$ rpki-client -vvf rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft File: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft (raw, json) Hash identifier: ih3ltyVRl8MOfZmnhjUrjlwdMTgq9xgpNhSgNls9IEE= Subject key identifier: 8A:BA:B9:5F:59:BA:03:71:E2:A5:E6:BA:FD:DB:B8:6C:B7:A2:A9:BE Authority key identifier: F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A Certificate issuer: /CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A Certificate serial: 30636AA14E053FBA83D81DC812C0936C1CCDF7CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:16:40 +0000 Manifest this update: Fri 19 Jun 2026 17:11:40 +0000 Manifest next update: Sat 20 Jun 2026 18:03:40 +0000 Files and hashes: 1: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl (hash: OMco3UofOjgZg+MuqSyODExuVf8gAiu8i2xksyaQOoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:63:6a:a1:4e:05:3f:ba:83:d8:1d:c8:12:c0:93:6c:1c:cd:f7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A Validity Not Before: Jun 19 17:11:40 2026 GMT Not After : Jun 20 18:03:40 2026 GMT Subject: CN=8ABAB95F59BA0371E2A5E6BAFDDBB86CB7A2A9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:6f:49:21:13:5b:d7:63:1e:57:0c:ca:a7: b1:39:77:9d:c4:d5:f3:53:ef:62:12:60:14:e4:74: 31:78:15:1b:2e:38:1a:ef:8a:1b:d3:17:cb:cf:8b: f9:fd:d3:68:67:7c:a6:d4:6f:bd:5f:19:65:3f:38: ba:cc:fa:13:ef:3a:8b:4e:12:6f:5f:72:08:c7:dc: e4:13:74:6c:97:c9:5c:c1:31:5c:eb:99:21:5e:4f: 6c:3d:33:ef:13:55:60:c1:2a:01:26:c6:53:a2:a0: fa:66:6d:f9:d3:e6:3a:e5:e7:ee:8b:27:c8:9e:1e: 63:88:f2:ad:e8:9f:ae:45:cf:f9:de:22:05:12:11: bf:be:57:db:cd:91:40:3f:9d:cd:06:ed:fb:69:e0: b9:e5:8f:c0:a1:54:ec:4a:fd:c7:c1:25:b8:85:ac: 41:42:59:0e:60:21:c7:7e:be:f7:37:84:81:5f:74: 89:ed:f0:09:4c:0c:1f:eb:ba:7d:01:04:29:88:79: f7:25:d9:67:da:d1:83:52:c5:df:ee:da:84:68:ab: 17:c5:4d:cb:61:bb:80:1b:c9:28:fb:3f:cb:7c:09: b2:89:68:12:98:68:1a:ff:50:b4:ab:76:b9:1f:cc: db:be:5c:c6:52:99:86:d6:6e:36:60:cb:d5:0b:5e: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:B9:5F:59:BA:03:71:E2:A5:E6:BA:FD:DB:B8:6C:B7:A2:A9:BE X509v3 Authority Key Identifier: keyid:F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:58:d4:cf:3b:d4:3f:ad:8b:6c:ce:68:70:5a:0a:7c:37:53: 8a:37:db:7a:0f:58:31:1a:f6:1a:6d:44:fc:bc:73:30:c8:41: a1:d7:ee:5b:69:72:86:02:55:b4:5a:cb:cf:b4:22:93:49:c7: 10:ff:4d:0b:7e:6d:e9:4a:41:0e:34:9f:6d:88:df:14:f9:e8: 7b:bd:1f:3c:f0:97:a9:be:da:b6:7e:33:b3:01:ac:97:28:90: 21:43:42:fc:d1:e2:cf:16:9a:c0:e5:1e:46:78:bf:b0:d9:a7: ff:3c:35:11:77:cb:07:00:2d:f8:bc:bf:98:d1:c3:01:5a:66: d0:e7:0d:7e:44:4f:a1:5f:0a:dd:cf:04:76:80:cb:9f:32:3f: c0:9c:c6:93:82:0d:4e:d1:54:92:d4:5f:b7:e9:cc:69:e1:96: 03:3c:b5:19:06:6f:28:6c:22:c0:fd:0a:75:2d:7b:e3:56:37: 71:b0:16:fa:e1:e9:6b:53:13:e2:df:f6:70:9d:b3:4e:37:7e: aa:35:87:5e:15:01:25:36:64:c0:88:5a:02:ad:fc:bd:e9:23: 73:d4:3a:f8:bb:1c:b9:8e:d1:9c:4a:18:e2:4e:f1:58:e5:ca: 52:63:65:7b:95:80:4c:b2:fc:c8:60:c3:8d:a9:27:1e:3e:c3: 80:22:e2:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGNqoU4FP7qD2B3IEsCTbBzN980wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdCMDYwNjE4RDQ4ODVBMUQ3QkYxREEzRDI5QkU0NjRG NTFEQ0QwQTAeFw0yNjA2MTkxNzExNDBaFw0yNjA2MjAxODAzNDBaMDMxMTAvBgNV BAMTKDhBQkFCOTVGNTlCQTAzNzFFMkE1RTZCQUZEREJCODZDQjdBMkE5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrG9JIRNb12MeVwzKp7E5d53E 1fNT72ISYBTkdDF4FRsuOBrvihvTF8vPi/n902hnfKbUb71fGWU/OLrM+hPvOotO Em9fcgjH3OQTdGyXyVzBMVzrmSFeT2w9M+8TVWDBKgEmxlOioPpmbfnT5jrl5+6L J8ieHmOI8q3on65Fz/neIgUSEb++V9vNkUA/nc0G7ftp4Lnlj8ChVOxK/cfBJbiF rEFCWQ5gIcd+vvc3hIFfdInt8AlMDB/run0BBCmIefcl2Wfa0YNSxd/u2oRoqxfF Tcthu4AbySj7P8t8CbKJaBKYaBr/ULSrdrkfzNu+XMZSmYbWbjZgy9ULXr23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirq5X1m6A3Hipea6/du4bLeiqb4wHwYDVR0j BBgwFoAU97BgYY1IhaHXvx2j0pvkZPUdzQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiZDBlOTQtODYwMy00NTdmLWI1MzctOTIzMTA4NGJjNDUwLzAvRjdCMDYwNjE4 RDQ4ODVBMUQ3QkYxREEzRDI5QkU0NjRGNTFEQ0QwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GN0IwNjA2MThENDg4NUExRDdCRjFEQTNEMjlCRTQ2NEY1MURD RDBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvRjdCMDYwNjE4RDQ4ODVBMUQ3QkYxREEzRDI5QkU0 NjRGNTFEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFY1M871D+ti2zOaHBaCnw3U4o323oPWDEa 9hptRPy8czDIQaHX7ltpcoYCVbRay8+0IpNJxxD/TQt+belKQQ40n22I3xT56Hu9 Hzzwl6m+2rZ+M7MBrJcokCFDQvzR4s8WmsDlHkZ4v7DZp/88NRF3ywcALfi8v5jR wwFaZtDnDX5ET6FfCt3PBHaAy58yP8CcxpOCDU7RVJLUX7fpzGnhlgM8tRkGbyhs IsD9CnUte+NWN3GwFvrh6WtTE+Lf9nCds043fqo1h14VASU2ZMCIWgKt/L3pI3PU Ovi7HLmO0ZxKGOJO8VjlylJjZXuVgEyy/Mhgw42pJx4+w4Ai4oM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:32 2026 by rpki-client