$ rpki-client -vvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: p0GlxzQPeqDQdZANVlO8Uko2ZyZLIHOISawh7Avtvy0= Subject key identifier: B3:9D:C1:77:AC:D0:ED:46:56:6B:14:E5:CE:C5:86:74:14:BD:F6:2D Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 08C374A66462925C53DA37B68C9DD4BE77356156 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 20:15:25 +0000 Manifest this update: Fri 19 Jun 2026 20:10:25 +0000 Manifest next update: Sun 21 Jun 2026 00:10:25 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: 68BPLjZjLB5MPEuR6wzFVA2gE2ArXrH20r4pvquGosA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c3:74:a6:64:62:92:5c:53:da:37:b6:8c:9d:d4:be:77:35:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: Jun 19 20:10:25 2026 GMT Not After : Jun 21 00:10:25 2026 GMT Subject: CN=B39DC177ACD0ED46566B14E5CEC5867414BDF62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d5:76:92:9c:6a:51:f7:2c:d4:19:e0:d2:c2: 8a:2a:67:27:68:c3:01:05:96:4f:d4:46:08:92:04: 86:34:bd:f2:8a:a3:00:08:66:1a:cf:a2:03:5c:2d: 01:aa:00:93:bc:6a:c2:0d:b5:cb:32:4d:5f:12:f0: 59:7d:e2:ad:7d:d5:f4:01:08:ef:c7:05:7d:b0:a1: 05:7c:c3:c3:46:6c:43:9e:34:f3:27:90:c3:28:ed: df:69:92:f8:8b:e7:dd:3a:39:c5:8f:7d:4e:8b:41: a4:75:ed:88:1d:d7:d6:a6:8b:3d:39:ab:e7:48:ba: 15:1f:15:32:85:70:ec:60:49:35:8b:b3:33:0b:ad: 11:47:b6:5a:f3:ac:02:df:b8:ec:13:f3:c7:86:83: 7e:07:38:fa:73:0a:41:8c:3d:6d:13:fe:97:36:fc: 9b:55:e9:0e:d3:49:48:61:25:f7:79:21:8d:50:46: b7:fd:56:f9:43:ee:d0:26:c8:b7:f1:ab:33:32:4b: 1b:c3:1a:77:80:25:88:83:c5:d5:a4:04:25:2a:f0: c2:59:76:01:e0:26:3b:c5:e2:c4:f9:01:8e:ad:ff: 3c:03:05:0b:8a:a1:f6:83:ca:a4:ed:9b:2e:34:69: e0:0b:40:55:c3:b8:27:86:94:59:1e:80:6d:70:f9: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9D:C1:77:AC:D0:ED:46:56:6B:14:E5:CE:C5:86:74:14:BD:F6:2D X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ed:a2:70:fb:5c:49:e0:80:bf:3b:d3:6a:a3:e5:7d:46:55: a1:1a:d3:23:c8:00:02:e4:6a:60:a5:2a:01:00:5c:3d:67:4b: b8:0b:3e:1c:07:ba:e5:f2:4f:57:7c:b2:89:e7:c5:3f:ad:9c: bb:65:c6:d3:99:13:74:7a:71:15:12:0d:3a:66:d4:89:75:b8: a3:03:e7:1f:23:d0:80:f7:47:8b:a3:a0:5e:56:5f:1c:85:79: b6:90:c8:0f:32:ea:95:41:99:90:93:25:ad:67:30:90:6f:6f: 40:f5:fc:f3:f5:7e:dc:53:d5:58:4c:bc:03:d6:cd:ef:d5:c9: 4d:60:4e:e7:65:45:58:60:ae:d4:5b:e7:f8:e9:8b:d5:f2:0c: 1b:06:74:2b:ee:d4:b0:a8:07:db:37:fa:c9:ec:f5:32:d6:83: 65:14:e9:d8:b2:91:31:b4:df:8a:86:0d:a8:76:c7:96:ec:99: e4:e8:f7:44:56:b7:76:c2:70:18:71:32:e8:10:06:b3:d3:90: 53:2c:be:5f:be:da:be:03:7a:a5:87:5b:c7:b5:80:6d:60:9d: 37:53:59:5b:c1:88:dd:c4:98:64:9e:50:e9:d9:66:52:4e:2c: 54:9f:b6:55:df:ac:d2:10:de:51:b4:5b:a7:08:c6:cf:10:91: b1:ff:a5:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMN0pmRiklxT2je2jJ3Uvnc1YVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjA2MTkyMDEwMjVaFw0yNjA2MjEwMDEwMjVaMDMxMTAvBgNV BAMTKEIzOURDMTc3QUNEMEVENDY1NjZCMTRFNUNFQzU4Njc0MTRCREY2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl1XaSnGpR9yzUGeDSwooqZydo wwEFlk/URgiSBIY0vfKKowAIZhrPogNcLQGqAJO8asINtcsyTV8S8Fl94q191fQB CO/HBX2woQV8w8NGbEOeNPMnkMMo7d9pkviL5906OcWPfU6LQaR17Ygd19amiz05 q+dIuhUfFTKFcOxgSTWLszMLrRFHtlrzrALfuOwT88eGg34HOPpzCkGMPW0T/pc2 /JtV6Q7TSUhhJfd5IY1QRrf9VvlD7tAmyLfxqzMySxvDGneAJYiDxdWkBCUq8MJZ dgHgJjvF4sT5AY6t/zwDBQuKofaDyqTtmy40aeALQFXDuCeGlFkegG1w+dWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs53Bd6zQ7UZWaxTlzsWGdBS99i0wHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHtonD7XEnggL8702qj5X1GVaEa0yPIAALk amClKgEAXD1nS7gLPhwHuuXyT1d8sonnxT+tnLtlxtOZE3R6cRUSDTpm1Il1uKMD 5x8j0ID3R4ujoF5WXxyFebaQyA8y6pVBmZCTJa1nMJBvb0D1/PP1ftxT1VhMvAPW ze/VyU1gTudlRVhgrtRb5/jpi9XyDBsGdCvu1LCoB9s3+sns9TLWg2UU6diykTG0 34qGDah2x5bsmeTo90RWt3bCcBhxMugQBrPTkFMsvl++2r4DeqWHW8e1gG1gnTdT WVvBiN3EmGSeUOnZZlJOLFSftlXfrNIQ3lG0W6cIxs8QkbH/pUM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:28 2026 by rpki-client