$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: eEI8nbSdmVENqjmOoq3bHWRGYyjqDGi1QHW4KNmM1e8= Subject key identifier: D2:6D:09:5F:1E:B7:94:00:EE:A1:A0:05:80:A7:EF:D9:2B:C6:8B:BD Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 0B2F3BF0700969B4E8232E7322813287E843051C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 22:12:45 +0000 Manifest this update: Fri 19 Jun 2026 22:07:45 +0000 Manifest next update: Sun 21 Jun 2026 01:21:45 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: iTk7ksmLnzTufLhe/k0TBj5DjztTSNmn0xa5NhvoO2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2f:3b:f0:70:09:69:b4:e8:23:2e:73:22:81:32:87:e8:43:05:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: Jun 19 22:07:45 2026 GMT Not After : Jun 21 01:21:45 2026 GMT Subject: CN=D26D095F1EB79400EEA1A00580A7EFD92BC68BBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:2d:0b:de:99:fe:8c:c3:de:61:c8:22:55: bc:07:5a:c7:18:19:25:f5:a7:72:31:cd:5f:d7:3b: 2b:b2:c4:b9:92:f5:4e:55:55:e3:dd:66:6c:29:97: 1e:09:77:6e:de:5b:0d:90:65:18:e0:49:fc:86:7e: 50:c7:e0:e6:d5:b5:68:10:d3:ab:47:54:8b:ed:76: 45:72:ad:b2:3c:b3:2c:f3:d6:f5:64:0c:7d:11:0c: a3:4f:a4:36:98:4c:64:a1:2b:e3:f5:e8:22:6d:3b: 05:d3:fb:ec:fe:29:a1:90:80:24:a6:25:ac:18:08: 89:5d:58:ec:a6:77:ed:c0:9e:1e:53:98:4b:bc:6a: ce:20:a3:73:94:28:5a:be:24:7f:59:b8:40:31:ce: b5:8d:b4:43:90:10:f7:62:06:95:e5:dc:83:9d:5d: 68:0f:9b:8a:66:9a:52:59:2e:12:b0:2d:45:ab:7f: 27:5d:6d:cd:46:a6:9d:bb:ed:56:72:20:17:c2:6a: a5:a3:6f:2f:f9:88:67:53:d3:fd:0a:0d:a5:32:55: 42:47:cf:f9:22:b8:33:28:6b:30:9b:d8:0e:4f:97: c1:58:42:c2:dd:59:f7:fb:f5:bf:62:ac:8b:8b:80: 71:96:57:5b:95:38:2d:63:67:51:e0:b0:99:8e:15: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:09:5F:1E:B7:94:00:EE:A1:A0:05:80:A7:EF:D9:2B:C6:8B:BD X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:db:ca:08:de:de:b7:6a:36:87:ac:0b:5d:43:6a:fb:8e:c5: f2:a0:1f:de:04:15:41:98:03:f9:e4:0d:cd:e1:d9:35:99:7e: 83:d9:ea:8f:4c:97:d1:81:05:4c:9c:fa:10:74:bd:a1:e6:de: e2:cb:a9:eb:f2:5c:68:1a:ee:c0:e1:a9:4c:6a:8d:c6:5f:9e: 43:55:0e:36:55:5c:ba:43:da:8d:76:47:fc:e3:d5:da:02:d7: 76:2e:30:1f:c6:2d:11:70:d8:1c:73:38:e9:97:d7:ff:ce:3f: 11:64:03:b7:cd:40:1b:fb:6f:d6:9e:79:31:93:2b:03:64:4f: b4:0f:4c:09:f4:e4:4e:a6:d0:1c:b4:e2:90:5e:95:30:f5:32: 27:b0:da:28:fb:8f:bd:8e:0e:7a:a7:19:08:82:1c:87:0c:c7: 19:5e:fc:d1:d5:bd:a6:44:36:49:20:40:fa:bd:9a:b3:9b:59: 18:d3:44:70:4b:63:f6:15:c7:e5:96:e8:ff:8d:0e:4b:a4:ab: 6b:b2:70:54:c0:64:d0:6b:5b:06:0a:70:8f:7b:de:47:11:14: f9:35:fa:58:be:62:8e:4c:ae:59:18:58:7b:d3:8a:86:f3:c9: 6f:22:62:49:64:e6:00:57:d8:64:22:5c:23:3f:51:f9:ff:a8: 7a:22:a4:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCy878HAJabToIy5zIoEyh+hDBRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA2MTkyMjA3NDVaFw0yNjA2MjEwMTIxNDVaMDMxMTAvBgNV BAMTKEQyNkQwOTVGMUVCNzk0MDBFRUExQTAwNTgwQTdFRkQ5MkJDNjhCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1y0L3pn+jMPeYcgiVbwHWscY GSX1p3IxzV/XOyuyxLmS9U5VVePdZmwplx4Jd27eWw2QZRjgSfyGflDH4ObVtWgQ 06tHVIvtdkVyrbI8syzz1vVkDH0RDKNPpDaYTGShK+P16CJtOwXT++z+KaGQgCSm JawYCIldWOymd+3Anh5TmEu8as4go3OUKFq+JH9ZuEAxzrWNtEOQEPdiBpXl3IOd XWgPm4pmmlJZLhKwLUWrfyddbc1Gpp277VZyIBfCaqWjby/5iGdT0/0KDaUyVUJH z/kiuDMoazCb2A5Pl8FYQsLdWff79b9irIuLgHGWV1uVOC1jZ1HgsJmOFeD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0m0JXx63lADuoaAFgKfv2SvGi70wHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3bygje3rdqNoesC11DavuOxfKgH94EFUGY A/nkDc3h2TWZfoPZ6o9Ml9GBBUyc+hB0vaHm3uLLqevyXGga7sDhqUxqjcZfnkNV DjZVXLpD2o12R/zj1doC13YuMB/GLRFw2BxzOOmX1//OPxFkA7fNQBv7b9aeeTGT KwNkT7QPTAn05E6m0By04pBelTD1Miew2ij7j72ODnqnGQiCHIcMxxle/NHVvaZE NkkgQPq9mrObWRjTRHBLY/YVx+WW6P+NDkukq2uycFTAZNBrWwYKcI973kcRFPk1 +li+Yo5MrlkYWHvTiobzyW8iYklk5gBX2GQiXCM/Ufn/qHoipHs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:13 2026 by rpki-client