$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json) Hash identifier: XYkH9jQ5y+wt3GdzsHiGQTO6mjMhgrExZjwtNYliYvo= Subject key identifier: B1:8E:A6:F2:6F:ED:B7:E6:9C:64:18:4E:01:0E:E0:9E:AB:3D:57:67 Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Certificate serial: 34E18885BC44CCBAF3DE392B67823D36D3E72B44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 19:44:53 +0000 Manifest this update: Fri 19 Jun 2026 19:39:53 +0000 Manifest next update: Sat 20 Jun 2026 21:56:53 +0000 Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: gyEd2oodd1GOD5Kk+B7xu4S0X9UY94n+76t/VPcSvZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e1:88:85:bc:44:cc:ba:f3:de:39:2b:67:82:3d:36:d3:e7:2b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66 Validity Not Before: Jun 19 19:39:53 2026 GMT Not After : Jun 20 21:56:53 2026 GMT Subject: CN=B18EA6F26FEDB7E69C64184E010EE09EAB3D5767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:53:16:5f:7c:bd:03:47:be:19:f2:dd:76: c3:8e:ba:d6:a1:03:9d:c6:96:ae:e2:ce:3a:27:ae: b9:2d:37:b7:ab:a2:85:7c:43:92:8c:56:e9:e8:82: f8:78:d5:d6:fd:93:19:ca:f9:02:10:ba:53:a5:a5: 36:79:c3:0f:65:98:31:19:d2:7d:15:53:3a:6a:26: da:7b:20:46:a5:5c:ae:63:e9:c2:1c:e9:fe:81:5a: 30:af:f4:f2:5d:66:2e:6c:a4:13:a9:92:1d:5d:d8: ec:a1:cc:14:8c:74:84:25:fc:8a:70:e5:12:71:2c: 59:e4:b4:6a:1b:e5:51:d8:d7:80:e1:50:46:a3:2f: 80:d3:cd:4d:d7:98:45:63:a2:5d:7e:62:86:d8:32: e7:db:4d:27:04:16:5d:52:76:0f:0c:df:bb:48:be: 19:c8:a4:8b:e5:c2:b3:88:24:2e:4e:92:28:ec:83: 5b:3e:06:fe:c7:bb:18:b1:07:18:44:49:d2:12:81: fa:63:d0:f3:0c:ce:cf:43:e9:dc:cf:28:ca:3f:f6: d1:7b:ce:8a:36:60:92:8a:97:c1:80:6f:15:a6:b3: e5:0f:91:e1:32:37:a2:d9:32:7b:0d:37:db:da:e9: 40:72:8d:6a:b6:74:5b:fc:38:f0:ab:c5:0f:d2:a8: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8E:A6:F2:6F:ED:B7:E6:9C:64:18:4E:01:0E:E0:9E:AB:3D:57:67 X509v3 Authority Key Identifier: keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:30:0b:1e:4f:1f:d4:07:01:b8:24:60:ec:42:16:74:b0:82: d7:c1:d9:90:95:a4:43:f2:85:8b:f0:8d:81:81:e2:00:c8:b2: 5b:6c:10:b5:cb:bd:e7:5b:3c:60:18:87:d9:e8:3b:32:e7:01: 1d:74:49:0c:20:6b:0f:cf:38:65:e9:49:b0:79:4f:d4:f7:e8: 17:b7:d5:ac:d7:58:b4:75:69:8b:ec:4c:9b:9e:2e:6b:56:80: 9c:fa:ea:bd:64:52:b7:8a:b9:a9:64:18:9f:66:12:b5:3b:00: 9c:28:26:27:e2:af:a2:1b:1b:0b:a8:b5:79:d1:ad:09:82:83: e1:10:4c:18:4b:99:ff:d4:a2:4f:2a:b7:47:1b:6a:05:1e:ba: 28:84:e2:1a:3d:bd:fb:8b:c4:8f:e9:dc:17:90:ea:64:ec:0a: 51:22:89:7f:00:53:82:34:f5:4f:8e:b5:e6:98:26:00:22:7a: 9a:77:28:74:02:f2:5e:6a:26:83:d1:61:1b:70:51:31:20:a2: 2f:63:f3:c4:61:f0:37:ad:b0:5c:4e:27:0a:c0:11:d3:a4:55: 11:6c:29:41:cd:03:a0:0c:b2:7d:b4:34:2b:ca:e2:44:16:be: d9:a0:8c:90:73:4b:53:a6:44:ca:cb:a5:f5:0a:31:86:d0:74: c9:99:eb:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOGIhbxEzLrz3jkrZ4I9NtPnK0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZD OTZEQ0U2NjAeFw0yNjA2MTkxOTM5NTNaFw0yNjA2MjAyMTU2NTNaMDMxMTAvBgNV BAMTKEIxOEVBNkYyNkZFREI3RTY5QzY0MTg0RTAxMEVFMDlFQUIzRDU3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6lMWX3y9A0e+GfLddsOOutah A53Glq7izjonrrktN7erooV8Q5KMVunogvh41db9kxnK+QIQulOlpTZ5ww9lmDEZ 0n0VUzpqJtp7IEalXK5j6cIc6f6BWjCv9PJdZi5spBOpkh1d2OyhzBSMdIQl/Ipw 5RJxLFnktGob5VHY14DhUEajL4DTzU3XmEVjol1+YobYMufbTScEFl1Sdg8M37tI vhnIpIvlwrOIJC5Okijsg1s+Bv7HuxixBxhESdISgfpj0PMMzs9D6dzPKMo/9tF7 zoo2YJKKl8GAbxWms+UPkeEyN6LZMnsNN9va6UByjWq2dFv8OPCrxQ/SqAtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsY6m8m/tt+acZBhOAQ7gnqs9V2cwHwYDVR0j BBgwFoAUEjbjlCKbxiPIkMxasXi0v8ltzmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWExZTZhYzQtYTJjNC00MWE3LWIwZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQy MjlCQzYyM0M4OTBDQzVBQjE3OEI0QkZDOTZEQ0U2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjM2RTM5NDIyOUJDNjIzQzg5MENDNUFCMTc4QjRCRkM5NkRD RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvMTIzNkUzOTQyMjlCQzYyM0M4OTBDQzVBQjE3OEI0 QkZDOTZEQ0U2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMwCx5PH9QHAbgkYOxCFnSwgtfB2ZCVpEPy hYvwjYGB4gDIsltsELXLvedbPGAYh9noOzLnAR10SQwgaw/POGXpSbB5T9T36Be3 1azXWLR1aYvsTJueLmtWgJz66r1kUreKualkGJ9mErU7AJwoJifir6IbGwuotXnR rQmCg+EQTBhLmf/Uok8qt0cbagUeuiiE4ho9vfuLxI/p3BeQ6mTsClEiiX8AU4I0 9U+OteaYJgAiepp3KHQC8l5qJoPRYRtwUTEgoi9j88Rh8DetsFxOJwrAEdOkVRFs KUHNA6AMsn20NCvK4kQWvtmgjJBzS1OmRMrLpfUKMYbQdMmZ620= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:19 2026 by rpki-client