$ rpki-client -vvf rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft File: 82B8687B1ED233C41017803198B332BD9A4DB403.mft (raw, json) Hash identifier: GRTJV7ejYCUquhTFeaCwA7LGR89050/UxCUj7bI/iqE= Subject key identifier: 1F:FA:8B:9F:4A:30:CB:50:74:D0:CA:32:B7:34:53:FA:F0:E3:D1:A2 Authority key identifier: 82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 Certificate issuer: /CN=82B8687B1ED233C41017803198B332BD9A4DB403 Certificate serial: 530B0C27C8BFAABEECDFBF29301E8EC1B864E7B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 01:21:25 +0000 Manifest this update: Sat 20 Jun 2026 01:16:25 +0000 Manifest next update: Sun 21 Jun 2026 04:34:25 +0000 Files and hashes: 1: 82B8687B1ED233C41017803198B332BD9A4DB403.crl (hash: ophSRRQDeuVY+lxptyxNLgn+TT9kBNdIQ00rlXRSmdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0b:0c:27:c8:bf:aa:be:ec:df:bf:29:30:1e:8e:c1:b8:64:e7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82B8687B1ED233C41017803198B332BD9A4DB403 Validity Not Before: Jun 20 01:16:25 2026 GMT Not After : Jun 21 04:34:25 2026 GMT Subject: CN=1FFA8B9F4A30CB5074D0CA32B73453FAF0E3D1A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:3d:8e:d2:6f:e4:9a:92:a1:6e:8e:55:03: 28:69:52:58:3d:ac:29:76:6a:1c:9e:c7:e9:54:eb: 6e:b5:3c:ab:7d:98:05:7d:e1:bf:a2:c8:a1:eb:71: eb:f8:33:96:73:8f:5f:2b:0a:ee:01:87:2e:cf:7f: 83:38:cb:59:f5:d9:92:be:90:10:91:b5:8e:fb:df: 53:4e:4c:57:39:cc:9d:89:01:3b:f9:63:fa:89:6f: 07:68:1e:20:34:4c:63:47:44:f9:30:0b:a6:a8:ab: fb:d2:fd:7c:a6:95:91:2a:ad:1c:16:4e:a6:90:45: 28:56:e4:48:32:4f:61:dc:ba:77:a3:3a:6e:d3:b0: 5f:b2:4d:52:5a:d8:b2:b3:64:50:55:f0:e8:ee:d2: 8c:35:49:e3:fa:8e:bf:11:36:73:f6:f5:e5:1b:93: 16:2d:b8:42:b9:a4:0e:53:c8:c7:1a:2b:6d:e0:65: 3e:2b:bc:6c:dc:27:66:a5:b8:a9:4a:3d:71:29:57: 13:d1:ba:17:a0:af:42:6e:67:10:28:1e:4f:1c:63: 9b:95:6b:65:ee:e7:6a:0c:16:1a:26:11:54:92:31: 87:67:d2:9d:db:bb:f8:b0:e7:6c:01:f0:6a:3d:ec: 32:55:96:ff:e1:48:b7:71:d8:5e:fb:11:f0:e9:19: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FA:8B:9F:4A:30:CB:50:74:D0:CA:32:B7:34:53:FA:F0:E3:D1:A2 X509v3 Authority Key Identifier: keyid:82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:98:d2:f6:8d:21:fa:37:06:07:61:45:ed:b0:b5:5b:36:19: 1c:77:7f:51:71:4a:2b:b8:31:fb:65:93:4e:17:36:44:f0:a5: 9d:4e:95:69:5e:84:b7:8c:39:49:e8:2b:30:51:32:17:dc:a0: 26:ac:e0:8b:bd:c1:9e:3a:d3:cd:c0:7b:8e:37:31:ee:73:a3: 6e:b0:4b:97:7a:3a:8a:1b:10:9d:0a:fa:7f:3c:b8:9c:17:58: 16:f2:ff:b8:dc:c6:4a:ff:df:50:ef:26:a1:b7:b8:72:53:92: 41:e1:36:b7:7c:df:da:1a:1d:9e:78:89:e8:8e:2e:95:36:91: d7:c9:8d:71:0d:52:c5:66:50:da:1f:a6:32:26:5f:22:41:a0: e2:e9:71:7e:56:fe:38:54:6f:2e:4c:ab:39:d0:58:09:ef:73: 2f:20:e7:1c:17:33:3b:c0:7c:59:01:0f:39:b2:25:eb:0c:78: b2:44:84:af:e9:50:2d:ee:e4:82:25:f7:2c:04:12:ab:07:88: be:32:32:b4:3f:98:53:e4:1f:05:f0:20:15:d1:5f:84:0a:71: 6c:90:33:5d:3f:1d:b9:45:ce:e9:de:c9:6c:20:70:8d:f8:cc: 4d:33:58:2e:c3:b9:c5:06:21:27:e1:f2:4b:56:16:ff:6d:82: 4f:d6:41:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwsMJ8i/qr7s378pMB6Owbhk57IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5 QTREQjQwMzAeFw0yNjA2MjAwMTE2MjVaFw0yNjA2MjEwNDM0MjVaMDMxMTAvBgNV BAMTKDFGRkE4QjlGNEEzMENCNTA3NEQwQ0EzMkI3MzQ1M0ZBRjBFM0QxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6T2O0m/kmpKhbo5VAyhpUlg9 rCl2ahyex+lU6261PKt9mAV94b+iyKHrcev4M5Zzj18rCu4Bhy7Pf4M4y1n12ZK+ kBCRtY7731NOTFc5zJ2JATv5Y/qJbwdoHiA0TGNHRPkwC6aoq/vS/XymlZEqrRwW TqaQRShW5EgyT2HcunejOm7TsF+yTVJa2LKzZFBV8Oju0ow1SeP6jr8RNnP29eUb kxYtuEK5pA5TyMcaK23gZT4rvGzcJ2aluKlKPXEpVxPRuhegr0JuZxAoHk8cY5uV a2Xu52oMFhomEVSSMYdn0p3bu/iw52wB8Go97DJVlv/hSLdx2F77EfDpGYYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/qLn0owy1B00MoytzRT+vDj0aIwHwYDVR0j BBgwFoAUgrhoex7SM8QQF4AxmLMyvZpNtAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjZjU2NTctZWNkYy00ZDk3LWE1OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0Ix RUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5QTREQjQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkI4Njg3QjFFRDIzM0M0MTAxNzgwMzE5OEIzMzJCRDlBNERC NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMy QkQ5QTREQjQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOY0vaNIfo3BgdhRe2wtVs2GRx3f1FxSiu4 Mftlk04XNkTwpZ1OlWlehLeMOUnoKzBRMhfcoCas4Iu9wZ46083Ae443Me5zo26w S5d6OoobEJ0K+n88uJwXWBby/7jcxkr/31DvJqG3uHJTkkHhNrd839oaHZ54ieiO LpU2kdfJjXENUsVmUNofpjImXyJBoOLpcX5W/jhUby5MqznQWAnvcy8g5xwXMzvA fFkBDzmyJesMeLJEhK/pUC3u5IIl9ywEEqsHiL4yMrQ/mFPkHwXwIBXRX4QKcWyQ M10/HblFzuneyWwgcI34zE0zWC7DucUGISfh8ktWFv9tgk/WQTw= -----END CERTIFICATE-----Generated at Sat Jun 20 08:57:13 2026 by rpki-client