$ rpki-client -vvf rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft File: E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft (raw, json) Hash identifier: OGk/Ybl5Ng4H93M966NcoSaK7C2zoPlAvGUIKQyo5wU= Subject key identifier: 00:E6:DF:5C:53:0E:F0:01:74:AE:A3:91:A6:97:3B:2F:C0:0D:4B:20 Authority key identifier: E5:5C:06:94:A6:F8:FB:B7:93:1C:D1:93:4E:90:94:E1:ED:77:A8:01 Certificate issuer: /CN=E55C0694A6F8FBB7931CD1934E9094E1ED77A801 Certificate serial: 210B49E940459FFBF12BB4FC3D07BA5BAE5D0FA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:31:29 +0000 Manifest this update: Sat 20 Jun 2026 05:26:29 +0000 Manifest next update: Sun 21 Jun 2026 09:10:29 +0000 Files and hashes: 1: E55C0694A6F8FBB7931CD1934E9094E1ED77A801.crl (hash: 1UDKRbQTXMr5TguTa9tl3hxiFSmjQl4RaszHh6nGP2M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.crl rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0b:49:e9:40:45:9f:fb:f1:2b:b4:fc:3d:07:ba:5b:ae:5d:0f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E55C0694A6F8FBB7931CD1934E9094E1ED77A801 Validity Not Before: Jun 20 05:26:29 2026 GMT Not After : Jun 21 09:10:29 2026 GMT Subject: CN=00E6DF5C530EF00174AEA391A6973B2FC00D4B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:10:d9:a1:16:93:78:63:64:bb:3d:7a:94: d2:91:cf:e4:19:b3:4d:2c:74:f8:3d:a7:ce:39:12: d0:84:81:e1:0c:8a:2f:2e:f8:d5:d5:d6:82:87:e9: 0c:b5:51:70:a2:92:bb:40:0b:07:1c:52:df:32:2c: 87:d2:16:88:ed:ab:44:51:f8:9e:5f:4b:8b:cb:35: 8e:3a:fb:d8:30:5d:1a:6c:bd:cd:44:b9:a8:1d:2e: 66:8f:6e:34:c9:a4:32:6d:cc:0b:f0:2b:f8:9b:8e: 2b:96:e9:8f:72:98:74:21:76:fc:2c:5c:21:b7:56: 23:db:85:bf:c9:29:68:d6:19:e2:c2:c8:cb:0e:f2: 2c:9b:3f:75:f7:ad:4c:2e:4e:9e:10:5a:82:58:4d: 7f:df:0a:57:ad:d7:90:5b:63:0b:3f:94:8b:e9:81: 8f:df:8e:c5:96:56:9f:50:b8:c7:90:33:b5:75:4d: 6c:e9:28:fc:63:4d:54:f0:d7:2c:b2:b5:b2:f4:4d: cd:0c:f0:c6:af:ec:6e:41:c2:62:30:f7:de:7c:a6: 12:4a:0f:52:5a:10:b4:3a:62:a7:bb:8e:34:6c:ea: b8:71:59:56:64:76:b3:5b:5a:e1:a2:47:9f:01:84: 91:3f:47:bf:9a:da:c4:4f:31:97:83:4b:a7:3a:7e: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:DF:5C:53:0E:F0:01:74:AE:A3:91:A6:97:3B:2F:C0:0D:4B:20 X509v3 Authority Key Identifier: keyid:E5:5C:06:94:A6:F8:FB:B7:93:1C:D1:93:4E:90:94:E1:ED:77:A8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a6:12:d5:3b:cf:82:86:50:d1:55:58:52:b9:de:19:18:89: 2c:20:4d:5f:7d:32:46:f2:2a:72:5e:9c:e8:4f:f3:46:89:3f: 6c:fa:c5:d6:5e:e4:1e:31:05:b8:37:60:d6:91:ce:f1:66:9f: 89:6f:d2:ac:4d:be:4b:f1:8f:02:4d:e8:07:43:bd:b3:93:47: 9a:01:11:d8:19:61:c5:68:39:fc:50:66:e3:fd:18:aa:df:3b: 1a:83:9e:04:2f:8b:23:0a:ca:26:5b:c8:a4:2b:42:a7:a4:b5: 85:11:23:7c:f9:41:b7:ab:2c:d9:18:f5:11:f1:4f:37:f7:e0: 6a:4b:06:f7:f2:a8:e7:ec:50:ea:db:7a:50:49:b3:07:d7:f2: 25:ec:47:0b:b8:9e:c4:70:23:17:2e:15:1d:7d:d5:60:3e:02: 6f:5f:70:47:8b:f2:40:b9:6d:76:b7:52:83:31:4b:db:74:7f: 2b:1c:bb:c7:33:ba:8d:73:7f:b2:8c:9e:bc:dd:32:1d:b5:c3: 9f:0a:cd:c8:f1:29:dc:08:56:6d:a0:07:a0:6d:e6:ea:01:04: 06:a9:38:58:e3:c8:4a:bd:8a:97:da:11:f8:7a:67:46:4b:b4: 3c:e4:a9:04:0a:79:66:f4:44:42:3f:33:d2:2d:b1:01:b1:30: 6f:96:c1:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQtJ6UBFn/vxK7T8PQe6W65dD6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU1QzA2OTRBNkY4RkJCNzkzMUNEMTkzNEU5MDk0RTFF RDc3QTgwMTAeFw0yNjA2MjAwNTI2MjlaFw0yNjA2MjEwOTEwMjlaMDMxMTAvBgNV BAMTKDAwRTZERjVDNTMwRUYwMDE3NEFFQTM5MUE2OTczQjJGQzAwRDRCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChNxDZoRaTeGNkuz16lNKRz+QZ s00sdPg9p845EtCEgeEMii8u+NXV1oKH6Qy1UXCikrtACwccUt8yLIfSFojtq0RR +J5fS4vLNY46+9gwXRpsvc1EuagdLmaPbjTJpDJtzAvwK/ibjiuW6Y9ymHQhdvws XCG3ViPbhb/JKWjWGeLCyMsO8iybP3X3rUwuTp4QWoJYTX/fClet15BbYws/lIvp gY/fjsWWVp9QuMeQM7V1TWzpKPxjTVTw1yyytbL0Tc0M8Mav7G5BwmIw9958phJK D1JaELQ6Yqe7jjRs6rhxWVZkdrNbWuGiR58BhJE/R7+a2sRPMZeDS6c6fpdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAObfXFMO8AF0rqORppc7L8ANSyAwHwYDVR0j BBgwFoAU5VwGlKb4+7eTHNGTTpCU4e13qAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzFmMTM0YjEtYTYxNy00YmFiLTkxYWItMTM4MTAyMzU0MDFiLzAvRTU1QzA2OTRB NkY4RkJCNzkzMUNEMTkzNEU5MDk0RTFFRDc3QTgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNTVDMDY5NEE2RjhGQkI3OTMxQ0QxOTM0RTkwOTRFMUVENzdB ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvRTU1QzA2OTRBNkY4RkJCNzkzMUNEMTkzNEU5MDk0 RTFFRDc3QTgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2mEtU7z4KGUNFVWFK53hkYiSwgTV99Mkby KnJenOhP80aJP2z6xdZe5B4xBbg3YNaRzvFmn4lv0qxNvkvxjwJN6AdDvbOTR5oB EdgZYcVoOfxQZuP9GKrfOxqDngQviyMKyiZbyKQrQqektYURI3z5QberLNkY9RHx Tzf34GpLBvfyqOfsUOrbelBJswfX8iXsRwu4nsRwIxcuFR191WA+Am9fcEeL8kC5 bXa3UoMxS9t0fyscu8czuo1zf7KMnrzdMh21w58KzcjxKdwIVm2gB6Bt5uoBBAap OFjjyEq9ipfaEfh6Z0ZLtDzkqQQKeWb0REI/M9ItsQGxMG+WwVg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:35:37 2026 by rpki-client