$ rpki-client -vvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft File: 000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json) Hash identifier: un3cHR/DRqP+D8d8PZkVKkFNlXZzEnCpCHtsHn6N6+Q= Subject key identifier: 50:E5:0E:E2:F1:FF:1C:E6:42:3C:23:55:6E:97:1F:CA:3E:C5:A6:52 Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 Certificate issuer: /CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Certificate serial: 77ABC2381949B83C989FEBE584A53A2CC839C3BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 07:13:18 +0000 Manifest this update: Sat 20 Jun 2026 07:08:18 +0000 Manifest next update: Sun 21 Jun 2026 07:25:18 +0000 Files and hashes: 1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: YdlwoGT9UdodDqKq9Ep4OeiGcPYNqfYdTGD0dV+NGro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ab:c2:38:19:49:b8:3c:98:9f:eb:e5:84:a5:3a:2c:c8:39:c3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Validity Not Before: Jun 20 07:08:18 2026 GMT Not After : Jun 21 07:25:18 2026 GMT Subject: CN=50E50EE2F1FF1CE6423C23556E971FCA3EC5A652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:6f:ca:30:be:77:26:77:03:57:de:12:c0: 39:dd:23:81:b4:0a:d8:82:9a:1b:2a:1f:bb:7b:c2: 92:e8:4a:c3:96:02:dd:72:e7:88:00:10:cf:23:7a: bc:d0:01:0e:85:8b:e6:51:cf:5b:81:f6:79:ab:c6: d4:2f:65:22:ef:dd:e0:e9:0d:35:51:78:17:c8:db: 54:96:12:23:9f:46:3e:74:e2:5f:c8:f9:a0:ba:2f: 6b:fc:9a:99:a6:2a:55:26:a5:7b:4d:5c:e4:0a:fa: ab:c3:be:5a:ff:c7:e3:f4:a4:18:4b:6d:0e:0f:e3: bc:1c:c9:d7:c1:53:63:2e:9c:00:82:2e:14:a1:cf: 8c:68:a1:6a:dc:df:b4:c5:b0:15:0d:c8:8d:57:88: 9a:45:ae:d0:36:9b:56:f2:2a:49:0b:c1:c6:31:db: 2d:92:69:d8:01:c2:5a:8b:f8:c2:bc:1d:33:d5:85: 5a:a1:4d:77:ae:f3:d1:75:14:ad:db:1c:4f:11:6f: 40:77:a4:7c:4a:62:e6:c3:0e:bf:73:80:99:c8:e9: 6d:2a:0f:2e:4c:2c:b6:67:3b:cf:9c:9d:c4:58:1e: 4a:aa:01:90:98:d8:d5:92:73:d0:38:06:c2:ed:1f: 98:35:95:3f:c8:77:82:f0:ab:4d:50:19:69:c3:cd: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E5:0E:E2:F1:FF:1C:E6:42:3C:23:55:6E:97:1F:CA:3E:C5:A6:52 X509v3 Authority Key Identifier: keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:48:4c:e3:8b:be:c5:1d:f4:18:e8:be:a0:56:3f:59:4f:d8: 44:2b:af:21:ac:e4:9e:cf:74:ca:42:48:d6:65:71:88:da:80: c0:a8:5b:4e:68:c0:21:27:37:bd:64:56:30:c3:3f:36:1f:d4: 7a:9b:b8:2e:fd:62:3a:0e:a4:19:8d:22:6e:ac:2c:79:6e:24: fb:e6:cc:07:81:6f:b1:63:b3:b4:36:c0:f7:be:26:68:a8:10: 6c:03:c9:a7:6d:5a:16:eb:58:59:fa:d4:c8:0d:3a:e3:e4:4c: 8b:03:2f:a2:84:e8:98:e7:b1:85:ba:2d:f5:aa:e1:81:13:2f: a7:6e:ba:74:bf:42:87:1d:03:b5:c9:cb:91:f4:36:06:ff:63: 15:3d:0c:28:bd:fc:fa:7a:dd:de:f8:58:4a:f3:17:9e:df:70: f7:82:f0:23:5f:fe:ce:f8:76:13:05:b2:45:8e:98:47:42:bd: aa:ad:ac:ba:61:7d:64:4f:aa:ca:77:97:91:fe:fd:fd:6c:8e: 33:df:38:e8:26:48:9a:11:bf:97:22:9b:f6:0c:31:33:7b:96: a7:b7:61:19:34:0a:7b:93:68:a5:71:68:73:f3:37:32:4e:14: 15:17:dc:ec:78:be:fb:f4:b0:04:9a:76:38:1e:5c:c8:58:7e: 63:6b:c7:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6vCOBlJuDyYn+vlhKU6LMg5w7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJCNjdC Nzc0RUM5NzAeFw0yNjA2MjAwNzA4MThaFw0yNjA2MjEwNzI1MThaMDMxMTAvBgNV BAMTKDUwRTUwRUUyRjFGRjFDRTY0MjNDMjM1NTZFOTcxRkNBM0VDNUE2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqm/KML53JncDV94SwDndI4G0 CtiCmhsqH7t7wpLoSsOWAt1y54gAEM8jerzQAQ6Fi+ZRz1uB9nmrxtQvZSLv3eDp DTVReBfI21SWEiOfRj504l/I+aC6L2v8mpmmKlUmpXtNXOQK+qvDvlr/x+P0pBhL bQ4P47wcydfBU2MunACCLhShz4xooWrc37TFsBUNyI1XiJpFrtA2m1byKkkLwcYx 2y2SadgBwlqL+MK8HTPVhVqhTXeu89F1FK3bHE8Rb0B3pHxKYubDDr9zgJnI6W0q Dy5MLLZnO8+cncRYHkqqAZCY2NWSc9A4BsLtH5g1lT/Id4Lwq01QGWnDza/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOUO4vH/HOZCPCNVbpcfyj7FplIwHwYDVR0j BBgwFoAUAA8rIbxcAEdeaYuhiIC7Z7d07JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI2MjViZjItZjNiNi00ZTljLTg1YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFC QzVDMDA0NzVFNjk4QkExODg4MEJCNjdCNzc0RUM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBGMkIyMUJDNUMwMDQ3NUU2OThCQTE4ODgwQkI2N0I3NzRF Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJC NjdCNzc0RUM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNITOOLvsUd9BjovqBWP1lP2EQrryGs5J7P dMpCSNZlcYjagMCoW05owCEnN71kVjDDPzYf1HqbuC79YjoOpBmNIm6sLHluJPvm zAeBb7Fjs7Q2wPe+JmioEGwDyadtWhbrWFn61MgNOuPkTIsDL6KE6JjnsYW6LfWq 4YETL6duunS/QocdA7XJy5H0Ngb/YxU9DCi9/Pp63d74WErzF57fcPeC8CNf/s74 dhMFskWOmEdCvaqtrLphfWRPqsp3l5H+/f1sjjPfOOgmSJoRv5cim/YMMTN7lqe3 YRk0CnuTaKVxaHPzNzJOFBUX3Ox4vvv0sASadjgeXMhYfmNrx+0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:08 2026 by rpki-client