$ rpki-client -vvf rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft File: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft (raw, json) Hash identifier: M4+7C72fM9SLQmGrkaeYiy7vCUCbvfVEjVZVIQpX/io= Subject key identifier: 6F:7E:77:71:9B:E8:5F:35:B5:B0:9A:10:86:A0:77:BE:12:AB:27:AF Authority key identifier: D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 Certificate issuer: /CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Certificate serial: 1DFEEB050D1ED0BDFD3F69D0079ED8B147BB5599 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 07:03:09 +0000 Manifest this update: Sat 20 Jun 2026 06:58:09 +0000 Manifest next update: Sun 21 Jun 2026 07:07:09 +0000 Files and hashes: 1: D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl (hash: PFPr/cskXke4MN2UWlyKwXNFJsUvObqwvgUbF2aXx5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fe:eb:05:0d:1e:d0:bd:fd:3f:69:d0:07:9e:d8:b1:47:bb:55:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236 Validity Not Before: Jun 20 06:58:09 2026 GMT Not After : Jun 21 07:07:09 2026 GMT Subject: CN=6F7E77719BE85F35B5B09A1086A077BE12AB27AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:71:65:6b:33:67:be:47:56:7a:62:8d:7b: bf:af:8e:25:4f:22:0b:f9:57:37:e4:a6:ac:18:17: b8:64:eb:1b:61:8f:58:82:34:87:e2:c2:fb:f3:68: ff:c7:98:2b:3a:c3:6e:ec:28:4d:77:a8:cb:e0:43: ec:f2:66:04:c3:a6:50:6e:ec:54:01:cc:bc:31:0a: fb:77:7f:5c:b2:dc:47:b9:44:dc:62:8f:7a:f1:22: 2b:5a:43:3f:f8:6b:45:ef:83:df:bc:e7:42:f1:6b: f8:87:bf:20:39:93:e9:18:c5:c4:44:f4:9d:53:40: c9:5f:3c:9e:71:b8:dc:ac:b2:ff:45:cd:fc:42:4d: 8a:37:34:be:af:b6:e9:26:23:92:8e:34:9b:50:ca: 5c:97:7a:de:51:70:08:b4:e4:cb:b5:c0:e7:2a:e4: d1:a1:67:f0:d4:bf:1c:47:cd:d5:a7:3e:1c:b4:d8: 8d:12:7c:71:c2:a9:1c:f5:de:30:39:9d:eb:c7:d7: bb:c2:12:ef:86:bf:02:77:74:d3:bc:a3:6b:d0:d0: f7:9c:5e:ca:06:3a:af:0a:40:4f:c7:fd:31:02:fa: 43:bb:c5:30:90:91:5d:80:39:c1:5e:7f:ad:46:fb: c2:26:f8:42:14:4c:c5:e4:4a:e5:1f:ee:53:79:4a: b5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7E:77:71:9B:E8:5F:35:B5:B0:9A:10:86:A0:77:BE:12:AB:27:AF X509v3 Authority Key Identifier: keyid:D4:FA:2D:C5:A4:A1:A1:CD:6E:63:EC:67:8B:76:D8:F9:0B:43:02:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/D4FA2DC5A4A1A1CD6E63EC678B76D8F90B430236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c0:e1:3e:38:6c:28:be:62:8e:79:98:bc:4e:f2:aa:02:24: 18:ec:d3:c2:e3:54:99:1c:9e:5c:c3:ea:fc:ad:ea:f0:df:57: 9b:70:49:73:99:77:91:ea:11:da:8e:6f:a7:c9:2f:5a:bf:4b: e7:89:ef:db:b7:da:2d:f5:8e:bc:f9:f9:fe:4a:8e:53:8b:e6: a1:06:75:21:48:f1:54:be:e2:01:25:b1:be:f1:8d:5c:b4:b7: 19:e9:91:5f:1a:ff:e7:7d:4a:c1:94:4c:6b:90:f2:b4:da:eb: 29:8f:15:74:62:90:36:75:97:0c:7e:cb:ca:b4:cd:0d:93:88: 06:7d:79:6b:07:26:38:cc:4f:2d:d6:c1:cb:9e:8b:52:4b:fe: 92:90:6f:0c:52:da:73:9e:b8:9d:54:7b:c2:9f:92:66:66:7b: 04:39:1c:07:b9:86:90:bf:58:22:32:bc:8f:65:5e:7d:5a:f8: 82:46:16:95:30:cc:a4:9b:e7:87:ce:e4:92:05:a7:27:8e:0b: 7b:10:65:67:99:b3:59:86:dd:d2:64:1a:52:12:d8:fb:f0:ca: 85:d5:dc:54:4c:cd:03:8f:d5:4f:78:0b:1d:1e:32:87:37:22: e9:5b:75:41:58:67:ec:d7:7e:56:83:4f:50:45:63:b7:aa:dc: c1:61:58:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHf7rBQ0e0L39P2nQB57YsUe7VZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4Rjkw QjQzMDIzNjAeFw0yNjA2MjAwNjU4MDlaFw0yNjA2MjEwNzA3MDlaMDMxMTAvBgNV BAMTKDZGN0U3NzcxOUJFODVGMzVCNUIwOUExMDg2QTA3N0JFMTJBQjI3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC023FlazNnvkdWemKNe7+vjiVP Igv5VzfkpqwYF7hk6xthj1iCNIfiwvvzaP/HmCs6w27sKE13qMvgQ+zyZgTDplBu 7FQBzLwxCvt3f1yy3Ee5RNxij3rxIitaQz/4a0Xvg9+850Lxa/iHvyA5k+kYxcRE 9J1TQMlfPJ5xuNyssv9FzfxCTYo3NL6vtukmI5KONJtQylyXet5RcAi05Mu1wOcq 5NGhZ/DUvxxHzdWnPhy02I0SfHHCqRz13jA5nevH17vCEu+GvwJ3dNO8o2vQ0Pec XsoGOq8KQE/H/TEC+kO7xTCQkV2AOcFef61G+8Im+EIUTMXkSuUf7lN5SrV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb353cZvoXzW1sJoQhqB3vhKrJ68wHwYDVR0j BBgwFoAU1PotxaShoc1uY+xni3bY+QtDAjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTY3OWNiZjYtMDkxMy00ODIxLThhZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVB NEExQTFDRDZFNjNFQzY3OEI3NkQ4RjkwQjQzMDIzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBMkRDNUE0QTFBMUNENkU2M0VDNjc4Qjc2RDhGOTBCNDMw MjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvRDRGQTJEQzVBNEExQTFDRDZFNjNFQzY3OEI3NkQ4 RjkwQjQzMDIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATA4T44bCi+Yo55mLxO8qoCJBjs08LjVJkc nlzD6vyt6vDfV5twSXOZd5HqEdqOb6fJL1q/S+eJ79u32i31jrz5+f5KjlOL5qEG dSFI8VS+4gElsb7xjVy0txnpkV8a/+d9SsGUTGuQ8rTa6ymPFXRikDZ1lwx+y8q0 zQ2TiAZ9eWsHJjjMTy3Wwcuei1JL/pKQbwxS2nOeuJ1Ue8KfkmZmewQ5HAe5hpC/ WCIyvI9lXn1a+IJGFpUwzKSb54fO5JIFpyeOC3sQZWeZs1mG3dJkGlIS2PvwyoXV 3FRMzQOP1U94Cx0eMoc3IulbdUFYZ+zXflaDT1BFY7eq3MFhWB0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:33:39 2026 by rpki-client