$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: hlnQG58T/rk7GzdzpwIsdujdo9iEUk+kew6gz2evMRg= Subject key identifier: 89:12:E9:83:90:30:26:2E:91:4E:ED:90:0D:B4:49:D4:DA:11:64:DA Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 690403384668CDA462203F67183BFDC8905E1A7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 06:07:12 +0000 Manifest this update: Sat 20 Jun 2026 06:02:12 +0000 Manifest next update: Sun 21 Jun 2026 09:44:12 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: uuAawEYiHTA5lGvfqKXR/kd6BMpEx7PEBpNo8wFVqpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:04:03:38:46:68:cd:a4:62:20:3f:67:18:3b:fd:c8:90:5e:1a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: Jun 20 06:02:12 2026 GMT Not After : Jun 21 09:44:12 2026 GMT Subject: CN=8912E9839030262E914EED900DB449D4DA1164DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:08:cb:1a:c7:5a:a9:c2:38:39:5f:b0:e9:67: f0:33:db:57:8f:93:c4:26:bf:a0:d3:98:fa:62:c7: 98:57:c1:e8:d6:de:2d:ab:da:ab:88:e2:a9:8a:fe: 16:8a:d5:e9:35:9b:6b:aa:5c:5e:bb:86:71:44:62: d8:db:6f:80:0a:bf:f3:ea:f6:31:58:ce:45:a9:a6: a4:4b:68:b5:ce:fb:7f:54:f1:f6:6c:13:91:1b:04: 5f:4e:51:c5:3d:b8:be:48:1c:6e:0b:d9:58:52:73: 39:57:6f:e7:cc:42:a8:60:4e:af:3a:3a:16:59:76: 8d:31:4b:b0:61:d5:9a:d1:1d:9a:cb:d6:49:c9:d4: 16:d6:34:c8:8f:55:46:fd:de:eb:61:9c:47:7f:42: 5d:8c:fb:ce:da:91:02:42:f0:32:fd:dd:3f:34:8f: 27:45:c2:81:88:9b:a6:99:dd:27:bd:24:98:6f:75: a7:59:61:37:3d:97:a0:a3:a2:c3:b7:96:04:28:21: 53:d7:2d:bf:5a:96:56:bf:18:eb:cb:91:0e:45:86: 4d:b4:3e:c7:80:db:1f:94:f0:d6:65:a2:f0:ff:a5: 4a:61:2f:7e:0b:01:53:c9:7d:ce:d1:bb:ed:f3:af: 54:75:7b:c5:80:50:77:94:d2:30:8b:c7:c2:c8:4b: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:12:E9:83:90:30:26:2E:91:4E:ED:90:0D:B4:49:D4:DA:11:64:DA X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0b:fc:c0:ca:75:90:85:da:65:b4:2f:3f:a1:23:bb:4c:4b: d3:77:2f:33:5f:7b:e3:fe:92:46:91:d8:d1:7b:dc:8c:8d:6e: bc:b3:2e:97:1e:cf:26:ef:68:cd:15:06:f3:f7:96:a1:97:66: 8a:a2:52:38:a6:7e:27:ac:0b:10:53:5c:ac:b9:45:ba:c1:d0: 13:8e:4c:66:6b:be:45:c5:0c:cb:4b:cc:b2:04:22:6b:24:66: bd:39:33:be:9a:e7:5f:2b:d2:3d:dd:b4:73:39:49:e5:06:a8: 19:c5:10:30:6e:8d:c1:98:c7:ea:21:9f:73:c7:cb:b3:34:2a: eb:18:d7:94:1e:de:2e:47:8a:b5:9f:b3:c3:36:9f:1f:ae:96: cc:a9:c4:4a:dc:89:e8:02:d6:e2:e7:46:16:1f:19:8c:fa:f1: 36:48:5b:cc:c4:77:de:62:97:b2:ab:5d:a2:56:e7:72:51:ad: e7:1a:36:00:11:ca:d1:7f:0e:81:de:f9:09:27:e2:d4:fa:b7: da:0c:7e:34:56:58:5c:df:e3:58:73:6b:30:a2:9a:ed:2a:7f: f5:cf:a3:dc:69:9a:b6:8c:85:72:01:00:43:c9:0e:8b:15:80: a6:7d:05:03:de:ec:9e:8c:e7:a8:44:cc:78:c0:48:0c:36:aa: ae:6f:73:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQQDOEZozaRiID9nGDv9yJBeGn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA2MjAwNjAyMTJaFw0yNjA2MjEwOTQ0MTJaMDMxMTAvBgNV BAMTKDg5MTJFOTgzOTAzMDI2MkU5MTRFRUQ5MDBEQjQ0OUQ0REExMTY0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyCMsax1qpwjg5X7DpZ/Az21eP k8Qmv6DTmPpix5hXwejW3i2r2quI4qmK/haK1ek1m2uqXF67hnFEYtjbb4AKv/Pq 9jFYzkWppqRLaLXO+39U8fZsE5EbBF9OUcU9uL5IHG4L2VhSczlXb+fMQqhgTq86 OhZZdo0xS7Bh1ZrRHZrL1knJ1BbWNMiPVUb93uthnEd/Ql2M+87akQJC8DL93T80 jydFwoGIm6aZ3Se9JJhvdadZYTc9l6CjosO3lgQoIVPXLb9alla/GOvLkQ5Fhk20 PseA2x+U8NZlovD/pUphL34LAVPJfc7Ru+3zr1R1e8WAUHeU0jCLx8LIS3olAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRLpg5AwJi6RTu2QDbRJ1NoRZNowHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcL/MDKdZCF2mW0Lz+hI7tMS9N3LzNfe+P+ kkaR2NF73IyNbryzLpcezybvaM0VBvP3lqGXZoqiUjimfiesCxBTXKy5RbrB0BOO TGZrvkXFDMtLzLIEImskZr05M76a518r0j3dtHM5SeUGqBnFEDBujcGYx+ohn3PH y7M0KusY15Qe3i5HirWfs8M2nx+ulsypxErciegC1uLnRhYfGYz68TZIW8zEd95i l7KrXaJW53JRrecaNgARytF/DoHe+Qkn4tT6t9oMfjRWWFzf41hzazCimu0qf/XP o9xpmraMhXIBAEPJDosVgKZ9BQPe7J6M56hEzHjASAw2qq5vc40= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:18 2026 by rpki-client