$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft File: 10B2C61A3BF002D69AD557B8392E1F340162A168.mft (raw, json) Hash identifier: rBIATtkVpBjK9qPZa3IF0CnbU6NH+kM4RRzhhJzItHA= Subject key identifier: 0E:14:21:EC:3C:3A:F1:B5:9B:48:2E:D3:B0:4B:37:B2:71:EC:28:C4 Authority key identifier: 10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 Certificate issuer: /CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Certificate serial: 7C4A69E6E661552B02BCC48A2A54EB941D5CD660 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 21:11:27 +0000 Manifest this update: Fri 19 Jun 2026 21:06:27 +0000 Manifest next update: Sat 20 Jun 2026 22:14:27 +0000 Files and hashes: 1: 10B2C61A3BF002D69AD557B8392E1F340162A168.crl (hash: 87by8x9EsbCav0S+hhSN5AVrFHfgEbTvOZTgmXUmy7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4a:69:e6:e6:61:55:2b:02:bc:c4:8a:2a:54:eb:94:1d:5c:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B2C61A3BF002D69AD557B8392E1F340162A168 Validity Not Before: Jun 19 21:06:27 2026 GMT Not After : Jun 20 22:14:27 2026 GMT Subject: CN=0E1421EC3C3AF1B59B482ED3B04B37B271EC28C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:10:09:cc:ff:fc:be:cd:66:97:c6:1b:0c: 0c:69:01:56:e4:b9:a9:40:ad:7c:57:41:69:72:1c: cb:79:a2:eb:12:0c:5a:5f:8f:eb:09:a6:4f:5d:8c: 37:69:cf:62:ed:84:72:f9:e7:76:e6:bb:43:8c:8f: c1:5b:4f:8e:e4:92:a0:03:a5:1f:15:01:b9:1b:da: ed:19:f0:f7:da:74:69:02:07:1c:18:61:25:cf:47: 30:30:06:5a:9a:1c:4d:7c:4d:85:d3:c2:f5:35:68: f5:dc:e0:d4:06:4f:f0:7b:23:33:5c:8a:a0:b1:2f: 5f:15:5b:cd:64:4b:13:5f:37:6e:4e:7f:cf:4b:bd: 29:b0:e7:4d:d2:07:e0:18:2c:17:c3:cd:e2:83:67: 44:d7:cd:b2:55:52:d1:4d:d7:ba:f2:7d:4d:22:9c: 7f:55:f2:88:7f:e5:a0:10:ac:ec:7e:4d:da:c7:ca: 27:4d:9b:30:7c:eb:ad:2a:6a:2c:1a:c0:6c:4c:15: f8:a5:2d:d5:ae:b3:b1:c1:3f:dc:ca:f9:71:7c:85: a5:7c:98:25:ad:e2:73:ee:57:07:f3:31:44:2f:08: f1:5f:8b:1a:42:8a:2e:92:f0:8d:1f:9b:2f:94:c8: d8:aa:32:21:9a:c1:f0:7d:21:98:4c:99:81:04:5a: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:14:21:EC:3C:3A:F1:B5:9B:48:2E:D3:B0:4B:37:B2:71:EC:28:C4 X509v3 Authority Key Identifier: keyid:10:B2:C6:1A:3B:F0:02:D6:9A:D5:57:B8:39:2E:1F:34:01:62:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/10B2C61A3BF002D69AD557B8392E1F340162A168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/10B2C61A3BF002D69AD557B8392E1F340162A168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:76:64:69:4e:83:f5:5d:56:a9:13:9e:0a:2b:8b:86:ec:b3: 8d:7f:6a:f6:d4:a8:05:4c:86:17:f6:1a:13:21:1f:60:73:b5: 82:e4:41:09:2b:a7:f5:4a:1d:14:66:0c:d9:f1:b9:ee:a1:d7: bc:af:09:35:c4:19:c1:e6:e1:e1:f4:88:bd:7f:fe:ef:ae:b5: cd:cb:2d:59:13:3d:85:c4:8d:e4:f3:4b:df:35:4d:f1:e3:ed: 61:b7:08:7f:e3:20:ca:ca:74:61:5c:8a:6d:41:b9:30:2c:2a: bc:5d:cf:96:0d:3b:4f:34:03:ea:8d:c8:2d:59:8d:d4:d3:10: b8:6e:47:12:49:bf:15:cb:aa:41:72:9a:24:0a:65:e5:3d:40: 08:a3:fd:05:fe:39:19:44:fd:aa:b6:39:ad:1a:59:3a:59:0e: d0:2a:84:0f:6d:ff:48:7a:02:6e:d7:ef:45:68:dd:b7:71:19: f3:9e:10:f0:91:73:93:07:20:e0:98:ad:e9:4b:d6:04:63:ad: e7:ed:3e:e6:74:3c:25:d1:86:eb:7a:12:94:45:18:e1:5d:c3: 17:25:4f:f1:1a:46:ff:40:ba:d5:b8:4e:ba:ef:ed:16:f2:60: 5e:49:79:e7:02:1e:cc:3f:40:1f:25:81:90:e8:9d:aa:76:da: 75:2c:9d:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEpp5uZhVSsCvMSKKlTrlB1c1mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFGMzQw MTYyQTE2ODAeFw0yNjA2MTkyMTA2MjdaFw0yNjA2MjAyMjE0MjdaMDMxMTAvBgNV BAMTKDBFMTQyMUVDM0MzQUYxQjU5QjQ4MkVEM0IwNEIzN0IyNzFFQzI4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KBAJzP/8vs1ml8YbDAxpAVbk ualArXxXQWlyHMt5ousSDFpfj+sJpk9djDdpz2LthHL553bmu0OMj8FbT47kkqAD pR8VAbkb2u0Z8PfadGkCBxwYYSXPRzAwBlqaHE18TYXTwvU1aPXc4NQGT/B7IzNc iqCxL18VW81kSxNfN25Of89LvSmw503SB+AYLBfDzeKDZ0TXzbJVUtFN17ryfU0i nH9V8oh/5aAQrOx+TdrHyidNmzB8660qaiwawGxMFfilLdWus7HBP9zK+XF8haV8 mCWt4nPuVwfzMUQvCPFfixpCii6S8I0fmy+UyNiqMiGawfB9IZhMmYEEWmanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhQh7Dw68bWbSC7TsEs3snHsKMQwHwYDVR0j BBgwFoAUELLGGjvwAtaa1Ve4OS4fNAFioWgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEz QkYwMDJENjlBRDU1N0I4MzkyRTFGMzQwMTYyQTE2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy8xMEIyQzYxQTNCRjAwMkQ2OUFENTU3QjgzOTJFMUYzNDAxNjJB MTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzEvMTBCMkM2MUEzQkYwMDJENjlBRDU1N0I4MzkyRTFG MzQwMTYyQTE2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ2ZGlOg/VdVqkTngori4bss41/avbUqAVM hhf2GhMhH2BztYLkQQkrp/VKHRRmDNnxue6h17yvCTXEGcHm4eH0iL1//u+utc3L LVkTPYXEjeTzS981TfHj7WG3CH/jIMrKdGFcim1BuTAsKrxdz5YNO080A+qNyC1Z jdTTELhuRxJJvxXLqkFymiQKZeU9QAij/QX+ORlE/aq2Oa0aWTpZDtAqhA9t/0h6 Am7X70Vo3bdxGfOeEPCRc5MHIOCYrelL1gRjreftPuZ0PCXRhut6EpRFGOFdwxcl T/EaRv9AutW4Trrv7RbyYF5JeecCHsw/QB8lgZDonap22nUsneY= -----END CERTIFICATE-----Generated at Sat Jun 20 13:17:42 2026 by rpki-client