$ rpki-client -vvf rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft File: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft (raw, json) Hash identifier: VnKxhwWrXoC1IxrXDtgZu3ePclsb/dtVSa42VEjRVls= Subject key identifier: A5:44:E4:5C:80:6B:7B:36:3E:6F:1B:F7:A6:5D:7A:EA:8C:1B:97:F9 Authority key identifier: F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 Certificate issuer: /CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Certificate serial: 4BE3C024002BE985246A3B4C01C6FC5329D91B8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 19:14:12 +0000 Manifest this update: Fri 19 Jun 2026 19:09:12 +0000 Manifest next update: Sat 20 Jun 2026 19:29:12 +0000 Files and hashes: 1: F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl (hash: fPb3HpBUB8DIKCm5HKfQ5rzHmtni4/3862ebSdNYfvg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e3:c0:24:00:2b:e9:85:24:6a:3b:4c:01:c6:fc:53:29:d9:1b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91 Validity Not Before: Jun 19 19:09:12 2026 GMT Not After : Jun 20 19:29:12 2026 GMT Subject: CN=A544E45C806B7B363E6F1BF7A65D7AEA8C1B97F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:59:23:c1:45:1b:1d:3f:f9:8e:df:a5:ad:4c: 0a:06:91:55:0c:9a:f3:8c:16:3d:4b:76:7f:53:75: 59:8c:93:0e:94:4f:71:d8:76:92:a1:80:c3:82:6e: ad:17:0b:86:cc:6a:11:5f:84:03:0c:5c:c0:77:02: c0:6e:06:6d:56:50:14:28:36:44:09:d9:ca:0d:27: aa:20:e4:3d:63:26:cc:b8:43:99:40:ef:1f:08:bc: f7:fc:d4:eb:3c:39:6a:f1:7a:74:2b:47:12:a3:4e: d2:9e:05:5a:6b:e8:70:5f:61:a5:37:87:94:99:28: e7:0e:97:9a:41:d1:0f:d3:41:e9:2c:a4:ca:89:78: 6c:34:f6:fd:51:07:52:4b:19:4c:fe:87:9f:b9:21: f0:7b:e6:5d:53:53:ad:b0:29:08:92:20:68:72:1e: 86:52:67:d6:7e:15:6d:36:2b:50:00:93:d5:b3:09: d0:ca:2b:79:b1:71:9c:60:06:cb:97:73:83:9f:78: d4:26:80:db:72:57:3e:7d:da:71:50:b0:61:a6:99: 00:b6:f9:c6:97:d9:6c:47:9a:e8:b5:02:86:e9:d4: 67:7a:8f:6c:44:e1:18:45:a7:3b:54:4b:e7:ab:59: 81:97:8e:d7:5f:d3:17:2a:08:82:da:b9:4c:85:9d: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:E4:5C:80:6B:7B:36:3E:6F:1B:F7:A6:5D:7A:EA:8C:1B:97:F9 X509v3 Authority Key Identifier: keyid:F9:AD:F5:9D:FC:07:02:EB:1E:3C:C8:F9:D5:63:CA:A4:C0:61:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/F9ADF59DFC0702EB1E3CC8F9D563CAA4C0612D91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:f3:ea:5b:49:7d:d0:c3:a4:88:0e:26:00:7d:65:8f:70:cc: 1d:fb:a1:bb:7c:1f:be:c6:0f:f9:9b:15:b0:b7:a9:e0:19:13: 7c:3a:85:0b:9e:10:60:97:92:01:da:91:f6:66:90:71:45:e5: a8:d9:e0:cc:47:56:94:82:7b:69:bd:0f:67:7f:7e:13:fc:20: ff:bb:6b:27:50:9e:ee:ba:28:60:24:bd:77:af:22:f8:70:51: e9:32:e3:62:ac:bd:12:d9:cd:ff:8b:37:6c:9c:3c:e4:6d:10: 5f:bc:85:b1:d6:4d:b8:46:cf:38:71:77:be:51:48:64:c6:5e: 0f:51:2b:9c:b1:ea:ea:96:63:b9:f7:dd:97:b8:d2:42:ee:c6: 53:6d:25:b4:7f:99:8a:d6:b1:de:f9:f4:39:44:cc:66:05:f4: f5:9c:fb:61:b3:5c:66:0c:89:8c:cb:a3:cb:43:c2:28:44:66: 2d:bc:06:ed:e1:03:8b:3e:1c:cc:99:43:00:07:4e:51:b0:5d: 98:5c:bd:44:9f:07:2b:2e:8d:25:22:d6:c0:f9:cc:f4:f5:89: 8a:e0:ee:9e:19:65:cc:e4:35:19:47:e7:f4:e7:09:7e:a4:7c: 0b:1e:76:18:f2:99:b6:f8:4e:98:6c:48:5f:c4:71:90:32:c3: bf:8f:cc:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+PAJAAr6YUkajtMAcb8UynZG4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRD MDYxMkQ5MTAeFw0yNjA2MTkxOTA5MTJaFw0yNjA2MjAxOTI5MTJaMDMxMTAvBgNV BAMTKEE1NDRFNDVDODA2QjdCMzYzRTZGMUJGN0E2NUQ3QUVBOEMxQjk3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdWSPBRRsdP/mO36WtTAoGkVUM mvOMFj1Ldn9TdVmMkw6UT3HYdpKhgMOCbq0XC4bMahFfhAMMXMB3AsBuBm1WUBQo NkQJ2coNJ6og5D1jJsy4Q5lA7x8IvPf81Os8OWrxenQrRxKjTtKeBVpr6HBfYaU3 h5SZKOcOl5pB0Q/TQekspMqJeGw09v1RB1JLGUz+h5+5IfB75l1TU62wKQiSIGhy HoZSZ9Z+FW02K1AAk9WzCdDKK3mxcZxgBsuXc4OfeNQmgNtyVz592nFQsGGmmQC2 +caX2WxHmui1Aobp1Gd6j2xE4RhFpztUS+erWYGXjtdf0xcqCILauUyFndBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUTkXIBrezY+bxv3pl166owbl/kwHwYDVR0j BBgwFoAU+a31nfwHAusePMj51WPKpMBhLZEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk3YjhmNGEtMzExMC00MGI3LTkwMzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURG QzA3MDJFQjFFM0NDOEY5RDU2M0NBQTRDMDYxMkQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUFERjU5REZDMDcwMkVCMUUzQ0M4RjlENTYzQ0FBNEMwNjEy RDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvRjlBREY1OURGQzA3MDJFQjFFM0NDOEY5RDU2M0NB QTRDMDYxMkQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOrz6ltJfdDDpIgOJgB9ZY9wzB37obt8H77G D/mbFbC3qeAZE3w6hQueEGCXkgHakfZmkHFF5ajZ4MxHVpSCe2m9D2d/fhP8IP+7 aydQnu66KGAkvXevIvhwUeky42KsvRLZzf+LN2ycPORtEF+8hbHWTbhGzzhxd75R SGTGXg9RK5yx6uqWY7n33Ze40kLuxlNtJbR/mYrWsd759DlEzGYF9PWc+2GzXGYM iYzLo8tDwihEZi28Bu3hA4s+HMyZQwAHTlGwXZhcvUSfBysujSUi1sD5zPT1iYrg 7p4ZZczkNRlH5/TnCX6kfAsedhjymbb4TphsSF/EcZAyw7+PzHE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:04 2026 by rpki-client