$ rpki-client -vvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: 7GhzblViHc1kLWGL8SoCoIu5jOS0J2vvwZNL1rlgeGE= Subject key identifier: 2D:65:2E:B5:DC:FD:6A:24:D4:AB:80:C6:C1:6D:93:A8:EE:FA:E9:2A Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 727C2D2EE0DC8D7D52D5A5A97F5DA178142B2CB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 02:02:14 +0000 Manifest this update: Sat 20 Jun 2026 01:57:14 +0000 Manifest next update: Sun 21 Jun 2026 04:21:14 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: WFP5FiEb1jkgG1UJmzFepoe9t0gLUkcVmAIk1b8B/EM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7c:2d:2e:e0:dc:8d:7d:52:d5:a5:a9:7f:5d:a1:78:14:2b:2c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Jun 20 01:57:14 2026 GMT Not After : Jun 21 04:21:14 2026 GMT Subject: CN=2D652EB5DCFD6A24D4AB80C6C16D93A8EEFAE92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:28:03:b4:a3:42:a9:a3:00:1d:30:cd:38: da:6b:3c:17:3a:86:c7:ab:d5:ac:85:db:39:64:8b: f0:21:43:93:d2:b6:d9:2a:37:2a:44:89:0d:63:ca: 3d:99:23:e2:ac:6b:ee:7b:44:ea:fc:a2:fa:03:9d: 6e:eb:eb:16:4c:d6:1f:58:de:f7:11:23:7a:f4:62: 73:f9:de:a2:21:9e:c9:1b:e5:10:75:b2:09:5e:72: 85:c0:92:1b:7d:2b:b5:21:93:86:81:7b:7b:45:b8: ca:ad:75:22:f2:61:05:33:ae:20:e6:1d:42:61:71: ab:cc:2d:97:35:47:46:71:0f:7c:2a:86:cc:ca:33: cd:29:03:23:37:3e:4a:f5:c6:cc:3b:91:28:a0:1f: da:04:8b:64:a5:b8:19:9b:47:a7:76:b4:66:9d:da: 32:ad:ec:4e:7a:22:e5:6e:ed:a8:25:16:fa:43:4b: b4:6c:c6:b9:84:07:ca:39:fa:05:9f:d8:57:3d:de: f2:fb:b7:ac:b3:fd:bb:47:33:dd:21:71:fc:49:ed: 09:8d:ef:17:e3:b3:ed:ea:2f:be:57:cc:ae:77:c9: 92:d0:47:22:ea:c1:92:90:8f:17:b1:ce:6f:da:4f: b1:6c:94:c6:4f:45:09:0f:00:e4:01:dc:bf:03:51: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:2E:B5:DC:FD:6A:24:D4:AB:80:C6:C1:6D:93:A8:EE:FA:E9:2A X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:27:ab:d5:ca:9c:09:09:8c:b9:7a:64:ad:48:00:30:f6:72: 91:93:01:c5:9e:97:0c:dd:1a:04:df:04:99:b2:47:ab:94:a8: 8d:a5:a9:16:5c:91:cb:de:eb:0e:f5:55:5a:23:e5:d7:8d:6e: 52:cd:8e:1e:26:db:a9:0a:07:f6:e4:60:39:25:95:bd:26:db: d2:00:14:c3:d0:85:d0:1d:27:cb:68:3e:c3:1e:03:18:88:73: 81:9f:5f:1b:d5:1f:4f:2e:53:16:d4:04:c0:17:e6:3c:cc:04: f1:bb:b1:5e:25:29:fc:55:8b:a9:02:45:ca:63:23:b3:a7:d1: f0:a8:64:83:2f:cb:9d:af:0d:44:8a:68:20:e0:aa:b3:7b:07: 11:d7:46:34:a4:3d:cd:08:ce:53:08:41:00:c6:ff:9a:6f:ce: 9f:a2:94:f5:3c:ea:28:98:41:d0:6b:a7:24:2c:40:7b:94:45: b4:83:c7:d7:b1:c7:a3:b7:ed:c0:7c:60:f9:a1:c6:6c:7d:51: 4c:25:33:6d:6c:a6:15:64:1b:3a:00:53:38:2f:50:b0:d9:df: d7:09:b1:aa:b3:80:4b:a5:c0:fe:2a:2b:da:37:0a:a3:02:d4: ae:d1:82:e5:dc:0d:1a:a2:ae:ef:ba:43:f3:4a:07:86:25:63: 50:2e:70:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnwtLuDcjX1S1aWpf12heBQrLLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA2MjAwMTU3MTRaFw0yNjA2MjEwNDIxMTRaMDMxMTAvBgNV BAMTKDJENjUyRUI1RENGRDZBMjRENEFCODBDNkMxNkQ5M0E4RUVGQUU5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kigDtKNCqaMAHTDNONprPBc6 hser1ayF2zlki/AhQ5PSttkqNypEiQ1jyj2ZI+Ksa+57ROr8ovoDnW7r6xZM1h9Y 3vcRI3r0YnP53qIhnskb5RB1sglecoXAkht9K7Uhk4aBe3tFuMqtdSLyYQUzriDm HUJhcavMLZc1R0ZxD3wqhszKM80pAyM3Pkr1xsw7kSigH9oEi2SluBmbR6d2tGad 2jKt7E56IuVu7aglFvpDS7RsxrmEB8o5+gWf2Fc93vL7t6yz/btHM90hcfxJ7QmN 7xfjs+3qL75XzK53yZLQRyLqwZKQjxexzm/aT7FslMZPRQkPAOQB3L8DUTirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWUutdz9aiTUq4DGwW2TqO766SowHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0nq9XKnAkJjLl6ZK1IADD2cpGTAcWelwzd GgTfBJmyR6uUqI2lqRZckcve6w71VVoj5deNblLNjh4m26kKB/bkYDkllb0m29IA FMPQhdAdJ8toPsMeAxiIc4GfXxvVH08uUxbUBMAX5jzMBPG7sV4lKfxVi6kCRcpj I7On0fCoZIMvy52vDUSKaCDgqrN7BxHXRjSkPc0IzlMIQQDG/5pvzp+ilPU86iiY QdBrpyQsQHuURbSDx9exx6O37cB8YPmhxmx9UUwlM21sphVkGzoAUzgvULDZ39cJ saqzgEulwP4qK9o3CqMC1K7RguXcDRqiru+6Q/NKB4YlY1AucDA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:38:05 2026 by rpki-client