$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft File: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft (raw, json) Hash identifier: SsbyvZKCI1kWikG1Ty/rheC6cyDEFQdebvIosaP8vlU= Subject key identifier: 1F:D9:DE:B0:BF:59:81:12:0E:56:76:D0:C8:8D:E0:A4:6B:B1:62:B5 Authority key identifier: 10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 Certificate issuer: /CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Certificate serial: 0B0003FDDFBE4F57C25AD25EC4C1F8533116ABFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 02:43:05 +0000 Manifest this update: Sat 20 Jun 2026 02:38:05 +0000 Manifest next update: Sun 21 Jun 2026 05:58:05 +0000 Files and hashes: 1: 101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl (hash: 2BuevjDL04OnuzF+Y0u9ZsbDC3P7FppgTL4UeyEhIfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:00:03:fd:df:be:4f:57:c2:5a:d2:5e:c4:c1:f8:53:31:16:ab:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101FB784020D5CA6B8B0A42E7A29974DB041EF88 Validity Not Before: Jun 20 02:38:05 2026 GMT Not After : Jun 21 05:58:05 2026 GMT Subject: CN=1FD9DEB0BF5981120E5676D0C88DE0A46BB162B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:7a:36:af:d6:42:f7:be:99:80:29:89:ea: f4:0f:67:06:fa:2e:56:30:c4:fc:6b:bb:a8:34:0e: fc:49:b4:35:a9:5b:19:8c:41:72:8e:72:f7:a8:65: 83:fd:90:a4:5c:14:69:0d:05:1e:14:b9:cc:47:6b: 18:96:03:bf:a3:4c:03:e2:c5:c8:81:7d:d9:86:b0: a8:e8:54:0c:7b:ea:04:0c:39:04:de:99:c3:5c:bc: f1:1b:7a:a6:f8:4b:ea:aa:ec:62:4b:51:6d:06:fd: 2c:1c:96:0b:65:42:67:45:34:01:df:48:bb:de:b4: b4:a8:57:04:4d:30:ba:1b:68:0e:a4:4b:08:df:75: 16:02:ab:86:e4:15:08:74:05:4a:48:82:67:d7:11: 8e:a6:12:3b:3c:a3:8b:fd:41:9e:47:77:05:a1:f8: fa:17:63:bb:f7:c9:ed:9d:45:c7:92:f7:86:61:83: 24:b9:f5:b2:4d:57:60:36:27:a5:3f:72:1a:e9:7a: e2:14:7a:b4:ab:e8:d1:23:7a:29:81:22:de:b2:39: d8:37:9e:f6:6f:62:29:99:73:ad:d1:fb:b6:6f:fb: 8c:c7:bf:34:b0:71:13:54:24:a7:f2:3b:d7:17:48: 53:b8:c9:47:22:85:e8:e2:3e:64:3e:e0:33:5f:e5: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D9:DE:B0:BF:59:81:12:0E:56:76:D0:C8:8D:E0:A4:6B:B1:62:B5 X509v3 Authority Key Identifier: keyid:10:1F:B7:84:02:0D:5C:A6:B8:B0:A4:2E:7A:29:97:4D:B0:41:EF:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101FB784020D5CA6B8B0A42E7A29974DB041EF88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/101FB784020D5CA6B8B0A42E7A29974DB041EF88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f1:86:86:57:6b:29:89:3f:34:98:09:f8:87:23:dc:f6:0b: e7:41:03:38:21:46:ed:99:d2:83:b1:c9:66:23:86:dd:9c:2d: af:d6:ce:1c:4c:7d:29:1d:ac:89:6e:d2:10:27:5a:b3:1d:af: 4a:9b:15:f7:64:99:f2:9d:8a:82:fd:85:17:2f:6a:12:38:d4: 7f:8f:00:0d:8a:5d:08:81:88:81:b0:3b:81:cd:5c:a4:80:63: ec:19:45:c9:2f:62:6e:df:64:31:bc:1c:24:cf:f6:22:a5:2b: 26:da:32:fa:a1:d0:6f:1e:9e:fb:ab:2f:69:31:c5:7f:88:56: ee:ed:21:07:0e:26:e5:f1:7c:10:2e:80:d8:d7:7d:30:1f:6e: 03:7a:d4:c0:98:e6:7e:a8:d1:93:fd:0a:3e:00:9f:56:76:c8: 50:6e:3f:10:dc:d4:ae:b5:f9:40:2d:ae:92:a2:8c:74:59:38: c6:80:00:59:54:e4:bc:f8:2b:e6:64:bb:14:15:b3:fb:a3:2e: d7:77:3b:72:eb:dd:a9:64:14:9e:3e:92:32:e5:a5:4e:c7:fc: 3c:33:5d:79:d8:31:6c:79:e2:72:c9:9f:6c:38:2b:c5:b4:a8: 6f:c3:99:c2:06:32:64:f8:d7:81:03:f1:77:af:06:ba:8a:75: 0f:61:e7:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwAD/d++T1fCWtJexMH4UzEWq/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3NERC MDQxRUY4ODAeFw0yNjA2MjAwMjM4MDVaFw0yNjA2MjEwNTU4MDVaMDMxMTAvBgNV BAMTKDFGRDlERUIwQkY1OTgxMTIwRTU2NzZEMEM4OERFMEE0NkJCMTYyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWno2r9ZC976ZgCmJ6vQPZwb6 LlYwxPxru6g0DvxJtDWpWxmMQXKOcveoZYP9kKRcFGkNBR4UucxHaxiWA7+jTAPi xciBfdmGsKjoVAx76gQMOQTemcNcvPEbeqb4S+qq7GJLUW0G/SwclgtlQmdFNAHf SLvetLSoVwRNMLobaA6kSwjfdRYCq4bkFQh0BUpIgmfXEY6mEjs8o4v9QZ5HdwWh +PoXY7v3ye2dRceS94ZhgyS59bJNV2A2J6U/chrpeuIUerSr6NEjeimBIt6yOdg3 nvZvYimZc63R+7Zv+4zHvzSwcRNUJKfyO9cXSFO4yUcihejiPmQ+4DNf5f4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9nesL9ZgRIOVnbQyI3gpGuxYrUwHwYDVR0j BBgwFoAUEB+3hAINXKa4sKQueimXTbBB74gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExNGJmZjItNDc4OS00MDE3LThmYWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQw MjBENUNBNkI4QjBBNDJFN0EyOTk3NERCMDQxRUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDFGQjc4NDAyMEQ1Q0E2QjhCMEE0MkU3QTI5OTc0REIwNDFF Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMTAxRkI3ODQwMjBENUNBNkI4QjBBNDJFN0EyOTk3 NERCMDQxRUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELxhoZXaymJPzSYCfiHI9z2C+dBAzghRu2Z 0oOxyWYjht2cLa/WzhxMfSkdrIlu0hAnWrMdr0qbFfdkmfKdioL9hRcvahI41H+P AA2KXQiBiIGwO4HNXKSAY+wZRckvYm7fZDG8HCTP9iKlKybaMvqh0G8envurL2kx xX+IVu7tIQcOJuXxfBAugNjXfTAfbgN61MCY5n6o0ZP9Cj4An1Z2yFBuPxDc1K61 +UAtrpKijHRZOMaAAFlU5Lz4K+ZkuxQVs/ujLtd3O3Lr3alkFJ4+kjLlpU7H/Dwz XXnYMWx54nLJn2w4K8W0qG/DmcIGMmT414ED8XevBrqKdQ9h5y4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:36 2026 by rpki-client