$ rpki-client -vvf rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft File: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft (raw, json) Hash identifier: a5I3ZIoLxTlIdOsdL2WArOnojM/YrT1hc4qEQ7axicM= Subject key identifier: AC:FB:6F:B6:4E:DF:6E:C6:F0:D0:53:EE:D8:AA:46:45:78:32:FF:60 Authority key identifier: DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 Certificate issuer: /CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Certificate serial: 0161EDF4D876325F7ED05F8A7DA94BE458BB94DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:23:57 +0000 Manifest this update: Sat 20 Jun 2026 03:18:57 +0000 Manifest next update: Sun 21 Jun 2026 06:28:57 +0000 Files and hashes: 1: DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl (hash: LTGmyaTrOqSSnv5arLs8+q6JTM6lroktZxbPM8CBbAI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:61:ed:f4:d8:76:32:5f:7e:d0:5f:8a:7d:a9:4b:e4:58:bb:94:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9 Validity Not Before: Jun 20 03:18:57 2026 GMT Not After : Jun 21 06:28:57 2026 GMT Subject: CN=ACFB6FB64EDF6EC6F0D053EED8AA46457832FF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:68:73:78:c4:fb:07:3a:1a:e4:d5:ea:42: ae:ee:0b:a2:62:cb:f4:2b:76:0f:28:a4:fc:2d:e1: 4d:a3:b6:1a:52:67:68:23:9d:ec:90:f4:85:44:bb: 76:2b:00:eb:a7:57:a5:8b:e0:c4:25:17:fa:ee:60: c4:4b:f4:6e:4b:22:0a:fc:73:06:52:a7:31:f3:21: f5:30:22:81:48:96:8d:67:dc:b5:1c:9b:87:f4:cb: 85:6c:55:28:b9:ae:7c:bf:24:d4:dc:64:cc:1c:4b: 13:cd:23:0a:e5:25:c6:e3:99:3b:76:88:c7:3a:7b: d7:f2:f9:c2:e8:a1:aa:35:b6:1b:36:a0:0f:2a:53: 4a:95:97:5f:d5:d9:50:fb:fa:d5:9d:1e:db:11:18: 78:7a:c3:7f:a1:2d:d5:56:ec:97:c5:b5:4d:92:75: c1:9c:b4:e3:9c:79:00:35:05:dd:92:9d:82:7b:68: 59:c3:6e:d9:ce:b5:6c:9d:8e:13:58:99:fe:5f:a2: b2:28:06:77:12:3d:2a:66:2c:88:87:3e:04:94:64: dd:f9:04:f6:95:d4:8b:84:c8:5a:23:3c:43:6c:de: c5:a3:ed:2a:41:a7:ff:a3:f4:bf:2f:b2:86:eb:9f: c9:bd:61:7a:30:cb:9e:db:26:3c:36:73:8e:34:a7: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FB:6F:B6:4E:DF:6E:C6:F0:D0:53:EE:D8:AA:46:45:78:32:FF:60 X509v3 Authority Key Identifier: keyid:DE:AB:D6:7A:7F:8A:1C:94:C4:FE:B4:1F:DC:B2:3D:3F:D2:80:E0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/DEABD67A7F8A1C94C4FEB41FDCB23D3FD280E0C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ee:52:3e:25:7a:24:5d:49:14:f6:d4:0d:f4:55:0f:ba:55: 60:51:3b:94:1f:7c:36:a4:5c:b4:10:5c:2a:64:48:b6:c1:52: b8:95:f1:b1:11:1c:cf:e4:f4:51:ce:85:9c:17:67:d0:cd:3a: e2:d9:57:ae:82:72:31:e2:36:ec:9f:b6:52:fc:8a:0e:bf:fa: 57:16:10:7f:50:3c:75:25:98:ab:b1:6c:7a:b7:74:51:e9:11: b2:c6:86:96:99:5c:31:68:63:d4:91:f6:02:df:16:8b:9d:48: fc:99:5b:61:81:f9:0c:3b:f4:8a:90:26:50:f7:fb:b1:c8:84: f7:0b:46:86:d6:6d:0d:e0:63:bc:0b:08:40:a6:7a:38:e9:c3: ea:87:18:3c:96:01:8e:e6:a7:0b:99:5b:ec:17:30:f4:ac:60: d5:16:49:ae:c2:c7:09:74:1b:ae:d0:d6:1b:20:a9:ed:48:11: 8e:5e:c0:bc:f8:c0:b1:3a:3f:f3:d8:e2:30:42:d8:3b:9f:3f: 4b:4a:45:88:56:2d:b3:dd:72:30:b9:62:92:f1:90:bc:09:d1: d6:cf:23:b1:7d:e6:ca:93:a4:c7:21:fb:09:fe:37:cd:0d:41: e5:68:66:94:e2:e5:6b:66:75:f7:cb:1b:20:a0:05:46:a2:1f: 25:8e:3b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWHt9Nh2Ml9+0F+KfalL5Fi7lNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZE MjgwRTBDOTAeFw0yNjA2MjAwMzE4NTdaFw0yNjA2MjEwNjI4NTdaMDMxMTAvBgNV BAMTKEFDRkI2RkI2NEVERjZFQzZGMEQwNTNFRUQ4QUE0NjQ1NzgzMkZGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/2hzeMT7Bzoa5NXqQq7uC6Ji y/Qrdg8opPwt4U2jthpSZ2gjneyQ9IVEu3YrAOunV6WL4MQlF/ruYMRL9G5LIgr8 cwZSpzHzIfUwIoFIlo1n3LUcm4f0y4VsVSi5rny/JNTcZMwcSxPNIwrlJcbjmTt2 iMc6e9fy+cLooao1ths2oA8qU0qVl1/V2VD7+tWdHtsRGHh6w3+hLdVW7JfFtU2S dcGctOOceQA1Bd2SnYJ7aFnDbtnOtWydjhNYmf5forIoBncSPSpmLIiHPgSUZN35 BPaV1IuEyFojPENs3sWj7SpBp/+j9L8vsobrn8m9YXowy57bJjw2c440p35LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPtvtk7fbsbw0FPu2KpGRXgy/2AwHwYDVR0j BBgwFoAU3qvWen+KHJTE/rQf3LI9P9KA4MkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhNmJjYTgtMzc0MS00NGVmLThhNWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3 RjhBMUM5NEM0RkVCNDFGRENCMjNEM0ZEMjgwRTBDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUFCRDY3QTdGOEExQzk0QzRGRUI0MUZEQ0IyM0QzRkQyODBF MEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvREVBQkQ2N0E3RjhBMUM5NEM0RkVCNDFGRENCMjNE M0ZEMjgwRTBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPuUj4leiRdSRT21A30VQ+6VWBRO5QffDak XLQQXCpkSLbBUriV8bERHM/k9FHOhZwXZ9DNOuLZV66CcjHiNuyftlL8ig6/+lcW EH9QPHUlmKuxbHq3dFHpEbLGhpaZXDFoY9SR9gLfFoudSPyZW2GB+Qw79IqQJlD3 +7HIhPcLRobWbQ3gY7wLCECmejjpw+qHGDyWAY7mpwuZW+wXMPSsYNUWSa7Cxwl0 G67Q1hsgqe1IEY5ewLz4wLE6P/PY4jBC2DufP0tKRYhWLbPdcjC5YpLxkLwJ0dbP I7F95sqTpMch+wn+N80NQeVoZpTi5WtmdffLGyCgBUaiHyWOO0Y= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:52 2026 by rpki-client