$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft File: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft (raw, json) Hash identifier: FZqhu+m1fAjRdoYsPuG5Y2/k8CEBvZHqaVJxfhjUOUk= Subject key identifier: 9B:D8:E6:68:39:8A:CD:1B:5C:AF:7D:7B:20:74:56:D5:A7:26:0D:D0 Authority key identifier: D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 Certificate issuer: /CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Certificate serial: 46000DBCC1673D36FC84FB170D12C2C6CC4571DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:57:00 +0000 Manifest this update: Sat 20 Jun 2026 05:52:00 +0000 Manifest next update: Sun 21 Jun 2026 09:49:00 +0000 Files and hashes: 1: D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl (hash: 8eWRskoAVEgkVTL1vghLPvKjk0SHJR2ah1QjyeuwV8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:00:0d:bc:c1:67:3d:36:fc:84:fb:17:0d:12:c2:c6:cc:45:71:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0 Validity Not Before: Jun 20 05:52:00 2026 GMT Not After : Jun 21 09:49:00 2026 GMT Subject: CN=9BD8E668398ACD1B5CAF7D7B207456D5A7260DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:b0:3d:e8:d5:c5:ae:90:a9:6d:58:ae:dc: 8f:e7:c3:0c:d6:58:98:52:e3:28:b6:3a:da:96:34: f2:d2:7b:b0:06:48:56:84:c1:df:75:9e:44:bc:5f: 64:86:69:aa:ef:25:a6:4d:c3:7c:c8:b0:06:e0:71: bd:1f:9f:f9:a6:80:4e:22:7d:01:da:1c:2a:a0:f0: de:fa:45:11:a4:3a:68:df:51:1d:c3:a7:c5:0b:2a: d3:e0:cd:ec:e6:b5:fb:24:46:e5:3b:37:72:42:91: f3:04:10:6b:78:ee:fe:b6:94:66:63:ad:32:c4:11: bb:ec:fa:92:b4:a9:6e:e4:90:fb:20:bd:97:f6:0a: ec:b8:0b:fe:b1:89:67:15:64:d8:5c:5b:0a:2b:7a: f4:c3:c5:39:37:33:28:44:b4:28:a8:6d:c0:5b:ca: 2f:b6:8f:e4:4f:51:62:a0:ce:0c:58:4f:16:6b:ed: 1b:37:64:d2:80:6b:4a:b0:3a:46:8a:ed:b5:8c:ea: bc:97:a8:5a:d0:f3:03:94:4a:93:3e:dd:f3:be:22: 24:ba:4f:06:93:29:bc:64:6c:b4:90:d4:dd:a0:de: 9f:d4:c4:c0:d8:72:2e:fc:95:15:ae:ea:4c:37:c1: 4f:2f:8c:9a:18:9d:bb:54:07:75:2f:9c:12:f0:72: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:E6:68:39:8A:CD:1B:5C:AF:7D:7B:20:74:56:D5:A7:26:0D:D0 X509v3 Authority Key Identifier: keyid:D0:4E:8E:DA:1C:6E:0A:E6:B5:89:88:7A:CF:35:5D:77:EE:17:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/D04E8EDA1C6E0AE6B589887ACF355D77EE1758C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c7:f9:1c:75:59:54:79:1c:d3:2e:19:ef:e9:f2:e6:73:51: 9a:a5:96:b3:eb:a1:fc:d2:dd:2e:66:e1:b6:32:4f:f9:c5:9f: 85:32:47:74:38:07:d7:fa:14:24:b4:b5:70:ce:5c:e3:fb:a8: 7e:02:1e:f7:1d:f4:fc:2e:e9:79:d6:84:e8:b9:35:00:db:27: 12:75:c7:be:4c:99:01:e1:77:12:d5:5c:a0:d1:5c:5b:e1:47: c7:20:d7:1e:41:3b:cc:49:53:67:0b:47:75:0b:f6:4d:76:dd: ea:ab:18:3d:82:19:84:4f:2a:23:23:88:87:76:cd:c9:b4:6d: 81:fc:c4:a3:f6:c2:97:0c:40:80:38:6c:0c:30:e2:cd:41:63: e8:9a:cf:20:f7:08:27:cb:f9:02:7a:5e:8a:9d:8b:fb:6e:c0: ef:90:79:38:47:9c:8d:dd:6c:4f:2a:7e:e6:19:35:4c:c7:50: c1:15:e8:77:7d:1b:44:b7:92:b3:00:57:dc:85:a6:b0:c7:76: ee:f6:db:16:ba:ec:81:d8:27:29:0a:a7:f1:e3:9a:35:00:dc: ec:91:90:c1:17:38:15:67:8d:80:86:d2:cf:81:75:bb:e9:7c: a9:14:a3:6d:93:9d:11:36:2a:33:1c:99:38:e5:b6:7d:51:88: 2e:11:60:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgANvMFnPTb8hPsXDRLCxsxFcdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdF RTE3NThDMDAeFw0yNjA2MjAwNTUyMDBaFw0yNjA2MjEwOTQ5MDBaMDMxMTAvBgNV BAMTKDlCRDhFNjY4Mzk4QUNEMUI1Q0FGN0Q3QjIwNzQ1NkQ1QTcyNjBERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC957A96NXFrpCpbViu3I/nwwzW WJhS4yi2OtqWNPLSe7AGSFaEwd91nkS8X2SGaarvJaZNw3zIsAbgcb0fn/mmgE4i fQHaHCqg8N76RRGkOmjfUR3Dp8ULKtPgzezmtfskRuU7N3JCkfMEEGt47v62lGZj rTLEEbvs+pK0qW7kkPsgvZf2Cuy4C/6xiWcVZNhcWworevTDxTk3MyhEtCiobcBb yi+2j+RPUWKgzgxYTxZr7Rs3ZNKAa0qwOkaK7bWM6ryXqFrQ8wOUSpM+3fO+IiS6 TwaTKbxkbLSQ1N2g3p/UxMDYci78lRWu6kw3wU8vjJoYnbtUB3UvnBLwcsWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9jmaDmKzRtcr317IHRW1acmDdAwHwYDVR0j BBgwFoAU0E6O2hxuCua1iYh6zzVdd+4XWMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY0ZDFjMzYtNGEzMS00ODU3LTllMzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREEx QzZFMEFFNkI1ODk4ODdBQ0YzNTVENzdFRTE3NThDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDRFOEVEQTFDNkUwQUU2QjU4OTg4N0FDRjM1NUQ3N0VFMTc1 OEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRDA0RThFREExQzZFMEFFNkI1ODk4ODdBQ0YzNTVE NzdFRTE3NThDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHH+Rx1WVR5HNMuGe/p8uZzUZqllrProfzS 3S5m4bYyT/nFn4UyR3Q4B9f6FCS0tXDOXOP7qH4CHvcd9Pwu6XnWhOi5NQDbJxJ1 x75MmQHhdxLVXKDRXFvhR8cg1x5BO8xJU2cLR3UL9k123eqrGD2CGYRPKiMjiId2 zcm0bYH8xKP2wpcMQIA4bAww4s1BY+iazyD3CCfL+QJ6Xoqdi/tuwO+QeThHnI3d bE8qfuYZNUzHUMEV6Hd9G0S3krMAV9yFprDHdu722xa67IHYJykKp/HjmjUA3OyR kMEXOBVnjYCG0s+BdbvpfKkUo22TnRE2KjMcmTjltn1RiC4RYME= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:02 2026 by rpki-client