:af:1c:b2:f5: 92:ba:1e:84:34:77:2f:34:2e:f7:55:71:41:3e:78: 47:35:c6:e4:5e:03:28:c5:b1:af:8f:65:b0:55:22: 3d:d5:28:e1:ab:0e:ef:2c:00:4d:6f:86:15:0d:5c: 33:b4:2b:47:f2:10:2f:78:bd:29:93:29:8e:01:36: b2:ff:d1:da:d2:9a:9f:76:7b:00:ec:2d:ac:a2:36: 53:19:93:42:9d:b2:75:7a:32:cb:27:1f:0e:5c:55: cb:6a:b2:ec:04:11:f2:22:30:f6:27:99:3b:c0:66: 99:51:ca:b5:92:3f:93:4c:60:8f:a2:ee:7f:62:94: 70:75:64:2e:94:65:45:8c:b0:8d:11:42:54:bb:ed: 9d:a5:35:86:7e:e5:71:01:15:f2:25:f7:5c:24:0a: 2f:a0:fb:a9:2f:53:9e:51:25:5a:4c:97:34:d6:95: 25:29:0e:34:38:aa:3a:be:a9:da:79:6f:93:df:24: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:86:8D:1F:85:CE:E2:F6:10:90:9F:A5:4C:45:FB:58:30:0C:E7:02 X509v3 Authority Key Identifier: keyid:0C:5B:86:D6:54:91:27:DB:C4:D1:6B:A0:A7:C4:9A:54:6D:9E:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/0C5B86D6549127DBC4D16BA0A7C49A546D9EE87B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:17:43:29:4d:57:9e:70:79:79:45:e9:78:d4:97:0f:41: fe:fe:e8:68:f7:0a:f5:16:ef:d8:48:70:08:24:69:09:88:62: 4f:47:de:b5:d4:ac:c8:45:91:1e:88:4b:2b:9a:5e:a2:fe:fe: 9a:91:6e:dc:f7:1c:57:b8:f6:e3:13:00:ff:3a:5d:1d:bb:8c: 02:5f:a3:a8:6b:f6:b6:70:9b:43:d8:26:75:82:b8:c5:c2:de: 8e:e6:33:e0:e6:95:d8:97:24:82:21:23:3f:9b:b6:9e:76:2f: 7d:4a:68:7f:41:d2:f3:af:7e:ff:30:41:80:65:d7:87:d6:fb: 54:d8:12:8d:8c:6a:fc:28:43:44:03:7d:8d:79:95:93:74:21: b7:ac:2c:84:59:2b:9d:dd:5e:d9:f4:7c:31:ff:ae:de:11:65: d9:72:4c:9a:ec:cc:04:f4:30:04:09:49:ae:68:8e:c8:72:5c: 6d:6c:0d:52:a4:89:4e:92:2c:eb:5e:8b:1b:7a:54:6b:fd:b9: 94:d1:57:45:c1:12:cf:eb:19:56:e1:ce:3f:db:03:91:8c:48: d8:75:ef:bd:86:19:26:4a:57:6d:d8:1e:f1:fc:54:93:58:8e: e4:1e:73:f9:1b:9d:ee:96:c7:34:01:af:0b:c3:28:f5:11:d0: 65:13:3c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAtVloq/j+NKthtilhqWgs2FPhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2 RDlFRTg3QjAeFw0yNjA2MTkyMTQ3MjFaFw0yNjA2MjAyMjI5MjFaMDMxMTAvBgNV BAMTKDY2ODY4RDFGODVDRUUyRjYxMDkwOUZBNTRDNDVGQjU4MzAwQ0U3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAzEPE0c4UKm0jFlO2PrG4v0Q G5GhmvWTe0P31mGmhfD2P+bg0vNKreDhY4e+75b+S9oVbIBKkhnyw4lelozojFX+ lp9nrxyy9ZK6HoQ0dy80LvdVcUE+eEc1xuReAyjFsa+PZbBVIj3VKOGrDu8sAE1v hhUNXDO0K0fyEC94vSmTKY4BNrL/0drSmp92ewDsLayiNlMZk0KdsnV6MssnHw5c VctqsuwEEfIiMPYnmTvAZplRyrWSP5NMYI+i7n9ilHB1ZC6UZUWMsI0RQlS77Z2l NYZ+5XEBFfIl91wkCi+g+6kvU55RJVpMlzTWlSUpDjQ4qjq+qdp5b5PfJOyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZoaNH4XO4vYQkJ+lTEX7WDAM5wIwHwYDVR0j BBgwFoAUDFuG1lSRJ9vE0Wugp8SaVG2e6HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDNiNTljZTQtNjZhMi00ZjRkLWIzZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1 NDkxMjdEQkM0RDE2QkEwQTdDNDlBNTQ2RDlFRTg3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzVCODZENjU0OTEyN0RCQzREMTZCQTBBN0M0OUE1NDZEOUVF ODdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvMEM1Qjg2RDY1NDkxMjdEQkM0RDE2QkEwQTdDNDlB NTQ2RDlFRTg3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6oF0MpTVeecHl5Rel41JcPQf7+6Gj3CvUW 79hIcAgkaQmIYk9H3rXUrMhFkR6ISyuaXqL+/pqRbtz3HFe49uMTAP86XR27jAJf o6hr9rZwm0PYJnWCuMXC3o7mM+DmldiXJIIhIz+btp52L31KaH9B0vOvfv8wQYBl 14fW+1TYEo2MavwoQ0QDfY15lZN0IbesLIRZK53dXtn0fDH/rt4RZdlyTJrszAT0 MAQJSa5ojshyXG1sDVKkiU6SLOteixt6VGv9uZTRV0XBEs/rGVbhzj/bA5GMSNh1 772GGSZKV23YHvH8VJNYjuQec/kbne6WxzQBrwvDKPUR0GUTPCw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:03 2026 by rpki-client