$ rpki-client -vvf rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft File: 700131DE51ECE4C881CAC783B29EDC61B1D04592.mft (raw, json) Hash identifier: lPWxdqkvLD8JyJIpFICgy00bsZEXaq2U5t5udlPhx8o= Subject key identifier: BE:93:1E:7B:C0:E8:7D:2E:9F:A8:BB:BB:44:56:06:2C:E2:87:3F:2E Authority key identifier: 70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92 Certificate issuer: /CN=700131DE51ECE4C881CAC783B29EDC61B1D04592 Certificate serial: 5AFD70BBC1C2D96401D82CF7A4B68C7DA2ED4262 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 18:48:34 +0000 Manifest this update: Fri 19 Jun 2026 18:43:34 +0000 Manifest next update: Sat 20 Jun 2026 18:51:34 +0000 Files and hashes: 1: 700131DE51ECE4C881CAC783B29EDC61B1D04592.crl (hash: Rat2P45HjwS9SIRV+bfSnedb0jN/rPnYdSALnJkqpzg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.crl rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fd:70:bb:c1:c2:d9:64:01:d8:2c:f7:a4:b6:8c:7d:a2:ed:42:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700131DE51ECE4C881CAC783B29EDC61B1D04592 Validity Not Before: Jun 19 18:43:34 2026 GMT Not After : Jun 20 18:51:34 2026 GMT Subject: CN=BE931E7BC0E87D2E9FA8BBBB4456062CE2873F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:53:a7:aa:b3:d4:b6:11:54:7c:ad:0b:a4: 45:a2:44:88:45:ed:66:9e:05:da:02:b3:da:b8:79: 55:85:f1:b3:82:cf:eb:49:a1:c4:3e:fb:3b:76:27: eb:52:1a:c6:2c:64:2b:05:bc:92:48:e9:c9:5b:2f: b5:7b:f9:bf:b0:40:0d:de:3e:69:be:0a:2f:ff:b5: 3a:7e:72:8e:61:21:1f:25:07:0a:96:34:34:d1:b4: 5f:87:d9:fc:0e:8c:17:82:3d:f6:c9:5e:75:43:25: fd:bb:b4:3f:9b:22:03:93:ba:b7:cb:9b:3d:f9:86: d1:e7:91:45:f2:48:00:39:1a:7f:3b:53:55:04:45: db:b2:69:4d:ba:af:3c:3d:2c:62:a0:05:3e:dc:f1: 41:6d:9b:e3:99:b5:4d:84:e3:ee:c7:a8:56:c5:81: ea:b5:61:03:37:9d:c1:fc:a2:75:27:02:e7:13:ba: 9c:7d:d0:05:ef:c3:f6:87:2c:27:25:8f:c2:47:d8: f7:c4:19:6c:1d:6f:15:54:2a:fc:d9:4f:24:7a:cf: c4:6f:2d:62:01:38:28:70:38:af:c3:35:dd:d3:1d: 31:2f:5d:0c:37:ac:48:95:25:c4:f1:42:65:c1:b8: b1:5b:97:a5:a6:e1:b8:68:2f:93:e2:23:47:4c:f3: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:93:1E:7B:C0:E8:7D:2E:9F:A8:BB:BB:44:56:06:2C:E2:87:3F:2E X509v3 Authority Key Identifier: keyid:70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fd:41:a8:ba:78:bb:9a:e2:d1:a7:6f:d2:f9:fb:9c:96:fb: 32:4f:10:e3:56:7b:b1:bd:a3:4e:15:d3:40:6c:6f:6c:43:0a: 6a:a2:eb:b4:ca:12:b9:2d:c5:4c:cf:71:96:91:4f:52:3e:a1: 7b:bb:11:d6:89:dc:d6:5d:9e:4c:d0:84:88:c6:2a:d5:21:c1: f2:d1:54:41:2f:47:56:ba:43:d2:1c:91:0f:0b:a9:53:8f:9d: 42:08:1b:2e:0f:70:09:aa:c3:1b:46:22:bc:7c:2e:cf:21:90: 9d:c4:b9:2a:08:70:d6:d5:74:21:d6:8e:38:b1:e2:8b:3c:ed: 8d:58:1b:b4:b3:e4:47:fa:81:6d:e4:22:25:ea:85:59:15:52: 60:ff:9c:ba:21:cd:bf:7c:70:dc:12:3e:71:56:28:5c:69:6a: df:da:ed:b7:77:2c:df:3a:dc:85:74:95:90:b8:81:7b:c2:4e: 32:b1:aa:4c:5c:b9:86:20:dd:3e:4c:fe:f6:ec:3f:51:77:ae: 1c:5b:d4:5c:7d:e2:99:61:ae:f2:92:ab:a0:87:cb:dd:3c:67: 48:14:32:37:5b:a7:e4:d6:42:b6:cf:45:86:1e:63:d7:74:b5: 1e:4d:9e:6a:e2:c0:d4:ff:15:29:a2:6a:7f:44:d7:b2:1c:f9: 4c:b5:d6:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWv1wu8HC2WQB2Cz3pLaMfaLtQmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwMTMxREU1MUVDRTRDODgxQ0FDNzgzQjI5RURDNjFC MUQwNDU5MjAeFw0yNjA2MTkxODQzMzRaFw0yNjA2MjAxODUxMzRaMDMxMTAvBgNV BAMTKEJFOTMxRTdCQzBFODdEMkU5RkE4QkJCQjQ0NTYwNjJDRTI4NzNGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwu1OnqrPUthFUfK0LpEWiRIhF 7WaeBdoCs9q4eVWF8bOCz+tJocQ++zt2J+tSGsYsZCsFvJJI6clbL7V7+b+wQA3e Pmm+Ci//tTp+co5hIR8lBwqWNDTRtF+H2fwOjBeCPfbJXnVDJf27tD+bIgOTurfL mz35htHnkUXySAA5Gn87U1UERduyaU26rzw9LGKgBT7c8UFtm+OZtU2E4+7HqFbF geq1YQM3ncH8onUnAucTupx90AXvw/aHLCclj8JH2PfEGWwdbxVUKvzZTyR6z8Rv LWIBOChwOK/DNd3THTEvXQw3rEiVJcTxQmXBuLFbl6Wm4bhoL5PiI0dM853/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpMee8DofS6fqLu7RFYGLOKHPy4wHwYDVR0j BBgwFoAUcAEx3lHs5MiByseDsp7cYbHQRZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODE2YjU5OWQtN2ZiYi00NDk4LTg2ZWYtMTg2NDVhZTk4ZTNkLzAvNzAwMTMxREU1 MUVDRTRDODgxQ0FDNzgzQjI5RURDNjFCMUQwNDU5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDAxMzFERTUxRUNFNEM4ODFDQUM3ODNCMjlFREM2MUIxRDA0 NTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvNzAwMTMxREU1MUVDRTRDODgxQ0FDNzgzQjI5RURD NjFCMUQwNDU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz9Qai6eLua4tGnb9L5+5yW+zJPEONWe7G9 o04V00Bsb2xDCmqi67TKErktxUzPcZaRT1I+oXu7EdaJ3NZdnkzQhIjGKtUhwfLR VEEvR1a6Q9IckQ8LqVOPnUIIGy4PcAmqwxtGIrx8Ls8hkJ3EuSoIcNbVdCHWjjix 4os87Y1YG7Sz5Ef6gW3kIiXqhVkVUmD/nLohzb98cNwSPnFWKFxpat/a7bd3LN86 3IV0lZC4gXvCTjKxqkxcuYYg3T5M/vbsP1F3rhxb1Fx94plhrvKSq6CHy908Z0gU Mjdbp+TWQrbPRYYeY9d0tR5NnmriwNT/FSmian9E17Ic+Uy11po= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:15 2026 by rpki-client