$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft File: F31E15BE02A167AD0052555C4C55DC145AB53C32.mft (raw, json) Hash identifier: RCRMwhzZgoS/EjJZlH/E2QZWi7ORCRFDLrRCkM9uDhw= Subject key identifier: 1C:AA:BE:42:B0:CD:E8:B2:41:37:14:EE:B9:32:44:54:8E:2A:6F:0F Authority key identifier: F3:1E:15:BE:02:A1:67:AD:00:52:55:5C:4C:55:DC:14:5A:B5:3C:32 Certificate issuer: /CN=F31E15BE02A167AD0052555C4C55DC145AB53C32 Certificate serial: 698CA5DC610E62E61B9E88C3DC6508ECB3435D56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:45:36 +0000 Manifest this update: Sat 20 Jun 2026 04:40:36 +0000 Manifest next update: Sun 21 Jun 2026 07:39:36 +0000 Files and hashes: 1: F31E15BE02A167AD0052555C4C55DC145AB53C32.crl (hash: 1pZReIye56n4CsgsfV7OFIU5pVvExb3X7ZEk0CMjQk4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.crl rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8c:a5:dc:61:0e:62:e6:1b:9e:88:c3:dc:65:08:ec:b3:43:5d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31E15BE02A167AD0052555C4C55DC145AB53C32 Validity Not Before: Jun 20 04:40:36 2026 GMT Not After : Jun 21 07:39:36 2026 GMT Subject: CN=1CAABE42B0CDE8B2413714EEB93244548E2A6F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:bb:16:69:b9:8b:be:b8:f0:9d:53:84:90: ba:36:d2:ca:4b:5b:1d:07:a0:2e:53:44:fc:62:66: 2e:3b:98:de:e6:6d:40:08:36:b4:fd:da:42:42:00: 85:02:ed:43:8c:95:d6:16:9f:bd:f7:c9:dd:18:76: eb:a8:29:e8:16:2b:3a:c1:e5:21:c8:f6:96:f1:62: 27:db:97:a1:45:11:f0:a7:43:ec:30:80:af:7a:0b: ed:4e:ce:74:cb:af:3c:b8:8a:26:a2:d8:bb:a7:cd: d1:57:23:8b:31:e4:8b:33:02:cc:c8:d7:43:a5:31: eb:a7:ad:9f:6d:9a:de:ec:e9:34:77:38:9c:7d:d6: 33:82:b9:a9:cf:f3:c2:98:14:1f:56:19:e5:fd:c1: e8:15:f2:11:79:f5:d8:21:96:84:3f:03:85:6c:05: 61:e2:05:1a:21:29:ce:be:ca:cf:88:ea:c6:35:7b: 9b:9e:f7:1a:cd:79:9b:3f:90:2e:37:af:11:ec:c6: 28:0d:0b:6d:77:5d:0d:50:9c:74:9e:6d:e3:00:4f: 83:b2:0a:da:c2:96:08:70:c5:48:c9:f8:b4:af:3b: 6f:d7:81:57:88:50:3d:ce:21:ea:ff:b3:e2:80:19: b5:1b:d3:b4:6c:c4:3a:f3:46:64:ca:90:c7:e3:dd: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AA:BE:42:B0:CD:E8:B2:41:37:14:EE:B9:32:44:54:8E:2A:6F:0F X509v3 Authority Key Identifier: keyid:F3:1E:15:BE:02:A1:67:AD:00:52:55:5C:4C:55:DC:14:5A:B5:3C:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:76:8c:cb:85:2e:ef:6e:33:85:34:4c:ef:10:9c:89:44:b9: 38:1d:bd:92:cf:be:de:a4:32:ed:5c:fc:f9:e0:3a:bc:f7:3d: 45:ab:f9:15:f1:c5:5d:d9:07:27:74:c7:b7:3c:e0:c1:ac:4e: 50:93:e9:9e:88:b8:5b:3f:1e:37:6a:e4:e8:5c:55:1a:b3:07: 12:87:07:f5:b9:24:f6:52:f0:77:85:ed:f0:b8:b7:97:c7:a6: c8:c1:4e:a7:0d:9b:f8:48:e0:c0:ad:bb:60:e0:0a:b9:62:95: 4b:0f:02:38:3d:1c:58:1e:4f:26:de:d0:24:21:09:b0:d7:55: 20:da:e3:aa:1c:84:50:1a:65:d9:f2:cd:dc:e6:78:6f:cf:87: 5a:e3:0d:d0:80:a8:b0:14:46:78:77:9e:7a:e0:1d:59:f2:2d: f3:2f:07:72:b7:20:0a:22:0f:51:5c:97:60:22:73:39:42:43: b7:21:da:80:c7:65:f4:29:93:09:c6:3d:1b:a4:f0:38:3e:be: d3:ea:bc:94:ec:7a:6e:0b:5e:4c:53:3d:4b:b8:0e:f5:f9:d8: 07:5c:96:4f:b5:14:60:88:e1:86:b4:1d:66:41:ff:70:cc:33: 81:16:54:6c:fd:ab:e6:5e:86:78:1a:18:f0:29:3f:ff:ca:30: 38:ad:a3:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYyl3GEOYuYbnojD3GUI7LNDXVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxRTE1QkUwMkExNjdBRDAwNTI1NTVDNEM1NURDMTQ1 QUI1M0MzMjAeFw0yNjA2MjAwNDQwMzZaFw0yNjA2MjEwNzM5MzZaMDMxMTAvBgNV BAMTKDFDQUFCRTQyQjBDREU4QjI0MTM3MTRFRUI5MzI0NDU0OEUyQTZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7LsWabmLvrjwnVOEkLo20spL Wx0HoC5TRPxiZi47mN7mbUAINrT92kJCAIUC7UOMldYWn733yd0YduuoKegWKzrB 5SHI9pbxYifbl6FFEfCnQ+wwgK96C+1OznTLrzy4iiai2LunzdFXI4sx5IszAszI 10OlMeunrZ9tmt7s6TR3OJx91jOCuanP88KYFB9WGeX9wegV8hF59dghloQ/A4Vs BWHiBRohKc6+ys+I6sY1e5ue9xrNeZs/kC43rxHsxigNC213XQ1QnHSebeMAT4Oy CtrClghwxUjJ+LSvO2/XgVeIUD3OIer/s+KAGbUb07RsxDrzRmTKkMfj3RSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHKq+QrDN6LJBNxTuuTJEVI4qbw8wHwYDVR0j BBgwFoAU8x4VvgKhZ60AUlVcTFXcFFq1PDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzMzBkMDYtZjkyZC00OTViLTliYTAtYWNkZDgxN2IxNDgzLzAvRjMxRTE1QkUw MkExNjdBRDAwNTI1NTVDNEM1NURDMTQ1QUI1M0MzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzFFMTVCRTAyQTE2N0FEMDA1MjU1NUM0QzU1REMxNDVBQjUz QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvRjMxRTE1QkUwMkExNjdBRDAwNTI1NTVDNEM1NURD MTQ1QUI1M0MzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJx2jMuFLu9uM4U0TO8QnIlEuTgdvZLPvt6k Mu1c/PngOrz3PUWr+RXxxV3ZByd0x7c84MGsTlCT6Z6IuFs/Hjdq5OhcVRqzBxKH B/W5JPZS8HeF7fC4t5fHpsjBTqcNm/hI4MCtu2DgCrlilUsPAjg9HFgeTybe0CQh CbDXVSDa46ochFAaZdnyzdzmeG/Ph1rjDdCAqLAURnh3nnrgHVnyLfMvB3K3IAoi D1Fcl2AiczlCQ7ch2oDHZfQpkwnGPRuk8Dg+vtPqvJTsem4LXkxTPUu4DvX52Adc lk+1FGCI4Ya0HWZB/3DMM4EWVGz9q+ZehngaGPApP//KMDitowI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:24 2026 by rpki-client