$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft File: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft (raw, json) Hash identifier: rssiX/9EpjJBn1N71frJUMILLeFuBO4QP6R/QjQHKwU= Subject key identifier: F4:31:44:4E:7C:72:9D:19:67:3D:18:64:4B:66:A4:7D:49:B7:41:97 Authority key identifier: A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 Certificate issuer: /CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Certificate serial: 6009DCAE5AD693927232738C65BE19F497F358CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 23:19:08 +0000 Manifest this update: Fri 19 Jun 2026 23:14:08 +0000 Manifest next update: Sun 21 Jun 2026 02:22:08 +0000 Files and hashes: 1: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl (hash: Ble0C8MDwCKA9p5lLZO3yXKLJ9dYgUhv1zZ8PbZweZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:09:dc:ae:5a:d6:93:92:72:32:73:8c:65:be:19:f4:97:f3:58:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Validity Not Before: Jun 19 23:14:08 2026 GMT Not After : Jun 21 02:22:08 2026 GMT Subject: CN=F431444E7C729D19673D18644B66A47D49B74197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:4c:5b:05:1c:5c:c0:9f:17:e4:d6:25:78: eb:85:17:26:b3:32:b7:17:31:4b:94:0a:00:8b:a0: bf:28:93:d2:cb:5c:b7:5d:64:23:d6:3c:b1:1d:ea: 11:6c:24:21:cf:af:78:e3:ce:85:57:2c:db:a8:52: e6:fc:3f:f9:63:23:88:60:d1:8d:88:99:5f:92:2e: 1d:c6:be:07:43:2f:bd:07:aa:7e:f5:80:8f:ae:75: 05:2b:fc:b6:cd:87:62:b5:6f:7d:1a:12:09:80:1e: 2d:10:61:ea:39:81:75:d3:44:67:20:aa:bb:6f:a8: 12:c6:b3:0b:22:53:ea:eb:80:68:c2:df:c2:d1:71: 2a:f2:6b:fe:3a:e5:2b:09:d0:cd:08:8b:12:8f:d4: d3:96:b3:28:96:1d:ed:3a:df:e7:04:05:c0:48:66: 7d:89:cc:f0:62:f6:98:f9:10:b3:68:9d:46:5c:5e: 4d:51:f0:1c:20:20:0e:9c:bb:e8:e2:b4:a2:cc:51: 11:34:3a:f3:8f:42:10:11:1d:88:3f:91:19:9f:d4: 70:fe:71:c4:54:1b:8a:83:ea:68:19:11:6c:40:18: e1:eb:e8:93:71:75:51:f2:95:39:18:89:0e:3c:b2: 4f:91:3b:92:cb:19:a8:b7:e3:e0:1b:26:02:cc:90: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:31:44:4E:7C:72:9D:19:67:3D:18:64:4B:66:A4:7D:49:B7:41:97 X509v3 Authority Key Identifier: keyid:A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:db:b3:9d:97:62:95:40:f4:63:18:f8:64:81:88:bb:90:93: cf:56:ab:ef:84:e5:70:6d:53:bf:68:03:f9:58:73:e0:3f:20: e0:43:0e:d6:86:9e:37:da:77:be:20:b6:97:43:47:ee:6a:64: 9f:f9:d5:8f:62:dd:26:2f:85:f4:fd:3e:54:7a:ee:99:95:32: 8e:8d:46:e5:6d:5e:64:e1:bf:ab:f8:a6:57:b2:3f:82:cf:5b: 01:ff:28:98:f0:03:ad:32:3c:14:27:60:e1:3e:0d:3d:0f:c8: dc:97:01:c3:19:57:c3:b9:f2:d2:dc:de:2b:59:2e:ff:d2:3a: 5a:17:08:7f:6b:30:2d:ea:2b:4e:c9:ce:9b:38:40:47:a4:68: ec:df:f8:d8:38:8b:06:85:5b:5b:44:79:91:64:f2:c9:a1:8a: 95:d5:79:6d:1b:17:c1:84:8d:4b:2a:0f:6f:c9:0d:ca:12:f4: 34:0a:6d:6f:31:30:3c:9c:a5:fb:97:ac:a7:1f:3b:4c:2b:cf: c4:56:a8:be:e7:f1:e4:d3:2f:d0:88:b6:82:51:ab:22:81:f0: 3e:ee:a9:e8:59:d5:5f:57:38:be:70:53:72:4d:1b:6a:19:5d: a8:b0:27:da:76:1a:39:83:f2:f8:4d:45:9d:64:e6:78:f2:03: d1:d3:a7:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAncrlrWk5JyMnOMZb4Z9JfzWMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQxRjRE NjRDOUQyNzAeFw0yNjA2MTkyMzE0MDhaFw0yNjA2MjEwMjIyMDhaMDMxMTAvBgNV BAMTKEY0MzE0NDRFN0M3MjlEMTk2NzNEMTg2NDRCNjZBNDdENDlCNzQxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7ExbBRxcwJ8X5NYleOuFFyaz MrcXMUuUCgCLoL8ok9LLXLddZCPWPLEd6hFsJCHPr3jjzoVXLNuoUub8P/ljI4hg 0Y2ImV+SLh3GvgdDL70Hqn71gI+udQUr/LbNh2K1b30aEgmAHi0QYeo5gXXTRGcg qrtvqBLGswsiU+rrgGjC38LRcSrya/465SsJ0M0IixKP1NOWsyiWHe063+cEBcBI Zn2JzPBi9pj5ELNonUZcXk1R8BwgIA6cu+jitKLMURE0OvOPQhARHYg/kRmf1HD+ ccRUG4qD6mgZEWxAGOHr6JNxdVHylTkYiQ48sk+RO5LLGai34+AbJgLMkCZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9DFETnxynRlnPRhkS2akfUm3QZcwHwYDVR0j BBgwFoAUo+jQ1WqpD8mNt7tq3KvR9NZMnScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwOTllNDItMmU5Zi00ZThhLTk5ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2 QUE5MEZDOThEQjdCQjZBRENBQkQxRjRENjRDOUQyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0U4RDBENTZBQTkwRkM5OERCN0JCNkFEQ0FCRDFGNEQ2NEM5 RDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQx RjRENjRDOUQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7bs52XYpVA9GMY+GSBiLuQk89Wq++E5XBt U79oA/lYc+A/IOBDDtaGnjfad74gtpdDR+5qZJ/51Y9i3SYvhfT9PlR67pmVMo6N RuVtXmThv6v4pleyP4LPWwH/KJjwA60yPBQnYOE+DT0PyNyXAcMZV8O58tLc3itZ Lv/SOloXCH9rMC3qK07Jzps4QEekaOzf+Ng4iwaFW1tEeZFk8smhipXVeW0bF8GE jUsqD2/JDcoS9DQKbW8xMDycpfuXrKcfO0wrz8RWqL7n8eTTL9CItoJRqyKB8D7u qehZ1V9XOL5wU3JNG2oZXaiwJ9p2GjmD8vhNRZ1k5njyA9HTp6g= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:19 2026 by rpki-client