$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft File: 8452DA0E5C0E92F8DBB2845824D032330956238B.mft (raw, json) Hash identifier: Bi3FRrfRCuV/uBlLyYRjS/9RVu20PO0eg+WAx88gLkU= Subject key identifier: 1E:71:17:BF:8F:AE:F1:F1:CC:26:87:19:D0:4F:4A:1B:A1:54:CC:E6 Authority key identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B Certificate issuer: /CN=8452DA0E5C0E92F8DBB2845824D032330956238B Certificate serial: 6AF0E208A9141CF6506F2A910D619431AA6CA52B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 22:02:32 +0000 Manifest this update: Fri 19 Jun 2026 21:57:32 +0000 Manifest next update: Sun 21 Jun 2026 01:24:32 +0000 Files and hashes: 1: 8452DA0E5C0E92F8DBB2845824D032330956238B.crl (hash: o/GNTnO4NBrjmziuVV2dr51txQD1a9jWBnNTe7y2GBY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f0:e2:08:a9:14:1c:f6:50:6f:2a:91:0d:61:94:31:aa:6c:a5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452DA0E5C0E92F8DBB2845824D032330956238B Validity Not Before: Jun 19 21:57:32 2026 GMT Not After : Jun 21 01:24:32 2026 GMT Subject: CN=1E7117BF8FAEF1F1CC268719D04F4A1BA154CCE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:75:01:0e:5b:89:04:79:fb:9a:13:00:8b:26: 9d:ad:6b:9f:16:c7:9f:19:19:7a:97:42:3c:0f:bd: ff:9c:84:4b:cf:d7:13:f8:f0:60:f7:ad:fd:e3:03: ed:f9:39:1b:33:2f:f1:00:08:9d:ee:53:20:69:52: 86:02:b5:38:d9:ac:d9:3e:ab:53:b4:be:3e:60:73: 37:1e:8c:33:28:a6:0d:30:9d:07:e1:6c:34:00:cc: f7:bb:7e:f8:7b:35:92:96:ad:51:46:9f:1d:d3:25: 89:f8:cf:8e:4d:6b:e4:22:22:0e:1e:79:72:22:ad: d0:98:c3:2d:fd:c6:e9:d0:e2:ee:43:94:70:c8:bb: e4:e1:de:d5:8c:23:ca:14:e9:9f:52:46:f0:0d:1e: 2d:cc:35:36:d8:94:ad:f2:86:0f:39:1c:04:20:77: 33:c1:46:54:d0:cf:2d:ee:22:44:b7:5c:db:17:d0: f1:0c:23:ac:a9:3c:6c:72:7b:ba:50:e7:17:0a:05: 68:78:03:00:2d:d5:c9:61:d9:68:46:bb:13:0a:97: e2:11:ed:04:5e:f1:9b:69:3d:c7:4a:cf:da:ca:f4: 5b:ca:9f:41:3d:c9:23:99:2d:47:f4:93:ed:7c:66: fb:39:60:5d:24:75:83:de:85:df:74:69:d5:ab:1d: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:71:17:BF:8F:AE:F1:F1:CC:26:87:19:D0:4F:4A:1B:A1:54:CC:E6 X509v3 Authority Key Identifier: keyid:84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:96:68:30:3f:1a:a6:9a:da:80:72:60:09:16:b9:ef:87:6d: 9e:bf:d9:81:37:f4:52:39:55:6d:bf:e3:c1:dd:75:8f:ab:7d: 19:e3:bd:24:39:41:0c:41:01:0b:d5:0a:7f:81:45:c3:06:d9: 3a:4e:5b:07:fd:be:9a:f2:5b:3a:2a:94:fc:a0:0c:88:8d:04: e9:75:15:2d:ce:e8:f5:e7:44:86:70:8e:d0:12:37:2f:80:2c: b3:36:13:f9:07:3c:1c:70:72:6d:51:0d:8f:92:17:6c:94:2b: 45:0e:cc:fa:3e:15:16:f4:f3:dd:79:9d:8e:ae:15:e7:eb:52: cc:11:de:3a:45:64:79:e8:1d:79:43:da:c7:53:31:c4:b8:7b: 02:bd:71:04:35:da:a2:aa:78:80:a9:7b:d4:d3:52:cc:03:50: 4d:c2:54:a1:3e:19:7a:a6:b6:a9:b4:5d:4b:a8:8d:48:6f:4d: 67:1f:f6:cc:17:97:f2:4a:4d:f0:3c:5e:a7:53:78:fc:b0:dd: b3:fb:dc:89:26:28:94:3d:37:c9:72:05:24:8a:b1:cd:c7:78: 08:04:43:ce:f2:38:cd:e8:a3:34:c3:d8:c8:40:53:79:c3:0c: 44:68:48:26:37:22:44:77:43:e0:25:61:51:8f:90:b8:80:7b: e9:88:9f:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavDiCKkUHPZQbyqRDWGUMapspSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMyMzMw OTU2MjM4QjAeFw0yNjA2MTkyMTU3MzJaFw0yNjA2MjEwMTI0MzJaMDMxMTAvBgNV BAMTKDFFNzExN0JGOEZBRUYxRjFDQzI2ODcxOUQwNEY0QTFCQTE1NENDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdQEOW4kEefuaEwCLJp2ta58W x58ZGXqXQjwPvf+chEvP1xP48GD3rf3jA+35ORszL/EACJ3uUyBpUoYCtTjZrNk+ q1O0vj5gczcejDMopg0wnQfhbDQAzPe7fvh7NZKWrVFGnx3TJYn4z45Na+QiIg4e eXIirdCYwy39xunQ4u5DlHDIu+Th3tWMI8oU6Z9SRvANHi3MNTbYlK3yhg85HAQg dzPBRlTQzy3uIkS3XNsX0PEMI6ypPGxye7pQ5xcKBWh4AwAt1clh2WhGuxMKl+IR 7QRe8ZtpPcdKz9rK9FvKn0E9ySOZLUf0k+18Zvs5YF0kdYPehd90adWrHX5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnEXv4+u8fHMJocZ0E9KG6FUzOYwHwYDVR0j BBgwFoAUhFLaDlwOkvjbsoRYJNAyMwlWI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU5M2Y4NzYtZDUxZS00ODU3LWE2Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1 QzBFOTJGOERCQjI4NDU4MjREMDMyMzMwOTU2MjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDUyREEwRTVDMEU5MkY4REJCMjg0NTgyNEQwMzIzMzA5NTYy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvODQ1MkRBMEU1QzBFOTJGOERCQjI4NDU4MjREMDMy MzMwOTU2MjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2WaDA/Gqaa2oByYAkWue+HbZ6/2YE39FI5 VW2/48HddY+rfRnjvSQ5QQxBAQvVCn+BRcMG2TpOWwf9vpryWzoqlPygDIiNBOl1 FS3O6PXnRIZwjtASNy+ALLM2E/kHPBxwcm1RDY+SF2yUK0UOzPo+FRb08915nY6u FefrUswR3jpFZHnoHXlD2sdTMcS4ewK9cQQ12qKqeICpe9TTUswDUE3CVKE+GXqm tqm0XUuojUhvTWcf9swXl/JKTfA8XqdTePyw3bP73IkmKJQ9N8lyBSSKsc3HeAgE Q87yOM3oozTD2MhAU3nDDERoSCY3IkR3Q+AlYVGPkLiAe+mIn3A= -----END CERTIFICATE-----Generated at Sat Jun 20 13:05:55 2026 by rpki-client