$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: mHGUAHR/7XaKHdfD8Cd9b/mlu/oOPOz5i5kMnQQOuMM= Subject key identifier: B6:87:83:06:F0:B8:E9:4A:42:EB:BA:BA:23:2E:30:31:75:3A:52:2E Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 091F48628255B47F53AFC487769E2E470A095F83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 13:28:08 +0000 Manifest this update: Thu 18 Jun 2026 13:23:08 +0000 Manifest next update: Fri 19 Jun 2026 16:10:08 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: pq6ze8yTfE6Y/P1ASLK0q8X94iIvS1ZD6ckzqCMVvQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1f:48:62:82:55:b4:7f:53:af:c4:87:76:9e:2e:47:0a:09:5f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Jun 18 13:23:08 2026 GMT Not After : Jun 19 16:10:08 2026 GMT Subject: CN=B6878306F0B8E94A42EBBABA232E3031753A522E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:7e:60:f3:96:cf:f0:d9:d0:cc:e5:91:0d: 7e:75:dc:ea:29:d6:22:c6:b9:93:3f:40:55:7c:9d: 6a:7c:be:e7:26:1a:e7:57:28:2d:07:3a:ed:39:47: ce:eb:34:95:e6:a0:67:da:7d:6c:11:b9:34:1e:1b: f5:95:4d:5e:c4:c1:8d:73:5d:14:5e:04:4b:cf:57: 31:91:e8:bc:60:c3:aa:2f:37:f2:90:3b:c5:6f:87: 84:9f:9d:e3:23:e6:3e:eb:2c:64:e3:c1:e4:60:b5: 36:ac:58:17:8b:d2:6b:e4:f4:89:08:9b:7a:0a:b7: b2:68:4b:b5:b4:f0:7e:d2:2a:bf:7a:12:a8:8c:63: 50:83:1c:06:e1:74:c4:34:98:56:a5:e0:cf:ec:45: 58:c5:b0:3a:80:82:50:ed:59:71:99:9e:14:68:85: 7a:32:f4:d3:74:6c:38:e8:bb:9e:c7:4d:c0:6b:3b: 7e:ae:fb:e2:f7:fd:c9:78:02:3e:61:1d:14:f0:4e: 71:f4:d1:fa:bc:2e:9b:e4:66:ff:30:16:a2:05:29: 57:44:db:da:7a:6f:a2:39:0b:6e:a7:b5:69:8a:83: 12:40:e8:c0:34:72:90:43:9e:01:33:f5:d3:e1:3e: f3:1e:19:36:84:d7:fa:d1:4c:e4:b1:f8:e9:0f:47: 60:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:83:06:F0:B8:E9:4A:42:EB:BA:BA:23:2E:30:31:75:3A:52:2E X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:92:1e:45:53:33:3e:25:21:5f:8f:b9:8a:89:bd:f5:b1:10: 0a:ee:30:14:6a:41:5b:ff:9a:83:98:6b:42:51:94:38:8c:5b: 43:3f:63:1b:f7:98:d4:3e:df:ee:3e:1a:1f:47:a6:6d:f2:77: e6:0b:e8:20:ed:f4:6d:a3:3c:7c:f8:85:fb:2f:77:ff:ae:d0: 4b:2f:e5:87:e5:50:45:9d:0e:c4:07:73:f1:d2:1d:0e:51:bc: f8:ef:f6:c6:72:27:95:28:36:7d:f9:c0:6c:42:51:7d:5e:ab: af:55:d2:63:d3:19:7b:51:1a:f4:8e:99:24:e9:11:8f:22:7a: 0f:73:70:50:74:75:09:8a:1f:82:34:d1:07:a1:e2:7a:1e:5e: af:8e:32:b9:c8:d2:dd:b3:1d:41:5b:27:46:9b:01:fc:f9:10: a0:a4:2f:76:be:1d:f2:aa:e1:99:78:6b:93:f3:97:16:51:db: 10:d2:c7:d6:f6:bd:0a:05:47:3b:49:b2:fd:0f:bf:69:51:6a: 6e:c2:32:55:0f:02:5c:c2:f2:eb:dd:16:b2:30:89:bf:bb:c4: e8:d5:69:5b:59:35:31:41:67:c5:fc:b3:2f:55:3d:ea:ab:55: 20:03:63:5b:63:2e:dd:c0:90:3e:d9:51:5e:8e:4d:95:f8:8d: 9f:12:19:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCR9IYoJVtH9Tr8SHdp4uRwoJX4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA2MTgxMzIzMDhaFw0yNjA2MTkxNjEwMDhaMDMxMTAvBgNV BAMTKEI2ODc4MzA2RjBCOEU5NEE0MkVCQkFCQTIzMkUzMDMxNzUzQTUyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJH5g85bP8NnQzOWRDX513Oop 1iLGuZM/QFV8nWp8vucmGudXKC0HOu05R87rNJXmoGfafWwRuTQeG/WVTV7EwY1z XRReBEvPVzGR6Lxgw6ovN/KQO8Vvh4SfneMj5j7rLGTjweRgtTasWBeL0mvk9IkI m3oKt7JoS7W08H7SKr96EqiMY1CDHAbhdMQ0mFal4M/sRVjFsDqAglDtWXGZnhRo hXoy9NN0bDjou57HTcBrO36u++L3/cl4Aj5hHRTwTnH00fq8LpvkZv8wFqIFKVdE 29p6b6I5C26ntWmKgxJA6MA0cpBDngEz9dPhPvMeGTaE1/rRTOSx+OkPR2DJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoeDBvC46UpC67q6Iy4wMXU6Ui4wHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKSHkVTMz4lIV+PuYqJvfWxEAruMBRqQVv/ moOYa0JRlDiMW0M/Yxv3mNQ+3+4+Gh9Hpm3yd+YL6CDt9G2jPHz4hfsvd/+u0Esv 5YflUEWdDsQHc/HSHQ5RvPjv9sZyJ5UoNn35wGxCUX1eq69V0mPTGXtRGvSOmSTp EY8ieg9zcFB0dQmKH4I00Qeh4noeXq+OMrnI0t2zHUFbJ0abAfz5EKCkL3a+HfKq 4Zl4a5PzlxZR2xDSx9b2vQoFRztJsv0Pv2lRam7CMlUPAlzC8uvdFrIwib+7xOjV aVtZNTFBZ8X8sy9VPeqrVSADY1tjLt3AkD7ZUV6OTZX4jZ8SGUk= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:59 2026 by rpki-client