$ rpki-client -vvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft File: E978EBFAC3752F5D920856938CCD5CB512D8A763.mft (raw, json) Hash identifier: PLjxypnILLvJY5vRQ9EBec6U4mS3yIZw+o8NgLHKpr8= Subject key identifier: BD:CA:EA:FB:3E:23:01:B1:17:7D:B3:59:41:A1:49:BF:34:E6:DB:4A Authority key identifier: E9:78:EB:FA:C3:75:2F:5D:92:08:56:93:8C:CD:5C:B5:12:D8:A7:63 Certificate issuer: /CN=E978EBFAC3752F5D920856938CCD5CB512D8A763 Certificate serial: 3C15E2CBF9B8D8CE79B4EF22ED17EA71A359AB4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:23:51 +0000 Manifest this update: Sat 20 Jun 2026 03:18:51 +0000 Manifest next update: Sun 21 Jun 2026 06:13:51 +0000 Files and hashes: 1: E978EBFAC3752F5D920856938CCD5CB512D8A763.crl (hash: c36uS1eYjDFVs9oFDjqGflGle35q7Vkm9XZbtdcJRB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.crl rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:15:e2:cb:f9:b8:d8:ce:79:b4:ef:22:ed:17:ea:71:a3:59:ab:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E978EBFAC3752F5D920856938CCD5CB512D8A763 Validity Not Before: Jun 20 03:18:51 2026 GMT Not After : Jun 21 06:13:51 2026 GMT Subject: CN=BDCAEAFB3E2301B1177DB35941A149BF34E6DB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:8a:62:1e:27:88:12:93:ef:48:c7:6f:48: af:75:7a:80:33:7b:2b:9e:24:be:15:1e:db:27:b7: e9:35:b3:e8:ae:b6:c0:56:75:2a:5d:e4:61:2b:59: bc:be:42:2c:6f:12:8a:8a:7a:39:0e:74:5f:f1:b2: 2d:9e:ae:4f:4a:b5:4e:b1:8f:f2:24:e6:36:74:61: 18:9d:03:f2:d1:f4:46:ef:24:11:66:35:ce:75:33: ce:7a:8c:54:ae:06:3b:20:78:05:7b:02:c1:58:f1: f9:bd:e2:86:b7:0a:47:8a:84:1e:fc:b4:fe:59:6e: d4:79:db:03:a0:0e:23:99:a3:26:2c:c9:41:19:47: ea:89:9e:6a:13:7b:18:32:6b:7f:12:ca:55:e3:f7: 64:2d:a8:7a:74:98:93:d1:28:c4:b3:41:a8:4f:cd: 27:7c:2d:a2:d4:e0:31:07:bf:f5:ff:10:de:c1:30: c2:d9:9d:a3:c2:41:09:5e:3c:4d:b7:e5:3c:dd:78: f4:0c:ee:e4:35:81:db:32:b9:7f:67:21:24:c8:02: 1f:6e:24:35:e0:27:cf:dd:d3:1c:c8:e7:bc:c4:e5: 24:a1:e7:74:6a:cf:c5:fe:7b:57:78:1a:63:fb:33: 0b:8b:8d:c9:91:fa:8f:1e:41:48:b0:17:b6:3a:40: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CA:EA:FB:3E:23:01:B1:17:7D:B3:59:41:A1:49:BF:34:E6:DB:4A X509v3 Authority Key Identifier: keyid:E9:78:EB:FA:C3:75:2F:5D:92:08:56:93:8C:CD:5C:B5:12:D8:A7:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d3:f3:0c:8b:01:d8:fb:e1:00:6b:46:47:c2:91:b7:2f:b4: 9a:32:38:8a:71:af:0a:cf:a0:83:62:02:a5:92:c1:05:38:6b: bc:f1:dc:26:9c:9c:b9:7c:ba:32:58:46:6a:2f:35:76:be:ff: 22:69:77:fa:18:41:59:1a:53:96:81:e7:78:38:bb:1d:d4:c0: 2d:a5:a6:19:44:97:83:6f:2c:ac:92:de:be:05:39:cf:a6:92: 41:c1:f1:05:6c:cc:33:a5:5a:cf:d3:37:6c:d5:0e:6e:b3:86: 4e:6d:66:38:9a:c3:87:af:f5:a8:0f:f8:55:1d:d5:a0:4b:8d: 90:c7:9f:1e:b5:4e:fb:7a:4a:28:21:1a:ed:23:28:28:29:8a: e5:86:31:34:92:88:51:b6:01:3b:c4:e9:3f:0f:12:09:0e:5a: 13:8a:c3:8b:b1:92:8d:b3:f0:36:e9:45:ed:be:8a:d0:45:5b: d9:9a:f5:3d:33:19:e9:b3:3a:42:1a:75:9a:89:99:5b:a5:91: fb:28:3e:53:40:f5:8b:24:56:9d:72:58:b6:4f:8f:23:1d:45: f9:75:07:36:72:0b:23:49:18:df:dd:e9:1b:41:9e:36:98:fc: 55:3d:ce:73:d0:e2:4b:ec:48:43:0e:9f:7f:f6:09:d0:76:92: c9:58:f7:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBXiy/m42M55tO8i7RfqcaNZq0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3OEVCRkFDMzc1MkY1RDkyMDg1NjkzOENDRDVDQjUx MkQ4QTc2MzAeFw0yNjA2MjAwMzE4NTFaFw0yNjA2MjEwNjEzNTFaMDMxMTAvBgNV BAMTKEJEQ0FFQUZCM0UyMzAxQjExNzdEQjM1OTQxQTE0OUJGMzRFNkRCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQYpiHieIEpPvSMdvSK91eoAz eyueJL4VHtsnt+k1s+iutsBWdSpd5GErWby+QixvEoqKejkOdF/xsi2erk9KtU6x j/Ik5jZ0YRidA/LR9EbvJBFmNc51M856jFSuBjsgeAV7AsFY8fm94oa3CkeKhB78 tP5ZbtR52wOgDiOZoyYsyUEZR+qJnmoTexgya38SylXj92QtqHp0mJPRKMSzQahP zSd8LaLU4DEHv/X/EN7BMMLZnaPCQQlePE235TzdePQM7uQ1gdsyuX9nISTIAh9u JDXgJ8/d0xzI57zE5SSh53Rqz8X+e1d4GmP7MwuLjcmR+o8eQUiwF7Y6QOaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcrq+z4jAbEXfbNZQaFJvzTm20owHwYDVR0j BBgwFoAU6Xjr+sN1L12SCFaTjM1ctRLYp2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzEvRTk3OEVCRkFD Mzc1MkY1RDkyMDg1NjkzOENDRDVDQjUxMkQ4QTc2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTc4RUJGQUMzNzUyRjVEOTIwODU2OTM4Q0NENUNCNTEyRDhB NzYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzEvRTk3OEVCRkFDMzc1MkY1RDkyMDg1NjkzOENDRDVD QjUxMkQ4QTc2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrT8wyLAdj74QBrRkfCkbcvtJoyOIpxrwrP oINiAqWSwQU4a7zx3CacnLl8ujJYRmovNXa+/yJpd/oYQVkaU5aB53g4ux3UwC2l phlEl4NvLKyS3r4FOc+mkkHB8QVszDOlWs/TN2zVDm6zhk5tZjiaw4ev9agP+FUd 1aBLjZDHnx61Tvt6SighGu0jKCgpiuWGMTSSiFG2ATvE6T8PEgkOWhOKw4uxko2z 8DbpRe2+itBFW9ma9T0zGemzOkIadZqJmVulkfsoPlNA9YskVp1yWLZPjyMdRfl1 BzZyCyNJGN/d6RtBnjaY/FU9znPQ4kvsSEMOn3/2CdB2kslY98Y= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:13 2026 by rpki-client