$ rpki-client -vvf rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft File: 1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft (raw, json) Hash identifier: KgZ2WzhOYktisvaTOTEZHPCh2ZXmXYWQwT0Wi5zX3Sk= Subject key identifier: 84:EF:45:5A:92:AE:2B:85:D4:29:B6:E5:AD:7C:74:4A:34:C3:64:EE Authority key identifier: 1E:EE:6F:99:4B:4A:68:8B:F6:5A:9A:26:A9:B8:C9:0B:9B:3B:D2:7F Certificate issuer: /CN=1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F Certificate serial: 09883B1CAD4CC41A09D84FE32786195B0029A36B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 05:46:47 +0000 Manifest this update: Sat 20 Jun 2026 05:41:47 +0000 Manifest next update: Sun 21 Jun 2026 07:58:47 +0000 Files and hashes: 1: 1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl (hash: jMk54l4GflijjS+K2lmiPJN9tdDAmHKZxzC2ViC/Sos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:88:3b:1c:ad:4c:c4:1a:09:d8:4f:e3:27:86:19:5b:00:29:a3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F Validity Not Before: Jun 20 05:41:47 2026 GMT Not After : Jun 21 07:58:47 2026 GMT Subject: CN=84EF455A92AE2B85D429B6E5AD7C744A34C364EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:02:7b:65:13:28:86:96:e5:27:71:a1:6f: 52:54:24:26:ad:39:1e:7b:af:d6:b5:2c:90:61:a1: 67:e7:39:40:8f:ef:dd:ac:c9:eb:2d:39:81:f0:96: 8a:0c:15:9d:20:b2:ef:8c:98:12:e1:05:f9:9d:6b: dd:45:c1:d4:0c:05:f3:ee:00:3c:b7:07:ea:c0:f1: aa:ca:a1:ab:30:17:43:f2:38:1f:db:c1:f2:87:54: be:fe:16:e8:a6:f4:fe:c2:da:ea:12:95:1e:14:dc: 83:d9:11:4d:5c:8e:b9:64:c7:db:63:9a:33:6c:98: fe:51:78:64:d4:69:95:b7:43:fa:ac:91:ae:ec:7f: 54:37:7a:af:d2:84:ff:2e:91:46:bd:29:24:f7:40: 64:19:45:ae:66:cd:04:36:97:8a:0e:a5:6b:67:44: 74:cb:d9:ad:72:c1:7a:c7:cc:21:d4:b2:58:bc:b6: c1:da:fb:c8:97:96:5a:84:7e:9b:4a:3d:cd:86:be: 5c:84:8e:fb:a2:b3:74:e0:01:76:1c:65:3a:0c:79: e5:21:ab:cf:0a:f0:a8:aa:9d:0c:c9:0e:44:de:20: 69:b4:52:b2:21:d0:43:1a:45:3c:f0:61:7c:94:a2: 17:69:5b:27:92:5b:9e:87:18:5e:5b:df:a9:86:16: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EF:45:5A:92:AE:2B:85:D4:29:B6:E5:AD:7C:74:4A:34:C3:64:EE X509v3 Authority Key Identifier: keyid:1E:EE:6F:99:4B:4A:68:8B:F6:5A:9A:26:A9:B8:C9:0B:9B:3B:D2:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/1EEE6F994B4A688BF65A9A26A9B8C90B9B3BD27F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2a:5d:77:35:3a:13:41:fb:dd:28:77:e9:04:b2:82:69:a4: f2:26:f7:6b:44:a8:31:27:01:58:60:f5:27:fb:29:a8:87:ec: 9f:77:ff:92:a2:15:89:a4:62:11:fc:df:d7:7c:26:30:26:39: 36:ac:7a:3a:71:f1:4d:fc:c9:ae:49:03:b5:a9:be:9e:cf:4c: 13:54:fe:c8:60:ae:f7:0a:cc:c2:f2:a5:25:ed:d2:46:65:1f: 1b:79:76:9e:c5:1f:63:14:14:9f:2f:8f:f1:41:0e:36:85:c5: b9:04:12:e5:08:58:60:5d:97:ea:cf:d3:71:a9:a2:ec:f3:77: ae:f0:42:da:08:a6:d9:5f:4b:af:50:27:e3:fe:e9:a6:3b:51: 83:88:9f:dc:39:8d:ff:0e:66:8f:6e:0c:07:47:f9:05:f7:be: b2:bc:f0:88:a6:7d:a8:bf:fd:35:58:64:7f:f6:cd:0d:39:98: b0:16:6f:62:ac:61:23:00:17:bd:4c:22:e6:30:ac:01:6e:5c: ec:94:f6:c6:7c:c3:02:03:af:e4:30:d8:fa:57:29:48:c0:5e: 9c:94:80:eb:9e:db:77:c1:71:be:1b:f8:98:a5:18:2f:ba:b7: 1c:26:72:c1:8d:c7:5d:da:21:9b:c9:58:c2:7a:d3:35:d8:43: 70:31:21:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYg7HK1MxBoJ2E/jJ4YZWwApo2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRTZGOTk0QjRBNjg4QkY2NUE5QTI2QTlCOEM5MEI5 QjNCRDI3RjAeFw0yNjA2MjAwNTQxNDdaFw0yNjA2MjEwNzU4NDdaMDMxMTAvBgNV BAMTKDg0RUY0NTVBOTJBRTJCODVENDI5QjZFNUFEN0M3NDRBMzRDMzY0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKQJ7ZRMohpblJ3Ghb1JUJCat OR57r9a1LJBhoWfnOUCP792syestOYHwlooMFZ0gsu+MmBLhBfmda91FwdQMBfPu ADy3B+rA8arKoaswF0PyOB/bwfKHVL7+Fuim9P7C2uoSlR4U3IPZEU1cjrlkx9tj mjNsmP5ReGTUaZW3Q/qska7sf1Q3eq/ShP8ukUa9KST3QGQZRa5mzQQ2l4oOpWtn RHTL2a1ywXrHzCHUsli8tsHa+8iXllqEfptKPc2GvlyEjvuis3TgAXYcZToMeeUh q88K8KiqnQzJDkTeIGm0UrIh0EMaRTzwYXyUohdpWyeSW56HGF5b36mGFnnVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhO9FWpKuK4XUKbblrXx0SjTDZO4wHwYDVR0j BBgwFoAUHu5vmUtKaIv2WpomqbjJC5s70n8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3ZWEwZTYtNDNlYS00MzFlLWEwMTMtMGIyMDFiMmMwZDllLzAvMUVFRTZGOTk0 QjRBNjg4QkY2NUE5QTI2QTlCOEM5MEI5QjNCRDI3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVFNkY5OTRCNEE2ODhCRjY1QTlBMjZBOUI4QzkwQjlCM0JE MjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvMUVFRTZGOTk0QjRBNjg4QkY2NUE5QTI2QTlCOEM5 MEI5QjNCRDI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgqXXc1OhNB+90od+kEsoJppPIm92tEqDEn AVhg9Sf7KaiH7J93/5KiFYmkYhH839d8JjAmOTasejpx8U38ya5JA7Wpvp7PTBNU /shgrvcKzMLypSXt0kZlHxt5dp7FH2MUFJ8vj/FBDjaFxbkEEuUIWGBdl+rP03Gp ouzzd67wQtoIptlfS69QJ+P+6aY7UYOIn9w5jf8OZo9uDAdH+QX3vrK88Iimfai/ /TVYZH/2zQ05mLAWb2KsYSMAF71MIuYwrAFuXOyU9sZ8wwIDr+Qw2PpXKUjAXpyU gOue23fBcb4b+JilGC+6txwmcsGNx13aIZvJWMJ60zXYQ3AxIRA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:45 2026 by rpki-client