$ rpki-client -vvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: 9KMLcaW3NXn1hzYe/xKx74pdVGSHchKyD+aEYvA2vrg= Subject key identifier: 00:C9:17:BB:BE:E6:30:9C:98:1A:54:83:D7:BC:FE:18:39:70:98:86 Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 35E556E8777CB0A76D9F76AF733690BC7B1A4D9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:37:57 +0000 Manifest this update: Sat 20 Jun 2026 02:32:57 +0000 Manifest next update: Sun 21 Jun 2026 03:56:57 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: aXxMFi1ZS0R6mTYEgSvTB2haVEG0uoxyrFU8jstO96E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e5:56:e8:77:7c:b0:a7:6d:9f:76:af:73:36:90:bc:7b:1a:4d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Jun 20 02:32:57 2026 GMT Not After : Jun 21 03:56:57 2026 GMT Subject: CN=00C917BBBEE6309C981A5483D7BCFE1839709886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:0c:72:16:9c:39:df:17:d7:91:e5:db:e3: 64:a1:5a:57:2b:b5:dc:d7:5d:57:ce:ec:fc:d6:21: 02:38:fd:12:d2:84:64:a5:af:07:48:14:8f:f2:9f: f4:e5:a6:98:80:df:51:93:62:f3:47:51:bd:da:fc: ee:ce:c6:83:c4:92:7a:c0:17:52:08:8f:7b:9b:8e: de:1e:26:be:20:f0:4c:6c:0b:23:1a:40:d2:31:70: 8b:3c:3d:00:c1:81:fb:7c:2e:66:60:64:8d:d6:95: 31:5f:a4:fa:e3:e1:33:6c:84:9c:f8:cc:b5:2e:3e: 21:b2:41:9c:7d:71:a5:01:5d:e1:2f:3c:8c:b7:b4: e4:92:8b:2e:53:fe:85:19:96:97:f1:80:4a:11:e5: ed:ea:b2:6c:a8:58:d5:be:4e:22:3f:d3:f9:eb:30: 75:65:aa:a7:b7:13:13:62:d9:a6:03:11:cc:5c:9b: 2b:2a:9f:3d:ea:e1:b6:d8:aa:cc:3a:06:92:50:8e: ac:de:b8:ea:9a:72:88:9b:21:f6:22:12:9f:e2:c6: 5c:03:c8:18:05:dc:ee:c1:31:69:a6:ae:ca:eb:c6: c5:79:fb:cd:14:f7:57:15:36:07:4d:3b:fa:06:cc: 75:c2:61:75:e8:ac:b3:5f:60:56:c6:84:78:51:ea: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C9:17:BB:BE:E6:30:9C:98:1A:54:83:D7:BC:FE:18:39:70:98:86 X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:07:37:1c:56:2e:1d:7c:db:ce:b6:2e:c0:30:14:6d:e2:82: 2b:1b:d4:3a:91:f6:6b:aa:49:04:4c:0c:c5:55:83:f6:54:2c: b2:63:9a:fc:fe:8d:7d:ea:65:3c:96:bb:62:ab:de:a3:b1:0d: 04:d0:f9:36:97:fe:38:2e:ff:ee:04:00:e0:fc:75:c3:d2:a0: 50:a4:f1:b0:20:bf:f1:d8:5b:18:08:0b:e5:c8:48:97:0a:8c: 2d:e1:ec:e5:e2:07:38:ea:49:cd:52:92:98:dc:f7:44:4f:c0: 94:58:94:93:4f:7c:1e:41:90:c8:49:84:37:57:ef:a5:e5:00: ef:f8:6b:ab:9f:19:47:4d:a8:e2:45:e2:1c:25:69:e5:f9:ea: 52:cc:71:b4:7a:3b:8a:ab:c3:2d:50:b1:da:68:33:f7:62:3e: 89:a9:71:cf:f6:1c:3e:bf:a2:b5:04:6b:68:ae:81:bc:b9:cb: 6b:7a:9e:72:e8:8c:38:5c:2c:d9:02:22:6a:0b:77:65:12:ec: 65:f8:14:47:ab:82:86:3d:50:1f:19:02:85:97:b1:c3:90:94: f1:34:5f:4b:5a:d8:2d:fe:27:8f:03:a6:3a:e3:f9:7c:c2:86: 33:21:7b:38:b3:60:52:8a:16:af:a3:44:46:88:3a:c0:66:98: 38:f1:1f:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeVW6Hd8sKdtn3avczaQvHsaTZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA2MjAwMjMyNTdaFw0yNjA2MjEwMzU2NTdaMDMxMTAvBgNV BAMTKDAwQzkxN0JCQkVFNjMwOUM5ODFBNTQ4M0Q3QkNGRTE4Mzk3MDk4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24gxyFpw53xfXkeXb42ShWlcr tdzXXVfO7PzWIQI4/RLShGSlrwdIFI/yn/TlppiA31GTYvNHUb3a/O7OxoPEknrA F1IIj3ubjt4eJr4g8ExsCyMaQNIxcIs8PQDBgft8LmZgZI3WlTFfpPrj4TNshJz4 zLUuPiGyQZx9caUBXeEvPIy3tOSSiy5T/oUZlpfxgEoR5e3qsmyoWNW+TiI/0/nr MHVlqqe3ExNi2aYDEcxcmysqnz3q4bbYqsw6BpJQjqzeuOqacoibIfYiEp/ixlwD yBgF3O7BMWmmrsrrxsV5+80U91cVNgdNO/oGzHXCYXXorLNfYFbGhHhR6iDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMkXu77mMJyYGlSD17z+GDlwmIYwHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMHNxxWLh182862LsAwFG3igisb1DqR9muq SQRMDMVVg/ZULLJjmvz+jX3qZTyWu2Kr3qOxDQTQ+TaX/jgu/+4EAOD8dcPSoFCk 8bAgv/HYWxgIC+XISJcKjC3h7OXiBzjqSc1Skpjc90RPwJRYlJNPfB5BkMhJhDdX 76XlAO/4a6ufGUdNqOJF4hwlaeX56lLMcbR6O4qrwy1QsdpoM/diPompcc/2HD6/ orUEa2iugby5y2t6nnLojDhcLNkCImoLd2US7GX4FEergoY9UB8ZAoWXscOQlPE0 X0ta2C3+J48Dpjrj+XzChjMhezizYFKKFq+jREaIOsBmmDjxH1E= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:03 2026 by rpki-client