$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft File: E4082D8524B052029D62D695437D63F939A1F80E.mft (raw, json) Hash identifier: 6rXi22QQo52b8cobSH2SL6BMcY0l2ajyXJTsV8efgwg= Subject key identifier: 89:69:6D:E9:8F:74:C0:43:D8:11:A2:94:76:A4:00:1D:EB:B9:F8:4A Authority key identifier: E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E Certificate issuer: /CN=E4082D8524B052029D62D695437D63F939A1F80E Certificate serial: 2BD2501481A27D4DE336631B4EF8E4B2B2AE1A7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 20:45:58 +0000 Manifest this update: Fri 19 Jun 2026 20:40:58 +0000 Manifest next update: Sat 20 Jun 2026 22:34:58 +0000 Files and hashes: 1: E4082D8524B052029D62D695437D63F939A1F80E.crl (hash: K6bu7RjKNs2DT45mJueUAKpYx72qPJIZCKjDk3ZBcvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d2:50:14:81:a2:7d:4d:e3:36:63:1b:4e:f8:e4:b2:b2:ae:1a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4082D8524B052029D62D695437D63F939A1F80E Validity Not Before: Jun 19 20:40:58 2026 GMT Not After : Jun 20 22:34:58 2026 GMT Subject: CN=89696DE98F74C043D811A29476A4001DEBB9F84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:c4:bd:71:e0:40:c7:a9:cd:f0:19:1a:e2: 2e:ea:a2:d8:d2:b1:c7:14:fd:47:43:ba:29:3d:53: 83:8e:0c:9c:e0:61:d3:88:73:04:4e:93:7f:d4:eb: 8e:dc:3c:ff:fe:92:f2:d7:f1:e6:94:74:0f:83:03: ed:ba:bb:cf:99:26:56:ed:fe:db:6c:b3:47:10:5c: f3:4a:58:be:f5:81:3d:9b:e0:0b:2d:83:ea:6a:de: 09:b4:e2:d5:4f:fa:43:3b:90:a6:86:be:7a:a5:ce: c3:57:1c:a5:ca:6d:8e:b5:e1:7a:ba:76:d2:e6:51: 92:ee:06:91:7b:66:ae:b6:f2:53:4b:5c:52:01:76: 2d:56:ea:3b:18:ab:22:f8:42:70:5b:a5:47:b6:3d: 93:ca:bd:b6:20:56:e8:70:bb:ba:bc:da:b8:74:d6: 2b:d6:3f:5f:dd:3d:16:44:86:3b:86:4e:da:ad:7c: 63:d8:b0:59:b1:3e:53:26:d7:01:07:22:89:7a:f0: 3e:5d:78:2c:9f:be:89:34:1c:e0:46:d7:af:70:28: ab:da:a8:cd:05:c1:d1:fa:b0:a0:22:a8:8a:8f:84: 68:55:3e:73:f4:d5:41:37:b4:5b:9f:75:ba:de:32: 85:4b:07:09:18:30:09:6a:67:d8:5e:4c:bb:e6:56: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:6D:E9:8F:74:C0:43:D8:11:A2:94:76:A4:00:1D:EB:B9:F8:4A X509v3 Authority Key Identifier: keyid:E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7a:3b:fb:02:82:cf:fc:b3:1e:55:c1:8a:12:9f:ad:70:c8: ad:5d:be:28:3f:1d:38:50:be:bd:14:f3:8f:16:0e:e7:72:79: 50:93:ad:8c:1c:34:5a:f8:77:4f:0a:e5:0e:4c:18:66:0b:2d: 90:5e:3b:7d:81:73:db:e8:35:bf:52:8a:a4:20:89:d3:23:41: 97:76:cf:84:d7:f8:d6:6d:b0:f8:41:cf:74:f9:66:1f:e3:7b: 2b:fb:62:85:96:71:fe:c9:55:cf:f9:c6:4b:f2:f2:cb:e7:44: dc:82:54:8a:b6:d9:05:b0:cb:03:81:5f:81:c5:f6:75:df:7d: a0:80:a1:18:dc:6d:e5:d2:61:e7:30:42:d8:5d:b4:51:d8:c8: ff:9a:01:0d:48:b9:3a:2a:92:4b:9b:66:7b:b9:de:75:8b:b7: e2:02:ad:ef:d9:8a:96:c1:94:40:b7:0d:65:0a:04:e0:7e:e8: bb:80:2f:31:14:df:2d:af:55:62:9c:de:fd:78:8f:f2:ce:7d: 11:61:8d:20:e1:f8:45:c1:c9:ac:0a:b3:3c:d7:02:f7:58:22: 3a:d9:b0:28:03:29:65:2e:b1:30:e1:86:67:6c:90:ad:74:e8: ae:df:e7:5d:c8:56:4d:f1:79:a7:d7:71:21:31:06:c8:89:d6: e2:e3:44:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9JQFIGifU3jNmMbTvjksrKuGn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYzRjkz OUExRjgwRTAeFw0yNjA2MTkyMDQwNThaFw0yNjA2MjAyMjM0NThaMDMxMTAvBgNV BAMTKDg5Njk2REU5OEY3NEMwNDNEODExQTI5NDc2QTQwMDFERUJCOUY4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCun8S9ceBAx6nN8Bka4i7qotjS sccU/UdDuik9U4OODJzgYdOIcwROk3/U647cPP/+kvLX8eaUdA+DA+26u8+ZJlbt /ttss0cQXPNKWL71gT2b4Astg+pq3gm04tVP+kM7kKaGvnqlzsNXHKXKbY614Xq6 dtLmUZLuBpF7Zq628lNLXFIBdi1W6jsYqyL4QnBbpUe2PZPKvbYgVuhwu7q82rh0 1ivWP1/dPRZEhjuGTtqtfGPYsFmxPlMm1wEHIol68D5deCyfvok0HOBG169wKKva qM0FwdH6sKAiqIqPhGhVPnP01UE3tFufdbreMoVLBwkYMAlqZ9heTLvmVjuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWlt6Y90wEPYEaKUdqQAHeu5+EowHwYDVR0j BBgwFoAU5AgthSSwUgKdYtaVQ31j+Tmh+A4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzYjY3ZTgtYTk3My00MGZlLWJhMDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUy NEIwNTIwMjlENjJENjk1NDM3RDYzRjkzOUExRjgwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDA4MkQ4NTI0QjA1MjAyOUQ2MkQ2OTU0MzdENjNGOTM5QTFG ODBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvRTQwODJEODUyNEIwNTIwMjlENjJENjk1NDM3RDYz RjkzOUExRjgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp6O/sCgs/8sx5VwYoSn61wyK1dvig/HThQ vr0U848WDudyeVCTrYwcNFr4d08K5Q5MGGYLLZBeO32Bc9voNb9SiqQgidMjQZd2 z4TX+NZtsPhBz3T5Zh/jeyv7YoWWcf7JVc/5xkvy8svnRNyCVIq22QWwywOBX4HF 9nXffaCAoRjcbeXSYecwQthdtFHYyP+aAQ1IuToqkkubZnu53nWLt+ICre/ZipbB lEC3DWUKBOB+6LuALzEU3y2vVWKc3v14j/LOfRFhjSDh+EXByawKszzXAvdYIjrZ sCgDKWUusTDhhmdskK106K7f513IVk3xeafXcSExBsiJ1uLjRBQ= -----END CERTIFICATE-----Generated at Sat Jun 20 13:06:11 2026 by rpki-client