$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft File: A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft (raw, json) Hash identifier: BGXcrQZ6lA/hNnZ20Di/V8blaE/mlghxNtwJ03XkV3s= Subject key identifier: 67:AA:54:70:E7:8E:BE:B0:EF:6B:53:F1:99:9D:AB:5B:93:76:B1:D4 Authority key identifier: A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 Certificate issuer: /CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Certificate serial: 4255AC3B0FB8EE7AFF34BB01319681D38EC8C7D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 20:20:29 +0000 Manifest this update: Fri 19 Jun 2026 20:15:29 +0000 Manifest next update: Sat 20 Jun 2026 23:05:29 +0000 Files and hashes: 1: A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl (hash: cYhUxPeQBvgfqlLOmrtJp3rbdEI3hfKOapLTFhrrm2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:55:ac:3b:0f:b8:ee:7a:ff:34:bb:01:31:96:81:d3:8e:c8:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Validity Not Before: Jun 19 20:15:29 2026 GMT Not After : Jun 20 23:05:29 2026 GMT Subject: CN=67AA5470E78EBEB0EF6B53F1999DAB5B9376B1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:82:8e:8c:90:2d:c0:98:e9:f9:6f:ac:96: a8:b0:e9:0a:f6:68:9d:46:2a:e4:18:93:0e:b5:60: 07:e9:fa:7b:89:2f:aa:44:4b:fd:30:c5:37:6e:47: e1:6d:19:50:9a:96:6e:32:66:0d:12:6c:3b:1b:37: 80:5a:c9:43:3f:9f:13:39:28:a1:c0:8e:16:28:2b: ec:31:24:ea:cb:c1:21:70:bc:fc:24:1d:7e:f8:04: 9f:63:2b:8a:d1:f0:64:b0:73:59:db:a8:23:4a:8f: 03:47:8f:38:21:45:5b:50:ca:d0:ba:6c:1c:0c:dd: b1:74:d5:9d:77:d3:ff:71:ae:35:c6:50:6e:20:d3: 6b:dd:fc:c6:bf:52:9b:c9:45:61:67:06:c4:97:6b: ea:a2:fa:89:4f:2e:33:be:52:f0:99:56:1a:73:ad: 66:d4:3f:06:50:74:65:f6:44:a6:3f:41:0f:f2:57: 34:1c:0e:35:dc:62:fd:9b:38:e6:3d:cc:0a:2f:f5: df:4a:3b:17:62:97:e5:c9:57:9e:03:f2:e7:fc:ae: 22:9c:bb:31:28:14:d6:e2:cf:26:e3:6f:92:0a:2a: c1:75:68:4f:29:7f:11:75:7b:be:4f:51:56:89:95: 6b:ad:15:39:58:a0:82:d2:31:c9:aa:e4:e5:0e:c9: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:54:70:E7:8E:BE:B0:EF:6B:53:F1:99:9D:AB:5B:93:76:B1:D4 X509v3 Authority Key Identifier: keyid:A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1c:ca:70:ab:92:58:50:bc:e1:b5:e4:4d:0a:ed:ac:47:e0: 85:2a:f2:b5:7b:19:fa:e0:a2:79:9a:69:6a:9b:a9:5b:74:2e: 74:9f:0f:60:3b:a8:31:b3:df:3e:31:1c:b6:8c:ee:a5:45:f4: 9a:03:e8:79:d3:02:3c:61:49:23:f2:90:4a:9b:64:74:7f:8a: 7d:8e:46:d5:0a:6a:33:62:2a:44:46:f3:d8:93:9b:7f:24:40: b8:05:1b:54:ed:ed:e9:07:00:5f:83:62:8f:26:56:23:2b:9c: 72:31:4b:fa:83:c8:d1:59:6e:6c:13:bc:1c:b3:6a:66:e0:8f: 34:dd:48:1d:a4:38:a7:dc:60:59:ee:8e:aa:f4:76:52:af:fa: 72:38:cb:44:26:ef:45:51:08:b8:1b:50:92:b2:e9:c4:0f:d1: cc:93:bf:1e:68:76:6f:2c:56:a8:2d:b0:9a:06:11:39:ea:50: 3f:1c:dd:d8:ed:a0:51:6c:c6:c7:8c:41:be:43:29:d6:d1:7b: 50:74:c8:0b:dc:a6:da:e2:93:d5:4c:1c:8d:c3:03:69:ba:17: 51:64:ff:6d:73:b4:cb:1f:a3:7b:16:19:cd:85:cd:03:0f:85: 2c:6f:47:b1:c5:10:da:58:32:2a:86:96:f1:f1:0e:99:cb:e9: 00:8a:2b:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlWsOw+47nr/NLsBMZaB047Ix9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2MzJC NzY5MzYxMDAeFw0yNjA2MTkyMDE1MjlaFw0yNjA2MjAyMzA1MjlaMDMxMTAvBgNV BAMTKDY3QUE1NDcwRTc4RUJFQjBFRjZCNTNGMTk5OURBQjVCOTM3NkIxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2noKOjJAtwJjp+W+slqiw6Qr2 aJ1GKuQYkw61YAfp+nuJL6pES/0wxTduR+FtGVCalm4yZg0SbDsbN4BayUM/nxM5 KKHAjhYoK+wxJOrLwSFwvPwkHX74BJ9jK4rR8GSwc1nbqCNKjwNHjzghRVtQytC6 bBwM3bF01Z130/9xrjXGUG4g02vd/Ma/UpvJRWFnBsSXa+qi+olPLjO+UvCZVhpz rWbUPwZQdGX2RKY/QQ/yVzQcDjXcYv2bOOY9zAov9d9KOxdil+XJV54D8uf8riKc uzEoFNbizybjb5IKKsF1aE8pfxF1e75PUVaJlWutFTlYoILSMcmq5OUOyf0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ6pUcOeOvrDva1PxmZ2rW5N2sdQwHwYDVR0j BBgwFoAUpKJfV4lWqO+p6P34oYD2MrdpNhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4ZmRlYjAtMzUxMy00ZjNkLTkyNTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4 OTU2QThFRkE5RThGREY4QTE4MEY2MzJCNzY5MzYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEEyNUY1Nzg5NTZBOEVGQTlFOEZERjhBMTgwRjYzMkI3Njkz NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2 MzJCNzY5MzYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4cynCrklhQvOG15E0K7axH4IUq8rV7Gfrg onmaaWqbqVt0LnSfD2A7qDGz3z4xHLaM7qVF9JoD6HnTAjxhSSPykEqbZHR/in2O RtUKajNiKkRG89iTm38kQLgFG1Tt7ekHAF+DYo8mViMrnHIxS/qDyNFZbmwTvByz ambgjzTdSB2kOKfcYFnujqr0dlKv+nI4y0Qm70VRCLgbUJKy6cQP0cyTvx5odm8s VqgtsJoGETnqUD8c3djtoFFsxseMQb5DKdbRe1B0yAvcptrik9VMHI3DA2m6F1Fk /21ztMsfo3sWGc2FzQMPhSxvR7HFENpYMiqGlvHxDpnL6QCKKwI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:26 2026 by rpki-client