$ rpki-client -vvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft File: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json) Hash identifier: V1ONP5tPGSyK5sG655rKoA+rb9h1kisE4t8D2fycku4= Subject key identifier: 4E:26:DD:4E:BC:85:21:11:07:7D:A8:F9:81:80:E0:CC:8F:C9:3E:2B Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 Certificate issuer: /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Certificate serial: 1157745433B0FB8108481C6AA84AB573E8FBA069 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:06:27 +0000 Manifest this update: Fri 19 Jun 2026 17:01:27 +0000 Manifest next update: Sat 20 Jun 2026 17:09:27 +0000 Files and hashes: 1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: OPYgUoWP/ZCNq8xBsSACwKRMA/qKGhGaIdeZVdnOZfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:57:74:54:33:b0:fb:81:08:48:1c:6a:a8:4a:b5:73:e8:fb:a0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2 Validity Not Before: Jun 19 17:01:27 2026 GMT Not After : Jun 20 17:09:27 2026 GMT Subject: CN=4E26DD4EBC852111077DA8F98180E0CC8FC93E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:26:0c:e4:0d:87:f7:fc:45:ef:92:73:ad: e3:a6:c0:7f:68:f3:a1:5f:a2:c1:a0:92:a4:80:7f: a2:03:97:f0:b9:42:ff:00:d8:cc:11:14:7b:cf:56: 69:00:f6:6c:34:58:c6:46:1e:b7:3e:90:3e:46:46: 17:46:32:40:a3:16:90:3e:3f:22:3b:ac:d9:fe:b2: 1f:d1:dc:60:df:38:af:45:aa:24:55:f3:12:53:52: 4d:09:f1:18:52:42:da:a3:de:d5:17:86:3c:a5:64: 93:78:5d:03:8c:ae:45:2b:d4:4c:15:e1:e4:ba:22: ff:0d:32:d1:55:b2:fc:d6:93:83:c3:f4:9c:a3:03: 61:cc:b0:c2:a1:76:f2:25:db:08:e1:9e:f0:18:21: 54:30:4d:9c:16:a1:c3:1d:76:76:24:b7:17:b9:ee: 67:c0:a0:6e:a2:ee:87:88:b1:12:1c:c9:67:52:2d: 44:c5:c6:a6:3e:c3:ee:52:1a:dd:a9:df:a5:f2:ea: 85:b5:21:c6:5b:2a:01:cd:76:2f:76:0c:36:c3:6a: 3e:f7:26:55:c6:b9:7e:0d:b9:46:ba:b5:5c:d1:23: e2:1d:f8:d7:5b:fd:5d:54:c2:09:0e:38:ed:60:b3: ce:5c:6e:45:e6:3f:f3:46:53:0b:0a:aa:54:3e:81: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:26:DD:4E:BC:85:21:11:07:7D:A8:F9:81:80:E0:CC:8F:C9:3E:2B X509v3 Authority Key Identifier: keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:6c:5d:33:7f:06:40:0e:26:39:bc:40:1f:76:91:ad:af: 99:53:71:39:f9:5b:37:42:27:50:29:fd:8a:0f:0b:0a:67:a6: e5:8d:d2:86:b5:ca:40:0a:5c:05:a7:76:e6:43:21:7d:5d:63: ca:d2:a3:da:53:e4:a6:41:44:60:97:34:4d:ca:58:cd:80:b6: 84:32:7b:ce:27:d6:82:7c:7c:8c:72:b4:7d:45:0c:67:13:13: 03:7c:75:75:89:41:97:4f:c8:46:34:37:51:58:a1:d2:e7:6a: 3f:06:4d:9c:a9:08:10:f7:b2:a4:86:37:01:8b:a9:7a:8b:bf: 36:d5:f0:8e:67:e4:22:ad:53:94:bf:bb:61:90:4c:9b:5b:0d: 02:2f:48:07:09:22:99:50:4c:57:30:90:01:76:f6:36:3c:15: 0e:45:1c:e4:85:45:31:86:69:72:f7:95:f2:3f:88:01:e3:5a: 6b:3a:e9:d7:5a:9c:d0:bd:ed:e6:bb:b6:c3:fa:3a:01:b6:10: b1:8a:9c:bc:24:e6:18:e3:55:97:f8:39:a4:7d:83:6f:6b:eb: 1c:b6:08:ee:98:72:70:ba:cc:c9:d0:b4:14:46:4e:0f:2c:76: 51:a5:f1:52:89:4c:56:d2:17:bb:e6:1f:59:32:38:64:ad:b4: e4:16:2d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVd0VDOw+4EISBxqqEq1c+j7oGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF NTcwODNFMjAeFw0yNjA2MTkxNzAxMjdaFw0yNjA2MjAxNzA5MjdaMDMxMTAvBgNV BAMTKDRFMjZERDRFQkM4NTIxMTEwNzdEQThGOTgxODBFMENDOEZDOTNFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuCYM5A2H9/xF75JzreOmwH9o 86FfosGgkqSAf6IDl/C5Qv8A2MwRFHvPVmkA9mw0WMZGHrc+kD5GRhdGMkCjFpA+ PyI7rNn+sh/R3GDfOK9FqiRV8xJTUk0J8RhSQtqj3tUXhjylZJN4XQOMrkUr1EwV 4eS6Iv8NMtFVsvzWk4PD9JyjA2HMsMKhdvIl2wjhnvAYIVQwTZwWocMddnYktxe5 7mfAoG6i7oeIsRIcyWdSLUTFxqY+w+5SGt2p36Xy6oW1IcZbKgHNdi92DDbDaj73 JlXGuX4NuUa6tVzRI+Id+Ndb/V1UwgkOOO1gs85cbkXmP/NGUwsKqlQ+geQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTibdTryFIREHfaj5gYDgzI/JPiswHwYDVR0j BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4 M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRobF0zfwZADiY5vEAfdpGtr5lTcTn5WzdC J1Ap/YoPCwpnpuWN0oa1ykAKXAWnduZDIX1dY8rSo9pT5KZBRGCXNE3KWM2AtoQy e84n1oJ8fIxytH1FDGcTEwN8dXWJQZdPyEY0N1FYodLnaj8GTZypCBD3sqSGNwGL qXqLvzbV8I5n5CKtU5S/u2GQTJtbDQIvSAcJIplQTFcwkAF29jY8FQ5FHOSFRTGG aXL3lfI/iAHjWms66ddanNC97ea7tsP6OgG2ELGKnLwk5hjjVZf4OaR9g29r6xy2 CO6YcnC6zMnQtBRGTg8sdlGl8VKJTFbSF7vmH1kyOGSttOQWLcU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:15 2026 by rpki-client