$ rpki-client -vvf rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft File: 0565770E1E5C778DB06AD63B009F91D2D34746C1.mft (raw, json) Hash identifier: O40Zd7yDSngbjQfkPoZ3rP/QSLz5lsVghwv8yCimonk= Subject key identifier: 25:B3:8D:8F:1A:BB:CF:7C:D7:B7:B4:5C:66:5F:58:C1:D9:C4:E9:2F Authority key identifier: 05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1 Certificate issuer: /CN=0565770E1E5C778DB06AD63B009F91D2D34746C1 Certificate serial: 2AC35F8915EE53FBD5A557527CD4A6D033EC9EA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 21:26:48 +0000 Manifest this update: Fri 19 Jun 2026 21:21:48 +0000 Manifest next update: Sat 20 Jun 2026 21:48:48 +0000 Files and hashes: 1: 0565770E1E5C778DB06AD63B009F91D2D34746C1.crl (hash: NLvGtsQSJd4NJVSqCOEg4Fym/7qZHzzcOmAJ2agajsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c3:5f:89:15:ee:53:fb:d5:a5:57:52:7c:d4:a6:d0:33:ec:9e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0565770E1E5C778DB06AD63B009F91D2D34746C1 Validity Not Before: Jun 19 21:21:48 2026 GMT Not After : Jun 20 21:48:48 2026 GMT Subject: CN=25B38D8F1ABBCF7CD7B7B45C665F58C1D9C4E92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:0e:70:e8:f9:26:03:c2:c2:1c:c5:81:fc: 4f:dc:4f:9b:67:b5:e2:b4:5f:31:16:0c:84:be:84: e2:b7:c9:d8:b7:de:0b:19:91:5f:0e:db:b6:d2:3a: 20:2f:be:b9:7f:8d:93:ca:57:08:47:f2:fb:3e:6b: 77:e9:dc:fb:8a:e7:4b:97:67:9a:a3:b3:59:f0:70: 1e:4e:e8:47:40:e8:a5:95:9e:e8:f8:97:75:15:d2: 3d:97:ba:a0:41:63:96:bf:ba:b5:27:5e:00:74:79: 58:30:0b:ee:91:ba:04:4e:fa:02:33:12:f7:79:79: a2:fe:ed:79:62:3d:e2:c1:30:09:28:26:d8:71:52: ec:e3:3e:09:47:aa:b7:ce:f0:68:63:71:7c:3a:77: a6:27:64:b1:d7:25:9f:9d:12:76:b7:1a:c9:7a:d6: 7a:cc:78:e7:bb:d6:2b:1d:9e:0d:c5:c5:2f:41:5c: 86:4d:9f:8a:5e:98:9d:7c:e9:b8:1e:fc:36:4b:49: df:2b:e3:c6:07:f1:2d:8f:50:af:9a:25:e1:24:60: 63:0f:a5:49:ad:53:56:d5:a4:f2:61:c9:5a:45:b5: 61:0b:5a:6d:06:78:00:ac:7c:74:35:36:7a:d9:ce: 1c:94:78:d9:76:ad:53:88:5f:11:30:f0:22:f6:44: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B3:8D:8F:1A:BB:CF:7C:D7:B7:B4:5C:66:5F:58:C1:D9:C4:E9:2F X509v3 Authority Key Identifier: keyid:05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1c:2f:94:e3:5b:7a:47:54:61:00:38:a0:a2:28:68:cd:0a: bc:11:81:68:b6:89:8a:35:1a:52:29:49:ce:1d:6d:de:f4:cc: c8:fc:96:d0:57:73:e1:7d:85:ba:64:b3:d6:c1:70:39:48:f4: c2:cb:b4:35:6d:58:4e:7f:22:3d:a0:08:0e:b7:04:87:83:2c: f4:00:94:29:19:36:46:32:cf:34:70:6b:da:d5:62:45:d7:eb: 9d:57:8e:aa:a9:f8:49:e1:bb:63:c9:f2:04:41:8a:8b:ef:4b: 8a:b0:dc:52:86:4f:10:5c:c8:1f:a3:a6:67:71:42:51:7d:60: ab:c0:6f:61:07:ce:74:81:19:9e:80:4f:ad:9a:66:42:42:ac: f8:f7:c2:00:ed:8f:02:99:e2:df:89:c4:68:00:0f:22:5e:ba: 0c:f3:08:fb:16:02:a2:1c:1a:00:cf:f8:3a:54:9e:f2:da:30: 3f:86:bb:af:a9:6b:3b:09:06:01:8b:1d:48:08:d1:75:38:5a: ed:3a:1e:9f:d8:6e:c7:e7:9c:1f:b8:da:28:93:fd:57:33:f5: cd:17:34:51:7f:40:c9:7a:d9:f2:f7:3f:20:8c:94:ce:64:ed: 82:e7:82:a9:3c:93:91:d5:30:e6:6f:28:6f:6e:c1:56:09:b7: 9d:80:03:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsNfiRXuU/vVpVdSfNSm0DPsnqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NTc3MEUxRTVDNzc4REIwNkFENjNCMDA5RjkxRDJE MzQ3NDZDMTAeFw0yNjA2MTkyMTIxNDhaFw0yNjA2MjAyMTQ4NDhaMDMxMTAvBgNV BAMTKDI1QjM4RDhGMUFCQkNGN0NEN0I3QjQ1QzY2NUY1OEMxRDlDNEU5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4A5w6PkmA8LCHMWB/E/cT5tn teK0XzEWDIS+hOK3ydi33gsZkV8O27bSOiAvvrl/jZPKVwhH8vs+a3fp3PuK50uX Z5qjs1nwcB5O6EdA6KWVnuj4l3UV0j2XuqBBY5a/urUnXgB0eVgwC+6RugRO+gIz Evd5eaL+7XliPeLBMAkoJthxUuzjPglHqrfO8GhjcXw6d6YnZLHXJZ+dEna3Gsl6 1nrMeOe71isdng3FxS9BXIZNn4pemJ186bge/DZLSd8r48YH8S2PUK+aJeEkYGMP pUmtU1bVpPJhyVpFtWELWm0GeACsfHQ1NnrZzhyUeNl2rVOIXxEw8CL2RAmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJbONjxq7z3zXt7RcZl9YwdnE6S8wHwYDVR0j BBgwFoAUBWV3Dh5cd42watY7AJ+R0tNHRsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDk1NTZhMzEtOTM3ZS00YWZlLWI5OWEtMjc0Yzk1MjRmOTgxLzAvMDU2NTc3MEUx RTVDNzc4REIwNkFENjNCMDA5RjkxRDJEMzQ3NDZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTY1NzcwRTFFNUM3NzhEQjA2QUQ2M0IwMDlGOTFEMkQzNDc0 NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvMDU2NTc3MEUxRTVDNzc4REIwNkFENjNCMDA5Rjkx RDJEMzQ3NDZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACscL5TjW3pHVGEAOKCiKGjNCrwRgWi2iYo1 GlIpSc4dbd70zMj8ltBXc+F9hbpks9bBcDlI9MLLtDVtWE5/Ij2gCA63BIeDLPQA lCkZNkYyzzRwa9rVYkXX651Xjqqp+Enhu2PJ8gRBiovvS4qw3FKGTxBcyB+jpmdx QlF9YKvAb2EHznSBGZ6AT62aZkJCrPj3wgDtjwKZ4t+JxGgADyJeugzzCPsWAqIc GgDP+DpUnvLaMD+Gu6+pazsJBgGLHUgI0XU4Wu06Hp/YbsfnnB+42iiT/Vcz9c0X NFF/QMl62fL3PyCMlM5k7YLngqk8k5HVMOZvKG9uwVYJt52AAxY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:08 2026 by rpki-client