$ rpki-client -vvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft File: 405E6B7463BC0531CCD985CD4D468E60B5078B16.mft (raw, json) Hash identifier: GJ8+adlfDG0ofVGhUnnV7HeWxuqBhPZWBmMzcPovGnU= Subject key identifier: 86:C6:FE:37:5A:54:A3:70:46:F6:FB:19:F9:37:20:4E:68:D0:3C:0E Authority key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 Certificate issuer: /CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Certificate serial: 395C2295EF74F2313B341715AEE252ACA59D082F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 05:26:23 +0000 Manifest this update: Sat 20 Jun 2026 05:21:23 +0000 Manifest next update: Sun 21 Jun 2026 06:58:23 +0000 Files and hashes: 1: 405E6B7463BC0531CCD985CD4D468E60B5078B16.crl (hash: VpCWvdpl6e+5XNWLtM1eFKfb7r8cTYjlWWJ4Wnc8DYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5c:22:95:ef:74:f2:31:3b:34:17:15:ae:e2:52:ac:a5:9d:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16 Validity Not Before: Jun 20 05:21:23 2026 GMT Not After : Jun 21 06:58:23 2026 GMT Subject: CN=86C6FE375A54A37046F6FB19F937204E68D03C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:b6:bd:f9:ba:68:6f:fe:ed:65:3b:7c:b0: 4e:4f:21:0b:9b:c8:fb:33:6b:e7:c2:cd:c6:e8:c1: 41:64:4b:86:e3:d0:4a:7d:17:d3:f6:82:bb:c2:88: 34:d7:30:c1:ea:13:e3:2f:f6:f1:ec:2a:0a:a2:a1: 15:8a:fa:de:d8:2c:44:f5:56:b4:1a:d8:6d:24:cb: a7:96:8d:51:77:c2:ae:37:c4:d2:cf:17:34:88:0a: 29:c9:05:b4:b8:ce:e7:66:28:30:17:d7:13:41:b0: 59:d5:0a:f0:a0:93:0d:ba:7d:25:5e:48:5f:6f:c9: 47:ea:1b:9f:57:4d:c1:78:b2:4d:b0:57:44:f6:c6: 7b:08:55:23:b0:64:24:22:01:d2:35:ad:da:51:31: 5c:25:2b:f4:6f:08:eb:be:f5:98:80:59:dd:0f:ac: ee:4d:0e:b3:7c:e4:26:fd:c1:cf:bd:71:f7:3a:1b: 68:a2:60:35:02:5d:eb:ab:ed:7f:d5:6c:23:da:08: 63:da:9a:71:d5:1d:45:40:e6:f8:f1:80:dd:9f:6e: a4:39:1f:f5:2f:05:ab:73:ee:e7:d0:ee:85:81:95: f7:5d:54:5f:c6:c2:af:73:bf:16:0a:e4:5e:13:cf: 4b:a7:aa:eb:9b:d2:c1:b7:06:27:7a:25:29:bf:14: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C6:FE:37:5A:54:A3:70:46:F6:FB:19:F9:37:20:4E:68:D0:3C:0E X509v3 Authority Key Identifier: keyid:40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b6:63:d1:d0:1a:37:cc:aa:23:db:60:63:c0:56:58:c5:60: 90:7a:49:2e:c3:17:85:68:ce:dd:4e:bd:f7:3b:91:e8:a7:3c: 04:1d:a0:6e:e7:dc:3f:fe:fc:40:d5:38:e4:07:5f:40:fb:3c: 13:e9:3f:46:df:51:43:b4:c7:a9:c4:c3:ad:3c:5f:f6:67:e6: dc:51:b3:92:35:50:d3:32:16:19:04:73:f1:41:46:79:ea:0c: 3a:5a:a4:30:5c:d1:1e:35:49:df:f1:45:69:32:72:a0:d1:62: 8c:11:48:b7:41:55:37:2b:1c:a2:64:9c:fd:b1:d9:d6:62:f4: 65:84:d8:e5:9f:12:6d:f5:c6:57:45:27:2a:a4:b3:b4:85:6e: 8f:d0:da:6e:89:f5:6b:b0:26:89:5c:f1:bf:87:6a:aa:7e:41: 0b:95:72:ce:5c:50:fa:00:bf:11:be:64:2a:98:f8:92:a6:1d: cc:62:4e:b7:27:d1:fc:26:02:8b:d8:69:31:f2:19:65:d1:c4: cd:7c:f5:f4:18:40:31:8d:f1:eb:21:22:d1:f3:03:a5:66:fa: 32:be:c5:28:1a:31:d4:f4:8d:d2:db:a2:8c:91:00:d3:7f:47: f7:c2:4b:28:ed:b0:f8:41:3d:ea:00:e3:f9:b3:11:6d:91:d4: 4a:80:5b:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVwile908jE7NBcVruJSrKWdCC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTZCNzQ2M0JDMDUzMUNDRDk4NUNENEQ0NjhFNjBC NTA3OEIxNjAeFw0yNjA2MjAwNTIxMjNaFw0yNjA2MjEwNjU4MjNaMDMxMTAvBgNV BAMTKDg2QzZGRTM3NUE1NEEzNzA0NkY2RkIxOUY5MzcyMDRFNjhEMDNDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0ra9+bpob/7tZTt8sE5PIQub yPsza+fCzcbowUFkS4bj0Ep9F9P2grvCiDTXMMHqE+Mv9vHsKgqioRWK+t7YLET1 VrQa2G0ky6eWjVF3wq43xNLPFzSICinJBbS4zudmKDAX1xNBsFnVCvCgkw26fSVe SF9vyUfqG59XTcF4sk2wV0T2xnsIVSOwZCQiAdI1rdpRMVwlK/RvCOu+9ZiAWd0P rO5NDrN85Cb9wc+9cfc6G2iiYDUCXeur7X/VbCPaCGPamnHVHUVA5vjxgN2fbqQ5 H/UvBatz7ufQ7oWBlfddVF/Gwq9zvxYK5F4Tz0unquub0sG3Bid6JSm/FAbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhsb+N1pUo3BG9vsZ+TcgTmjQPA4wHwYDVR0j BBgwFoAUQF5rdGO8BTHM2YXNTUaOYLUHixYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzEvNDA1RTZCNzQ2 M0JDMDUzMUNDRDk4NUNENEQ0NjhFNjBCNTA3OEIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDVFNkI3NDYzQkMwNTMxQ0NEOTg1Q0Q0RDQ2OEU2MEI1MDc4 QjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvNDA1RTZCNzQ2M0JDMDUzMUNDRDk4NUNENEQ0NjhF NjBCNTA3OEIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa2Y9HQGjfMqiPbYGPAVljFYJB6SS7DF4Vo zt1Ovfc7keinPAQdoG7n3D/+/EDVOOQHX0D7PBPpP0bfUUO0x6nEw608X/Zn5txR s5I1UNMyFhkEc/FBRnnqDDpapDBc0R41Sd/xRWkycqDRYowRSLdBVTcrHKJknP2x 2dZi9GWE2OWfEm31xldFJyqks7SFbo/Q2m6J9WuwJolc8b+Haqp+QQuVcs5cUPoA vxG+ZCqY+JKmHcxiTrcn0fwmAovYaTHyGWXRxM189fQYQDGN8eshItHzA6Vm+jK+ xSgaMdT0jdLbooyRANN/R/fCSyjtsPhBPeoA4/mzEW2R1EqAW44= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:05 2026 by rpki-client