$ rpki-client -vvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json) Hash identifier: Xe2JkUq6iW5JN29M0HL8HwjvUAvyCISEHzr0kgXB7Ns= Subject key identifier: E1:1B:63:B4:0E:B1:16:AB:BE:CE:E1:81:B2:3A:FA:C8:BF:C6:8B:AA Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Certificate serial: 4C4136FD510EEDC2AD07B915C801C13150E7E60C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:23:52 +0000 Manifest this update: Sat 20 Jun 2026 03:18:52 +0000 Manifest next update: Sun 21 Jun 2026 06:15:52 +0000 Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: J2jeHk9eGU+5wrLTrt36Xtp4VkpxJVt+TGkV13njNZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:41:36:fd:51:0e:ed:c2:ad:07:b9:15:c8:01:c1:31:50:e7:e6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC Validity Not Before: Jun 20 03:18:52 2026 GMT Not After : Jun 21 06:15:52 2026 GMT Subject: CN=E11B63B40EB116ABBECEE181B23AFAC8BFC68BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:bc:cf:fc:30:3d:61:7b:3f:67:48:a0:93: c7:69:e9:3f:62:40:01:fb:75:71:36:63:ed:4f:b9: da:6f:25:dc:0e:86:aa:92:82:10:60:72:2f:a3:0a: 4e:5f:25:bc:01:9c:37:b4:d6:e6:86:c1:8c:32:fb: 58:f3:2c:ee:67:58:df:7c:2e:15:58:fa:83:34:fb: 1f:d6:8a:8e:45:8d:b6:e8:68:84:8a:04:4b:58:ae: a1:e8:2e:99:ba:3c:c2:cd:63:b0:ef:0e:f9:63:50: 28:43:d6:00:e1:c7:54:02:27:c1:a4:0a:22:74:61: eb:93:5d:f8:d0:30:12:a8:4a:4e:0f:03:24:be:0c: 64:dc:3d:34:74:c3:69:ba:b1:4c:4b:c5:1e:6c:61: 7d:89:cd:9b:2a:66:b5:fc:69:a1:86:7a:b7:99:0b: be:41:19:ba:2c:02:c2:59:32:d2:ef:be:6d:c1:a1: 3a:65:53:20:14:4c:63:22:8c:e3:d3:5e:31:f4:a3: 1c:38:e6:38:31:bc:d1:fe:eb:33:ad:56:b0:a8:34: af:7d:28:4a:73:3e:94:14:b4:c5:23:34:83:3c:f8: 7b:55:b3:9d:5a:0d:84:d8:98:10:8f:4f:67:f2:c4: 0e:1c:32:62:06:d2:e6:88:60:07:5a:72:01:8f:42: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:63:B4:0E:B1:16:AB:BE:CE:E1:81:B2:3A:FA:C8:BF:C6:8B:AA X509v3 Authority Key Identifier: keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:dd:40:f6:11:bb:97:54:97:5d:13:38:92:be:20:bc:39:d8: 24:b5:a5:99:56:0e:18:55:fa:4d:06:76:cd:86:41:49:78:c0: d9:6c:51:26:b1:78:6d:b7:38:bc:b4:3f:0b:fd:59:2f:14:42: 3c:41:c6:0d:4d:1e:2c:a9:31:58:96:ce:66:c7:54:7c:b8:1f: 5d:3a:42:31:ae:90:96:68:0d:0f:c5:53:31:ef:d2:df:81:53: 8c:d3:16:34:fa:6d:07:5f:16:fa:a8:1e:64:67:51:bb:54:89: f9:f8:63:10:24:05:a9:d0:75:c6:57:6d:e2:e9:d5:d1:d6:95: 9f:ca:ad:f6:eb:4d:55:5e:83:8a:a7:50:7b:96:d9:a6:52:07: 58:31:f7:3f:ee:f0:b5:72:8c:6e:94:96:95:fc:2b:31:bd:78: 39:36:99:fa:9e:e3:4e:af:d6:8d:d1:5e:2c:ab:40:25:4b:20: 5e:a2:d8:83:af:ae:6c:3c:ed:0e:a2:f5:63:b9:62:ba:3a:e7: 94:01:c9:11:26:bf:53:86:3a:5e:11:98:d6:2f:bf:14:12:1f: f6:47:c8:a6:5b:be:28:6d:1c:c9:ed:83:e9:b1:3c:9d:06:9c: 50:bd:de:45:1b:5a:ac:36:29:20:cb:30:82:12:fb:61:2f:a1: 1c:f0:74:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEE2/VEO7cKtB7kVyAHBMVDn5gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYyODEz N0MxOTdEQzAeFw0yNjA2MjAwMzE4NTJaFw0yNjA2MjEwNjE1NTJaMDMxMTAvBgNV BAMTKEUxMUI2M0I0MEVCMTE2QUJCRUNFRTE4MUIyM0FGQUM4QkZDNjhCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0rzP/DA9YXs/Z0igk8dp6T9i QAH7dXE2Y+1PudpvJdwOhqqSghBgci+jCk5fJbwBnDe01uaGwYwy+1jzLO5nWN98 LhVY+oM0+x/Wio5FjbboaISKBEtYrqHoLpm6PMLNY7DvDvljUChD1gDhx1QCJ8Gk CiJ0YeuTXfjQMBKoSk4PAyS+DGTcPTR0w2m6sUxLxR5sYX2JzZsqZrX8aaGGereZ C75BGbosAsJZMtLvvm3BoTplUyAUTGMijOPTXjH0oxw45jgxvNH+6zOtVrCoNK99 KEpzPpQUtMUjNIM8+HtVs51aDYTYmBCPT2fyxA4cMmIG0uaIYAdacgGPQshBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RtjtA6xFqu+zuGBsjr6yL/Gi6owHwYDVR0j BBgwFoAU1sCVcVeh7aJPDe/20P7ygTfBl9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzOTE2OTgtMDhlYy00NzkwLWExODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1 N0ExRURBMjRGMERFRkY2RDBGRUYyODEzN0MxOTdEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkMwOTU3MTU3QTFFREEyNEYwREVGRjZEMEZFRjI4MTM3QzE5 N0RDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvRDZDMDk1NzE1N0ExRURBMjRGMERFRkY2RDBGRUYy ODEzN0MxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbdQPYRu5dUl10TOJK+ILw52CS1pZlWDhhV +k0Gds2GQUl4wNlsUSaxeG23OLy0Pwv9WS8UQjxBxg1NHiypMViWzmbHVHy4H106 QjGukJZoDQ/FUzHv0t+BU4zTFjT6bQdfFvqoHmRnUbtUifn4YxAkBanQdcZXbeLp 1dHWlZ/KrfbrTVVeg4qnUHuW2aZSB1gx9z/u8LVyjG6UlpX8KzG9eDk2mfqe406v 1o3RXiyrQCVLIF6i2IOvrmw87Q6i9WO5Yro655QByREmv1OGOl4RmNYvvxQSH/ZH yKZbvihtHMntg+mxPJ0GnFC93kUbWqw2KSDLMIIS+2EvoRzwdKs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:48 2026 by rpki-client