$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: fpMVjtdZgqQaNpqIiifi5plmtD69IiOQPOGl0YEAL4E= Subject key identifier: A1:63:45:AD:44:97:FB:ED:A3:F1:C4:15:96:C7:11:9C:E7:B8:F7:A0 Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 3B1370E1A15CCB915A08C914AAC9FE31B64F0E5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 13:37:20 +0000 Manifest this update: Fri 19 Jun 2026 13:32:20 +0000 Manifest next update: Sat 20 Jun 2026 17:19:20 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: OA25w2Dbt1+j2BW9Vx/8aBu2MK5V66fdokonrShHScU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:13:70:e1:a1:5c:cb:91:5a:08:c9:14:aa:c9:fe:31:b6:4f:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: Jun 19 13:32:20 2026 GMT Not After : Jun 20 17:19:20 2026 GMT Subject: CN=A16345AD4497FBEDA3F1C41596C7119CE7B8F7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:6f:cf:58:be:e2:65:22:59:92:44:5e:ba: 71:ca:8e:8b:f1:b2:77:03:e0:dc:34:42:01:be:ba: 9b:b3:20:a3:51:41:64:77:32:ba:69:7a:d9:87:8d: 9f:81:19:cf:9e:af:52:e6:89:49:cd:ba:e8:57:c0: 20:d2:e1:a4:fd:7b:e1:07:8f:00:5f:fc:42:69:bb: 85:aa:e0:5d:84:13:28:13:96:88:3f:af:bc:40:55: 72:53:0e:7b:bd:40:ca:d6:9d:2e:a9:e8:56:cf:85: d8:28:07:25:62:92:1c:b8:2f:e3:69:e1:78:d8:95: fd:2d:77:4d:1c:d2:98:2c:ae:9a:9c:40:f6:ad:e4: ce:b8:4a:19:2d:9c:cc:95:fd:8b:65:7c:b1:9c:49: 1c:34:90:2c:a3:b5:50:c3:64:04:f3:85:8b:83:ac: be:d6:3e:d8:a4:a4:6a:17:7a:b5:78:51:1e:f0:e2: 98:07:d3:63:12:bd:81:a4:23:ad:a8:39:a5:aa:3d: b3:94:60:e6:ab:f2:cf:1a:2d:a3:3a:72:af:83:2f: 3c:8f:de:db:80:1d:9f:86:2f:08:fc:23:e9:ff:26: cc:97:60:3f:d4:56:f2:2b:31:fb:81:f1:15:03:2d: 21:5a:90:87:c7:d6:e6:6a:3b:7e:03:5f:12:8d:cb: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:63:45:AD:44:97:FB:ED:A3:F1:C4:15:96:C7:11:9C:E7:B8:F7:A0 X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2f:04:31:a7:b2:68:07:e9:65:f0:32:eb:5d:76:2e:90:0d: 96:e0:d0:64:d6:0f:ef:0b:f7:c6:17:31:c4:18:6e:16:48:03: 07:87:90:9f:b3:c4:83:a3:5e:b9:30:be:93:c1:46:99:e7:9f: 7f:35:0f:4c:06:b7:a3:98:ab:f6:ee:d7:70:4e:3c:0a:c4:a7: 76:7e:e6:40:b6:7e:f7:a7:82:e3:06:38:ae:e2:ec:eb:59:3d: 75:39:74:94:cf:5b:4b:b6:cf:3f:3f:17:38:d0:01:a0:ee:d5: 23:4f:bc:dd:7f:ef:73:85:85:f3:56:e5:dc:37:a1:bd:de:d7: eb:4c:07:9c:fd:07:59:20:f5:e2:cf:ac:d7:8b:2e:32:b8:c1: cb:c8:73:00:d6:af:83:c3:ec:18:86:2f:aa:13:18:ad:75:c8: 48:90:08:e8:7a:04:21:18:f9:ba:b1:49:2e:fd:5a:14:01:95: 9d:10:b7:7e:02:23:e7:27:f1:41:e0:d8:4c:32:c8:a3:83:73: 4c:18:3c:90:8b:72:ce:be:06:d3:e5:0d:91:67:9c:96:7f:f8: 24:3b:21:ad:6d:2f:ca:eb:cc:2d:c5:18:47:a4:ec:e3:62:b7: fd:0f:ca:12:53:d7:c7:8f:49:8a:60:71:62:30:a4:c0:94:9c: f1:4b:5a:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxNw4aFcy5FaCMkUqsn+MbZPDlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA2MTkxMzMyMjBaFw0yNjA2MjAxNzE5MjBaMDMxMTAvBgNV BAMTKEExNjM0NUFENDQ5N0ZCRURBM0YxQzQxNTk2QzcxMTlDRTdCOEY3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Bm/PWL7iZSJZkkReunHKjovx sncD4Nw0QgG+upuzIKNRQWR3MrppetmHjZ+BGc+er1LmiUnNuuhXwCDS4aT9e+EH jwBf/EJpu4Wq4F2EEygTlog/r7xAVXJTDnu9QMrWnS6p6FbPhdgoByVikhy4L+Np 4XjYlf0td00c0pgsrpqcQPat5M64ShktnMyV/YtlfLGcSRw0kCyjtVDDZATzhYuD rL7WPtikpGoXerV4UR7w4pgH02MSvYGkI62oOaWqPbOUYOar8s8aLaM6cq+DLzyP 3tuAHZ+GLwj8I+n/JsyXYD/UVvIrMfuB8RUDLSFakIfH1uZqO34DXxKNyxsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoWNFrUSX++2j8cQVlscRnOe496AwHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgvBDGnsmgH6WXwMutddi6QDZbg0GTWD+8L 98YXMcQYbhZIAweHkJ+zxIOjXrkwvpPBRpnnn381D0wGt6OYq/bu13BOPArEp3Z+ 5kC2fvenguMGOK7i7OtZPXU5dJTPW0u2zz8/FzjQAaDu1SNPvN1/73OFhfNW5dw3 ob3e1+tMB5z9B1kg9eLPrNeLLjK4wcvIcwDWr4PD7BiGL6oTGK11yEiQCOh6BCEY +bqxSS79WhQBlZ0Qt34CI+cn8UHg2EwyyKODc0wYPJCLcs6+BtPlDZFnnJZ/+CQ7 Ia1tL8rrzC3FGEek7ONit/0PyhJT18ePSYpgcWIwpMCUnPFLWt8= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:03 2026 by rpki-client