$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: 7FSmLdNle/f4gOt6+1/mjBEs9ZIcm6dX3skW7UX2kk8= Subject key identifier: C1:67:34:75:1A:C2:34:8E:DA:DF:4F:1C:04:FC:C2:1C:8A:06:B7:D6 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 2CB58A2EAE60EE8E35305FBD48746307049A24A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:55:02 +0000 Manifest this update: Fri 19 Jun 2026 19:50:02 +0000 Manifest next update: Sat 20 Jun 2026 23:45:02 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: AHoDg0WQNRzd6AtOWUZ+1Vac/a3BJgEvPhwQnyFSixc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b5:8a:2e:ae:60:ee:8e:35:30:5f:bd:48:74:63:07:04:9a:24:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Jun 19 19:50:02 2026 GMT Not After : Jun 20 23:45:02 2026 GMT Subject: CN=C16734751AC2348EDADF4F1C04FCC21C8A06B7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:b1:66:f1:9f:5b:6f:0c:ae:7a:3c:ef:13: d8:5f:21:b2:c4:db:80:ed:52:b5:9d:da:6a:d0:79: 33:38:c5:1c:cc:10:8a:11:70:3c:3f:18:e4:3b:5a: 97:fd:64:39:99:16:03:9a:d0:a6:2a:9d:c6:ae:38: 7b:fd:26:5f:bd:86:89:55:c9:ac:f0:79:06:ae:1c: 18:83:38:44:41:05:7d:50:aa:f9:83:5f:79:19:ea: 64:b6:e3:ba:d5:01:75:11:f3:ae:b8:78:3e:bf:ca: a5:4a:44:f6:4d:c9:d3:34:2e:f1:bf:96:90:e6:fa: e9:5b:ce:0c:33:36:39:2b:00:c3:0a:74:c2:02:42: 63:fd:45:32:06:35:cf:af:0b:2d:2f:91:f5:84:7b: 1f:91:d3:df:f2:20:47:b5:4c:44:a2:7a:3f:00:d1: 8c:d7:0d:14:e9:da:52:48:06:b4:d6:1b:af:b4:9d: 1e:e9:a3:72:d3:e3:f1:65:8a:37:d3:9d:1c:33:46: 9d:39:92:3b:bb:db:c2:06:01:1d:f5:1a:23:c5:5d: db:ad:bf:01:b3:1a:3b:bf:df:c7:7c:70:60:66:0a: 9d:85:02:a5:bf:12:f8:8f:69:69:39:40:95:fc:9d: 50:f3:17:32:9b:59:26:d7:28:67:b5:1a:a2:af:bb: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:34:75:1A:C2:34:8E:DA:DF:4F:1C:04:FC:C2:1C:8A:06:B7:D6 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:06:d0:f7:ea:10:f1:26:d3:7f:2c:70:60:7f:4b:4b:f2:4a: e9:4e:e1:3d:cd:9c:75:2d:4d:2c:b8:58:46:be:70:a7:58:72: 5e:d6:13:ed:52:e3:65:05:27:61:10:ca:8c:d8:1a:14:4d:6e: 73:dc:ca:e1:06:d4:6e:dd:f1:99:8f:a8:7c:16:c9:3c:45:12: 0e:76:a4:22:64:11:df:3b:89:24:74:9e:5e:94:c6:8a:12:62: 09:b3:6a:1a:f3:fc:b9:11:ec:17:b1:f8:01:5b:f2:f7:38:18: 39:ec:f2:41:7b:68:c7:2c:ba:40:34:09:2f:54:33:e6:c4:b7: be:8e:1e:7c:2d:d2:69:f3:7b:49:2e:ab:55:b3:4e:35:78:f4: 42:fd:3c:3d:92:95:3e:f4:72:53:e2:2e:8a:fb:3e:9b:61:e3: d7:79:48:45:bd:f5:2a:df:2c:74:af:b9:aa:52:af:5e:ac:62: c8:fa:ea:2a:f1:ca:10:ea:ba:0d:86:86:af:6f:3a:5d:c2:6c: 8a:a1:56:31:5c:61:e4:9e:92:91:2c:06:d9:30:39:a5:34:84: 04:2c:0a:da:9b:c0:1d:f2:39:2d:6b:7a:fb:ba:a4:5e:7a:df: c5:36:96:12:da:f9:52:aa:80:a5:b9:41:82:a7:1e:d7:81:60: ab:82:e7:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLWKLq5g7o41MF+9SHRjBwSaJKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA2MTkxOTUwMDJaFw0yNjA2MjAyMzQ1MDJaMDMxMTAvBgNV BAMTKEMxNjczNDc1MUFDMjM0OEVEQURGNEYxQzA0RkNDMjFDOEEwNkI3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpErFm8Z9bbwyuejzvE9hfIbLE 24DtUrWd2mrQeTM4xRzMEIoRcDw/GOQ7Wpf9ZDmZFgOa0KYqncauOHv9Jl+9holV yazweQauHBiDOERBBX1QqvmDX3kZ6mS247rVAXUR8664eD6/yqVKRPZNydM0LvG/ lpDm+ulbzgwzNjkrAMMKdMICQmP9RTIGNc+vCy0vkfWEex+R09/yIEe1TESiej8A 0YzXDRTp2lJIBrTWG6+0nR7po3LT4/FlijfTnRwzRp05kju728IGAR31GiPFXdut vwGzGju/38d8cGBmCp2FAqW/EviPaWk5QJX8nVDzFzKbWSbXKGe1GqKvu/S1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWc0dRrCNI7a308cBPzCHIoGt9YwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQG0PfqEPEm038scGB/S0vySulO4T3NnHUt TSy4WEa+cKdYcl7WE+1S42UFJ2EQyozYGhRNbnPcyuEG1G7d8ZmPqHwWyTxFEg52 pCJkEd87iSR0nl6UxooSYgmzahrz/LkR7Bex+AFb8vc4GDns8kF7aMcsukA0CS9U M+bEt76OHnwt0mnze0kuq1WzTjV49EL9PD2SlT70clPiLor7Ppth49d5SEW99Srf LHSvuapSr16sYsj66irxyhDqug2Ghq9vOl3CbIqhVjFcYeSekpEsBtkwOaU0hAQs CtqbwB3yOS1revu6pF5638U2lhLa+VKqgKW5QYKnHteBYKuC53A= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:21 2026 by rpki-client