$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft File: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft (raw, json) Hash identifier: WTjE0ueO8eHYBMwwVa3ACrLR7v5RW+2osVJWKNbS304= Subject key identifier: CA:23:99:9D:A7:2E:48:10:96:60:CB:47:B0:13:CB:68:00:D7:D8:38 Authority key identifier: 60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 Certificate issuer: /CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Certificate serial: 1CEC780ED9CB40769118C1D88E7E708BC979F745 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:57:32 +0000 Manifest this update: Fri 19 Jun 2026 17:52:32 +0000 Manifest next update: Sat 20 Jun 2026 19:33:32 +0000 Files and hashes: 1: 609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl (hash: +ZHZTO1eQctJwEjgXurE/Hmp8prNVdgwWwHbLlYSkLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ec:78:0e:d9:cb:40:76:91:18:c1:d8:8e:7e:70:8b:c9:79:f7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2 Validity Not Before: Jun 19 17:52:32 2026 GMT Not After : Jun 20 19:33:32 2026 GMT Subject: CN=CA23999DA72E48109660CB47B013CB6800D7D838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:12:5d:a1:c9:da:e0:c1:2d:36:8a:d9:65: aa:b0:a2:8a:37:6e:15:b2:3c:55:21:47:a6:51:70: 8a:88:6e:ed:e0:e2:20:bc:91:7f:17:ad:52:9c:45: 11:29:8e:a9:08:d5:8e:47:95:f2:56:08:25:15:f1: 97:cf:c5:f6:ee:1b:2a:fe:c2:8d:74:c7:de:4d:c5: b3:00:47:84:38:dc:c0:42:e9:62:78:17:d5:d3:18: 9f:9d:1f:7b:29:0f:7e:e2:40:41:30:2a:2f:82:98: eb:09:bf:44:c3:5a:f4:bb:2f:b7:ef:bf:2d:20:a7: 6d:c9:2d:bd:a0:a8:ef:72:3e:be:2a:4b:7f:bd:c2: 44:0b:3b:66:e5:b2:f4:ea:1e:59:d4:df:1c:79:6c: cd:f3:f6:f8:be:78:6f:db:3d:60:34:d1:9e:ec:41: 0b:25:f2:a6:60:5f:00:af:c3:7e:69:c8:b1:84:f2: 0e:cf:c4:eb:0c:e2:55:2c:aa:0b:38:79:ec:0b:0a: a6:e4:ba:bc:5e:8a:ed:d0:39:8b:66:0d:20:c1:6f: 3d:a9:09:b0:2a:68:f6:f9:c3:24:9c:84:71:e7:26: 1b:ae:e5:db:d8:e9:9a:06:4e:ee:b1:d9:6b:ff:f3: 5e:b6:46:32:db:f9:5b:6d:a0:84:9a:74:3f:1e:af: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:23:99:9D:A7:2E:48:10:96:60:CB:47:B0:13:CB:68:00:D7:D8:38 X509v3 Authority Key Identifier: keyid:60:94:29:AB:5B:0A:4F:C2:EF:4C:1B:8E:2F:40:BF:C5:20:51:40:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/609429AB5B0A4FC2EF4C1B8E2F40BFC5205140A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:74:74:ab:d1:42:09:49:e3:44:e5:aa:f5:29:c6:73:89:47: a0:94:1e:4e:b0:b1:af:95:44:dd:b8:31:dd:89:0d:41:ed:8a: 82:7d:11:23:9d:0e:52:8f:15:03:c4:7a:2d:2a:e4:8a:6d:64: a9:9a:36:e0:1a:9d:9c:fa:0c:eb:c0:33:16:2d:79:d1:79:1d: 44:28:a9:a5:ce:1c:f8:26:27:39:68:da:5d:a0:05:7d:2d:12: 57:12:02:1e:a0:13:84:e1:ef:17:46:51:f0:bd:3e:68:c6:3f: 84:eb:d4:c8:31:89:d0:6b:eb:16:f6:75:91:ab:2e:26:a9:ac: f0:c0:d7:4e:51:44:5d:7f:f4:d1:d6:02:4e:91:a0:8e:b3:9e: aa:cd:c5:27:61:7a:de:71:38:4a:ac:32:b8:a1:da:93:b4:dc: 81:42:b4:1e:d9:ec:91:d4:6c:58:bd:0d:41:17:7e:7d:ee:dd: 92:79:c4:a8:0a:28:9a:62:dc:17:e3:48:18:a2:c7:38:b2:24: 0c:d8:a9:36:bd:7e:b9:26:70:c1:7a:f9:db:dc:39:f5:71:4b: 9d:4b:26:c6:c0:1d:f4:64:e5:b4:17:22:62:e5:73:cf:9a:b1: 72:57:d1:a6:03:d3:07:00:a3:3f:8b:55:8d:5e:67:67:43:07: 34:86:40:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOx4DtnLQHaRGMHYjn5wi8l590UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUy MDUxNDBBMjAeFw0yNjA2MTkxNzUyMzJaFw0yNjA2MjAxOTMzMzJaMDMxMTAvBgNV BAMTKENBMjM5OTlEQTcyRTQ4MTA5NjYwQ0I0N0IwMTNDQjY4MDBEN0Q4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuahJdocna4MEtNorZZaqwooo3 bhWyPFUhR6ZRcIqIbu3g4iC8kX8XrVKcRREpjqkI1Y5HlfJWCCUV8ZfPxfbuGyr+ wo10x95NxbMAR4Q43MBC6WJ4F9XTGJ+dH3spD37iQEEwKi+CmOsJv0TDWvS7L7fv vy0gp23JLb2gqO9yPr4qS3+9wkQLO2blsvTqHlnU3xx5bM3z9vi+eG/bPWA00Z7s QQsl8qZgXwCvw35pyLGE8g7PxOsM4lUsqgs4eewLCqbkurxeiu3QOYtmDSDBbz2p CbAqaPb5wySchHHnJhuu5dvY6ZoGTu6x2Wv/8162RjLb+VttoISadD8erz2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyiOZnacuSBCWYMtHsBPLaADX2DgwHwYDVR0j BBgwFoAUYJQpq1sKT8LvTBuOL0C/xSBRQKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1 QjBBNEZDMkVGNEMxQjhFMkY0MEJGQzUyMDUxNDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDk0MjlBQjVCMEE0RkMyRUY0QzFCOEUyRjQwQkZDNTIwNTE0 MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvNjA5NDI5QUI1QjBBNEZDMkVGNEMxQjhFMkY0MEJG QzUyMDUxNDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHx0dKvRQglJ40TlqvUpxnOJR6CUHk6wsa+V RN24Md2JDUHtioJ9ESOdDlKPFQPEei0q5IptZKmaNuAanZz6DOvAMxYtedF5HUQo qaXOHPgmJzlo2l2gBX0tElcSAh6gE4Th7xdGUfC9PmjGP4Tr1MgxidBr6xb2dZGr LiaprPDA105RRF1/9NHWAk6RoI6znqrNxSdhet5xOEqsMrih2pO03IFCtB7Z7JHU bFi9DUEXfn3u3ZJ5xKgKKJpi3BfjSBiixziyJAzYqTa9frkmcMF6+dvcOfVxS51L JsbAHfRk5bQXImLlc8+asXJX0aYD0wcAoz+LVY1eZ2dDBzSGQBA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:52:53 2026 by rpki-client