$ rpki-client -vvf rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft File: 368503D1386A131369164C5912181352537A2D3C.mft (raw, json) Hash identifier: 8XFBtaF++S2iz1+pmtqIwFVqXCIMA6e+XU9yNo+Tkn8= Subject key identifier: 1E:CD:56:1A:FF:8F:F5:FA:D8:5A:4C:B1:D7:D6:7F:6A:69:EE:D3:AD Authority key identifier: 36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C Certificate issuer: /CN=368503D1386A131369164C5912181352537A2D3C Certificate serial: 3FC384FCB3FB68B4AAEEFE1B157398E4F82CE0AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 03:59:40 +0000 Manifest this update: Sat 20 Jun 2026 03:54:40 +0000 Manifest next update: Sun 21 Jun 2026 05:49:40 +0000 Files and hashes: 1: 368503D1386A131369164C5912181352537A2D3C.crl (hash: sC7ubX/ssTLo+M71KtQrPe1z6xlnChnT7qTiC55RH18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.crl rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c3:84:fc:b3:fb:68:b4:aa:ee:fe:1b:15:73:98:e4:f8:2c:e0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368503D1386A131369164C5912181352537A2D3C Validity Not Before: Jun 20 03:54:40 2026 GMT Not After : Jun 21 05:49:40 2026 GMT Subject: CN=1ECD561AFF8FF5FAD85A4CB1D7D67F6A69EED3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:0c:ea:eb:b0:2e:46:6c:4d:bd:34:34:50: aa:a4:89:5a:dd:93:a0:61:e6:d8:59:42:f8:e0:cd: 5f:a3:d8:69:f7:a2:c6:1a:68:24:10:63:cd:b1:19: 7b:d3:5b:3c:4a:a8:a6:23:b4:bf:c3:de:4d:79:1e: 5a:28:d2:8a:cd:05:f0:04:90:02:00:40:cd:d8:cc: d3:fa:49:62:f7:77:84:30:9e:7f:80:1b:29:32:85: ab:a1:c6:80:ec:7b:62:8c:d7:8e:79:60:01:db:2e: 5b:e9:46:6e:4b:46:d6:a8:af:48:a4:15:02:5c:b8: 8c:fa:a0:4e:ae:50:96:ec:0e:90:43:79:69:9b:20: 71:63:f2:fb:cb:af:3e:67:7c:82:2f:17:13:88:5a: 5f:e2:c5:21:27:1a:86:d3:c8:15:2a:4e:ba:51:89: 89:aa:b6:1a:53:73:f5:6d:62:72:03:c0:14:4b:c5: 46:69:96:a5:62:09:ea:64:63:ad:35:29:25:7c:34: b8:85:d7:0a:97:35:5c:53:04:c9:f2:5b:f0:d7:ff: 66:8d:d6:e4:b5:91:44:cc:36:42:3c:c5:7a:ef:0d: c1:3c:25:14:19:16:db:43:10:85:3c:26:d2:be:c1: 68:0b:6a:b8:25:05:43:88:dd:54:33:99:57:a9:c3: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:56:1A:FF:8F:F5:FA:D8:5A:4C:B1:D7:D6:7F:6A:69:EE:D3:AD X509v3 Authority Key Identifier: keyid:36:85:03:D1:38:6A:13:13:69:16:4C:59:12:18:13:52:53:7A:2D:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/368503D1386A131369164C5912181352537A2D3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/368503D1386A131369164C5912181352537A2D3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9d:c4:63:ec:ed:fb:04:2b:47:ac:b7:8a:a3:05:c0:c9:1b: cc:15:19:79:ba:a6:09:67:63:3c:eb:46:3f:aa:76:66:bd:e4: c3:87:aa:31:6a:f3:24:38:a1:e3:70:1b:ff:9a:f1:44:c5:55: fc:77:b1:43:bc:a9:03:d7:b4:6d:74:a6:b9:87:84:ce:42:18: 08:b1:5c:c9:6b:e2:99:ee:19:a2:e6:6c:40:a3:ef:60:ef:a9: dc:eb:75:b0:7b:d2:23:7f:e9:70:fe:6b:ce:27:87:f7:cb:27: 24:71:23:9f:d9:95:be:ec:6c:20:d3:a6:bc:7c:4e:ae:f7:42: a2:3a:12:09:50:1b:81:10:b2:20:95:73:93:04:4c:02:18:ed: b2:f4:51:a9:47:50:a5:2b:22:bd:30:ed:eb:73:32:cb:b0:57: 2b:b5:85:d7:98:bb:46:dd:f2:c5:be:52:ff:ec:85:c1:e3:0a: 1c:b6:98:17:5f:db:7a:f7:fb:4c:87:79:eb:e5:ab:92:75:94: 26:cd:29:a4:04:8d:9a:1b:6d:21:ab:b7:6c:42:1c:bf:e0:65: 6c:07:2a:8f:75:60:58:79:10:be:cb:9c:9a:80:7d:0e:83:61: eb:3c:3c:ce:a1:07:03:db:00:63:7b:21:a0:23:9b:41:bb:2a: b9:51:a3:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8OE/LP7aLSq7v4bFXOY5Pgs4KswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NTAzRDEzODZBMTMxMzY5MTY0QzU5MTIxODEzNTI1 MzdBMkQzQzAeFw0yNjA2MjAwMzU0NDBaFw0yNjA2MjEwNTQ5NDBaMDMxMTAvBgNV BAMTKDFFQ0Q1NjFBRkY4RkY1RkFEODVBNENCMUQ3RDY3RjZBNjlFRUQzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoQzq67AuRmxNvTQ0UKqkiVrd k6Bh5thZQvjgzV+j2Gn3osYaaCQQY82xGXvTWzxKqKYjtL/D3k15Hloo0orNBfAE kAIAQM3YzNP6SWL3d4Qwnn+AGykyhauhxoDse2KM1455YAHbLlvpRm5LRtaor0ik FQJcuIz6oE6uUJbsDpBDeWmbIHFj8vvLrz5nfIIvFxOIWl/ixSEnGobTyBUqTrpR iYmqthpTc/VtYnIDwBRLxUZplqViCepkY601KSV8NLiF1wqXNVxTBMnyW/DX/2aN 1uS1kUTMNkI8xXrvDcE8JRQZFttDEIU8JtK+wWgLarglBUOI3VQzmVepwzDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHs1WGv+P9frYWkyx19Z/amnu060wHwYDVR0j BBgwFoAUNoUD0ThqExNpFkxZEhgTUlN6LTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTkyMDVlN2MtYTg4MS00ODczLTkxODgtZTUyMWI2YWY1MjljLzAvMzY4NTAzRDEz ODZBMTMxMzY5MTY0QzU5MTIxODEzNTI1MzdBMkQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjg1MDNEMTM4NkExMzEzNjkxNjRDNTkxMjE4MTM1MjUzN0Ey RDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvMzY4NTAzRDEzODZBMTMxMzY5MTY0QzU5MTIxODEz NTI1MzdBMkQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCdxGPs7fsEK0est4qjBcDJG8wVGXm6pgln YzzrRj+qdma95MOHqjFq8yQ4oeNwG/+a8UTFVfx3sUO8qQPXtG10prmHhM5CGAix XMlr4pnuGaLmbECj72DvqdzrdbB70iN/6XD+a84nh/fLJyRxI5/Zlb7sbCDTprx8 Tq73QqI6EglQG4EQsiCVc5METAIY7bL0UalHUKUrIr0w7etzMsuwVyu1hdeYu0bd 8sW+Uv/shcHjChy2mBdf23r3+0yHeevlq5J1lCbNKaQEjZobbSGrt2xCHL/gZWwH Ko91YFh5EL7LnJqAfQ6DYes8PM6hBwPbAGN7IaAjm0G7KrlRo5s= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:11 2026 by rpki-client