$ rpki-client -vvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: jjPH1V3EB5WiI5xlzsenqgasWjqDLGWpdEuGClO9VHw= Subject key identifier: D6:65:20:2F:47:C3:84:17:93:35:B9:24:6E:68:1F:BE:53:9A:33:D0 Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 707093BF1B571CEFBA2DC286C2EF1ECFF2EB1E0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 00:06:51 +0000 Manifest this update: Thu 18 Jun 2026 00:01:51 +0000 Manifest next update: Fri 19 Jun 2026 00:23:51 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: ISeo7KD9Aqn4D0LhaDyyPE4pUMoBL2Rbikxo3O9nStU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 00:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:70:93:bf:1b:57:1c:ef:ba:2d:c2:86:c2:ef:1e:cf:f2:eb:1e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Jun 18 00:01:51 2026 GMT Not After : Jun 19 00:23:51 2026 GMT Subject: CN=D665202F47C384179335B9246E681FBE539A33D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:da:26:c3:7d:0a:7e:85:7f:ef:0b:96:68: 76:3f:dc:0b:12:87:d2:da:52:bf:4d:59:9a:ad:37: e7:27:a1:63:a5:b9:b8:4a:67:60:71:b5:53:ae:9d: a3:8b:b1:a8:b8:85:f1:bb:b8:d0:cd:4d:05:da:4f: ee:2c:29:1b:4d:c9:7b:90:94:1a:05:f1:d0:67:bc: b2:18:d1:d2:db:05:6e:99:d4:0c:ff:c7:aa:a2:1a: 27:1e:2d:c9:dc:47:09:ca:b6:4f:db:6d:ef:7c:50: 14:f1:74:43:b5:76:6d:da:ff:6c:63:f0:57:80:e6: b6:92:2e:7e:9f:75:1d:ef:ca:6b:bd:82:86:5a:ba: 2f:e0:39:a9:85:7b:48:e3:4e:24:39:a6:70:83:19: 03:35:e0:e0:4f:fc:03:96:4c:0b:0d:82:72:33:4d: 89:0b:e5:69:ad:93:33:6b:d2:8e:e1:a1:6f:24:2c: 26:5d:98:4b:db:1d:ea:b8:ab:ac:84:c8:72:4b:9d: ff:46:97:a1:cf:7d:a9:d9:f9:84:3e:33:f6:cb:dc: 67:c0:ca:da:3c:27:8e:f6:31:ba:e9:37:ca:6a:52: 4f:06:ac:41:08:3e:85:4c:62:ec:16:bd:5e:f7:11: 7e:a5:e0:55:09:b9:da:2d:0e:15:c6:91:3a:85:42: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:20:2F:47:C3:84:17:93:35:B9:24:6E:68:1F:BE:53:9A:33:D0 X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:28:93:56:63:0e:cd:6c:1a:5e:8b:3c:53:44:18:7f:12:93: 7f:03:76:cb:dc:0b:25:ed:63:24:f1:83:9c:d2:38:86:97:05: c7:48:39:e1:7d:4f:b1:5d:28:ce:2d:03:ff:60:31:2a:80:b2: 4e:b8:4b:24:a5:f3:5a:e7:7f:20:e0:b8:25:f9:d4:8d:dc:fd: e2:04:98:07:2c:dd:7b:bb:29:18:b1:7c:12:1a:45:be:4a:49: d6:aa:33:07:22:e2:91:e2:38:92:6b:b5:ac:a7:56:a3:59:aa: 6e:ca:f1:54:6f:89:24:f5:42:ba:4f:97:eb:9d:ee:66:e1:56: 11:0e:b7:15:15:14:02:7f:ba:ca:25:ab:f4:d4:9d:7e:c4:1c: eb:25:aa:e1:1e:98:f8:0d:90:8e:b5:1e:10:0c:02:42:41:a4: ff:5a:af:d4:48:10:fd:5e:3f:81:c9:da:72:b3:57:88:06:42: bd:27:12:f0:4a:80:ce:96:e1:61:af:45:0e:2b:11:4a:2a:1b: 39:5d:83:c9:a5:0e:a2:4b:57:3f:4b:19:95:e8:b3:60:71:c0: 81:28:e2:06:63:39:28:71:2c:83:82:f9:ce:65:14:9c:c2:54: 29:e3:83:09:d0:f9:2e:e3:f5:bb:90:f2:08:c2:dd:03:9e:15: fd:ce:04:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHCTvxtXHO+6LcKGwu8ez/LrHgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA2MTgwMDAxNTFaFw0yNjA2MTkwMDIzNTFaMDMxMTAvBgNV BAMTKEQ2NjUyMDJGNDdDMzg0MTc5MzM1QjkyNDZFNjgxRkJFNTM5QTMzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2tomw30KfoV/7wuWaHY/3AsS h9LaUr9NWZqtN+cnoWOlubhKZ2BxtVOunaOLsai4hfG7uNDNTQXaT+4sKRtNyXuQ lBoF8dBnvLIY0dLbBW6Z1Az/x6qiGiceLcncRwnKtk/bbe98UBTxdEO1dm3a/2xj 8FeA5raSLn6fdR3vymu9goZaui/gOamFe0jjTiQ5pnCDGQM14OBP/AOWTAsNgnIz TYkL5WmtkzNr0o7hoW8kLCZdmEvbHeq4q6yEyHJLnf9Gl6HPfanZ+YQ+M/bL3GfA yto8J472MbrpN8pqUk8GrEEIPoVMYuwWvV73EX6l4FUJudotDhXGkTqFQrWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1mUgL0fDhBeTNbkkbmgfvlOaM9AwHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMok1ZjDs1sGl6LPFNEGH8Sk38DdsvcCyXt YyTxg5zSOIaXBcdIOeF9T7FdKM4tA/9gMSqAsk64SySl81rnfyDguCX51I3c/eIE mAcs3Xu7KRixfBIaRb5KSdaqMwci4pHiOJJrtaynVqNZqm7K8VRviST1QrpPl+ud 7mbhVhEOtxUVFAJ/usolq/TUnX7EHOslquEemPgNkI61HhAMAkJBpP9ar9RIEP1e P4HJ2nKzV4gGQr0nEvBKgM6W4WGvRQ4rEUoqGzldg8mlDqJLVz9LGZXos2BxwIEo 4gZjOShxLIOC+c5lFJzCVCnjgwnQ+S7j9buQ8gjC3QOeFf3OBCw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:18 2026 by rpki-client