$ rpki-client -vvf rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft File: 7168844A5B4818230195B100CFC496E3E99AE5A0.mft (raw, json) Hash identifier: NnCzHnAEEirF5Y8DJapmqak6upTgEh7B+sxg6UQ6kwo= Subject key identifier: 72:3E:DE:F1:89:5E:11:B4:E1:57:CB:BD:4B:34:9D:88:3B:E1:6B:13 Authority key identifier: 71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 Certificate issuer: /CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Certificate serial: 62455768B717BA0DD397275D6B7CA9F5A0A1941D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 20:20:29 +0000 Manifest this update: Fri 19 Jun 2026 20:15:29 +0000 Manifest next update: Sat 20 Jun 2026 23:31:29 +0000 Files and hashes: 1: 7168844A5B4818230195B100CFC496E3E99AE5A0.crl (hash: /9E78o5W50YnqFU9dTXVDw6+2TCeSOX9ET3Uk3ZVQYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:45:57:68:b7:17:ba:0d:d3:97:27:5d:6b:7c:a9:f5:a0:a1:94:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168844A5B4818230195B100CFC496E3E99AE5A0 Validity Not Before: Jun 19 20:15:29 2026 GMT Not After : Jun 20 23:31:29 2026 GMT Subject: CN=723EDEF1895E11B4E157CBBD4B349D883BE16B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:db:ba:41:fb:9b:8a:1e:58:e0:e2:b6:e8: 78:c1:05:0b:e7:fc:af:49:c6:e5:c8:fd:c9:2e:82: e7:29:70:60:9c:94:14:d3:9f:2a:d6:11:c2:cf:3b: f0:b4:38:f6:6d:1f:d9:a0:35:7b:07:21:28:0a:a1: 72:56:90:18:c7:fb:3a:5b:c2:38:05:db:2c:47:4a: a7:8a:e8:55:ba:8d:ff:3f:7c:92:9b:da:85:70:cf: b8:e8:d4:45:d3:71:7e:97:81:ee:d5:f7:84:2a:c1: 7a:39:d6:be:11:c8:db:4d:d2:81:8c:9d:25:72:1b: 74:65:d4:56:64:ca:4a:a7:88:ed:81:9f:51:83:59: d6:25:92:09:77:50:b4:c6:f8:2f:f5:f4:b6:1c:68: be:2f:e3:96:5b:50:25:1d:d6:17:cc:c2:d0:42:54: 10:bd:f0:bb:96:37:b7:94:28:36:81:2a:d1:34:99: a0:be:ab:9f:90:7d:1c:30:5b:51:19:bf:37:06:f6: 29:5e:05:c7:db:b2:1f:59:d8:76:fa:f3:d5:8b:42: 1a:19:0e:9d:3b:28:f8:9e:89:85:7b:2e:5b:25:3f: 6b:33:24:53:5b:29:53:4a:24:12:9c:ce:c6:15:54: 67:6c:3d:28:65:dc:e6:10:5a:70:94:63:f3:16:2d: ac:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3E:DE:F1:89:5E:11:B4:E1:57:CB:BD:4B:34:9D:88:3B:E1:6B:13 X509v3 Authority Key Identifier: keyid:71:68:84:4A:5B:48:18:23:01:95:B1:00:CF:C4:96:E3:E9:9A:E5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7168844A5B4818230195B100CFC496E3E99AE5A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/7168844A5B4818230195B100CFC496E3E99AE5A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ea:72:35:12:3e:ed:eb:53:8f:a8:18:42:4b:92:7a:de:2e: d2:84:9e:8d:2a:0c:ef:ce:a1:62:56:fe:6a:fd:ee:03:d1:3d: 8b:e6:55:40:3f:cf:8d:2f:9c:2f:07:c9:28:a8:b2:30:e0:43: 6f:64:34:bf:0c:4d:fe:7b:83:83:48:99:09:a4:e0:ae:cc:ed: fa:71:80:f9:4c:db:3e:f7:3f:a7:fa:c4:fa:52:36:37:4c:2c: 03:e1:c8:ee:8e:1b:bc:a7:9c:69:61:15:26:f1:82:08:0f:aa: 65:e6:c8:7d:04:f3:2f:7f:c0:9a:2d:23:a1:8f:ce:a0:73:dd: d7:13:42:ce:33:0c:d3:be:19:ba:2f:50:c9:53:73:ac:18:ea: 36:b1:4f:d3:61:2f:14:d0:53:83:6b:a5:cb:61:c2:c6:b4:ac: 30:56:f4:e7:d2:53:7c:aa:d4:4a:14:22:96:4a:4c:f4:65:4f: eb:6b:6b:82:77:61:98:b2:18:34:be:1f:bb:fd:5c:c7:df:1c: f2:98:6c:d2:eb:67:8e:3d:d8:ec:9c:f0:b6:aa:00:15:0e:97: 7c:32:73:b1:39:f2:24:e1:58:32:a3:42:3f:f9:c1:f8:6e:3c: 17:ce:28:dd:d3:35:97:c0:f8:a1:16:98:bb:d1:05:3f:f1:5b: 94:db:aa:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkVXaLcXug3Tlydda3yp9aChlB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNF OTlBRTVBMDAeFw0yNjA2MTkyMDE1MjlaFw0yNjA2MjAyMzMxMjlaMDMxMTAvBgNV BAMTKDcyM0VERUYxODk1RTExQjRFMTU3Q0JCRDRCMzQ5RDg4M0JFMTZCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtNu6Qfubih5Y4OK26HjBBQvn /K9JxuXI/ckugucpcGCclBTTnyrWEcLPO/C0OPZtH9mgNXsHISgKoXJWkBjH+zpb wjgF2yxHSqeK6FW6jf8/fJKb2oVwz7jo1EXTcX6Xge7V94QqwXo51r4RyNtN0oGM nSVyG3Rl1FZkykqniO2Bn1GDWdYlkgl3ULTG+C/19LYcaL4v45ZbUCUd1hfMwtBC VBC98LuWN7eUKDaBKtE0maC+q5+QfRwwW1EZvzcG9ileBcfbsh9Z2Hb689WLQhoZ Dp07KPieiYV7LlslP2szJFNbKVNKJBKczsYVVGdsPShl3OYQWnCUY/MWLaw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcj7e8YleEbThV8u9SzSdiDvhaxMwHwYDVR0j BBgwFoAUcWiESltIGCMBlbEAz8SW4+ma5aAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg4ZDBiNmUtYjJlZC00OWM4LWE0OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1 QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2RTNFOTlBRTVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY4ODQ0QTVCNDgxODIzMDE5NUIxMDBDRkM0OTZFM0U5OUFF NUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvNzE2ODg0NEE1QjQ4MTgyMzAxOTVCMTAwQ0ZDNDk2 RTNFOTlBRTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzqcjUSPu3rU4+oGEJLknreLtKEno0qDO/O oWJW/mr97gPRPYvmVUA/z40vnC8HySiosjDgQ29kNL8MTf57g4NImQmk4K7M7fpx gPlM2z73P6f6xPpSNjdMLAPhyO6OG7ynnGlhFSbxgggPqmXmyH0E8y9/wJotI6GP zqBz3dcTQs4zDNO+GbovUMlTc6wY6jaxT9NhLxTQU4Nrpcthwsa0rDBW9OfSU3yq 1EoUIpZKTPRlT+tra4J3YZiyGDS+H7v9XMffHPKYbNLrZ4492Oyc8LaqABUOl3wy c7E58iThWDKjQj/5wfhuPBfOKN3TNZfA+KEWmLvRBT/xW5TbqpA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:22 2026 by rpki-client