$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft File: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft (raw, json) Hash identifier: GNv5We47pUj1ItxODQR1rPPHEEh0rmCVhSL8o9tsXpc= Subject key identifier: C4:4B:DF:9F:B8:3E:7A:EE:9A:CF:7F:83:7B:3C:3C:13:8C:AE:6B:1B Authority key identifier: 5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 Certificate issuer: /CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Certificate serial: 65DE66C9844F8BD628EAE297D3998D7C26A91122 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:59:33 +0000 Manifest this update: Sat 20 Jun 2026 03:54:33 +0000 Manifest next update: Sun 21 Jun 2026 04:00:33 +0000 Files and hashes: 1: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl (hash: V1e1aboGp5f+qEofWqdAi15EfSDJCIhAhGoTzb4MbKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:de:66:c9:84:4f:8b:d6:28:ea:e2:97:d3:99:8d:7c:26:a9:11:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Validity Not Before: Jun 20 03:54:33 2026 GMT Not After : Jun 21 04:00:33 2026 GMT Subject: CN=C44BDF9FB83E7AEE9ACF7F837B3C3C138CAE6B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:e3:58:4a:86:06:86:53:7e:d2:97:d4:48: 9f:a7:af:56:83:28:75:f2:ef:fe:f6:81:fb:c8:82: de:a2:0b:04:e0:68:4a:46:3d:91:fc:ad:b0:e1:78: 79:3c:68:01:3d:04:cc:40:0b:d6:1e:82:8a:a8:a8: 28:31:fe:ce:2d:37:f5:9f:2b:11:39:df:d3:e9:29: ca:b4:ae:9f:1a:57:ad:a6:63:87:21:95:42:87:1e: d3:4c:74:74:3e:dd:29:1d:21:a5:1b:37:38:b8:34: 09:a5:60:d7:d3:e0:a0:2b:a9:71:90:a1:9d:f4:43: bd:bc:21:89:2e:60:1c:8f:5e:15:dd:93:00:e2:da: 5f:81:4c:a6:45:e3:c8:02:f0:97:bf:5d:77:11:e0: fc:aa:17:15:12:8d:02:51:d3:14:25:af:40:bc:c3: 6c:9e:2c:7b:1e:f4:e7:68:08:ad:24:0e:33:a8:2c: d8:49:3d:b1:2c:18:33:d9:2b:37:83:3d:5b:f7:b0: 31:b9:5e:02:c9:fb:d6:0b:98:95:18:b7:a0:22:df: 30:82:32:a8:2d:ce:26:9c:ba:59:a3:e8:42:02:24: b7:64:71:3a:24:f8:67:74:0c:e6:64:e3:f1:3e:39: a0:3a:d8:dd:7f:5b:d5:5f:23:f2:99:4e:b9:d4:45: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:DF:9F:B8:3E:7A:EE:9A:CF:7F:83:7B:3C:3C:13:8C:AE:6B:1B X509v3 Authority Key Identifier: keyid:5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fc:6e:13:76:7a:25:5b:bb:b0:82:a0:4b:d4:59:b5:03:8f: 33:6c:44:71:61:5d:b0:8c:d0:8d:d0:5d:20:11:09:93:8f:ad: 30:d6:2a:dc:a6:27:1f:61:fc:63:12:d3:0b:d2:48:a7:dc:0c: c6:08:09:9e:7e:8b:e0:f7:3d:10:de:1f:c7:63:80:07:3b:f4: 48:4d:0a:2e:03:84:87:dc:5e:d9:47:f6:cd:70:54:46:c8:62: 5c:94:3e:e5:f8:b8:24:dc:71:0e:1e:fc:26:2b:a6:7c:90:b3: f0:62:0d:c0:c1:8f:3e:01:18:77:7e:6b:3a:47:20:0f:3a:f8: 6a:a3:e8:30:3a:22:c6:58:b3:ac:0a:f4:b8:34:7a:7e:4c:86: 9c:f6:a9:7a:32:df:3b:51:be:84:29:30:5b:3f:ae:56:70:40: 15:a2:3e:a0:07:c1:02:d9:1a:b5:d4:41:fd:e8:9c:20:57:2c: d5:9f:60:c0:6f:a3:95:bf:28:f8:b6:3a:92:7a:4c:4b:69:e6: 72:fb:2a:ed:54:94:ab:bd:9a:02:3e:40:91:34:96:8e:e2:a2: a2:0c:8e:06:57:94:c4:be:35:02:33:64:31:d6:b6:02:14:9c: 58:b7:65:b2:da:72:9e:9e:db:06:65:5d:f9:17:7a:ae:de:21: 45:d2:71:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZd5myYRPi9Yo6uKX05mNfCapESIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVF QkQ4QkU1NzAeFw0yNjA2MjAwMzU0MzNaFw0yNjA2MjEwNDAwMzNaMDMxMTAvBgNV BAMTKEM0NEJERjlGQjgzRTdBRUU5QUNGN0Y4MzdCM0MzQzEzOENBRTZCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2uNYSoYGhlN+0pfUSJ+nr1aD KHXy7/72gfvIgt6iCwTgaEpGPZH8rbDheHk8aAE9BMxAC9YegoqoqCgx/s4tN/Wf KxE539PpKcq0rp8aV62mY4chlUKHHtNMdHQ+3SkdIaUbNzi4NAmlYNfT4KArqXGQ oZ30Q728IYkuYByPXhXdkwDi2l+BTKZF48gC8Je/XXcR4PyqFxUSjQJR0xQlr0C8 w2yeLHse9OdoCK0kDjOoLNhJPbEsGDPZKzeDPVv3sDG5XgLJ+9YLmJUYt6Ai3zCC Mqgtziaculmj6EICJLdkcTok+Gd0DOZk4/E+OaA62N1/W9VfI/KZTrnURfn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEvfn7g+eu6az3+Dezw8E4yuaxswHwYDVR0j BBgwFoAUX2b1v5NI1bWmMc6xAPICZevYvlcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJmYTNhMzktZTBlYy00ZmMxLTliNTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5 MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVFQkQ4QkU1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY2RjVCRjkzNDhENUI1QTYzMUNFQjEwMEYyMDI2NUVCRDhC RTU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAy NjVFQkQ4QkU1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL8bhN2eiVbu7CCoEvUWbUDjzNsRHFhXbCM 0I3QXSARCZOPrTDWKtymJx9h/GMS0wvSSKfcDMYICZ5+i+D3PRDeH8djgAc79EhN Ci4DhIfcXtlH9s1wVEbIYlyUPuX4uCTccQ4e/CYrpnyQs/BiDcDBjz4BGHd+azpH IA86+Gqj6DA6IsZYs6wK9Lg0en5Mhpz2qXoy3ztRvoQpMFs/rlZwQBWiPqAHwQLZ GrXUQf3onCBXLNWfYMBvo5W/KPi2OpJ6TEtp5nL7Ku1UlKu9mgI+QJE0lo7ioqIM jgZXlMS+NQIzZDHWtgIUnFi3ZbLacp6e2wZlXfkXeq7eIUXScTA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:18 2026 by rpki-client