$ rpki-client -vvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: ROpLdESPmBEiCs57j9eqH3d2lHIIyhJB56QxmtTXdO8= Subject key identifier: E0:36:64:5B:23:AA:26:8C:73:B0:0A:78:E4:77:8A:0B:93:98:58:ED Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 17B2A8EFA3EBF8721D0631A3E43175F1D3E9B18C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:01:19 +0000 Manifest this update: Fri 19 Jun 2026 16:56:19 +0000 Manifest next update: Sat 20 Jun 2026 18:45:19 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: b026hGeIrggT79l1rrtWJQBLeOZWygJCP7CMjc578l0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b2:a8:ef:a3:eb:f8:72:1d:06:31:a3:e4:31:75:f1:d3:e9:b1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: Jun 19 16:56:19 2026 GMT Not After : Jun 20 18:45:19 2026 GMT Subject: CN=E036645B23AA268C73B00A78E4778A0B939858ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:ad:b8:9c:2a:d9:42:b7:c5:fb:86:1a:a0: 33:87:bd:6d:26:4d:2f:50:f8:03:e7:b3:c4:0c:16: 54:0e:6c:bc:dd:b1:eb:a8:18:aa:87:9a:ab:0c:d9: 95:84:72:69:6e:c7:6b:82:97:9b:07:4a:36:18:1a: 2e:a3:7d:87:56:af:85:a5:ea:60:50:b0:d7:ce:2c: 82:35:79:28:07:b0:da:60:c3:30:87:f4:8e:33:e4: b4:16:69:8a:f5:bd:2b:fd:89:4f:47:43:9f:6d:10: d5:53:7d:dd:37:43:77:01:f7:90:61:a2:65:9d:c9: 17:c4:6b:b1:ee:fa:67:5f:f4:ea:20:db:f7:42:8e: 6e:46:65:7c:2d:51:16:ee:98:ed:6e:a5:c8:b3:02: f6:20:7c:26:76:1b:75:a0:a9:a4:82:a7:42:be:fe: 56:21:c6:57:48:3d:bd:00:38:30:2d:78:59:3e:7c: fb:ec:6e:23:09:5a:d2:56:5a:37:04:56:03:06:2c: 67:c3:e0:05:0c:54:1f:9b:e4:7e:a4:41:d5:f6:74: 78:80:b8:0d:4f:9c:96:03:19:5f:65:77:25:c5:0e: 01:68:7d:b4:08:e1:73:e4:fd:dc:e7:b3:42:52:ef: 45:5e:2c:37:a6:8c:e1:21:4a:61:59:81:35:1c:b8: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:36:64:5B:23:AA:26:8C:73:B0:0A:78:E4:77:8A:0B:93:98:58:ED X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4d:54:72:11:7f:bf:4f:e0:57:6b:22:0a:d0:70:66:ad:bf: 51:6f:8d:84:ea:70:51:c5:be:e5:a9:94:55:77:57:58:8c:2b: ed:18:92:0a:56:11:54:9b:3a:f4:d7:64:b0:31:55:8e:60:8d: 0e:ff:91:4e:e4:5f:13:93:bc:f1:2c:4a:59:eb:49:47:35:40: cb:c4:95:5b:92:26:85:b4:e5:ca:d7:35:8e:70:9c:79:9c:ba: ed:87:11:4d:b7:05:12:a4:65:33:4c:25:a6:e8:21:b4:7b:56: 41:f5:9e:56:09:f3:b0:b6:19:df:f7:77:38:ed:10:76:42:eb: 05:d9:cd:64:dd:e8:3c:a5:5d:73:04:43:77:f4:3d:cd:9d:31: 88:80:40:da:b8:5a:af:7c:ae:ab:de:c7:a9:03:d1:63:19:0b: f4:c9:3f:28:a9:9e:a1:50:03:d4:0e:b7:f5:de:15:27:1a:39: 51:73:e4:ff:d6:c2:15:23:0d:5a:06:c9:a9:7c:28:f8:7e:cb: 6e:87:d3:bb:10:78:86:78:0f:74:ab:94:bf:15:eb:27:7d:24: 2e:e2:44:c2:82:25:4c:1d:14:84:3c:28:e9:1b:31:2f:a9:e5: 53:d1:18:b3:9a:ca:fa:09:9d:7d:0b:64:bb:99:77:74:ab:62: 3c:75:ec:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7Ko76Pr+HIdBjGj5DF18dPpsYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA2MTkxNjU2MTlaFw0yNjA2MjAxODQ1MTlaMDMxMTAvBgNV BAMTKEUwMzY2NDVCMjNBQTI2OEM3M0IwMEE3OEU0Nzc4QTBCOTM5ODU4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRK24nCrZQrfF+4YaoDOHvW0m TS9Q+APns8QMFlQObLzdseuoGKqHmqsM2ZWEcmlux2uCl5sHSjYYGi6jfYdWr4Wl 6mBQsNfOLII1eSgHsNpgwzCH9I4z5LQWaYr1vSv9iU9HQ59tENVTfd03Q3cB95Bh omWdyRfEa7Hu+mdf9Oog2/dCjm5GZXwtURbumO1upcizAvYgfCZ2G3WgqaSCp0K+ /lYhxldIPb0AODAteFk+fPvsbiMJWtJWWjcEVgMGLGfD4AUMVB+b5H6kQdX2dHiA uA1PnJYDGV9ldyXFDgFofbQI4XPk/dzns0JS70VeLDemjOEhSmFZgTUcuMPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DZkWyOqJoxzsAp45HeKC5OYWO0wHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZNVHIRf79P4FdrIgrQcGatv1FvjYTqcFHF vuWplFV3V1iMK+0YkgpWEVSbOvTXZLAxVY5gjQ7/kU7kXxOTvPEsSlnrSUc1QMvE lVuSJoW05crXNY5wnHmcuu2HEU23BRKkZTNMJaboIbR7VkH1nlYJ87C2Gd/3dzjt EHZC6wXZzWTd6DylXXMEQ3f0Pc2dMYiAQNq4Wq98rqvex6kD0WMZC/TJPyipnqFQ A9QOt/XeFScaOVFz5P/WwhUjDVoGyal8KPh+y26H07sQeIZ4D3SrlL8V6yd9JC7i RMKCJUwdFIQ8KOkbMS+p5VPRGLOayvoJnX0LZLuZd3SrYjx17HE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:17 2026 by rpki-client