$ rpki-client -vvf rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft File: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft (raw, json) Hash identifier: 2TQvpsa+OhbKAyiNk/VMUs/15IEjopClCnEtOmxwm1c= Subject key identifier: CA:43:92:E0:50:DC:A0:FB:F5:02:5C:BE:92:43:90:7D:8F:23:89:0B Authority key identifier: 94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC Certificate issuer: /CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Certificate serial: 4D7AE196167B4D2A2004015FC6C659186664BAB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 14:23:12 +0000 Manifest this update: Fri 19 Jun 2026 14:18:12 +0000 Manifest next update: Sat 20 Jun 2026 16:16:12 +0000 Files and hashes: 1: 948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl (hash: FQAZ5XU7tAJG8RUyfYaS050Hoh7/PvHOtvl71TDaNfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7a:e1:96:16:7b:4d:2a:20:04:01:5f:c6:c6:59:18:66:64:ba:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC Validity Not Before: Jun 19 14:18:12 2026 GMT Not After : Jun 20 16:16:12 2026 GMT Subject: CN=CA4392E050DCA0FBF5025CBE9243907D8F23890B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:5d:79:94:a8:cd:a9:44:5e:75:8b:9f:37: eb:01:f1:42:52:91:4b:5e:f5:af:7f:d0:e1:b2:84: 5f:de:fd:d2:ec:4f:75:c1:94:94:79:a3:4a:5b:3a: bd:2c:07:1f:c9:0a:7e:7f:87:5e:3d:92:b2:ee:ea: 97:58:64:24:7e:a4:41:5a:48:c7:b1:87:69:b5:7b: 12:61:0d:53:6a:6d:47:93:99:ce:a3:e3:3f:f8:ab: ab:e3:44:18:40:6a:08:d0:8f:b5:c4:73:56:3b:1a: 95:f6:be:60:cc:44:11:2c:2e:a0:e3:60:74:cc:db: cd:8e:01:bd:3a:f1:96:e9:f7:00:d5:1f:36:17:97: 84:db:85:05:5f:eb:f4:1e:d9:c3:ec:57:3c:5f:22: e4:b5:65:f9:48:78:ef:e3:fb:1c:c4:a4:e4:2c:36: fd:fb:fe:72:26:71:67:04:73:57:86:87:b2:08:f6: 38:d8:70:f1:81:94:4e:ce:41:78:5d:a9:e1:b6:cd: 8e:bd:28:61:27:0a:45:4b:29:70:0d:71:04:ba:a0: 2e:99:65:2e:87:45:9f:04:2e:82:0d:ec:99:7b:b5: 23:bd:94:59:3d:d9:b1:dd:b3:0c:c7:62:f3:e4:f3: af:a2:47:f1:ac:a3:48:49:36:a7:ae:64:13:3c:13: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:92:E0:50:DC:A0:FB:F5:02:5C:BE:92:43:90:7D:8F:23:89:0B X509v3 Authority Key Identifier: keyid:94:8F:13:CF:2E:54:E1:FC:CA:51:DE:BB:CA:0D:1E:2C:33:E5:14:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/948F13CF2E54E1FCCA51DEBBCA0D1E2C33E514DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fa:95:a5:51:86:6d:4c:f0:f9:03:b6:bf:2a:be:23:cb:84: d8:b6:3c:3d:2a:90:ab:57:7c:5b:5b:7a:e1:a1:9e:6e:c1:30: 5c:b8:05:7b:7e:28:49:8a:0f:36:f4:70:c1:eb:c9:98:65:fa: f1:b0:2d:38:6c:9e:5d:9c:15:6e:0e:11:21:44:e6:47:f4:ae: 0f:97:be:73:c7:57:a6:86:de:44:4a:47:9f:0d:77:95:c3:c8: 40:3d:96:59:30:44:ce:82:78:44:4f:c8:b5:5d:e2:8e:6c:0c: d5:97:09:9e:1a:e5:6c:b8:76:c1:98:2a:7d:c7:9a:c7:79:30: e0:4b:96:7e:f6:e4:ff:78:84:b6:0c:9e:1f:ec:74:2a:fa:5b: bd:2e:de:de:a9:78:fc:53:bf:89:6b:d9:f3:25:b9:91:a0:18: a1:50:9d:00:81:57:03:c5:1d:de:a7:db:e7:97:a8:17:e8:17: a9:25:d0:67:bd:32:57:61:eb:e4:c9:82:5e:a9:2d:de:96:da: e0:b0:ea:86:02:d7:e8:bf:27:47:dc:bc:d1:05:45:c0:59:a3: 1d:27:1b:90:6a:b1:09:31:f2:b5:12:0a:ad:47:b8:c7:49:b7: d4:53:4e:36:1d:9d:eb:de:49:62:07:a7:46:02:51:6e:f5:aa: 60:9f:45:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXrhlhZ7TSogBAFfxsZZGGZkurMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMz M0U1MTREQzAeFw0yNjA2MTkxNDE4MTJaFw0yNjA2MjAxNjE2MTJaMDMxMTAvBgNV BAMTKENBNDM5MkUwNTBEQ0EwRkJGNTAyNUNCRTkyNDM5MDdEOEYyMzg5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpl15lKjNqURedYufN+sB8UJS kUte9a9/0OGyhF/e/dLsT3XBlJR5o0pbOr0sBx/JCn5/h149krLu6pdYZCR+pEFa SMexh2m1exJhDVNqbUeTmc6j4z/4q6vjRBhAagjQj7XEc1Y7GpX2vmDMRBEsLqDj YHTM282OAb068Zbp9wDVHzYXl4TbhQVf6/Qe2cPsVzxfIuS1ZflIeO/j+xzEpOQs Nv37/nImcWcEc1eGh7II9jjYcPGBlE7OQXhdqeG2zY69KGEnCkVLKXANcQS6oC6Z ZS6HRZ8ELoIN7Jl7tSO9lFk92bHdswzHYvPk86+iR/Gso0hJNqeuZBM8E5UhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykOS4FDcoPv1Aly+kkOQfY8jiQswHwYDVR0j BBgwFoAUlI8Tzy5U4fzKUd67yg0eLDPlFNwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmViMDY1NjktMGEyYi00YjFiLTliMGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0Yy RTU0RTFGQ0NBNTFERUJCQ0EwRDFFMkMzM0U1MTREQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDhGMTNDRjJFNTRFMUZDQ0E1MURFQkJDQTBEMUUyQzMzRTUx NERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvOTQ4RjEzQ0YyRTU0RTFGQ0NBNTFERUJCQ0EwRDFF MkMzM0U1MTREQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj6laVRhm1M8PkDtr8qviPLhNi2PD0qkKtX fFtbeuGhnm7BMFy4BXt+KEmKDzb0cMHryZhl+vGwLThsnl2cFW4OESFE5kf0rg+X vnPHV6aG3kRKR58Nd5XDyEA9llkwRM6CeERPyLVd4o5sDNWXCZ4a5Wy4dsGYKn3H msd5MOBLln725P94hLYMnh/sdCr6W70u3t6pePxTv4lr2fMluZGgGKFQnQCBVwPF Hd6n2+eXqBfoF6kl0Ge9Mldh6+TJgl6pLd6W2uCw6oYC1+i/J0fcvNEFRcBZox0n G5BqsQkx8rUSCq1HuMdJt9RTTjYdneveSWIHp0YCUW71qmCfRZE= -----END CERTIFICATE-----Generated at Sat Jun 20 08:47:27 2026 by rpki-client