$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft File: 583609807E4BA80D0B54C99C333B7590A6907BD4.mft (raw, json) Hash identifier: GJaWnMCgOXK47LCVEg06EnqLRfPgGroOlzuWuaJct3Y= Subject key identifier: 49:1A:A9:A4:1D:11:6D:84:18:CC:D7:F2:DF:5D:D0:8C:53:3D:97:87 Authority key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 Certificate issuer: /CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Certificate serial: 42FE0E15B95CE648CB92212BA9329F81E2467CA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:44:50 +0000 Manifest this update: Fri 19 Jun 2026 19:39:50 +0000 Manifest next update: Sat 20 Jun 2026 22:38:50 +0000 Files and hashes: 1: 583609807E4BA80D0B54C99C333B7590A6907BD4.crl (hash: hUdRQ9bKDd3jM7yWJzYB7dJDmmnRIPAY8WszKgw0klk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fe:0e:15:b9:5c:e6:48:cb:92:21:2b:a9:32:9f:81:e2:46:7c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583609807E4BA80D0B54C99C333B7590A6907BD4 Validity Not Before: Jun 19 19:39:50 2026 GMT Not After : Jun 20 22:38:50 2026 GMT Subject: CN=491AA9A41D116D8418CCD7F2DF5DD08C533D9787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:7a:3e:74:b0:33:d5:39:7b:23:e9:bd:65: 9a:3e:92:98:1a:72:9a:3a:34:b4:0e:5c:19:b9:c6: 1e:5a:4c:12:b1:f0:24:6b:4f:45:df:8c:7a:35:c6: dd:8f:1e:72:b2:59:66:08:40:d2:1b:01:66:01:01: 67:90:60:b7:62:65:44:08:81:75:77:88:44:03:c1: 5a:e4:f0:35:9d:d0:12:ee:90:57:58:d8:8e:60:d7: 2e:a6:81:1e:98:a2:04:7a:85:96:32:f4:31:7d:b1: d3:1a:31:f5:a3:a7:55:f4:12:92:6f:b2:64:34:9c: 82:6b:c6:26:8d:df:3c:38:b3:ea:d0:69:8d:4e:ac: 94:92:4b:84:e2:87:6b:e9:dc:fc:9c:47:7e:16:b9: 32:61:1a:f1:ee:dc:52:21:44:71:b4:62:85:7a:50: c9:49:da:6d:b8:88:55:1b:f9:50:e1:11:c7:1a:8e: 54:64:f7:a8:25:45:4e:64:95:d0:80:c4:6a:1c:ae: 95:91:8e:7a:a0:b0:17:10:b5:24:8d:03:24:4f:64: ff:c5:d8:33:4b:16:af:70:d7:62:d3:d6:f2:86:77: bf:70:f1:0d:d7:bc:75:9c:ef:03:81:e6:33:0a:99: 8c:d8:b2:76:32:c1:17:a5:32:c3:ef:83:8c:29:e9: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:A9:A4:1D:11:6D:84:18:CC:D7:F2:DF:5D:D0:8C:53:3D:97:87 X509v3 Authority Key Identifier: keyid:58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a9:cc:96:31:81:4e:bf:e1:15:26:8e:73:cf:ed:69:b6:03: b9:31:1e:2e:05:e6:f2:86:00:47:8f:64:c5:63:7f:2f:6d:09: 6b:78:46:55:d5:55:c6:ef:83:50:51:93:3a:6f:44:57:e8:5e: ef:e1:65:fb:cb:fe:0c:d1:19:8b:92:98:35:38:93:d4:f5:d8: 79:82:80:16:34:9d:71:b1:37:4c:f8:b3:46:72:f0:2f:30:93: 31:ec:2c:06:bb:8f:a4:f7:a1:ec:bb:92:fd:13:20:7c:0b:2f: c5:fb:37:6c:47:18:3c:3a:37:a9:b6:db:58:ed:2d:ed:73:19: 07:f6:c7:d8:41:e4:db:4b:63:54:e3:e1:f1:10:cf:1b:f8:4b: ea:6d:64:b4:e6:ef:b4:23:34:77:b2:e8:01:c5:48:0c:11:a3: 74:8e:3e:2a:28:aa:0c:37:2e:88:e8:57:81:25:15:db:af:af: 29:41:b2:28:71:7d:c0:95:f7:38:e2:44:08:33:a1:96:67:5b: c1:ba:1d:fb:c0:9c:b5:93:b9:f4:bd:d4:06:0a:f9:b2:12:10: 60:8f:3c:10:10:b4:e4:44:e5:05:0e:80:4a:cf:55:ab:56:f3: df:59:62:b0:c2:1e:7f:71:06:5d:da:9b:7d:53:86:ba:b6:15: d3:4f:2f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQv4OFblc5kjLkiErqTKfgeJGfKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBB NjkwN0JENDAeFw0yNjA2MTkxOTM5NTBaFw0yNjA2MjAyMjM4NTBaMDMxMTAvBgNV BAMTKDQ5MUFBOUE0MUQxMTZEODQxOENDRDdGMkRGNUREMDhDNTMzRDk3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTXo+dLAz1Tl7I+m9ZZo+kpga cpo6NLQOXBm5xh5aTBKx8CRrT0XfjHo1xt2PHnKyWWYIQNIbAWYBAWeQYLdiZUQI gXV3iEQDwVrk8DWd0BLukFdY2I5g1y6mgR6YogR6hZYy9DF9sdMaMfWjp1X0EpJv smQ0nIJrxiaN3zw4s+rQaY1OrJSSS4Tih2vp3PycR34WuTJhGvHu3FIhRHG0YoV6 UMlJ2m24iFUb+VDhEccajlRk96glRU5kldCAxGocrpWRjnqgsBcQtSSNAyRPZP/F 2DNLFq9w12LT1vKGd79w8Q3XvHWc7wOB5jMKmYzYsnYywRelMsPvg4wp6UZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRqppB0RbYQYzNfy313QjFM9l4cwHwYDVR0j BBgwFoAUWDYJgH5LqA0LVMmcMzt1kKaQe9QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjMjJjMmUtYWNhNy00MmYyLTliOGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3 RTRCQTgwRDBCNTRDOTlDMzMzQjc1OTBBNjkwN0JENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODM2MDk4MDdFNEJBODBEMEI1NEM5OUMzMzNCNzU5MEE2OTA3 QkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvNTgzNjA5ODA3RTRCQTgwRDBCNTRDOTlDMzMzQjc1 OTBBNjkwN0JENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+pzJYxgU6/4RUmjnPP7Wm2A7kxHi4F5vKG AEePZMVjfy9tCWt4RlXVVcbvg1BRkzpvRFfoXu/hZfvL/gzRGYuSmDU4k9T12HmC gBY0nXGxN0z4s0Zy8C8wkzHsLAa7j6T3oey7kv0TIHwLL8X7N2xHGDw6N6m221jt Le1zGQf2x9hB5NtLY1Tj4fEQzxv4S+ptZLTm77QjNHey6AHFSAwRo3SOPiooqgw3 LojoV4ElFduvrylBsihxfcCV9zjiRAgzoZZnW8G6HfvAnLWTufS91AYK+bISEGCP PBAQtORE5QUOgErPVatW899ZYrDCHn9xBl3am31Thrq2FdNPL6o= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:40 2026 by rpki-client