$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft File: F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft (raw, json) Hash identifier: ywX/F22ZTn3SL5iv6MHhzHPT0iFuoiG9kO3SsXWMukU= Subject key identifier: C4:2E:FD:A9:58:5C:8D:0E:7E:1F:FE:E1:37:A6:E3:F9:37:4D:84:82 Authority key identifier: F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 Certificate issuer: /CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Certificate serial: 390E41AE3B26125291ADACDD85BA6B00BE1A196C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 00:30:30 +0000 Manifest this update: Sat 20 Jun 2026 00:25:30 +0000 Manifest next update: Sun 21 Jun 2026 00:31:30 +0000 Files and hashes: 1: F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl (hash: QjIeja2eCrci+dv3LcESdQqS+SZLoqreL8vQ/RgZZ+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0e:41:ae:3b:26:12:52:91:ad:ac:dd:85:ba:6b:00:be:1a:19:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F348ADE381684EBA60AF50D53916D6F79CEBCD20 Validity Not Before: Jun 20 00:25:30 2026 GMT Not After : Jun 21 00:31:30 2026 GMT Subject: CN=C42EFDA9585C8D0E7E1FFEE137A6E3F9374D8482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:35:56:6d:15:1a:e0:d8:e6:6d:5b:b4:f9: 68:19:a1:b9:67:7d:ac:33:42:8e:3e:96:6b:4b:b6: 34:3c:1f:e6:28:58:39:fb:70:7c:89:44:e5:29:04: fc:6c:b1:1f:bc:86:b8:57:2b:e1:1a:7d:09:bd:e2: cb:77:1c:bb:0e:99:d5:68:2b:0d:c3:a1:b6:a2:42: 17:7a:b5:fb:68:fb:ef:74:a3:f4:1b:9c:ba:72:08: e6:9e:ea:5f:91:74:6c:d0:19:39:df:03:d5:54:49: 96:94:52:a6:64:e8:e6:76:65:5d:05:db:38:38:90: 4e:b6:8d:33:ce:25:ba:eb:98:9c:47:4a:0e:a6:75: 06:ab:ae:42:3b:b1:13:58:7e:8b:e1:4e:b1:91:29: 5a:9a:2c:ff:68:a7:a3:19:9c:52:13:e4:56:39:d2: 43:58:d8:8d:db:e7:81:9c:9d:fe:71:6a:ca:76:b7: ae:45:39:d1:3f:7c:c6:6a:b8:b7:2f:e0:e9:34:09: 52:e2:7d:a9:9f:3c:c5:ec:05:04:bb:d2:bc:61:f3: 00:58:88:64:90:96:ab:23:1a:f6:14:bd:32:36:2e: 89:60:81:c5:7e:89:db:5d:86:07:b2:0f:4c:41:f6: 44:b2:93:58:16:7d:cb:9c:05:e6:88:8d:c3:23:70: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:FD:A9:58:5C:8D:0E:7E:1F:FE:E1:37:A6:E3:F9:37:4D:84:82 X509v3 Authority Key Identifier: keyid:F3:48:AD:E3:81:68:4E:BA:60:AF:50:D5:39:16:D6:F7:9C:EB:CD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F348ADE381684EBA60AF50D53916D6F79CEBCD20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2730b-df58-4f27-80e1-08de66bc1acf/0/F348ADE381684EBA60AF50D53916D6F79CEBCD20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:40:ad:46:ab:6e:75:93:73:ce:8c:e5:40:fd:01:41:a8:9e: bf:8b:6b:0e:92:2c:52:1a:65:da:bc:f1:91:a5:f8:b5:b8:83: bd:45:5b:a9:2e:03:82:53:a4:5d:05:d5:d0:50:86:b8:c2:71: 30:89:89:d5:ff:bb:18:da:34:ee:f2:15:ee:6d:d8:82:b6:47: d2:6d:f7:5f:2f:b8:93:d6:38:71:47:f8:b2:c6:4a:2b:3f:e5: df:87:3c:a9:87:8b:92:24:5f:50:13:3c:95:2c:37:3f:f7:08: 95:f8:7e:25:74:ee:99:56:08:08:a6:bd:26:0d:c6:11:94:e1: 5e:a5:69:4c:bf:17:36:6e:4d:58:cb:09:13:a8:4d:36:b9:91: 41:c5:b7:0c:41:20:c7:da:33:31:93:2d:91:f0:94:5b:6e:1e: 2d:39:eb:01:f6:eb:0f:f7:aa:17:ef:f3:53:dd:b4:55:bc:58: 39:00:29:b5:d6:ee:47:ae:07:dc:5a:07:17:f8:39:70:3f:2b: f6:8e:06:9e:95:a3:8a:b4:c5:0c:32:e1:e9:d0:86:2f:da:aa: 45:ef:1d:c8:b7:51:e3:a2:c0:f7:a8:06:c8:1b:02:fe:f2:95: 86:c8:ae:b8:42:98:c3:27:13:b6:dd:82:b6:3c:bb:00:93:82: e9:76:6c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQ5BrjsmElKRrazdhbprAL4aGWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5 Q0VCQ0QyMDAeFw0yNjA2MjAwMDI1MzBaFw0yNjA2MjEwMDMxMzBaMDMxMTAvBgNV BAMTKEM0MkVGREE5NTg1QzhEMEU3RTFGRkVFMTM3QTZFM0Y5Mzc0RDg0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdljVWbRUa4NjmbVu0+WgZobln fawzQo4+lmtLtjQ8H+YoWDn7cHyJROUpBPxssR+8hrhXK+EafQm94st3HLsOmdVo Kw3DobaiQhd6tfto++90o/QbnLpyCOae6l+RdGzQGTnfA9VUSZaUUqZk6OZ2ZV0F 2zg4kE62jTPOJbrrmJxHSg6mdQarrkI7sRNYfovhTrGRKVqaLP9op6MZnFIT5FY5 0kNY2I3b54Gcnf5xasp2t65FOdE/fMZquLcv4Ok0CVLifamfPMXsBQS70rxh8wBY iGSQlqsjGvYUvTI2LolggcV+idtdhgeyD0xB9kSyk1gWfcucBeaIjcMjcH73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxC79qVhcjQ5+H/7hN6bj+TdNhIIwHwYDVR0j BBgwFoAU80it44FoTrpgr1DVORbW95zrzSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMjczMGItZGY1OC00ZjI3LTgwZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4 MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2Rjc5Q0VCQ0QyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzQ4QURFMzgxNjg0RUJBNjBBRjUwRDUzOTE2RDZGNzlDRUJD RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMjczMGItZGY1OC00ZjI3LTgw ZTEtMDhkZTY2YmMxYWNmLzAvRjM0OEFERTM4MTY4NEVCQTYwQUY1MEQ1MzkxNkQ2 Rjc5Q0VCQ0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJArUarbnWTc86M5UD9AUGonr+Law6SLFIa Zdq88ZGl+LW4g71FW6kuA4JTpF0F1dBQhrjCcTCJidX/uxjaNO7yFe5t2IK2R9Jt 918vuJPWOHFH+LLGSis/5d+HPKmHi5IkX1ATPJUsNz/3CJX4fiV07plWCAimvSYN xhGU4V6laUy/FzZuTVjLCROoTTa5kUHFtwxBIMfaMzGTLZHwlFtuHi056wH26w/3 qhfv81PdtFW8WDkAKbXW7keuB9xaBxf4OXA/K/aOBp6Vo4q0xQwy4enQhi/aqkXv Hci3UeOiwPeoBsgbAv7ylYbIrrhCmMMnE7bdgrY8uwCTgul2bPw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:40 2026 by rpki-client