$ rpki-client -vvf rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft File: 083DF9FCF3773A042D5A64A6401BE726552524C0.mft (raw, json) Hash identifier: U7gAGiLzXQZGb7wwxqboweD7jIE5dcMbSjy84NiwY2w= Subject key identifier: AC:2E:DC:9F:D7:80:11:86:08:71:71:F8:8B:F4:53:0F:C1:DC:80:2E Authority key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 Certificate issuer: /CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Certificate serial: 543C26E54E851398FC15D56700F28B8D9D9C8F31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 02:02:16 +0000 Manifest this update: Sat 20 Jun 2026 01:57:16 +0000 Manifest next update: Sun 21 Jun 2026 02:12:16 +0000 Files and hashes: 1: 083DF9FCF3773A042D5A64A6401BE726552524C0.crl (hash: HPMlghyQ/U+dYiNU1fWlw+XRMD0rhsZ1oifXxIhfGvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3c:26:e5:4e:85:13:98:fc:15:d5:67:00:f2:8b:8d:9d:9c:8f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Validity Not Before: Jun 20 01:57:16 2026 GMT Not After : Jun 21 02:12:16 2026 GMT Subject: CN=AC2EDC9FD7801186087171F88BF4530FC1DC802E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:32:33:79:a4:95:14:39:5c:c6:cd:54:a6: 36:76:e5:5e:28:a2:d5:d3:bc:89:cc:5a:25:94:c1: cf:12:b1:3a:ae:9b:ef:de:1e:09:ba:40:16:50:4b: b3:5e:a9:38:db:2a:dd:c5:4c:f6:d6:5d:a6:9e:c0: 6f:74:29:8c:5e:d4:2b:4c:2e:5f:70:3f:cb:fc:5e: 54:98:c6:f7:5b:f7:17:e9:cc:63:a7:0e:f2:db:f8: 2e:40:2e:0c:4d:41:d5:d9:96:02:06:60:65:62:fd: f9:5f:09:23:2a:4c:e3:bf:cd:a1:95:af:64:32:4d: 06:74:ba:d7:41:14:d9:d7:9a:b1:ba:f9:ec:82:9d: 1b:11:c4:f7:5b:7b:40:67:f0:90:e0:fa:27:ee:e6: 14:c7:da:57:c0:60:86:f3:e1:8c:5e:e8:36:2b:17: b4:ae:15:f5:f5:ee:14:08:ab:de:d3:b6:2e:7e:de: da:5a:43:92:16:b1:b0:c0:43:0c:1a:89:aa:c9:21: b9:20:3e:6b:23:aa:07:98:5e:8c:0a:02:be:dd:5c: cf:4f:65:74:6c:12:0d:ac:cf:cb:f0:81:3a:74:f6: f9:af:08:e5:1d:0e:8c:0b:52:ec:c7:ea:cf:63:fb: da:89:56:ec:50:6c:85:90:5e:2b:03:fd:f6:64:6c: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2E:DC:9F:D7:80:11:86:08:71:71:F8:8B:F4:53:0F:C1:DC:80:2E X509v3 Authority Key Identifier: keyid:08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:08:e0:d5:0d:fb:c3:09:19:c2:54:46:36:19:1d:2f:93:dd: 29:a9:34:60:27:d0:ea:59:26:4c:50:f9:d9:93:a8:f2:d5:2b: f5:3b:99:bf:f1:f6:3c:a2:c2:4b:9f:2a:eb:5f:38:79:37:76: 00:f9:32:78:06:fa:33:ea:c6:8f:93:7b:51:de:d1:a6:67:06: a9:c0:35:0c:e7:c0:72:10:8f:43:fa:e3:70:2f:0e:48:4f:f1: 5c:21:a5:e0:82:a6:60:1b:93:7c:cd:e6:b0:b5:87:b0:3f:dd: 04:33:f4:88:cb:0a:5b:96:84:8d:d3:a6:42:1c:c9:e7:27:fa: 18:12:76:c3:a5:c3:cf:a9:c9:c2:d9:7c:5c:fc:d6:a6:43:3f: 3f:67:32:77:6e:45:a8:f1:59:47:c8:30:68:5e:40:de:08:91: 9d:89:18:fc:ff:c6:9d:08:f6:db:a3:00:bd:bd:6b:99:34:14: 87:22:6e:12:33:0e:22:6d:ed:9b:d9:28:87:2a:1e:5e:97:0a: a8:12:09:ab:3b:80:32:4b:60:ef:bf:09:d8:eb:fa:09:39:49: d6:f6:1f:34:65:99:99:7e:66:96:ca:30:36:da:7b:da:33:fc: 8b:ab:2e:ee:1e:b8:06:2f:5b:cb:92:f8:a6:06:bb:7d:7b:c1: 69:29:28:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDwm5U6FE5j8FdVnAPKLjZ2cjzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1 NTI1MjRDMDAeFw0yNjA2MjAwMTU3MTZaFw0yNjA2MjEwMjEyMTZaMDMxMTAvBgNV BAMTKEFDMkVEQzlGRDc4MDExODYwODcxNzFGODhCRjQ1MzBGQzFEQzgwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/TIzeaSVFDlcxs1UpjZ25V4o otXTvInMWiWUwc8SsTqum+/eHgm6QBZQS7NeqTjbKt3FTPbWXaaewG90KYxe1CtM Ll9wP8v8XlSYxvdb9xfpzGOnDvLb+C5ALgxNQdXZlgIGYGVi/flfCSMqTOO/zaGV r2QyTQZ0utdBFNnXmrG6+eyCnRsRxPdbe0Bn8JDg+ifu5hTH2lfAYIbz4Yxe6DYr F7SuFfX17hQIq97Tti5+3tpaQ5IWsbDAQwwaiarJIbkgPmsjqgeYXowKAr7dXM9P ZXRsEg2sz8vwgTp09vmvCOUdDowLUuzH6s9j+9qJVuxQbIWQXisD/fZkbKVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrC7cn9eAEYYIcXH4i/RTD8HcgC4wHwYDVR0j BBgwFoAUCD35/PN3OgQtWmSmQBvnJlUlJMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM1MjI1YTYtMDVkMy00NDRjLWJmM2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNG Mzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1NTI1MjRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODNERjlGQ0YzNzczQTA0MkQ1QTY0QTY0MDFCRTcyNjU1MjUy NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3 MjY1NTI1MjRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYI4NUN+8MJGcJURjYZHS+T3SmpNGAn0OpZ JkxQ+dmTqPLVK/U7mb/x9jyiwkufKutfOHk3dgD5MngG+jPqxo+Te1He0aZnBqnA NQznwHIQj0P643AvDkhP8VwhpeCCpmAbk3zN5rC1h7A/3QQz9IjLCluWhI3TpkIc yecn+hgSdsOlw8+pycLZfFz81qZDPz9nMnduRajxWUfIMGheQN4IkZ2JGPz/xp0I 9tujAL29a5k0FIcibhIzDiJt7ZvZKIcqHl6XCqgSCas7gDJLYO+/Cdjr+gk5Sdb2 HzRlmZl+ZpbKMDbae9oz/IurLu4euAYvW8uS+KYGu317wWkpKKU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:22 2026 by rpki-client