$ rpki-client -vvf rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft File: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft (raw, json) Hash identifier: P6AHBBN5Ao50oNFq7A4DC2gkmN6hRJHX1ITceVjxHZs= Subject key identifier: 7A:5F:22:7F:E7:31:80:20:23:F7:89:26:F6:72:0C:BD:DF:02:06:F5 Authority key identifier: DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E Certificate issuer: /CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Certificate serial: 0E8F19E25DE82BD26E796BA219F23A52EC315F21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 22:48:28 +0000 Manifest this update: Fri 19 Jun 2026 22:43:28 +0000 Manifest next update: Sun 21 Jun 2026 02:24:28 +0000 Files and hashes: 1: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl (hash: xzUGX/c6AWgNUC/JbPil74X1kDWBA4cTJW6jleItg/Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8f:19:e2:5d:e8:2b:d2:6e:79:6b:a2:19:f2:3a:52:ec:31:5f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Validity Not Before: Jun 19 22:43:28 2026 GMT Not After : Jun 21 02:24:28 2026 GMT Subject: CN=7A5F227FE731802023F78926F6720CBDDF0206F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:56:74:f6:19:76:38:3c:f6:ad:81:3d:72: 88:1f:9b:64:16:02:4c:04:4a:7b:9b:fd:2f:f4:6f: eb:81:64:49:c2:ca:c6:c2:b6:08:56:77:0b:53:c9: e3:c0:a8:00:2c:fd:9f:70:af:9e:6e:ac:84:18:77: 3b:dd:4d:36:68:88:25:c6:35:27:50:15:99:d2:70: 51:f3:e3:50:7c:50:e5:27:2f:b4:db:86:3d:8c:bf: f6:40:fe:13:67:f8:7c:78:12:1b:54:fe:58:97:b9: 38:94:1a:f4:db:09:cb:ca:26:b1:53:b7:d8:65:d3: 4f:71:30:a6:dd:25:48:35:fd:0e:13:a3:ff:a2:2d: 8d:8e:e0:ad:da:35:85:50:a3:38:0b:de:b5:5e:83: 7b:03:fd:d4:9a:12:aa:b8:83:f2:2e:e4:44:10:ad: 8c:bb:85:d0:14:79:96:e1:5e:7a:4d:27:67:62:b2: 76:7d:00:76:55:71:66:ad:8e:6a:0f:58:b4:24:37: cb:6c:6a:a3:8b:ef:94:38:57:05:23:d8:17:a1:f4: f5:db:fd:db:68:e7:33:14:d5:a6:4c:62:14:0a:72: 9a:18:81:1e:c0:a6:69:c5:df:8d:80:1e:08:be:91: 2b:c2:9d:a5:43:03:a4:64:49:1e:8a:cb:76:2b:90: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:22:7F:E7:31:80:20:23:F7:89:26:F6:72:0C:BD:DF:02:06:F5 X509v3 Authority Key Identifier: keyid:DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:94:08:c3:99:2d:08:8d:20:fc:8c:ac:2c:80:8d:d1:5b:ed: d9:10:58:74:e0:ec:b5:fa:b4:9a:3c:af:d8:e8:94:ee:bd:82: d0:e3:fd:f7:b1:d1:39:e4:d0:71:74:44:0f:39:6c:27:51:c8: 7d:75:d7:96:04:88:73:3b:9c:e1:ef:d4:15:da:fd:10:13:60: 79:9e:1f:02:fd:ea:34:a5:b5:55:a1:e9:41:b6:15:84:f8:36: b8:8f:a0:6a:19:88:5b:ab:1c:4d:33:bb:ef:a1:7f:7c:e4:36: 75:2c:f4:f7:d9:1a:19:39:3a:34:a1:ed:61:c3:ac:04:2c:4b: 60:f8:f7:00:49:05:06:a0:2b:3c:27:ec:a6:b3:d9:42:c0:dd: 44:e1:5b:d7:60:06:0a:c4:c6:67:ca:78:eb:e0:13:c0:1d:d6: 4b:b4:6e:7b:e6:60:d5:1c:62:de:92:97:da:7e:b8:e1:42:7c: 26:79:6f:2e:77:ff:66:bf:b8:3a:bc:28:05:29:3a:51:26:5b: 86:a4:cf:33:fa:e8:3a:88:33:63:de:59:a7:9b:71:a9:28:6a: 28:9a:7b:44:d9:32:ea:ac:80:9a:39:d1:24:5c:9e:e7:31:b7: 7a:9e:df:a4:35:58:77:1c:ca:3f:da:0c:ab:90:86:8d:e4:5c: fe:4f:e8:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDo8Z4l3oK9JueWuiGfI6UuwxXyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0Ux RUMzRTUzRTAeFw0yNjA2MTkyMjQzMjhaFw0yNjA2MjEwMjI0MjhaMDMxMTAvBgNV BAMTKDdBNUYyMjdGRTczMTgwMjAyM0Y3ODkyNkY2NzIwQ0JEREYwMjA2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBFZ09hl2ODz2rYE9cogfm2QW AkwESnub/S/0b+uBZEnCysbCtghWdwtTyePAqAAs/Z9wr55urIQYdzvdTTZoiCXG NSdQFZnScFHz41B8UOUnL7Tbhj2Mv/ZA/hNn+Hx4EhtU/liXuTiUGvTbCcvKJrFT t9hl009xMKbdJUg1/Q4To/+iLY2O4K3aNYVQozgL3rVeg3sD/dSaEqq4g/Iu5EQQ rYy7hdAUeZbhXnpNJ2disnZ9AHZVcWatjmoPWLQkN8tsaqOL75Q4VwUj2Beh9PXb /dto5zMU1aZMYhQKcpoYgR7ApmnF342AHgi+kSvCnaVDA6RkSR6Ky3YrkCmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUel8if+cxgCAj94km9nIMvd8CBvUwHwYDVR0j BBgwFoAU313QcIuB0Vz53qSL5UrAPh7D5T4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDhiOGMxYjUtM2JlOC00YWE3LWE0YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4 QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0UxRUMzRTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjVERDA3MDhCODFEMTVDRjlERUE0OEJFNTRBQzAzRTFFQzNF NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMw M0UxRUMzRTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2UCMOZLQiNIPyMrCyAjdFb7dkQWHTg7LX6 tJo8r9jolO69gtDj/fex0Tnk0HF0RA85bCdRyH1115YEiHM7nOHv1BXa/RATYHme HwL96jSltVWh6UG2FYT4NriPoGoZiFurHE0zu++hf3zkNnUs9PfZGhk5OjSh7WHD rAQsS2D49wBJBQagKzwn7Kaz2ULA3UThW9dgBgrExmfKeOvgE8Ad1ku0bnvmYNUc Yt6Sl9p+uOFCfCZ5by53/2a/uDq8KAUpOlEmW4akzzP66DqIM2PeWaebcakoaiia e0TZMuqsgJo50SRcnucxt3qe36Q1WHccyj/aDKuQho3kXP5P6Lk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:43 2026 by rpki-client