$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: 7fDx1vlIbQpSUvfTrk1xvwnd2Al+7fE/udwl20q3BfI= Subject key identifier: 11:EA:88:DC:F2:40:93:82:9C:A5:8B:D9:AB:E2:6F:E5:A2:06:61:09 Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 649FF7945F9812AC53461CDD99CE2ACD17270D3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:39:10 +0000 Manifest this update: Sat 20 Jun 2026 03:34:10 +0000 Manifest next update: Sun 21 Jun 2026 06:20:10 +0000 Files and hashes: 1: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: eK0bqWdWKbIcr6+aB6eKRXNc5ieL42ksHOFuX+KYwOM=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9f:f7:94:5f:98:12:ac:53:46:1c:dd:99:ce:2a:cd:17:27:0d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: Jun 20 03:34:10 2026 GMT Not After : Jun 21 06:20:10 2026 GMT Subject: CN=11EA88DCF24093829CA58BD9ABE26FE5A2066109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:19:e6:9d:36:8b:40:92:e5:e1:4c:48:09: 84:bd:6f:a8:f4:a6:f3:b5:8e:7c:23:d4:60:e2:ae: 17:b1:00:10:73:a9:a7:68:c2:a0:00:70:be:1a:4c: d7:cd:e8:73:d2:26:ad:a8:c8:1e:8c:ea:6c:2f:d4: 7c:dc:4f:4a:a5:83:c6:cf:2f:41:b6:4b:54:91:df: 18:25:87:5b:fa:0e:b4:91:42:6e:6b:ea:82:2f:43: ff:6f:cb:e8:ce:96:e2:b1:c0:fc:a2:86:c0:75:05: 3c:ee:dc:ab:e4:b5:7b:fa:e5:1a:b4:a6:12:56:bb: d8:be:7d:f8:28:cf:d6:87:da:e3:0f:ab:90:d8:84: 58:66:d0:60:5f:ac:3c:dc:a0:47:0c:63:7c:9c:e5: 21:24:83:04:25:95:4e:9c:c7:a5:d8:de:b4:21:8a: c7:41:b4:f9:1b:9d:88:3b:65:54:6b:c7:4c:ed:1a: 63:43:00:c5:e5:c6:21:4b:c3:40:37:de:de:16:6e: ab:ed:93:4e:fd:0d:3a:72:77:68:e0:38:93:67:5c: 1e:68:d3:ee:98:cb:cb:19:33:4d:90:41:60:b4:f5: 12:9c:40:c0:f9:cf:b2:0d:04:a3:b8:97:4c:0b:12: eb:b4:10:b9:b7:df:78:21:08:20:b1:cf:db:0f:de: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EA:88:DC:F2:40:93:82:9C:A5:8B:D9:AB:E2:6F:E5:A2:06:61:09 X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d2:f2:4c:4c:ef:9e:eb:01:b6:72:60:b1:d2:c5:30:18:50: b3:2e:e8:c1:8d:64:74:4c:96:b6:85:2c:f3:e8:94:05:b9:1b: a7:95:95:ab:d2:d1:2b:5a:f0:b7:f4:76:e9:77:9c:bf:db:30: 9c:d2:82:05:c8:99:bc:3a:c7:22:14:10:a0:76:c7:aa:9f:12: 29:fe:c9:2e:60:4f:c4:d0:ce:3c:2b:5f:8d:83:43:d8:96:0a: 1d:78:d6:28:2c:3e:d3:81:53:d2:9e:cb:86:63:8c:3f:1f:c5: 02:31:2e:cf:74:24:b9:93:08:60:d0:9d:30:f9:f3:77:d6:70: 8c:ba:c4:51:c8:5e:57:d0:e9:f2:1b:4a:0a:82:a0:cc:a3:c7: c3:f0:38:4c:e9:24:cc:a1:bf:f9:3a:23:13:e8:61:58:96:7d: 64:69:a4:51:b4:d2:5b:b7:08:b6:e1:59:8c:39:1c:a3:19:ed: f4:f8:85:99:0d:98:ff:a5:eb:56:17:3b:49:d6:d3:ee:d1:73: d8:e7:25:f8:65:14:d0:0c:a3:18:83:a0:75:4e:a7:81:45:a0: 0e:4a:8b:0a:f9:37:0c:51:ae:b0:43:27:67:e7:cc:a9:1b:47: 6b:dc:8b:c8:54:76:3b:f8:6f:63:95:fc:c5:d7:92:1f:a7:d2: 78:1c:c6:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJ/3lF+YEqxTRhzdmc4qzRcnDT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjA2MjAwMzM0MTBaFw0yNjA2MjEwNjIwMTBaMDMxMTAvBgNV BAMTKDExRUE4OERDRjI0MDkzODI5Q0E1OEJEOUFCRTI2RkU1QTIwNjYxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMhnmnTaLQJLl4UxICYS9b6j0 pvO1jnwj1GDirhexABBzqadowqAAcL4aTNfN6HPSJq2oyB6M6mwv1HzcT0qlg8bP L0G2S1SR3xglh1v6DrSRQm5r6oIvQ/9vy+jOluKxwPyihsB1BTzu3KvktXv65Rq0 phJWu9i+ffgoz9aH2uMPq5DYhFhm0GBfrDzcoEcMY3yc5SEkgwQllU6cx6XY3rQh isdBtPkbnYg7ZVRrx0ztGmNDAMXlxiFLw0A33t4Wbqvtk079DTpyd2jgOJNnXB5o 0+6Yy8sZM02QQWC09RKcQMD5z7INBKO4l0wLEuu0ELm333ghCCCxz9sP3loPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEeqI3PJAk4KcpYvZq+Jv5aIGYQkwHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfS8kxM757rAbZyYLHSxTAYULMu6MGNZHRM lraFLPPolAW5G6eVlavS0Sta8Lf0dul3nL/bMJzSggXImbw6xyIUEKB2x6qfEin+ yS5gT8TQzjwrX42DQ9iWCh141igsPtOBU9Key4ZjjD8fxQIxLs90JLmTCGDQnTD5 83fWcIy6xFHIXlfQ6fIbSgqCoMyjx8PwOEzpJMyhv/k6IxPoYViWfWRppFG00lu3 CLbhWYw5HKMZ7fT4hZkNmP+l61YXO0nW0+7Rc9jnJfhlFNAMoxiDoHVOp4FFoA5K iwr5NwxRrrBDJ2fnzKkbR2vci8hUdjv4b2OV/MXXkh+n0ngcxjE= -----END CERTIFICATE-----Generated at Sat Jun 20 13:19:35 2026 by rpki-client