$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft File: D21C7558CD1D6E80F107C302A7A49637AD11D654.mft (raw, json) Hash identifier: Ns2Kfe9z/SFNnuYbTiCFRETJf+jXzSWX73PZkbjqSHg= Subject key identifier: E4:A0:0F:7A:5D:29:85:13:D8:D4:16:BF:48:2A:3D:31:1A:8E:1E:12 Authority key identifier: D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 Certificate issuer: /CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Certificate serial: 701923C4D5B3A509E98DE860DF8842528F25BB34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 10:24:45 +0000 Manifest this update: Thu 18 Jun 2026 10:19:45 +0000 Manifest next update: Fri 19 Jun 2026 11:05:45 +0000 Files and hashes: 1: D21C7558CD1D6E80F107C302A7A49637AD11D654.crl (hash: V8joIexYMI7iFSy0yh6Vtn0hXdWEoVgNtU0qxpDCLSk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:19:23:c4:d5:b3:a5:09:e9:8d:e8:60:df:88:42:52:8f:25:bb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21C7558CD1D6E80F107C302A7A49637AD11D654 Validity Not Before: Jun 18 10:19:45 2026 GMT Not After : Jun 19 11:05:45 2026 GMT Subject: CN=E4A00F7A5D298513D8D416BF482A3D311A8E1E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:4e:d6:8f:19:b8:96:d2:97:70:71:e1:ac: 83:06:84:12:1c:b1:2e:82:1f:6f:e6:3e:08:4d:17: 9e:7a:3c:2c:ea:ba:ec:1e:20:f7:d7:c2:1c:05:f2: 43:b4:13:ff:5f:8e:a9:a9:f9:54:7d:53:01:39:b8: 21:65:d3:14:b0:a5:56:76:98:77:b6:f2:d1:b6:21: b9:33:55:67:50:aa:1b:c4:b9:3b:bd:28:e9:5a:5f: 86:9d:74:78:19:6f:9a:66:2e:9d:ff:3c:47:29:17: db:ed:36:18:0d:87:59:c4:3e:eb:9d:7d:8c:b8:2e: 74:10:22:eb:99:5a:0d:76:55:07:ab:09:f1:ad:01: db:d3:f5:db:21:8d:47:10:40:34:29:3e:99:c0:65: 1f:73:b4:5d:b5:51:fc:e9:71:00:19:a6:62:ab:ee: 8c:9b:37:fd:fd:96:f9:e3:2a:4f:fd:bb:b3:a4:11: c8:62:de:83:40:fd:11:e7:bf:4d:d5:bf:9b:b5:15: d8:30:e9:25:f1:66:a0:4f:a7:a0:a4:9b:fd:d7:ba: 51:bd:98:39:1d:bd:1e:23:bd:36:13:fa:1c:fd:a4: 8b:e7:60:0b:aa:6c:b3:38:8f:f0:d3:cf:8b:2f:67: 29:87:75:80:d4:ed:66:4f:e1:29:3b:25:58:a9:42: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:0F:7A:5D:29:85:13:D8:D4:16:BF:48:2A:3D:31:1A:8E:1E:12 X509v3 Authority Key Identifier: keyid:D2:1C:75:58:CD:1D:6E:80:F1:07:C3:02:A7:A4:96:37:AD:11:D6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/D21C7558CD1D6E80F107C302A7A49637AD11D654.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2a:60:bf:80:da:cd:b4:69:22:95:ea:4e:2f:54:cd:8e:e9: 3c:ae:a9:1a:94:b8:f4:15:4e:83:a8:33:4c:e1:c1:c7:e6:8c: 24:3b:a7:44:01:81:4b:71:a3:45:9c:1d:28:a8:39:98:9a:5f: 04:23:ec:ba:e1:8d:04:c6:c9:60:02:4e:77:69:f3:50:39:d8: 08:bb:b8:6e:d0:b9:de:87:ab:32:7f:f9:10:d2:f6:37:63:be: 5b:2d:08:6e:e3:8c:e1:a7:8f:52:fb:63:90:40:ce:08:36:89: d9:0a:0e:0c:75:01:ae:f3:28:10:f3:7b:37:d5:2f:6c:7b:a1: a4:5a:a1:b7:66:14:66:27:29:0e:eb:ea:69:24:27:2a:a5:86: df:ee:b5:1c:9b:2a:a4:06:3d:f0:47:d5:b3:c4:69:7b:bc:bc: 81:b3:f3:d1:1c:c6:c1:5c:cf:36:2c:a9:fc:62:8f:85:47:bf: 35:4b:8e:cb:ab:2a:53:44:a9:ae:23:7c:33:10:4e:6c:34:62: 82:c6:f9:01:b2:ea:ca:64:ad:78:97:7a:d0:96:21:a5:a9:9a: 78:b1:97:82:b9:19:76:f4:b1:c0:ac:54:02:04:39:11:a0:fe: aa:c9:5e:43:eb:b6:a6:5c:1e:34:6e:f5:7f:78:18:03:01:36: 85:68:e2:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBkjxNWzpQnpjehg34hCUo8luzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2MzdB RDExRDY1NDAeFw0yNjA2MTgxMDE5NDVaFw0yNjA2MTkxMTA1NDVaMDMxMTAvBgNV BAMTKEU0QTAwRjdBNUQyOTg1MTNEOEQ0MTZCRjQ4MkEzRDMxMUE4RTFFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPoU7Wjxm4ltKXcHHhrIMGhBIc sS6CH2/mPghNF556PCzquuweIPfXwhwF8kO0E/9fjqmp+VR9UwE5uCFl0xSwpVZ2 mHe28tG2IbkzVWdQqhvEuTu9KOlaX4addHgZb5pmLp3/PEcpF9vtNhgNh1nEPuud fYy4LnQQIuuZWg12VQerCfGtAdvT9dshjUcQQDQpPpnAZR9ztF21UfzpcQAZpmKr 7oybN/39lvnjKk/9u7OkEchi3oNA/RHnv03Vv5u1Fdgw6SXxZqBPp6Ckm/3XulG9 mDkdvR4jvTYT+hz9pIvnYAuqbLM4j/DTz4svZymHdYDU7WZP4Sk7JVipQlfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KAPel0phRPY1Ba/SCo9MRqOHhIwHwYDVR0j BBgwFoAU0hx1WM0dboDxB8MCp6SWN60R1lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWI0ZDEtZDZiNS00ODIwLWE0OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThD RDFENkU4MEYxMDdDMzAyQTdBNDk2MzdBRDExRDY1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMjFDNzU1OENEMUQ2RTgwRjEwN0MzMDJBN0E0OTYzN0FEMTFE NjU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvRDIxQzc1NThDRDFENkU4MEYxMDdDMzAyQTdBNDk2 MzdBRDExRDY1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYqYL+A2s20aSKV6k4vVM2O6TyuqRqUuPQV ToOoM0zhwcfmjCQ7p0QBgUtxo0WcHSioOZiaXwQj7LrhjQTGyWACTndp81A52Ai7 uG7Qud6HqzJ/+RDS9jdjvlstCG7jjOGnj1L7Y5BAzgg2idkKDgx1Aa7zKBDzezfV L2x7oaRaobdmFGYnKQ7r6mkkJyqlht/utRybKqQGPfBH1bPEaXu8vIGz89EcxsFc zzYsqfxij4VHvzVLjsurKlNEqa4jfDMQTmw0YoLG+QGy6spkrXiXetCWIaWpmnix l4K5GXb0scCsVAIEORGg/qrJXkPrtqZcHjRu9X94GAMBNoVo4kc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:08 2026 by rpki-client