$ rpki-client -vvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: TPBhHVoxvwPwCmqF2JFvaIAb00qIsDWCciBDZJ8SX5Q= Subject key identifier: AD:B7:15:99:AD:02:4D:CC:9A:68:BC:2F:77:82:B5:38:68:2B:43:CF Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 7DBA208092B1DFEAE8267BB235808E07DA5BA499 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 21:37:02 +0000 Manifest this update: Fri 19 Jun 2026 21:32:02 +0000 Manifest next update: Sat 20 Jun 2026 23:12:02 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: diUN+aDtZy1/f/CVZj7WOI5dM0o4yXhflzzYlRKvEYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ba:20:80:92:b1:df:ea:e8:26:7b:b2:35:80:8e:07:da:5b:a4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Jun 19 21:32:02 2026 GMT Not After : Jun 20 23:12:02 2026 GMT Subject: CN=ADB71599AD024DCC9A68BC2F7782B538682B43CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:37:5d:f2:a1:1e:9c:1a:0d:f2:77:b8:c0: 64:fe:37:00:1c:f0:eb:2a:44:61:a7:b8:7a:98:02: 3d:95:49:22:65:56:e3:67:8d:c6:61:eb:4b:44:60: 69:66:2a:7f:72:b5:9b:40:a2:2a:d2:5f:28:93:60: 1e:48:d3:6a:61:cc:63:22:4d:9b:7b:95:16:c3:04: fc:2f:0f:27:2e:22:9d:6f:3f:44:83:5d:65:13:94: de:ab:f1:73:2e:7d:65:91:58:81:a8:fe:07:2f:a1: 46:20:4c:e5:b6:8d:62:d7:9e:81:e5:e5:a2:fd:33: a1:8b:79:91:15:2e:88:0e:c7:6a:c3:0e:ec:ba:04: 2e:b6:d6:1d:8b:7a:7e:cb:ab:31:84:04:f7:68:45: 66:6f:96:ed:ac:2b:32:ac:22:0d:6a:c5:cc:cc:af: 3f:b5:92:49:df:89:09:b2:e9:44:51:54:ad:45:e4: 4b:67:a0:ef:91:d2:0c:04:54:f6:66:cc:03:ea:ce: 00:1f:57:3f:bd:ea:16:8a:f8:e4:bf:bd:d4:98:2b: 10:4f:25:11:11:60:bf:6b:d3:c8:d5:07:77:57:c5: 95:ff:07:c8:12:d6:7f:79:49:9b:99:55:65:25:6f: 19:7f:76:58:c4:ee:24:7f:26:98:4b:40:c3:bf:9e: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:15:99:AD:02:4D:CC:9A:68:BC:2F:77:82:B5:38:68:2B:43:CF X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:90:07:78:86:93:11:0f:49:ca:e6:c6:8b:6a:7b:62:b9:51: 36:4b:9c:ce:d6:cf:24:a2:5c:a6:3b:29:74:ba:c6:59:27:86: f3:fc:5c:ae:3b:e8:65:d9:53:59:21:8d:89:3e:3a:bd:a3:02: 22:81:39:ca:d8:fc:3b:60:2a:e1:96:ee:2a:e7:ad:55:64:2f: 63:d6:01:23:b7:5e:4a:91:64:f2:ef:5b:da:d6:89:7f:00:9d: e2:00:f8:4e:f2:4d:2f:c9:55:86:3b:c8:03:c6:aa:0d:60:b5: 0b:82:31:33:93:bf:90:28:d1:65:7c:a4:03:8e:c3:50:17:a2: 90:cf:18:d0:b5:29:e4:10:63:35:92:9f:b3:f6:c1:03:70:12: f8:14:96:fe:8c:87:68:5d:03:89:3f:6d:3c:59:20:cb:dc:8d: 05:7a:c1:56:23:85:51:1a:02:cb:19:d7:ae:3d:22:21:fd:12: 7c:af:fd:97:fc:0a:4c:44:ac:36:67:7e:76:f7:e8:0d:32:7b: f1:d9:21:62:07:a0:14:f6:3a:b0:86:07:bb:80:db:f7:9e:47: 3d:7e:5a:9f:04:62:96:b9:97:74:eb:74:f8:f6:65:58:ae:97: d9:68:cc:58:48:68:e7:61:22:b9:ef:92:45:10:43:9b:fc:c3: a7:1b:bf:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfboggJKx3+roJnuyNYCOB9pbpJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA2MTkyMTMyMDJaFw0yNjA2MjAyMzEyMDJaMDMxMTAvBgNV BAMTKEFEQjcxNTk5QUQwMjREQ0M5QTY4QkMyRjc3ODJCNTM4NjgyQjQzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJzdd8qEenBoN8ne4wGT+NwAc 8OsqRGGnuHqYAj2VSSJlVuNnjcZh60tEYGlmKn9ytZtAoirSXyiTYB5I02phzGMi TZt7lRbDBPwvDycuIp1vP0SDXWUTlN6r8XMufWWRWIGo/gcvoUYgTOW2jWLXnoHl 5aL9M6GLeZEVLogOx2rDDuy6BC621h2Len7LqzGEBPdoRWZvlu2sKzKsIg1qxczM rz+1kknfiQmy6URRVK1F5EtnoO+R0gwEVPZmzAPqzgAfVz+96haK+OS/vdSYKxBP JRERYL9r08jVB3dXxZX/B8gS1n95SZuZVWUlbxl/dljE7iR/JphLQMO/nlmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrbcVma0CTcyaaLwvd4K1OGgrQ88wHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOQB3iGkxEPScrmxotqe2K5UTZLnM7WzySi XKY7KXS6xlknhvP8XK476GXZU1khjYk+Or2jAiKBOcrY/DtgKuGW7irnrVVkL2PW ASO3XkqRZPLvW9rWiX8AneIA+E7yTS/JVYY7yAPGqg1gtQuCMTOTv5Ao0WV8pAOO w1AXopDPGNC1KeQQYzWSn7P2wQNwEvgUlv6Mh2hdA4k/bTxZIMvcjQV6wVYjhVEa AssZ1649IiH9Enyv/Zf8CkxErDZnfnb36A0ye/HZIWIHoBT2OrCGB7uA2/eeRz1+ Wp8EYpa5l3TrdPj2ZViul9lozFhIaOdhIrnvkkUQQ5v8w6cbvyA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:10 2026 by rpki-client